Align files

.github/workflows/zz_generated.add-team-labels.yaml

@@ -16,7 +16,7 @@ jobs:
  -O artifacts/users.yaml \
  https://raw.githubusercontent.com/giantswarm/github/main/tools/issue-automation/user-mapping.yaml
  - name: Upload Artifact
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
  with:
  name: users
  path: artifacts/users.yaml
@@ -27,7 +27,7 @@ jobs:
  runs-on: ubuntu-latest
  needs: build_user_list
  steps:
- - uses: actions/download-artifact@v4
+ - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
  id: download-users
  with:
  name: users
@@ -46,7 +46,7 @@ jobs:
  echo "EOF" >> $GITHUB_ENV
  - name: Apply label to issue
  if: ${{ env.LABEL != '' && env.LABEL != 'null' && env.LABEL != null }}
- uses: actions-ecosystem/action-add-labels@v1
+ uses: actions-ecosystem/action-add-labels@bd52874380e3909a1ac983768df6976535ece7f8 # v1.1.3
  with:
  github_token: ${{ secrets.ISSUE_AUTOMATION }}
  labels: |

.github/workflows/zz_generated.add-to-project-board.yaml

@@ -18,7 +18,7 @@ jobs:
  -O artifacts/users.yaml \
  https://raw.githubusercontent.com/giantswarm/github/main/tools/issue-automation/user-mapping.yaml
  - name: Upload Artifact
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
  with:
  name: users
  path: artifacts/users.yaml
@@ -30,7 +30,7 @@ jobs:
  -O artifacts/labels.yaml \
  https://raw.githubusercontent.com/giantswarm/github/main/tools/issue-automation/label-mapping.yaml
  - name: Upload Artifact
- uses: actions/upload-artifact@v4
+ uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
  with:
  name: labels
  path: artifacts/labels.yaml
@@ -42,7 +42,7 @@ jobs:
  needs: build_user_list
  if: github.event.action == 'assigned'
  steps:
- - uses: actions/download-artifact@v4
+ - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
  id: download-users
  with:
  name: users
@@ -57,7 +57,7 @@ jobs:
  echo "BOARD=${BOARD}" >> $GITHUB_ENV
  - name: Add issue to personal board
  if: ${{ env.BOARD != 'null' && env.BOARD != '' && env.BOARD != null }}
- uses: actions/add-to-project@main
+ uses: actions/add-to-project@9bfe908f2eaa7ba10340b31e314148fcfe6a2458 # v1.0.1
  with:
  project-url: ${{ env.BOARD }}
  github-token: ${{ secrets.ISSUE_AUTOMATION }}
@@ -68,7 +68,7 @@ jobs:
  needs: build_user_list
  if: github.event.action == 'labeled'
  steps:
- - uses: actions/download-artifact@v4
+ - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e # v4.1.7
  id: download-labels
  with:
  name: labels
@@ -83,7 +83,7 @@ jobs:
  echo "BOARD=${BOARD}" >> $GITHUB_ENV
  - name: Add issue to team board
  if: ${{ env.BOARD != 'null' && env.BOARD != '' && env.BOARD != null }}
- uses: actions/add-to-project@main
+ uses: actions/add-to-project@9bfe908f2eaa7ba10340b31e314148fcfe6a2458 # v1.0.1
  with:
  project-url: ${{ env.BOARD }}
  github-token: ${{ secrets.ISSUE_AUTOMATION }}

.github/workflows/zz_generated.check_values_schema.yaml

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/1a381db95a01773e471818a4ce56ad16ad5d6111/pkg/gen/input/workflows/internal/file/check_values_schema.yaml.template
 #
 name: 'Values and schema'
 on:
@@ -21,7 +23,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  fetch-depth: 0
 

