chore(deps): pin dependencies (#174)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | pinDigest | → `3d3c42e` | | [docker.io/thegeeklab/git-sv](https://github.com/thegeeklab/git-sv) | container | major | `2.1.3` → `3.0.0` | | [https://github.com/Azure/setup-helm](https://github.com/Azure/setup-helm) | action | pinDigest | → `9bc31f4` | | [https://github.com/aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | action | pinDigest | → `e6de054` | | [https://github.com/crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg) | action | pinDigest | → `2dc316d` | | [https://github.com/docker/login-action](https://github.com/docker/login-action) | action | pinDigest | → `dbcb813` | | [https://github.com/docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | action | pinDigest | → `bb05f3f` | | [https://github.com/ibiqlik/action-yamllint](https://github.com/ibiqlik/action-yamllint) | action | pinDigest | → `2576378` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | action | pinDigest | → `0977fd9` | --- ### Release Notes <details> <summary>thegeeklab/git-sv (docker.io/thegeeklab/git-sv)</summary> ### [`v3.0.0`](https://github.com/thegeeklab/git-sv/releases/tag/v3.0.0) [Compare Source](https://github.com/thegeeklab/git-sv/compare/v2.1.3...v3.0.0) #### v3.0.0 (2026-07-22) ##### Features - add `retag` command ([#339](https://github.com/thegeeklab/git-sv/issues/339)) ([`6ca1acc`](https://github.com/thegeeklab/git-sv/commit/6ca1acc)) ##### Bug Fixes - **deps:** update module github.com/urfave/cli/v3 to v3.10.1 ([#335](https://github.com/thegeeklab/git-sv/issues/335)) ([`e1eed49`](https://github.com/thegeeklab/git-sv/commit/e1eed49)) ##### Others - **docker:** update docker.io/library/golang:1.26.5 docker digest to [`3aff665`](https://github.com/thegeeklab/git-sv/commit/3aff665) ([#340](https://github.com/thegeeklab/git-sv/issues/340)) ([`7b26ce9`](https://github.com/thegeeklab/git-sv/commit/7b26ce9)) - **deps:** update golang patch version ([#338](https://github.com/thegeeklab/git-sv/issues/338)) ([`9e7b538`](https://github.com/thegeeklab/git-sv/commit/9e7b538)) - **deps:** update ghcr.io/aquasecurity/trivy docker tag to v0.72.0 ([#337](https://github.com/thegeeklab/git-sv/issues/337)) ([`fece7eb`](https://github.com/thegeeklab/git-sv/commit/fece7eb)) - drop discontinued goreportcard badge ([`1cde6e4`](https://github.com/thegeeklab/git-sv/commit/1cde6e4)) - **docker:** update docker.io/library/golang:1.26.4 docker digest to [`f96cc55`](https://github.com/thegeeklab/git-sv/commit/f96cc55) ([#336](https://github.com/thegeeklab/git-sv/issues/336)) ([`3686e26`](https://github.com/thegeeklab/git-sv/commit/3686e26)) - **docker:** update docker.io/library/golang:1.26.4 docker digest to [`32c0e6e`](https://github.com/thegeeklab/git-sv/commit/32c0e6e) ([#333](https://github.com/thegeeklab/git-sv/issues/333)) ([`d920969`](https://github.com/thegeeklab/git-sv/commit/d920969)) - drop `--force` from tag subcommand ([#334](https://github.com/thegeeklab/git-sv/issues/334)) ([`2a8e1a9`](https://github.com/thegeeklab/git-sv/commit/2a8e1a9)) - **deps:** update ci tools non-major to v0.71.2 ([#332](https://github.com/thegeeklab/git-sv/issues/332)) ([`42678cb`](https://github.com/thegeeklab/git-sv/commit/42678cb)) ##### BREAKING CHANGES - The `--force` flag of the tag subcommand was not useful and got replaced by a dedicated subcommand `retag` with [#327](https://github.com/thegeeklab/git-sv/pull/327). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - Only on Sunday and Saturday (`* * * * 0,6`) - Automerge - Between 12:00 AM and 03:59 AM (`* 0-3 * * *`) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).  Reviewed-on: https://gitea.com/gitea/helm-actions/pulls/174 Reviewed-by: Lunny Xiao <xiaolunwen@gmail.com> Co-authored-by: Renovate Bot <renovate-bot@gitea.com>
