Merge branch 'main' into dependabot/github_actions/peter-evans/create-pull-request-5

2024-02-02 15:43:30 -06:00 · 2024-02-02 15:43:30 -06:00 · 3ee9f786e2
parent 59d8a0c4bb a2ad772491
commit 3ee9f786e2
18 changed files with 35 additions and 48 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@ -3,22 +3,9 @@ updates:
    - package-ecosystem: gomod
      directory: /
      schedule:
-        interval: weekly
-      groups:
-        # Group all minor/patch go dependencies into a single PR.
-        go-dependencies:
-          update-types:
-            - "minor"
-            - "patch"
+        interval: daily
      ignore:
        - dependency-name: github.com/onsi/gomega
      labels:
        - semver:patch
        - type:dependency-upgrade
-    - package-ecosystem: github-actions
-      directory: /
-      schedule:
-        interval: weekly
-      labels:
-        - semver:patch
-        - type:dependency-upgrade
--- a/.github/pipeline-version
+++ b/.github/pipeline-version
@ -1 +1 @@
-1.34.0
+1.36.5
--- a/.github/workflows/action-buildpack-compute-metadata.yml
+++ b/.github/workflows/action-buildpack-compute-metadata.yml
@ -22,7 +22,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/action-buildpackage-verify-metadata.yml
+++ b/.github/workflows/action-buildpackage-verify-metadata.yml
@ -22,7 +22,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/action-registry-add-entry.yml
+++ b/.github/workflows/action-registry-add-entry.yml
@ -24,7 +24,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/action-registry-compute-metadata.yml
+++ b/.github/workflows/action-registry-compute-metadata.yml
@ -24,7 +24,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/action-registry-index-update-release.yml
+++ b/.github/workflows/action-registry-index-update-release.yml
@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Repository Dispatch
-        uses: peter-evans/repository-dispatch@v1
+        uses: peter-evans/repository-dispatch@v3
        with:
          token: ${{ secrets.DISTRIBUTION_GITHUB_TOKEN }}
          repository: buildpacks/registry-index
--- a/.github/workflows/action-registry-request-add-entry.yml
+++ b/.github/workflows/action-registry-request-add-entry.yml
@ -24,7 +24,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/action-registry-request-yank-entry.yml
+++ b/.github/workflows/action-registry-request-yank-entry.yml
@ -24,7 +24,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/action-registry-verify-namespace-owner.yml
+++ b/.github/workflows/action-registry-verify-namespace-owner.yml
@ -24,7 +24,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/action-registry-yank-entry.yml
+++ b/.github/workflows/action-registry-yank-entry.yml
@ -24,7 +24,7 @@ jobs:
    steps:
    - if:   ${{ github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork }}
      name: Docker login ghcr.io
-      uses: docker/login-action@v1.10.0
+      uses: docker/login-action@v3.0.0
      with:
        password: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
        registry: ghcr.io
--- a/.github/workflows/pb-synchronize-labels.yml
+++ b/.github/workflows/pb-synchronize-labels.yml
@ -11,7 +11,7 @@ jobs:
        runs-on:
            - ubuntu-latest
        steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
            - uses: micnncim/action-label-syncer@v1
              env:
                GITHUB_TOKEN: ${{ secrets.IMPLEMENTATION_GITHUB_TOKEN }}
--- a/.github/workflows/pb-tests.yml
+++ b/.github/workflows/pb-tests.yml
@ -15,13 +15,13 @@ jobs:
        runs-on:
            - ubuntu-latest
        steps:
-            - uses: actions/checkout@v3
-            - uses: actions/cache@v3
+            - uses: actions/checkout@v4
+            - uses: actions/cache@v4
              with:
                key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
                path: ${{ env.HOME }}/go/pkg/mod
                restore-keys: ${{ runner.os }}-go-
-            - uses: actions/setup-go@v4
+            - uses: actions/setup-go@v5
              with:
                go-version: "1.20"
            - name: Install richgo
--- a/.github/workflows/pb-update-go.yml
+++ b/.github/workflows/pb-update-go.yml
@ -9,10 +9,10 @@ jobs:
        runs-on:
            - ubuntu-latest
        steps:
-            - uses: actions/setup-go@v4
+            - uses: actions/setup-go@v5
              with:
                go-version: "1.20"
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
            - name: Update Go Version & Modules
              id: update-go
              run: |
--- a/.github/workflows/pb-update-pipeline.yml
+++ b/.github/workflows/pb-update-pipeline.yml
@ -14,7 +14,7 @@ jobs:
        runs-on:
            - ubuntu-latest
        steps:
-            - uses: actions/setup-go@v4
+            - uses: actions/setup-go@v5
              with:
                go-version: "1.20"
            - name: Install octo
@ -24,7 +24,7 @@ jobs:
                set -euo pipefail

                go install -ldflags="-s -w" github.com/paketo-buildpacks/pipeline-builder/cmd/octo@latest
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@v4
            - name: Update Pipeline
              id: pipeline
              run: |
--- a/go.mod
+++ b/go.mod
@ -4,13 +4,13 @@ go 1.20

 require (
 	github.com/buildpacks/libcnb v1.30.1
-	github.com/google/go-containerregistry v0.16.1
+	github.com/google/go-containerregistry v0.19.0
 	github.com/google/go-github/v39 v39.2.0
 	github.com/onsi/gomega v1.30.0
 	github.com/pelletier/go-toml v1.9.5
 	github.com/sclevine/spec v1.4.0
 	github.com/stretchr/testify v1.8.4
-	golang.org/x/oauth2 v0.14.0
+	golang.org/x/oauth2 v0.16.0
 	gopkg.in/retry.v1 v1.0.3
 )