.github/workflows/zz_generated.create_release.yaml

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/c90dd09846d2e87f1bad62d2089405b78da11a82/pkg/gen/input/workflows/internal/file/create_release.yaml.template
 #
 name: Create Release
 on:
@@ -52,7 +54,7 @@ jobs:
  echo "version=${version}" >> $GITHUB_OUTPUT
  - name: Checkout code
  if: ${{ steps.get_version.outputs.version != '' }}
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  - name: Get project.go path
  id: get_project_go_path
  if: ${{ steps.get_version.outputs.version != '' }}
@@ -88,20 +90,20 @@ jobs:
  - gather_facts
  steps:
  - name: Install architect
- uses: giantswarm/install-binary-action@033b1a657eea23d9c42e77312b370e6125e4e38f # v2.0.0
+ uses: giantswarm/install-binary-action@c37eb401e5092993fc76d545030b1d1769e61237 # v3.0.0
  with:
  binary: "architect"
  version: "6.14.1"
  - name: Install semver
- uses: giantswarm/install-binary-action@033b1a657eea23d9c42e77312b370e6125e4e38f # v2.0.0
+ uses: giantswarm/install-binary-action@c37eb401e5092993fc76d545030b1d1769e61237 # v3.0.0
  with:
  binary: "semver"
  version: "3.2.0"
  download_url: "https:/fsaintjacques/${binary}-tool/archive/${version}.tar.gz"
  tarball_binary_path: "*/src/${binary}"
  smoke_test: "${binary} --version"
  - name: Checkout code
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  - name: Update project.go
  id: update_project_go
  env:
@@ -161,7 +163,7 @@ jobs:
  upload_url: ${{ steps.create_gh_release.outputs.upload_url }}
  steps:
  - name: Checkout code
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  ref: ${{ github.sha }}
  - name: Ensure correct version in project.go
@@ -206,15 +208,15 @@ jobs:
  if: ${{ needs.gather_facts.outputs.version }}
  steps:
  - name: Install semver
- uses: giantswarm/install-binary-action@033b1a657eea23d9c42e77312b370e6125e4e38f # v2.0.0
+ uses: giantswarm/install-binary-action@c37eb401e5092993fc76d545030b1d1769e61237 # v3.0.0
  with:
  binary: "semver"
  version: "3.0.0"
  download_url: "https:/fsaintjacques/${binary}-tool/archive/${version}.tar.gz"
  tarball_binary_path: "*/src/${binary}"
  smoke_test: "${binary} --version"
  - name: Check out the repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  fetch-depth: 0 # Clone the whole history, not just the most recent commit.
  - name: Fetch all tags and branches

.github/workflows/zz_generated.create_release_pr.yaml

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/7345de0273fb431a392dc15f53961b523dba2b5e/pkg/gen/input/workflows/internal/file/create_release_pr.yaml.template
 #
 name: Create Release PR
 on:
@@ -145,14 +147,14 @@ jobs:
  steps:
  - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
  with:
- go-version: '=1.18.1'
+ go-version: '=1.23'
  - name: Install architect
- uses: giantswarm/install-binary-action@033b1a657eea23d9c42e77312b370e6125e4e38f # v2.0.0
+ uses: giantswarm/install-binary-action@c37eb401e5092993fc76d545030b1d1769e61237 # v3.0.0
  with:
  binary: "architect"
- version: "6.11.0"
+ version: "6.17.0"
  - name: Checkout code
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  ref: ${{ needs.gather_facts.outputs.branch }}
  - name: Prepare release changes
@@ -203,7 +205,7 @@ jobs:
  - name: Bump go module defined in go.mod if needed
  run: |
  if [ "${{ needs.gather_facts.outputs.needs_major_bump }}" = true ] && test -f "go.mod"; then
- go install github.com/marwan-at-work/mod/cmd/mod@v0.5.0
+ go install github.com/marwan-at-work/mod/cmd/mod@v0.7.1
  mod upgrade
  fi
  - name: Set up git identity

.github/workflows/zz_generated.gitleaks.yaml

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/1a381db95a01773e471818a4ce56ad16ad5d6111/pkg/gen/input/workflows/internal/file/gitleaks.yaml.template
 #
 name: gitleaks
 
