github-actions[bot]
commented
1 month ago [puLL-Merge] - actions/setup-go@v5.0.1..v5.0.2
Description
This PR updates the Go versions used in the GitHub Actions workflow and modifies some test data files. It also includes an update to the undici dependency and some changes to the dist files, which appear to be generated code.
Changes
### Changes 1. .github/workflows/versions.yml: - Updated Go versions in matrices from older versions (1.17, 1.18, 1.19) to newer versions (1.20.14, 1.21.10, 1.22.3) - Modified test verification scripts to use updated Go versions 2. .licenses/npm/undici.dep.yml: - Updated undici version from 5.28.3 to 5.28.4 3. __tests__/data/go.mod: - Updated Go version from 1.14 to 1.20 4. __tests__/data/go.work: - Updated Go version from 1.19 to 1.21 5. dist/cache-save/index.js and dist/setup/index.js: - These files contain numerous changes, likely due to the undici update - Added new functions and modified existing ones for header handling, integrity checking, and other HTTP-related operationsPossible Issues
- The update to newer Go versions might potentially break compatibility with projects still using older Go versions. However, this is likely an intentional update to support more recent Go releases.
Security Hotspots
No significant security issues are apparent in this change. The updates to the undici dependency and the generated code changes likely include security improvements, but without a detailed analysis of the undici changelog, it's difficult to say definitively.
This PR contains the following updates:
v5.0.1->v5.0.2Release Notes
actions/setup-go (actions/setup-go)
### [`v5.0.2`](https://togithub.com/actions/setup-go/compare/v5.0.1...v5.0.2) [Compare Source](https://togithub.com/actions/setup-go/compare/v5.0.1...v5.0.2)Configuration
📅 Schedule: Branch creation - " 0-4 * 3" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.