From 63596a16080e393e8188e51e468e26612ee263b8 Mon Sep 17 00:00:00 2001 From: Michael Primeaux Date: Thu, 13 Aug 2026 20:35:33 -0500 Subject: [PATCH] debt: Upgraded CI dependencies to latest stable versions. --- .github/workflows/ci.yaml | 2 +- .github/workflows/codeql-analysis.yaml | 2 +- .github/workflows/release.yaml | 2 +- CHANGELOG/CHANGELOG-1.x.md | 16 +++++++++++++++- README.md | 4 ++-- go.mod | 8 ++++---- go.sum | 16 ++++++++-------- .../github.com/sixafter/aes-ctr-drbg/README.md | 4 ++-- vendor/github.com/sixafter/nanoid/README.md | 4 ++-- vendor/github.com/sixafter/prng-chacha/README.md | 4 ++-- vendor/modules.txt | 8 ++++---- 11 files changed, 42 insertions(+), 28 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 9faf107..4cf8560 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -54,7 +54,7 @@ jobs: # Ref: https://github.com/actions/setup-go - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: check-latest: true cache: false diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml index d45f46e..ab6f354 100644 --- a/.github/workflows/codeql-analysis.yaml +++ b/.github/workflows/codeql-analysis.yaml @@ -67,7 +67,7 @@ jobs: # Ref: https://github.com/actions/setup-go - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version-file: go.mod diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index ef407d5..bb80ae8 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -45,7 +45,7 @@ jobs: # Ref: https://github.com/actions/setup-go - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: check-latest: true cache: false diff --git a/CHANGELOG/CHANGELOG-1.x.md b/CHANGELOG/CHANGELOG-1.x.md index b9c74af..2eb7386 100644 --- a/CHANGELOG/CHANGELOG-1.x.md +++ b/CHANGELOG/CHANGELOG-1.x.md @@ -19,6 +19,19 @@ Date format: `YYYY-MM-DD` --- +## [1.47.6] - 2026-08-13 + +### Added +### Changed +### Deprecated +### Removed +### Fixed +### Security +- **debt:** Upgraded to [sixafter/nanoid@v1.64.6](https://github.com/sixafter/nanoid/releases/tag/v1.64.6). +- **debt:** Upgraded dependencies to their latest stable versions. + +--- + ## [1.47.5] - 2026-07-12 ### Added @@ -839,7 +852,8 @@ Date format: `YYYY-MM-DD` ### Fixed ### Security -[Unreleased]: https://github.com/sixafter/nanoid-cli/compare/v1.47.5...HEAD +[Unreleased]: https://github.com/sixafter/nanoid-cli/compare/v1.47.6...HEAD +[1.47.6]: https://github.com/sixafter/nanoid-cli/compare/v1.47.5...v1.47.6 [1.47.5]: https://github.com/sixafter/nanoid-cli/compare/v1.47.4...v1.47.5 [1.47.4]: https://github.com/sixafter/nanoid-cli/compare/v1.47.3...v1.47.4 [1.47.3]: https://github.com/sixafter/nanoid-cli/compare/v1.47.2...v1.47.3 diff --git a/README.md b/README.md index a79e0de..a59549c 100644 --- a/README.md +++ b/README.md @@ -34,10 +34,10 @@ using the [NanoID](https://github.com/sixafter/nanoid) Go implementation. To verify the integrity of the release, you can use Cosign to check the signature and checksums. Follow these steps: ```sh -# Fetch the latest release tag from GitHub API (e.g., "v1.47.5") +# Fetch the latest release tag from GitHub API (e.g., "v1.47.6") TAG=$(curl -s https://api.github.com/repos/sixafter/nanoid-cli/releases/latest | jq -r .tag_name) -# Remove leading "v" for filenames (e.g., "v1.47.5" -> "1.47.5") +# Remove leading "v" for filenames (e.g., "v1.47.6" -> "1.47.6") VERSION=${TAG#v} # --------------------------------------------------------------------- diff --git a/go.mod b/go.mod index 3b6b37d..49bd689 100644 --- a/go.mod +++ b/go.mod @@ -9,7 +9,7 @@ go 1.26 require ( github.com/dustin/go-humanize v1.0.1 - github.com/sixafter/nanoid v1.64.5 + github.com/sixafter/nanoid v1.64.6 github.com/sixafter/semver v1.12.1 github.com/spf13/cobra v1.10.2 github.com/stretchr/testify v1.11.1 @@ -19,10 +19,10 @@ require ( github.com/davecgh/go-spew v1.1.1 // indirect github.com/inconshreveable/mousetrap v1.1.0 // indirect github.com/pmezard/go-difflib v1.0.0 // indirect - github.com/sixafter/aes-ctr-drbg v1.19.2 // indirect - github.com/sixafter/prng-chacha v1.16.5 // indirect + github.com/sixafter/aes-ctr-drbg v1.19.3 // indirect + github.com/sixafter/prng-chacha v1.16.6 // indirect github.com/spf13/pflag v1.0.10 // indirect - golang.org/x/crypto v0.54.0 // indirect + golang.org/x/crypto v0.55.0 // indirect golang.org/x/sys v0.47.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect ) diff --git a/go.sum b/go.sum index 46f23f4..3afd6ac 100644 --- a/go.sum +++ b/go.sum @@ -10,12 +10,12 @@ github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLf github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= -github.com/sixafter/aes-ctr-drbg v1.19.2 h1:+Bd1tS9/y/GapqgyyRjmrce6a5wUAQPusJXlAOh44yM= -github.com/sixafter/aes-ctr-drbg v1.19.2/go.mod h1:iOBiPPkiy5Z5cEWm2yCoqEtnkfafxNTokJLL0zOPZeQ= -github.com/sixafter/nanoid v1.64.5 h1:Aei4SU9i9I35EyJQawo9XYpzYoARGobQRU8EnBf/Pjo= -github.com/sixafter/nanoid v1.64.5/go.mod h1:+9tqjRHutec4D9mCKGvTaGSAxj1Q+eEHOvfp2WQgWa4= -github.com/sixafter/prng-chacha v1.16.5 h1:RNPMMVDq6rzBS+wDc9BAkpcKoVRhFGfBIwGRUCo5+Cc= -github.com/sixafter/prng-chacha v1.16.5/go.mod h1:fY7WtbBwx94oa5qN417ZzCLCozjQ7JDag7dr1f/v2Ss= +github.com/sixafter/aes-ctr-drbg v1.19.3 h1:7LcjQVgHFR4J7WBDT3NnNT0XmBhHlVc3plHlKHdpQ9Y= +github.com/sixafter/aes-ctr-drbg v1.19.3/go.mod h1:iOBiPPkiy5Z5cEWm2yCoqEtnkfafxNTokJLL0zOPZeQ= +github.com/sixafter/nanoid v1.64.6 h1:3DRCmPw6tkAqwSLHb23wnyajuZYdDJhZ/i8lRmGyiyc= +github.com/sixafter/nanoid v1.64.6/go.mod h1:534a2ngd63nyNAO3BQHZ6ep+JLLpceKvkuR9wq8kD60= +github.com/sixafter/prng-chacha v1.16.6 h1:A2fUNHRN90YppgixoTjK9pFyzGQ6iN8gh2ZVXGUj9ms= +github.com/sixafter/prng-chacha v1.16.6/go.mod h1:/IP/MaNTXj3bhcZQApGtF5pLyehYWAbkkiQJaZ+FoXk= github.com/sixafter/semver v1.12.1 h1:dgA+B5zhJ+xQMuzRtC5lm6fmrZIA+WBVx0p9yvsBFl4= github.com/sixafter/semver v1.12.1/go.mod h1:f8opmUKKzjE6lAlQfFRjM1uiVGH6qJ3FF2CafaF+qtQ= github.com/spf13/cobra v1.10.2 h1:DMTTonx5m65Ic0GOoRY2c16WCbHxOOw6xxezuLaBpcU= @@ -26,8 +26,8 @@ github.com/spf13/pflag v1.0.10/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3A github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu7U= github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U= go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= -golang.org/x/crypto v0.54.0 h1:YLIA59K4fiNzHzjnZt2tUJQjQtUWfWbeHBqKtk3eScw= -golang.org/x/crypto v0.54.0/go.mod h1:KWL8ny2AZdGR2cWmzeHrp2azQPGogOv+HeQaVEXC2dk= +golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M= +golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis= golang.org/x/exp v0.0.0-20260112195511-716be5621a96 h1:Z/6YuSHTLOHfNFdb8zVZomZr7cqNgTJvA8+Qz75D8gU= golang.org/x/exp v0.0.0-20260112195511-716be5621a96/go.mod h1:nzimsREAkjBCIEFtHiYkrJyT+2uy9YZJB7H1k68CXZU= golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= diff --git a/vendor/github.com/sixafter/aes-ctr-drbg/README.md b/vendor/github.com/sixafter/aes-ctr-drbg/README.md index 6dd4e77..57cdf69 100644 --- a/vendor/github.com/sixafter/aes-ctr-drbg/README.md +++ b/vendor/github.com/sixafter/aes-ctr-drbg/README.md @@ -117,10 +117,10 @@ For a detailed mapping between the implementation and NIST SP 800-90A requiremen To verify the integrity of the release tarball, you can use Cosign to check the signature and checksums. Follow these steps: ```sh -# Fetch the latest release tag from GitHub API (e.g., "v1.19.0") +# Fetch the latest release tag from GitHub API (e.g., "v1.19.3") TAG=$(curl -s https://api.github.com/repos/sixafter/aes-ctr-drbg/releases/latest | jq -r .tag_name) -# Remove leading "v" for filenames (e.g., "v1.19.0" -> "1.19.0") +# Remove leading "v" for filenames (e.g., "v1.19.3" -> "1.19.3") VERSION=${TAG#v} # --------------------------------------------------------------------- diff --git a/vendor/github.com/sixafter/nanoid/README.md b/vendor/github.com/sixafter/nanoid/README.md index b72c7ba..9f5e633 100644 --- a/vendor/github.com/sixafter/nanoid/README.md +++ b/vendor/github.com/sixafter/nanoid/README.md @@ -61,10 +61,10 @@ Please see the [nanoid-cli](https://github.com/sixafter/nanoid-cli) for a comman To verify the integrity of the release, follow these steps: ```sh -# Fetch the latest release tag from GitHub API (e.g., "v1.64.5") +# Fetch the latest release tag from GitHub API (e.g., "v1.64.6") TAG=$(curl -s https://api.github.com/repos/sixafter/nanoid/releases/latest | jq -r .tag_name) -# Remove leading "v" for filenames (e.g., "v1.64.5" -> "1.64.5") +# Remove leading "v" for filenames (e.g., "v1.64.6" -> "1.64.6") VERSION=${TAG#v} # --------------------------------------------------------------------- diff --git a/vendor/github.com/sixafter/prng-chacha/README.md b/vendor/github.com/sixafter/prng-chacha/README.md index 41112b1..1ce4d13 100644 --- a/vendor/github.com/sixafter/prng-chacha/README.md +++ b/vendor/github.com/sixafter/prng-chacha/README.md @@ -57,10 +57,10 @@ Please see the [godoc](https://pkg.go.dev/github.com/sixafter/prng-chacha) for d To verify the integrity of the release tarball, you can use Cosign to check the signature against the public key. ```sh -# Fetch the latest release tag from GitHub API (e.g., "v1.16.5") +# Fetch the latest release tag from GitHub API (e.g., "v1.16.6") TAG=$(curl -s https://api.github.com/repos/sixafter/prng-chacha/releases/latest | jq -r .tag_name) -# Remove leading "v" for filenames (e.g., "v1.16.5" -> "1.16.5") +# Remove leading "v" for filenames (e.g., "v1.16.6" -> "1.16.6") VERSION=${TAG#v} # --------------------------------------------------------------------- diff --git a/vendor/modules.txt b/vendor/modules.txt index 58327d4..a43f082 100644 --- a/vendor/modules.txt +++ b/vendor/modules.txt @@ -10,13 +10,13 @@ github.com/inconshreveable/mousetrap # github.com/pmezard/go-difflib v1.0.0 ## explicit github.com/pmezard/go-difflib/difflib -# github.com/sixafter/aes-ctr-drbg v1.19.2 +# github.com/sixafter/aes-ctr-drbg v1.19.3 ## explicit; go 1.26 github.com/sixafter/aes-ctr-drbg -# github.com/sixafter/nanoid v1.64.5 +# github.com/sixafter/nanoid v1.64.6 ## explicit; go 1.26 github.com/sixafter/nanoid -# github.com/sixafter/prng-chacha v1.16.5 +# github.com/sixafter/prng-chacha v1.16.6 ## explicit; go 1.26 github.com/sixafter/prng-chacha # github.com/sixafter/semver v1.12.1 @@ -32,7 +32,7 @@ github.com/spf13/pflag ## explicit; go 1.17 github.com/stretchr/testify/assert github.com/stretchr/testify/assert/yaml -# golang.org/x/crypto v0.54.0 +# golang.org/x/crypto v0.55.0 ## explicit; go 1.25.0 golang.org/x/crypto/chacha20 golang.org/x/crypto/internal/alias