[PR #206] [MERGED] fix(deps): bump actions/setup-go from 3.0.0 to 3.2.0 #265

New issue

Closed

opened 2026-03-04 00:24:57 +03:00 by kerem · 0 comments

kerem commented

2026-03-04 00:24:57 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/SignTools/SignTools/pull/206
Author: @dependabot[bot]
Created: 5/27/2022
Status: ✅ Merged
Merged: 6/3/2022
Merged by: @ViRb3

Base: master ← Head: dependabot/github_actions/actions/setup-go-3.2.0

📝 Commits (1)

e8a827f fix(deps): bump actions/setup-go from 3.0.0 to 3.2.0

📊 Changes

2 files changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/release.yml (+1 -1)
📝 .github/workflows/test.yml (+1 -1)

📄 Description

Bumps actions/setup-go from 3.0.0 to 3.2.0.

Release notes

Sourced from actions/setup-go's releases.

Support for caching dependency files and compiler's build outputs

This release introduces support for caching dependency files and compiler's build outputs #228. For that action uses @toolkit/cache library under the hood that in turn allows getting rid of configuring @actions/cache action separately and simplifies the whole workflow.

Such input parameters as cache and cache-dependency-path were added. The cache input is optional, and caching is turned off by default, cache-dependency-path is used to specify the path to a dependency file - go.sum.

Examples of use-cases:

cache input only:
steps:
- uses: actions/checkout@v3
- uses: actions/setup-go@v3
  with:
    go-version: '18'
    cache: true
cache along with cache-dependency-path:
steps:
- uses: actions/checkout@v3
- uses: actions/setup-go@v3
  with:
    go-version: '18'
    cache: true
    cache-dependency-path: subdir/go.sum
Add go-version-file input

Adding Go version file support

In scope of this release we add the go-version-file input. The new input (go-version-file) provides functionality to specify the path to the file containing Go version with such behaviour:

If the file does not exist the action will throw an error.

If you specify both go-version and go-version-file inputs, the action will use value from the go-version input and throw the following warning: Both go-version and go-version-file inputs are specified, only go-version will be used.

For now the action supports .go-version and go.mod files.
steps:
 - uses: actions/checkout@v3
 - uses: actions/setup-go@v3
   with:
     go-version-file: 'path/to/go.mod'
 - run: go version
Besides, the following pull requests included in this release:

Fix condition for GOPATH output actions/setup-go#221

Added go-version output actions/setup-go#85

... (truncated)

