chore(gh-actions): updated gh-actions to v1.14.12 (#162)

fredbi · web-flow · commit 6ed4490472a5 · 2026-04-13T22:44:01.000+02:00
Signed-off-by: Frédéric BIDON &lt;fredbi@yahoo.com&gt;
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -152,7 +152,7 @@ jobs:
         run: gh pr review --approve "$PR_URL"
       -
         name: Wait for all workflow runs to complete
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/bump-release-monorepo.yml b/.github/workflows/bump-release-monorepo.yml
@@ -136,7 +136,7 @@ jobs:
       -
         name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
 
   bump-release-single:
     name: Bump release (single module)
@@ -195,7 +195,7 @@ jobs:
       -
         name: Determine next tag
         id: bump-release
-        uses: go-openapi/gh-actions/ci-jobs/next-tag@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/next-tag@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         with:
           bump-patch: ${{ steps.bump-check.outputs.bump-patch }}
           bump-minor: ${{ steps.bump-check.outputs.bump-minor }}
@@ -307,7 +307,7 @@ jobs:
       -
         name: Configure bot credentials
         if: ${{ inputs.enable-tag-signing == 'true' }}
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         # This is using the GPG signature of bot-go-openapi.
         #
         # For go-openapi repos (using secrets: inherit):
diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
@@ -114,15 +114,15 @@ jobs:
       -
         name: Determine next tag
         id: bump-release
-        uses: go-openapi/gh-actions/ci-jobs/next-tag@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/next-tag@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         with:
           bump-patch: ${{ steps.bump-check.outputs.bump-patch }}
           bump-minor: ${{ steps.bump-check.outputs.bump-minor }}
           bump-major: ${{ steps.bump-check.outputs.bump-major }}
       -
         name: Configure bot credentials
         if: ${{ inputs.enable-tag-signing == 'true' }}
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         # This is using the GPG signature of bot-go-openapi.
         #
         # For go-openapi repos (using secrets: inherit):
diff --git a/.github/workflows/collect-reports.yml b/.github/workflows/collect-reports.yml
@@ -32,7 +32,7 @@ jobs:
           path: reports/
       -
         name: Install go-junit-report
-        uses: go-openapi/gh-actions/install/go-junit-report@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/install/go-junit-report@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       -
         name: Convert test reports to a merged JUnit XML
         # NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.
@@ -57,7 +57,7 @@ jobs:
           verbose: true
       -
         name: Install go-ctrf-json-reporter
-        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       -
         name: Convert test reports to CTRF JSON
         # description: |
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
@@ -118,7 +118,7 @@ jobs:
             } > "${file}"
           done
       - name: Configure bot credentials
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         id: bot-credentials
         # For go-openapi repos (using secrets: inherit):
         #   Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -183,7 +183,7 @@ jobs:
       - name: Auto-approve PR
         run: gh pr review --approve "$PR_URL"
       - name: Wait for all workflow runs to complete
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/go-test-monorepo.yml b/.github/workflows/go-test-monorepo.yml
@@ -55,7 +55,7 @@ jobs:
       -
         name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       -
         name: golangci-lint [monorepo]
         # golangci-action v9.1+ has an experimental built-in mono repo detection setup.
@@ -132,10 +132,10 @@ jobs:
       -
         name: Detect go version capabilities
         id: detect-go-version
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-version@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-version@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       -
         name: Install gotestsum
-        uses: go-openapi/gh-actions/install/gotestsum@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/install/gotestsum@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       -
         name: Ensure TMP is created on windows runners
         # On windows, some tests require testing.TempDir to reside on the same drive as the code.
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
@@ -80,7 +80,7 @@ jobs:
           cache: true
       -
         name: Install gotestsum
-        uses: go-openapi/gh-actions/install/gotestsum@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/install/gotestsum@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       -
         name: Ensure TMP is created on windows runners
         # On windows, some tests require testing.TempDir to reside on the same drive as the code.
diff --git a/.github/workflows/prepare-release-monorepo.yml b/.github/workflows/prepare-release-monorepo.yml
@@ -108,7 +108,7 @@ jobs:
           cache-dependency-path: "**/go.sum"
       - name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       - name: Update go.mod files for new release
         env:
           TARGET_TAG: ${{ inputs.target-tag }}
@@ -185,7 +185,7 @@ jobs:
           echo "::notice title=changes::Git status after updates"
           git status --short
       - name: Configure bot credentials
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         id: bot-credentials
         # For go-openapi repos (using secrets: inherit):
         #   Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -268,7 +268,7 @@ jobs:
         run: gh pr review --approve "$PR_URL"
       - name: Wait for all workflow runs to complete
         if: ${{ needs.prepare-modules.outputs.pull-request-url != '' }}
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -89,7 +89,7 @@ jobs:
         name: Detect go mono-repo
         if: ${{ inputs.is-monorepo == 'true' }}
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12
       -
         name: Install git-cliff
         uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7

