Merge pull request #75 from ViacheslavKudinov/master

chore: Workflows update

.github/workflows/release.yml

@@ -22,13 +22,13 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
       -
         name: Unshallow
         run: git fetch --prune --unshallow
       -
         name: Set up Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v5
         with:
           go-version: 1.21
       -
@@ -43,10 +43,10 @@ jobs:
           PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
       -
         name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v2
+        uses: goreleaser/goreleaser-action@v5
         with:
           version: latest
-          args: release --rm-dist
+          args: release --clean
         env:
           GPG_FINGERPRINT: ${{ steps.import_gpg.outputs.fingerprint }}
           # GitHub sets this automatically

.github/workflows/salus.yaml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Semgrep
     steps:
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v4
       - name: Scan
         id: scan
         run: |
@@ -22,16 +22,16 @@ jobs:
     runs-on: ubuntu-latest
     name: Salus Security Scan
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v4
     - name: Salus Scan
       id: salus_scan
-      uses: federacy/[email protected].4
+      uses: federacy/[email protected].5
       env:
         SALUS_CONFIGURATION: "file://salus-config.yaml"
       with:
         report_uri: file://./salus-report.txt
         report_format: txt
-    - uses: actions/upload-artifact@master
+    - uses: actions/upload-artifact@v4
       if: failure()
       with:
         name: Scan results

.github/workflows/vulncheck.yaml

@@ -6,18 +6,15 @@ on:
   schedule:
     - cron: '28 1 * * *'
 
-permissions:
-  contents: read # to fetch code (actions/checkout)
-
 jobs:
   vulncheck:
     name: Analysis
     runs-on: ubuntu-latest
     steps:
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
           go-version: '1.21'
           check-latest: true

.goreleaser.yml

@@ -45,4 +45,4 @@ release:
   # If you want to manually examine the release before its live, uncomment this line:
   # draft: true
 changelog:
-  skip: true
+  disable: true