Bump the ci group with 5 updates

.github/workflows/release.yaml

@@ -20,7 +20,7 @@ jobs:
  # Allow goreleaser to access older tag information.
  fetch-depth: 0
  - name: Setup Go
- uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+ uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
  with:
  go-version: 1.20.x
  - name: Import GPG key
@@ -31,7 +31,7 @@ jobs:
  passphrase: ${{ secrets.PASSPHRASE }}
  - name: Run GoReleaser
  id: run-goreleaser
- uses: goreleaser/goreleaser-action@336e29918d653399e599bfca99fadc1d7ffbc9f7 # v4.3.0
+ uses: goreleaser/goreleaser-action@3fa32b8bb5620a2c1afe798654bbad59f9da4906 # v4.4.0
  with:
  version: latest
  args: release --rm-dist
@@ -54,7 +54,7 @@ jobs:
  actions: read # To read the workflow path.
  id-token: write # To sign the provenance.
  contents: write # To add assets to the release.
- uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.8.0
+ uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.9.0
  with:
  provenance-name: "provenance.intoto.jsonl"
  base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"

.github/workflows/tests.yaml

@@ -13,7 +13,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
  - name: Setup Go
- uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+ uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
  with:
  go-version: 1.20.x
  cache: true
@@ -37,7 +37,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
  - name: Setup Go
- uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+ uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
  with:
  go-version: 1.20.x
  - name: Run tests
@@ -48,19 +48,19 @@ jobs:
  - name: Checkout
  uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
  - name: Setup Go
- uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+ uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
  with:
  go-version: 1.20.x
  - name: Setup TFLint
- uses: terraform-linters/setup-tflint@ba6bb2989f94daf58a4cc6eac2c1ca7398a678bf # v3.0.0
+ uses: terraform-linters/setup-tflint@3bb7d777f5c38e288977551bc117a79437bdc6fd # v3.1.0
  - name: Lint Terraform
  run: make lint
  - name: Setup Kubernetes
  uses: helm/kind-action@dda0770415bac9fc20092cacbc54aa298604d140 # v1.8.0
  with:
  version: v0.17.0
  - name: Setup Flux CLI
- uses: fluxcd/flux2/action@9b3162495ce1b99b1fcdf137c553f543eafe3ec7 # v2.0.1
+ uses: fluxcd/flux2/action@22cf986a79a6da2dd1bcd91b5eef763400f0104b # v2.1.0
  - name: Apply Terraform
  env:
  GOOS: linux
@@ -81,15 +81,15 @@ jobs:
  - name: Checkout
  uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
  - name: Setup Go
- uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+ uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
  with:
  go-version: 1.20.x
  cache: true
  cache-dependency-path: |
  **/go.sum
  **/go.mod
  - name: Setup Flux CLI
- uses: fluxcd/flux2/action@9b3162495ce1b99b1fcdf137c553f543eafe3ec7 # v2.0.1
+ uses: fluxcd/flux2/action@22cf986a79a6da2dd1bcd91b5eef763400f0104b # v2.1.0
  - name: Set outputs
  id: vars
  run: |

.github/workflows/update.yaml

@@ -12,7 +12,7 @@ jobs:
  - name: Check out code
  uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
  - name: Setup Go
- uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+ uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
  with:
  go-version: 1.20.x
  - name: Setup Flux CLI