Skip to content

chore(deps): update actions/setup-go action to v7 - #23

Open
scality-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/actions-setup-go-7.x
Open

chore(deps): update actions/setup-go action to v7#23
scality-renovate[bot] wants to merge 1 commit into
mainfrom
renovate/actions-setup-go-7.x

Conversation

@scality-renovate

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/setup-go action major v6.5.0v7.0.0

Release Notes

actions/setup-go (actions/setup-go)

v7.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 9am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@scality-renovate
scality-renovate Bot requested a review from a team as a code owner July 27, 2026 04:21
@scality-renovate scality-renovate Bot added ci dependencies Pull requests that update a dependency file major labels Jul 27, 2026
@github-actions

Copy link
Copy Markdown

Dependency Bump Evaluation

Version change: actions/setup-go v6.5.0 → v7.0.0 (major)

Changes:

  • Internal migration from CommonJS to ESM modules (the reason for the major version bump)
  • Node runtime upgraded from node20 to node24
  • @actions/cache bumped to 6.2.0
  • New optional input go-download-base-url added (not used by this repo)
  • Core inputs/outputs API unchanged — go-version, go-version-file, check-latest, cache, cache-dependency-path, architecture, token all remain the same

Breaking changes: None affecting this repo. The major bump is driven by the ESM migration which is purely internal to the action. All inputs used by this workflow (go-version-file: go.mod) are present and behave identically in v7.

Security concerns: None. This is a first-party GitHub action maintained by the actions org. The PR correctly pins to a full SHA (b7ad1dad31e06c5925ef5d2fc7ad053ef454303e). No supply chain risk.

Impact on codebase: All 4 usages in .github/workflows/pre-merge.yaml use only go-version-file: go.mod — a standard input unchanged between v6 and v7. No workflow logic changes needed.

CI status: build passed. generate, lint, test, test-e2e are still in progress — merge after they complete.

Recommendation: SAFE TO MERGE (after CI completes)

Notes: Not auto-approving because the PR author is scality-renovate[bot] (not dependabot). A human should approve once CI is green.

— Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci dependencies Pull requests that update a dependency file major

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants