From 63c330f7e954768b29aab3913a7fab15c7a5573d Mon Sep 17 00:00:00 2001 From: Bez625 Date: Thu, 22 Oct 2026 14:08:49 +0100 Subject: [PATCH 1/2] chore(ci): bump actions off EOL Node runtimes Node 12/16/20 are EOL and will not receive the fixes from the October 2026 Node.js security releases (22.23.4 / 24.22.1 / 26.12.1), including CVE-2026-111497 (out-of-bounds write in the Brotli decoder, RCE). Bumps pinned actions to releases that declare `using: node24`. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/golangci-lint.yml | 4 ++-- .github/workflows/release.yml | 12 ++++++------ .github/workflows/test.yml | 6 +++--- 3 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index c719569..ea63ac6 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -13,10 +13,10 @@ jobs: name: lint runs-on: ubuntu-22.04 steps: - - uses: actions/setup-go@v3 + - uses: actions/setup-go@v7 with: go-version: 1.19 - - uses: actions/checkout@v3 + - uses: actions/checkout@v6 - name: golangci-lint uses: golangci/golangci-lint-action@v3 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3230266..e93a8bd 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -44,12 +44,12 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v3 + uses: actions/setup-go@v7 with: go-version: ^1.19 - name: Check out repository into the Go module directory - uses: actions/checkout@v3 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -117,12 +117,12 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v3 + uses: actions/setup-go@v7 with: go-version: ^1.19 - name: Check out repository into the Go module directory - uses: actions/checkout@v3 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -162,12 +162,12 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v3 + uses: actions/setup-go@v7 with: go-version: ^1.19 - name: Check out repository into the Go module directory - uses: actions/checkout@v3 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 8d4c068..1c4f287 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -8,8 +8,8 @@ jobs: test: runs-on: ubuntu-22.04 steps: - - uses: actions/setup-go@v3 + - uses: actions/setup-go@v7 with: go-version: 1.19 - - uses: actions/checkout@v3 - - uses: n8maninger/action-golang-test@v1 + - uses: actions/checkout@v6 + - uses: n8maninger/action-golang-test@v2 From 30c08843893101ae0876dc2a78e04e8dc2f3b833 Mon Sep 17 00:00:00 2001 From: Chris Berry Date: Mon, 26 Oct 2026 11:06:16 +0000 Subject: [PATCH 2/2] chore(ci): use actions/checkout@v7 Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/golangci-lint.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/test.yml | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index ea63ac6..85cae87 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -16,7 +16,7 @@ jobs: - uses: actions/setup-go@v7 with: go-version: 1.19 - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: golangci-lint uses: golangci/golangci-lint-action@v3 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e93a8bd..8865a21 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -49,7 +49,7 @@ jobs: go-version: ^1.19 - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -122,7 +122,7 @@ jobs: go-version: ^1.19 - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -167,7 +167,7 @@ jobs: go-version: ^1.19 - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 1c4f287..25ebc41 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,5 +11,5 @@ jobs: - uses: actions/setup-go@v7 with: go-version: 1.19 - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: n8maninger/action-golang-test@v2