@marcel91200 / caddy Mirror · read-only / commits / afbdcec0
Fork 0

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

Mirrored from https://github.com/Slazee/caddy.git

Synced Nov 11, 21:00 UTC

build(deps): bump the actions-deps group with 8 updates (#7284)

Bumps the actions-deps group with 8 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.0` | `2.13.1` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.5.0` | `6.0.0` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.7.3` | `4.8.0` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.9.2` | `3.10.0` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.5` | `0.20.6` | | [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) | `3.0.0` | `4.0.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.2` | `2.4.3` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.30.0` | `3.30.5` | Updates `step-security/harden-runner` from 2.13.0 to 2.13.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/ec9f2d5744a09debf3a187a3f4f675c53b671911...f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a) Updates `actions/setup-go` from 5.5.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/d35c59abb061a4a6fb18e82ac0862c26744d6ab5...44694675825211faa026b3c33043df3e48a5fa00) Updates `actions/dependency-review-action` from 4.7.3 to 4.8.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/595b5aeba73380359d98a5e087f648dbb0edce1b...56339e523c0409420f6c2c9a2f4292bbb3c07dd3) Updates `sigstore/cosign-installer` from 3.9.2 to 3.10.0 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/d58896d6a1865668819e1d91763c7751a165e159...d7543c93d881b35a8faa02e8e3605f69b7a1ce62) Updates `anchore/sbom-action` from 0.20.5 to 0.20.6 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/da167eac915b4e86f08b264dbdbc867b61be6f0c...f8bdd1d8ac5e901a77a92f111440fdb1b593736b) Updates `peter-evans/repository-dispatch` from 3.0.0 to 4.0.0 - [Release notes](https://github.com/peter-evans/repository-dispatch/releases) - [Commits](https://github.com/peter-evans/repository-dispatch/compare/ff45666b9427631e3450c54a1bcbee4d9ff4d7c0...5fc4efd1a4797ddb68ffd0714a238564e4cc0e6f) Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/05b42c624433fc40578a4040d5cf5e36ddca8cde...4eaacf0543bb3f2c246792bd56e8cdeffafb205a) Updates `github/codeql-action` from 3.30.0 to 3.30.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d...3599b3baa15b485a2e49ef411a7a4bb2452e7f93) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: actions/setup-go dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/dependency-review-action dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: sigstore/cosign-installer dependency-version: 3.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: anchore/sbom-action dependency-version: 0.20.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: peter-evans/repository-dispatch dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: github/codeql-action dependency-version: 3.30.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] committed Oct 1, 2025 at 23:11 UTC afbdcec08bbd7471b9b5e5ed209881dfcc51bd6c
6 files changed +22 -22
.github/workflows/ci.yml
+5 -5
@@ -65,7 +65,7 @@ jobs:
65 actions: write # to allow uploading artifacts and cache
66 steps:
67 - name: Harden the runner (Audit all outbound calls)
68 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
68 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
69 with:
70 egress-policy: audit
71
@@ -73,7 +73,7 @@ jobs:
73 uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
74
75 - name: Install Go
76 - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
76 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
77 with:
78 go-version: ${{ matrix.GO_SEMVER }}
79 check-latest: true
@@ -162,7 +162,7 @@ jobs:
162 continue-on-error: true # August 2020: s390x VM is down due to weather and power issues
163 steps:
164 - name: Harden the runner (Audit all outbound calls)
165 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
165 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
166 with:
167 egress-policy: audit
168 allowed-endpoints: ci-s390x.caddyserver.com:22
@@ -221,7 +221,7 @@ jobs:
221 if: github.event.pull_request.head.repo.full_name == 'caddyserver/caddy' && github.actor != 'dependabot[bot]'
222 steps:
223 - name: Harden the runner (Audit all outbound calls)
224 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
224 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
225 with:
226 egress-policy: audit
227
@@ -233,7 +233,7 @@ jobs:
233 version: latest
234 args: check
235 - name: Install Go
236 - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
236 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
237 with:
238 go-version: "~1.25"
239 check-latest: true
.github/workflows/cross-build.yml
+2 -2
@@ -51,7 +51,7 @@ jobs:
51 continue-on-error: true
52 steps:
53 - name: Harden the runner (Audit all outbound calls)
54 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
