Update all

.github/workflows/docker.yml

@@ -30,12 +30,12 @@ jobs:
         uses: actions/checkout@v3
 
       - name: Build the container image
-        uses: docker/build-push-action@v3.0.0
+        uses: docker/build-push-action@v3.3.1
         with:
           repository: golang-repo-template
 
       - name: Push to GitHub Packages
-        uses: docker/build-push-action@v3.0.0
+        uses: docker/build-push-action@v3.3.1
         if: github.event_name == 'release' || github.event_name == 'push'
         with:
           username: ${{ github.actor }}
@@ -66,7 +66,7 @@ jobs:
         if: |
           (github.event_name == 'release' || github.event_name == 'push') &&
           contains(steps.check_dockerhub_credentials.outputs.missingsecrets, 'no')
-        uses: docker/build-push-action@v3.0.0
+        uses: docker/build-push-action@v3.3.1
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}

.github/workflows/go.yml

@@ -52,7 +52,7 @@ jobs:
         with:
           go-version: ${{ matrix.golang }}
       - name: Cache Go modules
-        uses: actions/cache@v3.0.2
+        uses: actions/cache@v3.3.3
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
@@ -72,7 +72,7 @@ jobs:
     steps:
       - uses: actions/checkout@v3
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v3.2.0
+        uses: golangci/golangci-lint-action@v3.7.1
         with:
           version: ${{ matrix.golangci_lint }}
           #github-token: ${{ secrets.GITHUB_TOKEN }}
@@ -109,7 +109,7 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: ${{ matrix.golang }}
-      - uses: actions/cache@v3.0.2
+      - uses: actions/cache@v3.3.3
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
@@ -125,7 +125,7 @@ jobs:
           git --no-pager diff go.mod go.sum
           git --no-pager diff --quiet go.mod go.sum
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3.1.0
+        uses: codecov/codecov-action@v3.1.6
         with:
           #token: ${{ secrets.CODECOV_TOKEN }}
           file: ./coverage.txt
@@ -153,7 +153,7 @@ jobs:
         uses: actions/setup-go@v3
         with:
           go-version: ${{ matrix.golang }}
-      - uses: actions/cache@v3.0.2
+      - uses: actions/cache@v3.3.3
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}
@@ -169,7 +169,7 @@ jobs:
       - name: Run tests on Unix-like operating systems
         run: make unittest
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3.1.0
+        uses: codecov/codecov-action@v3.1.6
         with:
           #token: ${{ secrets.CODECOV_TOKEN }}
           file: ./coverage.txt

.github/workflows/release.yml

@@ -37,7 +37,7 @@ jobs:
       -
         name: Cache Go modules
         if: steps.semantic.outputs.new-release-published == 'true' && steps.repoman.outputs.has-go-binary == 'true'
-        uses: actions/cache@v3.0.2
+        uses: actions/cache@v3.3.3
         with:
           path: ~/go/pkg/mod
           key:          ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }}

.github/workflows/scorecards.yml

@@ -22,15 +22,15 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.0
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
         with:
           persist-credentials: false
 
       - name: "Run analysis"
         env:
           SCORECARD_READ_TOKEN: ${{ secrets.SCORECARD_READ_TOKEN }}
         if: env.SCORECARD_READ_TOKEN != null
-        uses: ossf/scorecard-action@f10ec7151e838890a3fbfa27875a33f80869977b # v1.0.4
+        uses: ossf/scorecard-action@ce330fde6b1a5c9c75b417e7efc510b822a35564 # v1.1.2
         with:
           results_file: results.sarif
           results_format: sarif
@@ -48,7 +48,7 @@ jobs:
         env:
           SCORECARD_READ_TOKEN: ${{ secrets.SCORECARD_READ_TOKEN }}
         if: env.SCORECARD_READ_TOKEN != null
-        uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.0.0
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
         with:
           name: SARIF file
           path: results.sarif

Dockerfile

@@ -4,7 +4,7 @@ ARG             VCS_REF
 ARG             VERSION
 
 # build
-FROM            golang:1.18.2-alpine as builder
+FROM            golang:1.22.0-alpine as builder
 RUN             apk add --no-cache git gcc musl-dev make
 ENV             GO111MODULE=on
 WORKDIR         /go/src/moul.io/golang-repo-template
@@ -14,7 +14,7 @@ COPY            . ./
 RUN             make install
 
 # minimalist runtime
-FROM alpine:3.15.4
+FROM alpine:3.19.1
 LABEL           org.label-schema.build-date=$BUILD_DATE \
                 org.label-schema.name="golang-repo-template" \
                 org.label-schema.description="" \

tool/lint/package.json

@@ -2,7 +2,7 @@
   "dependencies": {
     "alex": "10.0.0",
     "markdown-spellcheck": "1.3.1",
-    "markdownlint-cli": "0.31.1",
+    "markdownlint-cli": "0.39.0",
     "remark-cli": "10.0.1",
     "remark-lint": "9.1.1"
   }