From 907ff6041875c799b254b3062aa0a17a1f8be7e6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 3 Aug 2024 00:34:44 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/go-ossf-slsa3-publish.yml | 2 +- .github/workflows/go.yml | 4 ++-- .github/workflows/releaser.yml | 10 +++++----- go.mod | 2 +- go.sum | 2 ++ 5 files changed, 11 insertions(+), 9 deletions(-) diff --git a/.github/workflows/go-ossf-slsa3-publish.yml b/.github/workflows/go-ossf-slsa3-publish.yml index 6abd269..6aac121 100644 --- a/.github/workflows/go-ossf-slsa3-publish.yml +++ b/.github/workflows/go-ossf-slsa3-publish.yml @@ -29,7 +29,7 @@ jobs: id-token: write # To sign. contents: write # To upload release assets. actions: read # To read workflow path. - uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@v1.4.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/builder_go_slsa3.yml@5a775b367a56d5bd118a224a811bba288150a563 # v2.0.0 with: go-version: 1.22 # ============================================================================================================= diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index e7db9d1..162c74d 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -14,10 +14,10 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: Set up Go - uses: actions/setup-go@v4 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5 with: go-version: '1.22' diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml index 41f3b06..1b81fbd 100644 --- a/.github/workflows/releaser.yml +++ b/.github/workflows/releaser.yml @@ -21,17 +21,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: fetch-depth: 1 - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5 with: go-version: stable # More assembly might be required: Docker logins, GPG, etc. # It all depends on your needs. - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v5 + uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6 with: # either 'goreleaser' (default) or 'goreleaser-pro' distribution: goreleaser @@ -43,7 +43,7 @@ jobs: # Your GoReleaser Pro key, if you are using the 'goreleaser-pro' distribution # GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }} - name: Publish to NPM - uses: actions/setup-node@v4 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4 with: node-version: '20.x' registry-url: 'https://registry.npmjs.org' @@ -58,7 +58,7 @@ jobs: NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} GITHUB_TOKEN: ${{ secrets.GH_TOKEN }} - name: Push Formula to Tap - uses: cpina/github-action-push-to-another-repository@v1.7.2 + uses: cpina/github-action-push-to-another-repository@07c4d7b3def0a8ebe788a8f2c843a4e1de4f6900 # v1.7.2 env: API_TOKEN_GITHUB: ${{ secrets.GH_TOKEN }} with: diff --git a/go.mod b/go.mod index 29c633b..a47c10d 100644 --- a/go.mod +++ b/go.mod @@ -3,7 +3,7 @@ module amock go 1.22 require ( - github.com/brianvoe/gofakeit/v7 v7.0.2 + github.com/brianvoe/gofakeit/v7 v7.0.4 github.com/ilyakaznacheev/cleanenv v1.5.0 github.com/julienschmidt/httprouter v1.3.0 github.com/jwalton/gchalk v1.3.0 diff --git a/go.sum b/go.sum index f19c4c9..968c99b 100644 --- a/go.sum +++ b/go.sum @@ -3,6 +3,8 @@ github.com/BurntSushi/toml v1.3.2 h1:o7IhLm0Msx3BaB+n3Ag7L8EVlByGnpq14C4YWiu/gL8 github.com/BurntSushi/toml v1.3.2/go.mod h1:CxXYINrC8qIiEnFrOxCa7Jy5BFHlXnUU2pbicEuybxQ= github.com/brianvoe/gofakeit/v7 v7.0.2 h1:jzYT7Ge3RDHw7J1CM1kwu0OQywV9vbf2qSGxBS72TCY= github.com/brianvoe/gofakeit/v7 v7.0.2/go.mod h1:QXuPeBw164PJCzCUZVmgpgHJ3Llj49jSLVkKPMtxtxA= +github.com/brianvoe/gofakeit/v7 v7.0.4 h1:Mkxwz9jYg8Ad8NvT9HA27pCMZGFQo08MK6jD0QTKEww= +github.com/brianvoe/gofakeit/v7 v7.0.4/go.mod h1:QXuPeBw164PJCzCUZVmgpgHJ3Llj49jSLVkKPMtxtxA= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=