54 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
55 with:
56 egress-policy: audit
57
@@ -59,7 +59,7 @@ jobs:
59 uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
60
61 - name: Install Go
62 - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
62 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
63 with:
64 go-version: ${{ matrix.GO_SEMVER }}
65 check-latest: true
.github/workflows/lint.yml
+5 -5
@@ -45,12 +45,12 @@ jobs:
45
46 steps:
47 - name: Harden the runner (Audit all outbound calls)
48 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
48 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
49 with:
50 egress-policy: audit
51
52 - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
53 - - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
53 + - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
54 with:
55 go-version: '~1.25'
56 check-latest: true
@@ -73,7 +73,7 @@ jobs:
73 runs-on: ubuntu-latest
74 steps:
75 - name: Harden the runner (Audit all outbound calls)
76 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
76 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
77 with:
78 egress-policy: audit
79
@@ -90,14 +90,14 @@ jobs:
90 pull-requests: write
91 steps:
92 - name: Harden the runner (Audit all outbound calls)
93 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
93 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
94 with:
95 egress-policy: audit
96
97 - name: 'Checkout Repository'
98 uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
99 - name: 'Dependency Review'
100 - uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3
100 + uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0
101 with:
102 comment-summary-in-pr: on-failure
103 # https://github.com/actions/dependency-review-action/issues/430#issuecomment-1468975566
.github/workflows/release.yml
+4 -4
@@ -39,7 +39,7 @@ jobs:
39
40 steps:
41 - name: Harden the runner (Audit all outbound calls)
42 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
42 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
43 with:
44 egress-policy: audit
45
@@ -49,7 +49,7 @@ jobs:
49 fetch-depth: 0
50
51 - name: Install Go
52 - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
52 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
53 with:
54 go-version: ${{ matrix.GO_SEMVER }}
55 check-latest: true
@@ -109,11 +109,11 @@ jobs:
109 git verify-tag "${{ steps.vars.outputs.version_tag }}" || exit 1
110
111 - name: Install Cosign
112 - uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # main
112 + uses: sigstore/cosign-installer@d7543c93d881b35a8faa02e8e3605f69b7a1ce62 # main
113 - name: Cosign version
114 run: cosign version
115 - name: Install Syft
116 - uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # main
116 + uses: anchore/sbom-action/download-syft@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # main
117 - name: Syft version
118 run: syft version
119 - name: Install xcaddy
.github/workflows/release_published.yml
+3 -3
@@ -24,12 +24,12 @@ jobs:
24
25 # See https://github.com/peter-evans/repository-dispatch
26 - name: Harden the runner (Audit all outbound calls)
27 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
27 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
28 with:
29 egress-policy: audit
30
31 - name: Trigger event on caddyserver/dist
32 - uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0
32 + uses: peter-evans/repository-dispatch@5fc4efd1a4797ddb68ffd0714a238564e4cc0e6f # v4.0.0
33 with:
34 token: ${{ secrets.REPO_DISPATCH_TOKEN }}
35 repository: caddyserver/dist
@@ -37,7 +37,7 @@ jobs:
37 client-payload: '{"tag": "${{ github.event.release.tag_name }}"}'
38
39 - name: Trigger event on caddyserver/caddy-docker
40 - uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0
40 + uses: peter-evans/repository-dispatch@5fc4efd1a4797ddb68ffd0714a238564e4cc0e6f # v4.0.0
41 with:
42 token: ${{ secrets.REPO_DISPATCH_TOKEN }}
43 repository: caddyserver/caddy-docker
.github/workflows/scorecard.yml
+3 -3
@@ -37,7 +37,7 @@ jobs:
37
38 steps:
39 - name: Harden the runner (Audit all outbound calls)
40 - uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
40 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
41 with:
42 egress-policy: audit
43
@@ -47,7 +47,7 @@ jobs:
47 persist-credentials: false
48
49 - name: "Run analysis"
50 - uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
50 + uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
51 with:
52 results_file: results.sarif
53 results_format: sarif
@@ -81,6 +81,6 @@ jobs:
81 # Upload the results to GitHub's code scanning dashboard (optional).
82 # Commenting out will disable upload of results to your repo's Code Scanning dashboard
83 - name: "Upload to code-scanning"
84 - uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.29.5
84 + uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
85 with:
86 sarif_file: results.sarif