Original file line number	Diff line number	Diff line change
`@@ -152,7 +152,7 @@ jobs:`
`152`	`152`	`run: gh pr review --approve "$PR_URL"`
`153`	`153`	`-`
`154`	`154`	`name: Wait for all workflow runs to complete`
`155`		`- uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`155`	`+ uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`156`	`156`	`with:`
`157`	`157`	`pr-url: ${{ env.PR_URL }}`
`158`	`158`	`github-token: ${{ secrets.GITHUB_TOKEN }}`
Original file line number	Diff line number	Diff line change
`@@ -136,7 +136,7 @@ jobs:`
`136`	`136`	`-`
`137`	`137`	`name: Detect go mono-repo`
`138`	`138`	`id: detect-monorepo`
`139`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`139`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`140`	`140`
`141`	`141`	`bump-release-single:`
`142`	`142`	`name: Bump release (single module)`
`@@ -195,7 +195,7 @@ jobs:`
`195`	`195`	`-`
`196`	`196`	`name: Determine next tag`
`197`	`197`	`id: bump-release`
`198`		`- uses: go-openapi/gh-actions/ci-jobs/next-tag@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`198`	`+ uses: go-openapi/gh-actions/ci-jobs/next-tag@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`199`	`199`	`with:`
`200`	`200`	`bump-patch: ${{ steps.bump-check.outputs.bump-patch }}`
`201`	`201`	`bump-minor: ${{ steps.bump-check.outputs.bump-minor }}`
`@@ -307,7 +307,7 @@ jobs:`
`307`	`307`	`-`
`308`	`308`	`name: Configure bot credentials`
`309`	`309`	`if: ${{ inputs.enable-tag-signing == 'true' }}`
`310`		`- uses: go-openapi/gh-actions/ci-jobs/bot-credentials@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`310`	`+ uses: go-openapi/gh-actions/ci-jobs/bot-credentials@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`311`	`311`	`# This is using the GPG signature of bot-go-openapi.`
`312`	`312`	`#`
`313`	`313`	`# For go-openapi repos (using secrets: inherit):`
Original file line number	Diff line number	Diff line change
`@@ -114,15 +114,15 @@ jobs:`
`114`	`114`	`-`
`115`	`115`	`name: Determine next tag`
`116`	`116`	`id: bump-release`
`117`		`- uses: go-openapi/gh-actions/ci-jobs/next-tag@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`117`	`+ uses: go-openapi/gh-actions/ci-jobs/next-tag@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`118`	`118`	`with:`
`119`	`119`	`bump-patch: ${{ steps.bump-check.outputs.bump-patch }}`
`120`	`120`	`bump-minor: ${{ steps.bump-check.outputs.bump-minor }}`
`121`	`121`	`bump-major: ${{ steps.bump-check.outputs.bump-major }}`
`122`	`122`	`-`
`123`	`123`	`name: Configure bot credentials`
`124`	`124`	`if: ${{ inputs.enable-tag-signing == 'true' }}`
`125`		`- uses: go-openapi/gh-actions/ci-jobs/bot-credentials@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`125`	`+ uses: go-openapi/gh-actions/ci-jobs/bot-credentials@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`126`	`126`	`# This is using the GPG signature of bot-go-openapi.`
`127`	`127`	`#`
`128`	`128`	`# For go-openapi repos (using secrets: inherit):`
Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ jobs:`
`32`	`32`	`path: reports/`
`33`	`33`	`-`
`34`	`34`	`name: Install go-junit-report`
`35`		`- uses: go-openapi/gh-actions/install/go-junit-report@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`35`	`+ uses: go-openapi/gh-actions/install/go-junit-report@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`36`	`36`	`-`
`37`	`37`	`name: Convert test reports to a merged JUnit XML`
`38`	`38`	`# NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.`
`@@ -57,7 +57,7 @@ jobs:`
`57`	`57`	`verbose: true`
`58`	`58`	`-`
`59`	`59`	`name: Install go-ctrf-json-reporter`
`60`		`- uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`60`	`+ uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`61`	`61`	`-`
`62`	`62`	`name: Convert test reports to CTRF JSON`
`63`	`63`	`# description: \|`
Original file line number	Diff line number	Diff line change
`@@ -55,7 +55,7 @@ jobs:`
`55`	`55`	`-`
`56`	`56`	`name: Detect go mono-repo`
`57`	`57`	`id: detect-monorepo`
`58`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`58`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`59`	`59`	`-`
`60`	`60`	`name: golangci-lint [monorepo]`
`61`	`61`	`# golangci-action v9.1+ has an experimental built-in mono repo detection setup.`
`@@ -132,10 +132,10 @@ jobs:`
`132`	`132`	`-`
`133`	`133`	`name: Detect go version capabilities`
`134`	`134`	`id: detect-go-version`
`135`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-version@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`135`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-version@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`136`	`136`	`-`
`137`	`137`	`name: Install gotestsum`
`138`		`- uses: go-openapi/gh-actions/install/gotestsum@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`138`	`+ uses: go-openapi/gh-actions/install/gotestsum@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`139`	`139`	`-`
`140`	`140`	`name: Ensure TMP is created on windows runners`
`141`	`141`	`# On windows, some tests require testing.TempDir to reside on the same drive as the code.`
Original file line number	Diff line number	Diff line change
`@@ -80,7 +80,7 @@ jobs:`
`80`	`80`	`cache: true`
`81`	`81`	`-`
`82`	`82`	`name: Install gotestsum`
`83`		`- uses: go-openapi/gh-actions/install/gotestsum@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`83`	`+ uses: go-openapi/gh-actions/install/gotestsum@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`84`	`84`	`-`
`85`	`85`	`name: Ensure TMP is created on windows runners`
`86`	`86`	`# On windows, some tests require testing.TempDir to reside on the same drive as the code.`
Original file line number	Diff line number	Diff line change
`@@ -89,7 +89,7 @@ jobs:`
`89`	`89`	`name: Detect go mono-repo`
`90`	`90`	`if: ${{ inputs.is-monorepo == 'true' }}`
`91`	`91`	`id: detect-monorepo`
`92`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@22f6d5e0e1d13b8e835ea0ffe69ed5589f7cc354 # v1.4.11`
	`92`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@1ade8c4f9415b844bec4a7545967157c5bace961 # v1.14.12`
`93`	`93`	`-`
`94`	`94`	`name: Install git-cliff`
`95`	`95`	`uses: taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2.75.7`