From 5c09f4639aa9b6509c7f5ee7fb599c489f0d51c5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Enrique=20Andr=C3=A9s=20Villar?= <enriqueavi@inditex.com>
Date: Fri, 30 Oct 2026 14:23:42 +0100
Subject: [PATCH] chore(deps): consolidate GitHub Actions and Docker dependabot
 updates
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps consolidated from the open dependabot PRs:

- docker/login-action 4.6.0 -> 4.7.0 (#108)
- ossf/scorecard-action 2.4.1 -> 2.5.0 (#106)
- github/codeql-action 4.38.2 -> 4.38.3 (init, analyze, upload-sarif) (#103, #105)
- reviewdog/action-actionlint 1.77.0 -> 1.80.1 (#104)
- actions/download-artifact 8.0.1 -> 8.0.2 (#99)
- golang 1.27.1-alpine3.23 -> 1.27.2-alpine3.23 (#100)

Signed-off-by: Enrique Andrés Villar <enriqueavi@inditex.com>
---
 .github/workflows/codeql.yml             | 4 ++--
 .github/workflows/pr-verify.yml          | 2 +-
 .github/workflows/push-verify.yml        | 2 +-
 .github/workflows/release.yml            | 2 +-
 .github/workflows/scorecard-analysis.yml | 6 +++---
 Dockerfile                               | 2 +-
 6 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 98b624c..8bd5874 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -167,12 +167,12 @@ jobs:
           asdf_version: ${{ env.ASDF_BRANCH_VERSION }}
 
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
+        uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
         with:
           build-mode: ${{ matrix.build-mode }}
           languages: ${{ matrix.language }}
 
       - name: Perform CodeQL analysis
-        uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4
+        uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4
         with:
           category: /language:${{ matrix.language }}
diff --git a/.github/workflows/pr-verify.yml b/.github/workflows/pr-verify.yml
index ae540dc..a908ad9 100644
--- a/.github/workflows/pr-verify.yml
+++ b/.github/workflows/pr-verify.yml
@@ -28,7 +28,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.sha }}
 
       - name: Lint GitHub Actions workflows
-        uses: reviewdog/action-actionlint@2085657ab2c7f48c58edcc767fba576f63bea76b # v1.77.0
+        uses: reviewdog/action-actionlint@6a9ff88b9bb9c12ff3d7340e267f0f59effaa7cd # v1.80.1
         with:
           reporter: github-annotations
           fail_level: error
diff --git a/.github/workflows/push-verify.yml b/.github/workflows/push-verify.yml
index c2ebe6b..0984849 100644
--- a/.github/workflows/push-verify.yml
+++ b/.github/workflows/push-verify.yml
@@ -29,7 +29,7 @@ jobs:
           persist-credentials: false
 
       - name: Lint GitHub Actions workflows
-        uses: reviewdog/action-actionlint@2085657ab2c7f48c58edcc767fba576f63bea76b # v1.77.0
+        uses: reviewdog/action-actionlint@6a9ff88b9bb9c12ff3d7340e267f0f59effaa7cd # v1.80.1
         with:
           reporter: github-annotations
           fail_level: error
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index d0c2cd7..29ce811 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -90,7 +90,7 @@ jobs:
           fetch-depth: 0
 
       - name: 🔐 Login into ${{ env.REGISTRY }}
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v3
+        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
diff --git a/.github/workflows/scorecard-analysis.yml b/.github/workflows/scorecard-analysis.yml
index 8974776..a2d747b 100644
--- a/.github/workflows/scorecard-analysis.yml
+++ b/.github/workflows/scorecard-analysis.yml
@@ -66,7 +66,7 @@ jobs:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
+        uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0
         with:
           results_file: results.sarif
           results_format: sarif
@@ -93,12 +93,12 @@ jobs:
       security-events: write # Lets CodeQL upload Scorecard SARIF.
     steps:
       - name: Download artifact
-        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
         with:
           name: SARIF file
 
       - name: Upload SARIF to Code Scanning
-        uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+        uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.2
         with:
           sarif_file: results.sarif
           category: scorecard
diff --git a/Dockerfile b/Dockerfile
index 2d8e155..17e0d61 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.27.1-alpine3.23 AS builder
+FROM golang:1.27.2-alpine3.23 AS builder
 ARG TARGETOS
 ARG TARGETARCH