2026-08-04 15:03:07 +00:00 · 2026-08-04 14:04:38 +00:00
parent 5c82dc0e65
commit 26ee25fb02
5 changed files with 13 additions and 13 deletions
@@ -8,12 +8,12 @@ on:
 jobs:
  changelog:
    runs-on: ubuntu-latest
-    container: docker.io/thegeeklab/git-sv:2.1.3
+    container: docker.io/thegeeklab/git-sv:3.0.0
    steps:
      - name: install tools
        run: |
          apk add -q --update --no-cache nodejs curl jq sed
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
        with:
          fetch-depth: 0
      - name: Generate upcoming changelog
@@ -13,7 +13,7 @@ jobs:
    runs-on: ubuntu-latest
    container: commitlint/commitlint:21.2.1
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: check PR title
        run: |
          echo "${{ gitea.event.pull_request.title }}" | commitlint --config .commitlintrc.json
@@ -13,14 +13,14 @@ jobs:
  generate-chart-publish:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: install Docker CLI
-        uses: https://github.com/docker/setup-buildx-action@v4 # Gitea
+        uses: https://github.com/docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 # Gitea
        #uses: docker/setup-buildx-action@v4 # Github / Act
      - name: install Helm
-        uses: https://github.com/Azure/setup-helm@v5 # Gitea
+        uses: https://github.com/Azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5 # Gitea
        #uses: Azure/setup-helm@v5 # Github / Act
        with:
          version: "${{ env.HELM_VERSION }}"
@@ -33,7 +33,7 @@ jobs:
      - name: import GPG key
        id: import_gpg
-        uses: https://github.com/crazy-max/ghaction-import-gpg@v7 # Gitea
+        uses: https://github.com/crazy-max/ghaction-import-gpg@2dc316deee8e90f13e1a351ab510b4d5bc0c82cd # v7 # Gitea
        #uses: crazy-max/ghaction-import-gpg@v7 # Github / Act
        with:
          gpg_private_key: ${{ secrets.GPGSIGN_KEY }}
@@ -41,7 +41,7 @@ jobs:
          fingerprint: CC64B1DB67ABBEECAB24B6455FC346329753F4B0
      - name: log into Docker Hub
-        uses: https://github.com/docker/login-action@v4 # Gitea
+        uses: https://github.com/docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 # Gitea
        #uses: docker/login-action@v4 # Github / Act
        with:
          username: ${{ secrets.DOCKER_CHARTS_USERNAME }}
@@ -68,7 +68,7 @@ jobs:
          TAR_OPTIONS: "--wildcards"
      - name: aws credential configure
-        uses: https://github.com/aws-actions/configure-aws-credentials@v6 # Gitea
+        uses: https://github.com/aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6 # Gitea
        #uses: aws-actions/configure-aws-credentials@v6 # Github / Act
        with:
          aws-access-key-id: ${{ secrets.AWS_KEY_ID }}
@@ -9,6 +9,6 @@ jobs:
  shellcheck:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - run: apt update --yes && apt install --yes shellcheck
      - run: find . -type f -name "*.sh" -exec shellcheck -a {} \;
@@ -23,10 +23,10 @@ jobs:
          apk update
          apk add --update bash make nodejs npm yamllint ncurses
      - name: Install pnpm
-        uses: pnpm/action-setup@v6
+        uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6
        with:
          version: 11
-      - uses: actions/checkout@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
      - name: install chart dependencies
        run: helm dependency build
      - name: lint
@@ -49,4 +49,4 @@ jobs:
          git diff --exit-code --name-only README.md
      - name: yaml lint
        # uses: ibiqlik/action-yamllint@v3 # Github / Act
-        uses: https://github.com/ibiqlik/action-yamllint@v3 # Gitea
+        uses: https://github.com/ibiqlik/action-yamllint@2576378a8e339169678f9939646ee3ee325e845c # v3 # Gitea