ci(actions): Pin dependencies #2

Merged

ryangr0 merged 1 commit from renovate/pin-dependencies into main

2026-07-23 18:41:25 +00:00

renovate commented

2026-07-23 13:40:53 +00:00

Member

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	pin	`v5` → `v5.1.0`
docker.io/golang	stage	pinDigest	→ `1a6d445`
docker/dockerfile	syntax	pinDigest	→ `87999aa`
gcr.io/distroless/static-debian12	final	pinDigest	→ `f5b485e`
https://github.com/actions/setup-go	action	pin	`v6` → `v6.5.0`

📦 Grouped update: confirm the group is operationally coherent before merging.

Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge.

Add the preset :preserveSemverRanges to your config if you don't want to pin your dependencies.

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

Branch creation
- "after 3am and before 7am every weekday,every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/checkout](https://github.com/actions/checkout) | action | pin | `v5` → `v5.1.0` | | docker.io/golang | stage | pinDigest | → `1a6d445` | | [docker/dockerfile](https://github.com/moby/buildkit) | syntax | pinDigest | → `87999aa` | | gcr.io/distroless/static-debian12 | final | pinDigest | → `f5b485e` | | [https://github.com/actions/setup-go](https://github.com/actions/setup-go) | action | pin | `v6` → `v6.5.0` | 📦 **Grouped update**: confirm the group is operationally coherent before merging. Merge Confidence badges are included where supported — low or neutral confidence warrants a manual impact check before merge. Add the preset `:preserveSemverRanges` to your config if you don't want to pin your dependencies. --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - "after 3am and before 7am every weekday,every weekend" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

renovate added 1 commit

2026-07-23 13:40:53 +00:00

ci(actions): Pin dependencies

On Pull Request / checks (pull_request) Successful in 3m34s

Details

27ddc29644