build(deps): bump the github-actions group with 2 updates #1518

dependabot · 2025-09-08T09:06:40Z

Bumps the github-actions group with 2 updates: miniscruff/changie-action and actions/setup-go.

Updates miniscruff/changie-action from 2.0.0 to 2.1.0

Release notes

Sourced from miniscruff/changie-action's releases.

v2.1.0 on 2025-09-06

Added

#209 Workdir argument to customize directory before running commands

Changed

#303 Args is now optional, not specifying args will just install changie to the path

Changelog

Sourced from miniscruff/changie-action's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, adheres to Semantic Versioning, and is generated by Changie.

v2.1.0 on 2025-09-06

Added

#209 Workdir argument to customize directory before running commands

Changed

#303 Args is now optional, not specifying args will just install changie to the path

v2.0.0 on 2023-09-16

Changed

#182 Upgrade to Node v20 for action runtime

v1.0.1 on 2023-02-04

Fixed

#82 Remove requirement for github token when fetching latest version

v1.0.0 on 2023-01-26

No new features or changes, moving to v1 as the project is being used and it should be stable enough.

v0.2.0 on 2022-10-24

Changed

Set output to the result of running the changie command

v0.1.0 on 2022-10-22

Added

Basic support for running changie commands

v0.0.1 on 2022-10-22

Initial Test Release

Commits

5036dff support install only and custom work dir (#302)
a6093f5 Bump the node-deps group with 3 updates (#299)
a78ca2b Bump the node-deps group with 3 updates (#298)
07f1ae3 Bump actions/checkout from 4 to 5 in the action-deps group (#297)
2c1effc Bump the node-deps group with 3 updates (#296)
fc96aa3 Bump the node-deps group with 8 updates (#295)
983f75a Bump the node-deps group across 1 directory with 8 updates (#293)
59c7589 Bump the node-deps group with 6 updates (#290)
e9b8ae5 Bump the node-deps group with 8 updates (#289)
25e3d52 Bump the node-deps group with 6 updates (#288)
Additional commits viewable in compare view

Updates actions/setup-go from 5.5.0 to 6.0.0

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @matthewhughes934 in actions/setup-go#460

Upgrade Nodejs runtime from node20 to node 24 by @salmanmkc in actions/setup-go#624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

Upgrade @types/jest from 29.5.12 to 29.5.14 by @dependabot[bot] in actions/setup-go#589

Upgrade @actions/tool-cache from 2.0.1 to 2.0.2 by @dependabot[bot] in actions/setup-go#591

Upgrade @typescript-eslint/parser from 8.31.1 to 8.35.1 by @dependabot[bot] in actions/setup-go#590

Upgrade undici from 5.28.5 to 5.29.0 by @dependabot[bot] in actions/setup-go#594

Upgrade typescript from 5.4.2 to 5.8.3 by @dependabot[bot] in actions/setup-go#538

Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @dependabot[bot] in actions/setup-go#603

Upgrade form-data to bring in fix for critical vulnerability by @matthewhughes934 in actions/setup-go#618

Upgrade actions/checkout from 4 to 5 by @dependabot[bot] in actions/setup-go#631

New Contributors

@matthewhughes934 made their first contribution in actions/setup-go#618

@salmanmkc made their first contribution in actions/setup-go#624

Full Changelog: actions/setup-go@v5...v6.0.0

Commits

4469467 Bump actions/checkout from 4 to 5 (#631)
e093d1e Node 24 upgrade (#624)
1d76b95 Improve toolchain handling (#460)
e75c3e8 Bump form-data to bring in fix for critical vulnerability (#618)
8e57b58 Bump eslint-plugin-jest from 28.11.0 to 29.0.1 (#603)
7c0b336 Bump typescript from 5.4.2 to 5.8.3 (#538)
6f26dcc Bump undici from 5.28.5 to 5.29.0 (#594)
8d4083a Bump @typescript-eslint/parser from 5.62.0 to 8.32.0 (#590)
fa96338 Bump @actions/tool-cache from 2.0.1 to 2.0.2 (#591)
4de67c0 Bump @types/jest from 29.5.12 to 29.5.14 (#589)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the github-actions group with 2 updates: [miniscruff/changie-action](https://github.com/miniscruff/changie-action) and [actions/setup-go](https://github.com/actions/setup-go). Updates `miniscruff/changie-action` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/miniscruff/changie-action/releases) - [Changelog](https://github.com/miniscruff/changie-action/blob/main/CHANGELOG.md) - [Commits](miniscruff/changie-action@6dcc253...5036dff) Updates `actions/setup-go` from 5.5.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@d35c59a...4469467) --- updated-dependencies: - dependency-name: miniscruff/changie-action dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <[email protected]>

austinvalle

Looks like we got the tools module bumped already here, so this one just needs a changelog, an adjustment for the patch version, and a way forward for that unit test 🤔