@ -35,10 +35,10 @@ require (
 	github.com/sirupsen/logrus v1.9.3 // indirect
 	github.com/stretchr/objx v0.5.1 // indirect
 	github.com/vbatts/tar-split v0.11.5 // indirect
-	golang.org/x/crypto v0.15.0 // indirect
-	golang.org/x/net v0.18.0 // indirect
+	golang.org/x/crypto v0.18.0 // indirect
+	golang.org/x/net v0.20.0 // indirect
 	golang.org/x/sync v0.5.0 // indirect
-	golang.org/x/sys v0.14.0 // indirect
+	golang.org/x/sys v0.16.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
 	google.golang.org/appengine v1.6.8 // indirect
 	google.golang.org/protobuf v1.31.0 // indirect
--- a/go.sum
+++ b/go.sum
@ -33,8 +33,8 @@ github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.6/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-github.com/google/go-containerregistry v0.16.1 h1:rUEt426sR6nyrL3gt+18ibRcvYpKYdpsa5ZW7MA08dQ=
-github.com/google/go-containerregistry v0.16.1/go.mod h1:u0qB2l7mvtWVR5kNcbFIhFY1hLbf8eeGapA+vbFDCtQ=
+github.com/google/go-containerregistry v0.19.0 h1:uIsMRBV7m/HDkDxE/nXMnv1q+lOOSPlQ/ywc5JbB8Ic=
+github.com/google/go-containerregistry v0.19.0/go.mod h1:u0qB2l7mvtWVR5kNcbFIhFY1hLbf8eeGapA+vbFDCtQ=
 github.com/google/go-github/v39 v39.2.0 h1:rNNM311XtPOz5rDdsJXAp2o8F67X9FnROXTvto3aSnQ=
 github.com/google/go-github/v39 v39.2.0/go.mod h1:C1s8C5aCC9L+JXIYpJM5GYytdX52vC1bLvHEF1IhBrE=
 github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
@ -85,18 +85,18 @@ github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5t
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
 golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
-golang.org/x/crypto v0.15.0 h1:frVn1TEaCEaZcn3Tmd7Y2b5KKPaZ+I32Q2OA3kYp5TA=
-golang.org/x/crypto v0.15.0/go.mod h1:4ChreQoLWfG3xLDer1WdlH5NdlQ3+mwnQq1YTKY+72g=
+golang.org/x/crypto v0.18.0 h1:PGVlW0xEltQnzFZ55hkuX5+KLyrMYhHld1YHO4AKcdc=
+golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg=
 golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4=
 golang.org/x/net v0.0.0-20190603091049-60506f45cf65/go.mod h1:HSz+uSET+XFnRR8LxR5pz3Of3rY3CfYBVs4xY44aLks=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
 golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg=
 golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
-golang.org/x/net v0.18.0 h1:mIYleuAkSbHh0tCv7RvjL3F6ZVbLjq4+R7zbOn3Kokg=
-golang.org/x/net v0.18.0/go.mod h1:/czyP5RqHAH4odGYxBJ1qz0+CE5WZ+2j1YgoEo8F2jQ=
+golang.org/x/net v0.20.0 h1:aCL9BSgETF1k+blQaYUBx9hJ9LOGP3gAVemcZlf1Kpo=
+golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY=
 golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
-golang.org/x/oauth2 v0.14.0 h1:P0Vrf/2538nmC0H+pEQ3MNFRRnVR7RlqyVw+bvm26z0=
-golang.org/x/oauth2 v0.14.0/go.mod h1:lAtNWgaWfL4cm7j2OV8TxGi9Qb7ECORx8DktCY74OwM=
+golang.org/x/oauth2 v0.16.0 h1:aDkGMBSYxElaoP81NpoUoz2oo2R2wHdZpGToUxfyQrQ=
+golang.org/x/oauth2 v0.16.0/go.mod h1:hqZ+0LWXsiVoZpeld6jVt06P3adbS2Uu911W1SsJv2o=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.5.0 h1:60k92dhOjHxJkrqnwsfl8KuaHbn/5dl0lUPUklKo3qE=
@ -107,8 +107,8 @@ golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220715151400-c0bba94af5f8/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.14.0 h1:Vz7Qs629MkJkGyHxUlRHizWJRG2j8fbQKjELVSNhy7Q=
-golang.org/x/sys v0.14.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
+golang.org/x/sys v0.16.0 h1:xWw16ngr6ZMtmxDyKyIgsE93KNKz5HKmMa3b8ALHidU=
+golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
 golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
 golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
--- a/setup-pack/action.yml
+++ b/setup-pack/action.yml
@ -6,7 +6,7 @@ inputs:
  pack-version:
    description: 'The version of pack to install'
    required:    false
-    default:     '0.32.1'
+    default:     '0.33.0'

 runs:
  using: "composite"
 @ -1 +1 @@
 .34.0
 .36.5