deps:chore - update actions/setup-go action to v6

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/setup-go	action	major	v3 → v6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/setup-go (actions/setup-go)

v6.4.0

Compare Source

What's Changed

Enhancement

• Add go-download-base-url input for custom Go distributions by @​gdams in #​721

Dependency update

• Upgrade minimatch from 3.1.2 to 3.1.5 by @​dependabot in #​727

Documentation update

• Rearrange README.md, add advanced-usage.md by @​priyagupta108 in #​724
• Fix Microsoft build of Go link by @​gdams in #​734

New Contributors

• @​gdams made their first contribution in #​721

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

Compare Source

What's Changed

• Update default Go module caching to use go.mod by @​priyagupta108 in #​705
• Fix golang download url to go.dev by @​178inaba in #​469

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

Compare Source

What's Changed

Enhancements

• Example for restore-only cache in documentation by @​aparnajyothi-y in #​696
• Update Node.js version in action.yml by @​ccoVeille in #​691
• Documentation update of actions/checkout by @​deining in #​683

Dependency updates

• Upgrade js-yaml from 3.14.1 to 3.14.2 by @​dependabot in #​682
• Upgrade @​actions/cache to v5 by @​salmanmkc in #​695
• Upgrade actions/checkout from 5 to 6 by @​dependabot in #​686
• Upgrade qs from 6.14.0 to 6.14.1 by @​dependabot in #​703

New Contributors

• @​ccoVeille made their first contribution in #​691
• @​deining made their first contribution in #​683

Full Changelog: actions/setup-go@v6...v6.2.0

v6.1.0

Compare Source

What's Changed

Enhancements

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​nicholasngai in #​665
• Add support for .tool-versions file and update workflow by @​priya-kinthali in #​673
• Add comprehensive breaking changes documentation for v6 by @​mahabaleshwars in #​674

Dependency updates

• Upgrade eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking changes in v6 by @​dependabot in #​617
• Upgrade actions/publish-action from 0.3.0 to 0.4.0 by @​dependabot in #​641
• Upgrade semver and @​types/semver by @​dependabot in #​652

New Contributors

• @​nicholasngai made their first contribution in #​665
• @​priya-kinthali made their first contribution in #​673
• @​mahabaleshwars made their first contribution in #​674

Full Changelog: actions/setup-go@v6...v6.1.0

v6.0.0

Compare Source

What's Changed

Breaking Changes

• Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @​matthewhughes934 in #​460
• Upgrade Nodejs runtime from node20 to node 24 by @​salmanmkc in #​624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot[bot] in #​589
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot[bot] in #​591
• Upgrade @​typescript-eslint/parser from 8.31.1 to 8.35.1 by @​dependabot[bot] in #​590
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in #​594
• Upgrade typescript from 5.4.2 to 5.8.3 by @​dependabot[bot] in #​538
• Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @​dependabot[bot] in #​603
• Upgrade form-data to bring in fix for critical vulnerability by @​matthewhughes934 in #​618
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in #​631

New Contributors

• @​matthewhughes934 made their first contribution in #​618
• @​salmanmkc made their first contribution in #​624

Full Changelog: actions/setup-go@v5...v6.0.0

v6

Compare Source

v5.6.0

Compare Source

What's Changed

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​aparnajyothi-y in #​689

Full Changelog: actions/setup-go@v5...v5.6.0

v5.5.0

Compare Source

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in #​556
• Add manifest validation and improve error handling by @​priyagupta108 in #​586
• Update template link by @​jsoref in #​527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in #​574
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in #​573
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in #​582
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in #​537

New Contributors

• @​jsoref made their first contribution in #​527

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

Compare Source

What's Changed

Dependency updates :

• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in #​535
• Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @​dependabot in #​536
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in #​568
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in #​541

New Contributors

• @​aparnajyothi-y made their first contribution in #​568

Full Changelog: actions/setup-go@v5...v5.4.0

v5.3.0

Compare Source

What's Changed

• Use the new cache service: upgrade @actions/cache to ^4.0.0 by @​Link- in #​531
• Configure Dependabot settings by @​HarithaVattikuti in #​530
• Document update - permission section by @​HarithaVattikuti in #​533
• Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 by @​dependabot in #​534

New Contributors

• @​Link- made their first contribution in #​531

Full Changelog: actions/setup-go@v5...v5.3.0

v5.2.0

Compare Source

What's Changed

• Leveraging the raw API to retrieve the version-manifest, as it does not impose a rate limit and hence facilitates unrestricted consumption without the need for a token for Github Enterprise Servers by @​Shegox in #​496

New Contributors

• @​Shegox made their first contribution in #​496

Full Changelog: actions/setup-go@v5...v5.2.0

v5.1.0

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​Jcambass in #​500
• Upgrade IA Publish by @​Jcambass in #​502
• Add architecture to cache key by @​Zxilly in #​493
  This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
  Note: This change may break previous cache keys as they will no longer be compatible with the new format.
• Enhance workflows and Upgrade micromatch Dependency by @​priyagupta108 in #​510

Bug Fixes

• Revise isGhes logic by @​jww3 in #​511

New Contributors

• @​Zxilly made their first contribution in #​493
• @​Jcambass made their first contribution in #​500
• @​jww3 made their first contribution in #​511
• @​priyagupta108 made their first contribution in #​510

Full Changelog: actions/setup-go@v5...v5.1.0

v5.0.2

Compare Source

What's Changed

Bug fixes:

