🌱 Update github-actions group

[cluster-stack-bot]

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	digest	88522ab -> e12d46a
actions/checkout	action	minor	v3.5.3 -> v3.6.0
actions/checkout	action	minor	v3.5.2 -> v3.6.0
actions/checkout	action	digest	c85c95e -> f43a0e5
actions/create-github-app-token	action	digest	f4c6bf6 -> f2acddf
actions/setup-go	action	minor	v4.0.1 -> v4.1.0
docker/build-push-action	action	digest	2eb1c19 -> 0a97817
docker/build-push-action	action	minor	v4.1.1 -> v4.2.1
docker/setup-buildx-action	action	digest	ecf9528 -> 885d146
kubernetes-sigs/kubebuilder-release-tools	action	minor	v0.3.0 -> v0.4.3
sigstore/cosign-installer	action	minor	v3.0.5 -> v3.4.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

actions/setup-go (actions/setup-go)

v4.1.0

Compare Source

What's Changed

In scope of this release, slow installation on Windows was fixed by @​dsame in https://github.com/actions/setup-go/pull/393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (https://github.com/actions/setup-go/pull/383)

This release also includes the following changes:

• Remove implicit dependencies by @​nikolai-laevskii in https://github.com/actions/setup-go/pull/378
• Update action.yml by @​mkelly in https://github.com/actions/setup-go/pull/379
• Added a description that go-version should be specified as a string type by @​n3xem in https://github.com/actions/setup-go/pull/367
• Add note about YAML parsing versions by @​dmitry-shibanov in https://github.com/actions/setup-go/pull/382
• Automatic update of configuration files from 05/23/2023 by @​github-actions in https://github.com/actions/setup-go/pull/377
• Bump tough-cookie and @​azure/ms-rest-js by @​dependabot in https://github.com/actions/setup-go/pull/392
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in https://github.com/actions/setup-go/pull/397
• Bump semver from 6.3.0 to 6.3.1 by @​dependabot in https://github.com/actions/setup-go/pull/396

New Contributors

• @​mkelly made their first contribution in https://github.com/actions/setup-go/pull/379
• @​n3xem made their first contribution in https://github.com/actions/setup-go/pull/367

Full Changelog: actions/setup-go@v4...v4.1.0

docker/build-push-action (docker/build-push-action)

v4.2.1

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• warn if docker config can't be parsed by @​crazy-max in https://github.com/docker/build-push-action/pull/957

Full Changelog: docker/build-push-action@v4.2.0...v4.2.1

v4.2.0

Compare Source

Note

Buildx v0.10 enables support for a minimal SLSA Provenance attestation, which requires support for OCI-compliant multi-platform images. This may introduce issues with registry and runtime support (e.g. Google Cloud Run and AWS Lambda). You can optionally disable the default provenance attestation functionality using provenance: false.

• display proxy configuration by @​crazy-max in https://github.com/docker/build-push-action/pull/872
• chore(deps): Bump @​docker/actions-toolkit from 0.6.0 to 0.8.0 in https://github.com/docker/build-push-action/pull/930
• chore(deps): Bump word-wrap from 1.2.3 to 1.2.5 in https://github.com/docker/build-push-action/pull/925
• chore(deps): Bump semver from 6.3.0 to 6.3.1 in https://github.com/docker/build-push-action/pull/902

Full Changelog: docker/build-push-action@v4.1.1...v4.2.0

kubernetes-sigs/kubebuilder-release-tools (kubernetes-sigs/kubebuilder-release-tools)

v0.4.3

Compare Source

What's Changed

• 🌱 Increment internal versions to use release v0.4.3 by @​mjlshen in https://github.com/kubernetes-sigs/kubebuilder-release-tools/pull/58

Full Changelog: kubernetes-sigs/kubebuilder-release-tools@v0.4.2...v0.4.3

v0.4.2

Compare Source

What's Changed

• 🐛 Add missing case statements for release PRs by @​mjlshen in https://github.com/kubernetes-sigs/kubebuilder-release-tools/pull/57