Commits

b22fbbc Implementation of caching functionality for setup-go action (#228)
fcdc436 Update @zeit/ncc to @vercel/ncc (#229)
265edc1 Add go-version-file option (#62)
193b404 Successfully set up (#231)
56a61c9 Create ADR for integrating cache functionality to setup-go action (#217)
b46db95 Merge pull request #222 from vsafonkin/v-vsafonkin/add-readme-note
3332358 Add note about go building
46eabca Merge pull request #221 from vsafonkin/v-vsafonkin/fix-gopath-condition
0794822 Rename CONDUCT.md and change email inside (#218)
ad70bef Fix condition for old go versions
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/SignTools/SignTools/pull/206 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/27/2022 **Status:** ✅ Merged **Merged:** 6/3/2022 **Merged by:** [@ViRb3](https://github.com/ViRb3) **Base:** `master` ← **Head:** `dependabot/github_actions/actions/setup-go-3.2.0` --- ### 📝 Commits (1) - [`e8a827f`](https://github.com/SignTools/SignTools/commit/e8a827fc80f27e681018315ba65d989476209f6c) fix(deps): bump actions/setup-go from 3.0.0 to 3.2.0 ### 📊 Changes **2 files changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/release.yml` (+1 -1) 📝 `.github/workflows/test.yml` (+1 -1) </details> ### 📄 Description Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.0.0 to 3.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-go/releases">actions/setup-go's releases</a>.</em></p> <blockquote> <h2>Support for caching dependency files and compiler's build outputs</h2> <p>This release introduces support for caching dependency files and compiler's build outputs <a href="https://github-redirect.dependabot.com/actions/setup-go/pull/228">#228</a>. For that action uses <a href="https://github.com/actions/toolkit/tree/main/packages/cache"><code>@toolkit/cache</code></a> library under the hood that in turn allows getting rid of configuring <a href="https://github.com/actions/cache"><code>@actions/cache</code></a> action separately and simplifies the whole workflow.</p> <p>Such input parameters as <code>cache</code> and <code>cache-dependency-path</code> were added. The <code>cache</code> input is optional, and caching is turned off by default, <code>cache-dependency-path</code> is used to specify the path to a dependency file - <code>go.sum</code>.</p> <p><strong>Examples of use-cases:</strong></p> <ul> <li><code>cache</code> input only:</li> </ul> <pre lang="yaml"><code>steps: - uses: actions/checkout@v3 - uses: actions/setup-go@v3 with: go-version: '18' cache: true </code></pre> <ul> <li><code>cache</code> along with <code>cache-dependency-path</code>:</li> </ul> <pre lang="yaml"><code>steps: - uses: actions/checkout@v3 - uses: actions/setup-go@v3 with: go-version: '18' cache: true cache-dependency-path: subdir/go.sum </code></pre> <h2>Add go-version-file input</h2> <h3>Adding Go version file support</h3> <p>In scope of this release we add the <a href="https://github-redirect.dependabot.com/actions/setup-go/pull/62">go-version-file</a> input. The new input (<code>go-version-file</code>) provides functionality to specify the path to the file containing Go version with such behaviour:</p> <ul> <li>If the file does not exist the action will throw an error.</li> <li>If you specify both go-version and go-version-file inputs, the action will use value from the go-version input and throw the following warning: Both go-version and go-version-file inputs are specified, only go-version will be used.</li> <li>For now the action supports .go-version and go.mod files.</li> </ul> <pre lang="yaml"><code>steps: - uses: actions/checkout@v3 - uses: actions/setup-go@v3 with: go-version-file: 'path/to/go.mod' - run: go version </code></pre> <p>Besides, the following pull requests included in this release:</p> <ul> <li>Fix condition for GOPATH output <a href="https://github-redirect.dependabot.com/actions/setup-go/pull/221">actions/setup-go#221</a></li> <li>Added go-version output <a href="https://github-redirect.dependabot.com/actions/setup-go/pull/85">actions/setup-go#85</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-go/commit/b22fbbc2921299758641fab08929b4ac52b32923"><code>b22fbbc</code></a> Implementation of caching functionality for setup-go action (<a href="https://github-redirect.dependabot.com/actions/setup-go/issues/228">#228</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/fcdc43634adb5f7ae75a9d7a9b9361790f7293e2"><code>fcdc436</code></a> Update <code>@zeit/ncc</code> to <code>@vercel/ncc</code> (<a href="https://github-redirect.dependabot.com/actions/setup-go/issues/229">#229</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/265edc1beb822df98f8606cd052a5af00d64271d"><code>265edc1</code></a> Add go-version-file option (<a href="https://github-redirect.dependabot.com/actions/setup-go/issues/62">#62</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/193b404f8a1d1dccaf6ed9bf03cdb68d2d02020f"><code>193b404</code></a> Successfully set up (<a href="https://github-redirect.dependabot.com/actions/setup-go/issues/231">#231</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/56a61c9834b4a4950dbbf4740af0b8a98c73b768"><code>56a61c9</code></a> Create ADR for integrating cache functionality to setup-go action (<a href="https://github-redirect.dependabot.com/actions/setup-go/issues/217">#217</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/b46db954a1b7f4b0f623637da4f378d230cabfb3"><code>b46db95</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/222">#222</a> from vsafonkin/v-vsafonkin/add-readme-note</li> <li><a href="https://github.com/actions/setup-go/commit/333235845452e808872d02ff54724c813b6735d6"><code>3332358</code></a> Add note about go building</li> <li><a href="https://github.com/actions/setup-go/commit/46eabca1abc3e7139b3f3fb406a057e316a8360f"><code>46eabca</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/actions/setup-go/issues/221">#221</a> from vsafonkin/v-vsafonkin/fix-gopath-condition</li> <li><a href="https://github.com/actions/setup-go/commit/07948221bef819e39255ccb730b9ead9f22c5c03"><code>0794822</code></a> Rename CONDUCT.md and change email inside (<a href="https://github-redirect.dependabot.com/actions/setup-go/issues/218">#218</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/ad70bef2ef3d4a69511a3994c9b65a3584bbe653"><code>ad70bef</code></a> Fix condition for old go versions</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-go/compare/v3.0.0...v3.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=3.0.0&new-version=3.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>