@@ -10,7 +12,7 @@ jobs:
  gitleaks:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  fetch-depth: '0'
  - name: gitleaks-action

.github/workflows/zz_generated.run_ossf_scorecard.yaml

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/515bdf66b25f68db4466f9fd8fa6104793785b78/pkg/gen/input/workflows/internal/file/run_ossf_scorecard.yaml.template
 #
 
 # This workflow uses actions that are not certified by GitHub. They are provided
@@ -38,12 +40,12 @@ jobs:
 
  steps:
  - name: "Checkout code"
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
  with:
  persist-credentials: false
 
  - name: "Run analysis"
- uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1
+ uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
  with:
  results_file: results.sarif
  results_format: sarif
@@ -65,14 +67,14 @@ jobs:
  # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
  # format to the repository Actions tab.
  - name: "Upload artifact"
- uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+ uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6
  with:
  name: SARIF file
  path: results.sarif
  retention-days: 5
 
  # Upload the results to GitHub's code scanning dashboard.
  - name: "Upload to code-scanning"
- uses: github/codeql-action/upload-sarif@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
+ uses: github/codeql-action/upload-sarif@f0f3afee809481da311ca3a6ff1ff51d81dbeb24 # v3.26.4
  with:
  sarif_file: results.sarif

.pre-commit-config.yaml

@@ -8,7 +8,7 @@ repos:
  args: [ --format=json ]
 
  - repo: https:/pre-commit/pre-commit-hooks
- rev: v4.5.0
+ rev: v4.6.0
  hooks:
  - id: check-added-large-files
  # check for unresolved merge conflicts

Makefile

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/6a704f7e2a8b0f09e82b5bab88f17971af849711/pkg/gen/input/makefile/internal/file/Makefile.template
 #
 
 include Makefile.*.mk

Makefile.gen.app.mk

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/eea19f200d7cfd27ded22474b787563bbfdb8ec4/pkg/gen/input/makefile/internal/file/Makefile.gen.app.mk.template
 #
 
 ##@ App

Makefile.gen.go.mk

@@ -1,6 +1,8 @@
 # DO NOT EDIT. Generated with:
 #
-# [email protected]
+# devctl
+#
+# https:/giantswarm/devctl/blob/fb22684ec4540f6b602968f01b4845bfb7713ee2/pkg/gen/input/makefile/internal/file/Makefile.gen.go.mk.template
 #
 
 APPLICATION := $(shell go list -m | cut -d '/' -f 3)
@@ -61,15 +63,15 @@ $(APPLICATION)-windows-amd64.exe: $(APPLICATION)-v$(VERSION)-windows-amd64.exe
 
 $(APPLICATION)-v$(VERSION)-%-amd64: $(SOURCES)
  @echo "====> $@"
- CGO_ENABLED=0 GOOS=$* GOARCH=amd64 go build -ldflags "$(LDFLAGS)" -o $@ .
+ CGO_ENABLED=0 GOOS=$* GOARCH=amd64 go build -trimpath -ldflags "$(LDFLAGS)" -o $@ .
 
 $(APPLICATION)-v$(VERSION)-%-arm64: $(SOURCES)
  @echo "====> $@"
- CGO_ENABLED=0 GOOS=$* GOARCH=arm64 go build -ldflags "$(LDFLAGS)" -o $@ .
+ CGO_ENABLED=0 GOOS=$* GOARCH=arm64 go build -trimpath -ldflags "$(LDFLAGS)" -o $@ .
 
 $(APPLICATION)-v$(VERSION)-windows-amd64.exe: $(SOURCES)
  @echo "====> $@"
- CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -ldflags "$(LDFLAGS)" -o $@ .
+ CGO_ENABLED=0 GOOS=windows GOARCH=amd64 go build -trimpath -ldflags "$(LDFLAGS)" -o $@ .
 
 .PHONY: install
 install: ## Install the application.