Full Changelog: kubernetes-sigs/kubebuilder-release-tools@v0.4.1...v0.4.2

v0.4.1

Compare Source

What's Changed

• 🌱 Bump internal versions to use release v0.4.0 by @​killianmuldoon in https://github.com/kubernetes-sigs/kubebuilder-release-tools/pull/56

New Contributors

• @​killianmuldoon made their first contribution in https://github.com/kubernetes-sigs/kubebuilder-release-tools/pull/56

Full Changelog: kubernetes-sigs/kubebuilder-release-tools@v0.4.0...v0.4.1

v0.4.0

Compare Source

What's Changed

• 🌱 : update go version to 1.20 by @​camilamacedo86 in https://github.com/kubernetes-sigs/kubebuilder-release-tools/pull/52
• ✨ Add 🚀 as a valid prefix for release PRs by @​mjlshen in https://github.com/kubernetes-sigs/kubebuilder-release-tools/pull/55

New Contributors

• @​mjlshen made their first contribution in https://github.com/kubernetes-sigs/kubebuilder-release-tools/pull/55

Full Changelog: kubernetes-sigs/kubebuilder-release-tools@v0.3.0...v0.4.0

sigstore/cosign-installer (sigstore/cosign-installer)

v3.4.0

Compare Source

What's Changed

• Use examples that work with multiple tags by @​jkreileder in https://github.com/sigstore/cosign-installer/pull/155
• default cosign install to release v2.2.3 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/156

New Contributors

• @​jkreileder made their first contribution in https://github.com/sigstore/cosign-installer/pull/155

Full Changelog: sigstore/cosign-installer@v3...v3.4.0

v3.3.0

Compare Source

What's Changed

• Bump actions/setup-go from 4.1.0 to 5.0.0 by @​dependabot in https://github.com/sigstore/cosign-installer/pull/152
• update action to use latest cosign v2.2.2 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/153

Full Changelog: sigstore/cosign-installer@v3.2.0...v3.3.0

v3.2.0

Compare Source

Note: This release comes with a fix for CVE-2023-46737 described in this Github Security Advisory. Please upgrade to this release ASAP

see https://github.com/sigstore/cosign/releases/tag/v2.2.1

What's Changed

• Support the runner context of gitea act by @​josedev-union in https://github.com/sigstore/cosign-installer/pull/147
• bump cosign to v2.2.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/148
• test with latest go version by @​bobcallaway in https://github.com/sigstore/cosign-installer/pull/150

New Contributors

• @​josedev-union made their first contribution in https://github.com/sigstore/cosign-installer/pull/147

Full Changelog: sigstore/cosign-installer@v3...v3.2.0

v3.1.2

Compare Source

What's Changed

• Fix build and push step Readme missing id by @​hbenali in https://github.com/sigstore/cosign-installer/pull/138
• bump cosign to v2.2.0 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/142

New Contributors

• @​hbenali made their first contribution in https://github.com/sigstore/cosign-installer/pull/138

Full Changelog: sigstore/cosign-installer@v3...v3.1.2

v3.1.1

Compare Source

What's Changed

• default cosign to v2.1.1 by @​cpanato in https://github.com/sigstore/cosign-installer/pull/137

Full Changelog: sigstore/cosign-installer@v3.1.0...v3.1.1

v3.1.0

Compare Source

What's Changed

• update job to use latest action release by @​cpanato in https://github.com/sigstore/cosign-installer/pull/130
• Update action example for keyless signing as xarg is not required by @​jbtrystram in https://github.com/sigstore/cosign-installer/pull/132
• update examples by @​cpanato in https://github.com/sigstore/cosign-installer/pull/133
• bump cosign to default to release v2.1.0 and update docs by @​cpanato in https://github.com/sigstore/cosign-installer/pull/136

New Contributors

• @​jbtrystram made their first contribution in https://github.com/sigstore/cosign-installer/pull/132

Full Changelog: sigstore/cosign-installer@v3.0.5...v3.1.0

---

Configuration

📅 Schedule: Branch creation - "on monday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

[kranurag7]

Other PRs already had the latest change.