Merge pull request #625 from controlplaneio/dependabot/github_actions…

…/gha-276fecc57f

chore(deps): bump the gha group across 1 directory with 4 updates

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
           go-version-file: go.mod
 
       - name: Launch goreleaser
-        uses: goreleaser/goreleaser-action@v5
+        uses: goreleaser/goreleaser-action@v6
         with:
           args: release
         env:

.github/workflows/release_containers.yml

@@ -66,7 +66,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Build container and push tags
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}

.github/workflows/release_containers_webhook.yml

@@ -59,7 +59,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Build container and push tags
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           push: ${{ github.event_name != 'pull_request' }}

.github/workflows/security_analysis.yml

@@ -46,7 +46,7 @@ jobs:
           docker build . -t kubesec:${{ github.sha }}
 
       - name: Run Trivy
-        uses: aquasecurity/trivy-action@0.18.0
+        uses: aquasecurity/trivy-action@0.24.0
         with:
           image-ref: kubesec:${{ github.sha }}
           format: template
@@ -69,7 +69,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Run Trufflehog
-        uses: trufflesecurity/trufflehog@v3.71.0
+        uses: trufflesecurity/trufflehog@v3.81.9
         with:
           path: ./
           base: ""

.goreleaser.yml

@@ -1,3 +1,5 @@
+---
+version: 2
 before:
   hooks:
     - go mod tidy