From 3cfb3adc2ac701bdfeae973f9b348e75cc34c080 Mon Sep 17 00:00:00 2001 From: Filippo Valsorda Date: Fri, 28 Aug 2026 23:13:13 +0200 Subject: [PATCH] all: update dependencies and GitHub Actions Closes #736 Fixes #731 --- .github/workflows/build.yml | 16 ++++++++-------- .github/workflows/ronn.yml | 10 +++++----- .github/workflows/test.yml | 22 +++++++++++----------- go.mod | 18 +++++++++--------- go.sum | 28 ++++++++++++++-------------- 5 files changed, 47 insertions(+), 47 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 763497c..fb92608 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -22,12 +22,12 @@ jobs: - {GOOS: freebsd, GOARCH: amd64} steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@v7 with: fetch-depth: 0 persist-credentials: false - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version-file: go.mod cache: false @@ -62,7 +62,7 @@ jobs: GOARCH: ${{ matrix.GOARCH }} GOARM: ${{ matrix.GOARM }} - name: Upload workflow artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: age-artifacts-${{ matrix.GOOS }}-${{ matrix.GOARCH }} path: age-* @@ -71,12 +71,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@v7 with: fetch-depth: 0 persist-credentials: false - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version-file: go.mod cache: false @@ -94,7 +94,7 @@ jobs: done tar -cvzf "age-$VERSION-source.tar.gz" -C "$DIR" age - name: Upload workflow artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: age-artifacts-source path: age-*-source.tar.gz @@ -109,12 +109,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Download workflow artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: age-artifacts-* merge-multiple: true - name: Generate artifacts attestation - uses: actions/attest-build-provenance@v3 + uses: actions/attest-build-provenance@v4 with: subject-path: age-* - name: Upload release artifacts diff --git a/.github/workflows/ronn.yml b/.github/workflows/ronn.yml index a000107..91106a9 100644 --- a/.github/workflows/ronn.yml +++ b/.github/workflows/ronn.yml @@ -13,10 +13,10 @@ jobs: name: Ronn runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: geomys/sandboxed-step@v1.2.1 + - uses: geomys/sandboxed-step@v1.2.2 with: persist-workspace-changes: true run: | @@ -29,7 +29,7 @@ jobs: awk '/Filippo Valsorda/ { $0 = "

Filippo Valsorda age@filippo.io

" } { print }' "$f" > "$f.tmp" mv "$f.tmp" "$f" done - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: man-pages path: | @@ -42,10 +42,10 @@ jobs: contents: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: persist-credentials: true - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: name: man-pages path: doc/ diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 7e2e5b3..3fbc6b4 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -21,10 +21,10 @@ jobs: - windows-latest runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ matrix.go.go-version }} - run: | @@ -38,13 +38,13 @@ jobs: - { go-version: stable } - { go-version: oldstable } steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ matrix.go.go-version }} - - uses: geomys/sandboxed-step@v1.2.1 + - uses: geomys/sandboxed-step@v1.2.2 with: run: | go get -u -t ./... @@ -52,24 +52,24 @@ jobs: staticcheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: stable - - uses: geomys/sandboxed-step@v1.2.1 + - uses: geomys/sandboxed-step@v1.2.2 with: run: go run honnef.co/go/tools/cmd/staticcheck@latest ./... govulncheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: stable - - uses: geomys/sandboxed-step@v1.2.1 + - uses: geomys/sandboxed-step@v1.2.2 with: run: go run golang.org/x/vuln/cmd/govulncheck@latest ./... diff --git a/go.mod b/go.mod index 8dc9eac..316cb19 100644 --- a/go.mod +++ b/go.mod @@ -1,22 +1,22 @@ module filippo.io/age -go 1.24.0 +go 1.25.0 // Release build version. -toolchain go1.25.5 +toolchain go1.27.0 require ( - filippo.io/edwards25519 v1.1.0 + filippo.io/edwards25519 v1.2.0 filippo.io/hpke v0.4.0 filippo.io/nistec v0.0.4 - golang.org/x/crypto v0.45.0 - golang.org/x/sys v0.38.0 - golang.org/x/term v0.37.0 + golang.org/x/crypto v0.55.0 + golang.org/x/sys v0.47.0 + golang.org/x/term v0.45.0 ) // Test dependencies. require ( - c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd - github.com/rogpeppe/go-internal v1.14.1 - golang.org/x/tools v0.39.0 // indirect + c2sp.org/CCTV/age v0.0.0-20260605191406-1e3d2860d46e + github.com/rogpeppe/go-internal v1.16.0 + golang.org/x/tools v0.49.0 // indirect ) diff --git a/go.sum b/go.sum index baad7f4..361ab4a 100644 --- a/go.sum +++ b/go.sum @@ -1,18 +1,18 @@ -c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd h1:ZLsPO6WdZ5zatV4UfVpr7oAwLGRZ+sebTUruuM4Ra3M= -c2sp.org/CCTV/age v0.0.0-20251208015420-e9274a7bdbfd/go.mod h1:SrHC2C7r5GkDk8R+NFVzYy/sdj0Ypg9htaPXQq5Cqeo= -filippo.io/edwards25519 v1.1.0 h1:FNf4tywRC1HmFuKW5xopWpigGjJKiJSV0Cqo0cJWDaA= -filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4= +c2sp.org/CCTV/age v0.0.0-20260605191406-1e3d2860d46e h1:N9DpijOhcuCLIlgcX/6qhBQeMQIlBxsVQITjbpJaBso= +c2sp.org/CCTV/age v0.0.0-20260605191406-1e3d2860d46e/go.mod h1:SrHC2C7r5GkDk8R+NFVzYy/sdj0Ypg9htaPXQq5Cqeo= +filippo.io/edwards25519 v1.2.0 h1:crnVqOiS4jqYleHd9vaKZ+HKtHfllngJIiOpNpoJsjo= +filippo.io/edwards25519 v1.2.0/go.mod h1:xzAOLCNug/yB62zG1bQ8uziwrIqIuxhctzJT18Q77mc= filippo.io/hpke v0.4.0 h1:p575VVQ6ted4pL+it6M00V/f2qTZITO0zgmdKCkd5+A= filippo.io/hpke v0.4.0/go.mod h1:EmAN849/P3qdeK+PCMkDpDm83vRHM5cDipBJ8xbQLVY= filippo.io/nistec v0.0.4 h1:F14ZHT5htWlMnQVPndX9ro9arf56cBhQxq4LnDI491s= filippo.io/nistec v0.0.4/go.mod h1:PK/lw8I1gQT4hUML4QGaqljwdDaFcMyFKSXN7kjrtKI= -github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ= -github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc= -golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q= -golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4= -golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc= -golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= -golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU= -golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254= -golang.org/x/tools v0.39.0 h1:ik4ho21kwuQln40uelmciQPp9SipgNDdrafrYA4TmQQ= -golang.org/x/tools v0.39.0/go.mod h1:JnefbkDPyD8UU2kI5fuf8ZX4/yUeh9W877ZeBONxUqQ= +github.com/rogpeppe/go-internal v1.16.0 h1:O9DK+vNMDVGLr2BeZqmpLeMjiMNkuXfcqntWbZV6S5g= +github.com/rogpeppe/go-internal v1.16.0/go.mod h1:DrUVZyrJU+txYW5/1kwtXQSMFio52ZOxX7yM1VHvnxs= +golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= +golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis= +golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= +golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0= +golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w= +golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI= +golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=