Since you mentioned that the unit test was failing on main it's unlikely to be anything changed in this PR, just probably a flakey test that needs to be adjusted. Something might have recently changed on developer.hashicorp.com to prevent these types of requests, so maybe a new endpoint could be used (perhaps something more stable? 😆 )

I saw an issue in the TF repo recently that was around vercel challenging HTTP requests, so there may be some new protection on the site, perfect timing 😆: hashicorp/terraform#37566

austinvalle · 2025-09-10T14:04:14Z

go.mod

-go 1.23.0
-
-toolchain go1.23.7
+go 1.24.4


Same suggestion as here -> hashicorp/terraform-plugin-framework#1217 (comment)

stephybun · 2025-09-12T08:27:26Z

helper/logging/logging_http_transport_test.go

 		multiline
 		request body`
-	req, _ := http.NewRequest("GET", "https://developer.hashicorp.com/terraform", bytes.NewBufferString(reqBody))
+	req, _ := http.NewRequest("GET", "https://github.com/", bytes.NewBufferString(reqBody))


This test exhibits strange behaviours, the cause of which I haven't been able to find.

What I've observed:

Running test locally will fail as it expects the second entry to have a http version of HTTP/1.1

Running test locally in debug mode passes

Running test in GHA passes

Yeah, maybe a good long term replacement is just setting up a test HTTP server (httptest package) and calling it. So it stays e2e, but at least is fully controllable. Out of scope for this PR 😆

austinvalle · 2025-09-12T12:46:03Z

helper/logging/logging_http_transport_test.go

 		multiline
 		request body`
-	req, _ := http.NewRequest("GET", "https://developer.hashicorp.com/terraform", bytes.NewBufferString(reqBody))
+	req, _ := http.NewRequest("GET", "https://github.com/", bytes.NewBufferString(reqBody))


Yeah, maybe a good long term replacement is just setting up a test HTTP server (httptest package) and calling it. So it stays e2e, but at least is fully controllable. Out of scope for this PR 😆

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 8, 2025

dependabot bot requested a review from a team as a code owner September 8, 2025 09:06

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 8, 2025

stephybun force-pushed the dependabot/github_actions/github-actions-940fe8f201 branch from dc49c8a to 9b31ecb Compare September 10, 2025 12:19

austinvalle reviewed Sep 10, 2025

View reviewed changes

stephybun force-pushed the dependabot/github_actions/github-actions-940fe8f201 branch from 9b31ecb to 97d2c43 Compare September 10, 2025 14:50

bump go version to 1.24.0

242db88

stephybun force-pushed the dependabot/github_actions/github-actions-940fe8f201 branch from 97d2c43 to 2cad21f Compare September 12, 2025 08:21

change endpoint to github.com for HTTP logging tests

d39288c

stephybun force-pushed the dependabot/github_actions/github-actions-940fe8f201 branch from 2cad21f to d39288c Compare September 12, 2025 08:24

stephybun reviewed Sep 12, 2025

View reviewed changes

austinvalle approved these changes Sep 12, 2025

View reviewed changes

stephybun merged commit 43e83d8 into main Sep 12, 2025
27 checks passed

stephybun deleted the dependabot/github_actions/github-actions-940fe8f201 branch September 12, 2025 12:51

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the github-actions group with 2 updates #1518

build(deps): bump the github-actions group with 2 updates #1518

Uh oh!

dependabot bot commented on behalf of github Sep 8, 2025

Uh oh!

austinvalle left a comment •

edited

Loading

Uh oh!

austinvalle Sep 10, 2025

Uh oh!

stephybun Sep 12, 2025 •

edited

Loading

Uh oh!

austinvalle Sep 12, 2025

Uh oh!

austinvalle Sep 12, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

build(deps): bump the github-actions group with 2 updates #1518

build(deps): bump the github-actions group with 2 updates #1518

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 8, 2025

v2.1.0 on 2025-09-06

Added

Changed

Changelog

v2.1.0 on 2025-09-06

Added

Changed

v2.0.0 on 2023-09-16

Changed

v1.0.1 on 2023-02-04

Fixed

v1.0.0 on 2023-01-26

v0.2.0 on 2022-10-24

Changed

v0.1.0 on 2022-10-22

Added

v0.0.1 on 2022-10-22

v6.0.0

What's Changed

Breaking Changes

Dependency Upgrades

New Contributors

Uh oh!

austinvalle left a comment • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

austinvalle Sep 10, 2025

Choose a reason for hiding this comment

Uh oh!

stephybun Sep 12, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

austinvalle Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

austinvalle Sep 12, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

austinvalle left a comment •

edited

Loading

stephybun Sep 12, 2025 •

edited

Loading