Merge pull request #45 from cerbos/modupdate

update go deps

Author: tcolgate

.github/actions/setup-go/action.yaml

@@ -33,15 +33,15 @@ runs:
 
     - name: Cache dependencies
       id: cache
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@8b402f58fbc84540c8b491a91e594a4576fec3d7
       with:
         path: ${{ steps.cache-inputs.outputs.paths }}
         key: ${{ steps.cache-inputs.outputs.key }}
         restore-keys: ${{ steps.cache-inputs.outputs.restore-keys }}
 
     - name: Install Go
-      uses: actions/setup-go@v5
+      uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5
       with:
-        go-version: 1.24.x
+        go-version: 1.25.x
         check-latest: true
         cache: false

.github/workflows/cache.yaml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Check out code
-        uses: actions/checkout@v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           lfs: true
 
@@ -39,14 +39,14 @@ jobs:
         run: "go build ./... && go test -run=ignore  ./... > /dev/null"
 
       - name: Run golangci-lint
-        uses: golangci/golangci-lint-action@v8
+        uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20
         with:
           version: latest
           args: '--config=.golangci.yaml'
 
       - name: Write go cache
         id: cache
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@8b402f58fbc84540c8b491a91e594a4576fec3d7
         with:
           path: ${{ steps.setup-go.outputs.cache-paths }}
           key: ${{ steps.setup-go.outputs.cache-key }}

.github/workflows/codeql.yml

@@ -24,11 +24,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
+      uses: github/codeql-action/init@19b2f06db2b6f5108140aeb04014ef02b648f789
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -42,7 +42,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
+      uses: github/codeql-action/autobuild@19b2f06db2b6f5108140aeb04014ef02b648f789
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -55,6 +55,6 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      uses: github/codeql-action/analyze@19b2f06db2b6f5108140aeb04014ef02b648f789
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/path-changes.yaml

@@ -24,10 +24,10 @@ jobs:
     steps:
       - name: Check out code
         if: github.event_name != 'pull_request'
-        uses: actions/checkout@v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
 
       - name: Filter changed paths
-        uses: dorny/paths-filter@v3
+        uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36
         id: filter
         with:
           filters: |

.github/workflows/pr-test.yaml

@@ -15,7 +15,7 @@ jobs:
     timeout-minutes: 30
     steps:
     - name: Checkout code
-      uses: actions/checkout@v4
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
       with:
         lfs: true
 
@@ -26,7 +26,7 @@ jobs:
       run: go tool github.com/rhysd/actionlint/cmd/actionlint
 
     - name: golangci-lint
-      uses: golangci/golangci-lint-action@v8.0.0
+      uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20
       with:
         version: latest
         args: '--config=.golangci.yaml -v'
@@ -35,13 +35,13 @@ jobs:
       run: go test ./...
 
     - name: Upload JUnit reports
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f
       with:
         name: junit-reports-${{ strategy.job-index }}
         path: junit.*.xml
 
     - name: Upload to CodeCov
-      uses: codecov/codecov-action@v5
+      uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de
       with:
         token: ${{ secrets.CODECOV_TOKEN }}
         files: "unit.cover,integration.cover"

.github/workflows/release.yaml

@@ -17,15 +17,15 @@ jobs:
     timeout-minutes: 30
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
         with:
           fetch-depth: 0
 
       - name: Install Go
         uses: ./.github/actions/setup-go
 
       - name: GoReleaser
-        uses: goreleaser/goreleaser-action@v6
+        uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a
         with:
           version: latest
           args: release --config=.goreleaser.yml --clean

.github/workflows/vulnerability-check.yaml

@@ -14,7 +14,7 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
 
       - name: Install Go
         uses: ./.github/actions/setup-go

.golangci.yaml

@@ -33,7 +33,6 @@ linters:
     - noctx
     - nolintlint
     - perfsprint
-    - prealloc
     - predeclared
     - promlinter
     - protogetter

cmd/reimage/main.go

@@ -1,4 +1,4 @@
-// Copyright 2021-2025 Zenauth Ltd.
+// Copyright 2021-2026 Zenauth Ltd.
 // SPDX-License-Identifier: Apache-2.0
 
 // Package main is the main reimage binary

cmd/reimage/version.go

@@ -1,4 +1,4 @@
-// Copyright 2021-2025 Zenauth Ltd.
+// Copyright 2021-2026 Zenauth Ltd.
 // SPDX-License-Identifier: Apache-2.0
 
 package main