Merge branch 'main' into alex/blob-compression

Author: alpe

.github/workflows/benchmark.yml

@@ -16,9 +16,9 @@ jobs:
       contents: write
       issues: write
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Set up Go
-        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
+        uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
         with:
           go-version-file: ./go.mod
       - name: Set up Docker Buildx

.github/workflows/claude-code-review.yml

@@ -27,7 +27,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 1
 

.github/workflows/claude.yml

@@ -26,7 +26,7 @@ jobs:
       actions: read # Required for Claude to read CI results on PRs
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 1
 

.github/workflows/dependabot-auto-fix.yml

@@ -14,13 +14,13 @@ jobs:
     if: github.actor == 'dependabot[bot]'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           ref: ${{ github.head_ref }}
 
-      - uses: actions/setup-go@v6
+      - uses: actions/setup-go@v6.2.0
         with:
-          check-latest: true
+          go-version-file: ./go.mod
 
       - name: Install make (if missing)
         run: sudo apt-get update && sudo apt-get install -y make

.github/workflows/docker-build-push.yml

@@ -28,7 +28,7 @@ jobs:
         app: ${{ fromJson(inputs.apps) }}
     steps:
       - name: Checkout code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3

.github/workflows/docker-tests.yml

@@ -22,9 +22,9 @@ jobs:
     name: Docker E2E Tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: set up go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.2.0
         with:
           go-version-file: ./test/docker-e2e/go.mod
       - name: Run Docker E2E Tests
@@ -39,9 +39,9 @@ jobs:
       contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: set up go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.2.0
         with:
           go-version-file: ./test/docker-e2e/go.mod
       - name: Run Docker Upgrade E2E Tests
@@ -56,9 +56,9 @@ jobs:
       contents: read
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - name: set up go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v6.2.0
         with:
           go-version-file: ./test/docker-e2e/go.mod
       - name: Run Docker Compat E2E Tests

.github/workflows/docs_build.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
       - name: Setup Node
         uses: actions/setup-node@v6
         with:

.github/workflows/docs_deploy.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0 # Not needed if lastUpdated is not enabled
       # - uses: pnpm/action-setup@v2 # Uncomment this if you're using pnpm

.github/workflows/docs_preview.yml

@@ -21,7 +21,7 @@ jobs:
     permissions: write-all
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
 
       - name: Setup Node
         uses: actions/setup-node@v6

.github/workflows/lint.yml

@@ -12,8 +12,8 @@ jobs:
     name: golangci-lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@v6.0.2
+      - uses: actions/setup-go@v6.2.0
         with:
           go-version-file: ./go.mod
       # This steps sets the GIT_DIFF environment variable to true
@@ -36,7 +36,7 @@ jobs:
   hadolint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
       - uses: hadolint/hadolint-action@v3.3.0
         with:
           recursive: true
@@ -45,7 +45,7 @@ jobs:
   yamllint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
       - uses: technote-space/get-diff-action@v6.1.2
@@ -59,7 +59,7 @@ jobs:
   markdown-lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
       - uses: technote-space/get-diff-action@v6.1.2
@@ -74,15 +74,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v6.0.2
         with:
           fetch-depth: 0
       - uses: technote-space/get-diff-action@v6.1.2
         with:
           PATTERNS: |
             .goreleaser.yaml
             .goreleaser.yml
-      - uses: goreleaser/goreleaser-action@v6
+      - uses: goreleaser/goreleaser-action@v7
         with:
           version: latest
           args: check