• Fix versions check failure by @​HarithaVattikuti in #​479

Dependency updates:

• Bump braces from 3.0.2 to 3.0.3 and undici from 5.28.3 to 5.28.4 by @​dependabot in #​487

New Contributors

• @​HarithaVattikuti made their first contribution in #​479

Full Changelog: actions/setup-go@v5...v5.0.2

v5.0.1

Compare Source

What's Changed

• Bump undici from 5.28.2 to 5.28.3 and dependencies upgrade by @​dependabot , @​HarithaVattikuti in #​465
• Update documentation with latest V5 release notes by @​ab in #​459
• Update version documentation by @​178inaba in #​458
• Documentation update of actions/setup-go to v5 by @​chenrui333 in #​449

New Contributors

• @​ab made their first contribution in #​459

Full Changelog: actions/setup-go@v5.0.0...v5.0.1

v5.0.0

Compare Source

What's Changed

In scope of this release, we change Nodejs runtime from node16 to node20 (#​421). Moreover, we update some dependencies to the latest versions (#​445).

Besides, this release contains such changes as:

• Fix hosted tool cache usage on windows by @​galargh in #​411
• Improve documentation regarding dependencies caching by @​artemgavrilov in #​417

New Contributors

• @​galargh made their first contribution in #​411
• @​artemgavrilov made their first contribution in #​417
• @​chenrui333 made their first contribution in #​421

Full Changelog: actions/setup-go@v4...v5.0.0

v5

Compare Source

v4.3.0

Compare Source

What's Changed

• Fallback to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​aparnajyothi-y in #​690

Full Changelog: actions/setup-go@v4...v4.3.0

v4.2.1

Compare Source

What's Changed

• Add workflow file for publishing releases to immutable action package by @​aparnajyothi-y in #​583

Full Changelog: actions/setup-go@v4...v4.2.1

v4.2.0

Compare Source

What's Changed

• Upgrade @actions/cache by @​priyagupta108 in #​578.
  In scope of this release we updated actions/cache package to 4.0.3. This update ensures continued support and compatibility, as older versions of the package are now deprecated. For more information please refer to the toolkit/cache.

Full Changelog: actions/setup-go@v4...v4.2.0

v4.1.0

Compare Source

What's Changed

In scope of this release, slow installation on Windows was fixed by @​dsame in #​393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (#​383)

This release also includes the following changes:

• Remove implicit dependencies by @​nikolai-laevskii in #​378
• Update action.yml by @​mkelly in #​379
• Added a description that go-version should be specified as a string type by @​n3xem in #​367
• Add note about YAML parsing versions by @​dmitry-shibanov in #​382
• Automatic update of configuration files from 05/23/2023 by @​github-actions in #​377
• Bump tough-cookie and @​azure/ms-rest-js by @​dependabot in #​392
• Bump word-wrap from 1.2.3 to 1.2.4 by @​dependabot in #​397
• Bump semver from 6.3.0 to 6.3.1 by @​dependabot in #​396

New Contributors

• @​mkelly made their first contribution in #​379
• @​n3xem made their first contribution in #​367

Full Changelog: actions/setup-go@v4...v4.1.0

v4.0.1

Compare Source

What's Changed

• Update documentation for v4 by @​dsame in #​354
• Fix glob bug in the package.json scripts section by @​IvanZosimov in #​359
• Bump xml2js dependency by @​dmitry-shibanov in #​370
• Bump @actions/cache dependency to v3.2.1 by @​nikolai-laevskii in #​374

New Contributors

• @​nikolai-laevskii made their first contribution in #​374

Full Changelog: actions/setup-go@v4...v4.0.1

v4.0.0

Compare Source

In scope of release we enable cache by default. The action won’t throw an error if the cache can’t be restored or saved. The action will throw a warning message but it won’t stop a build process. The cache can be disabled by specifying cache: false.

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v4
    with:
      go-version: '1.19'
  - run: go run hello.go

Besides, we introduce such changes as

• Allow to use only GOCACHE for cache
• Bump json5 from 2.2.1 to 2.2.3
• Use proper version for primary key in cache
• Always add Go bin to the PATH
• Add step warning if go-version input is empty

v4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[ghost]

PR Summary

This Pull Request updates the Go environment setup step in several GitHub Actions workflows from actions/setup-go@v3 to actions/setup-go@v6. The main goal is to ensure all workflows use the latest major version of the setup-go action, which may include important bug fixes, new features, and security improvements. While there are no direct or immediate security concerns identified, keeping dependencies and actions up to date is a best practice for maintaining security and reliability.

---

Changed Files and Their Updates

• .github/workflows/coverage.yml

  • Summary: Updated the workflow to use actions/setup-go@v6 instead of v3 for setting up the Go environment.
  • Security: No direct security concerns, but using a newer version may address vulnerabilities or bugs present in v3.

• .github/workflows/license.yaml

  • Summary: Changed the Go setup step from actions/setup-go@v3 to actions/setup-go@v6, aligning with the latest supported version.
  • Security: No immediate issues, but updating helps mitigate risks from deprecated or insecure dependencies.

• .github/workflows/lint.yml

  • Summary: Replaced actions/setup-go@v3 with v6 in the lint workflow to use the most recent and maintained version.
  • Security: No explicit concerns, but this update may provide improved security and reliability.

• .github/workflows/test.yml

  • Summary: Updated the test workflow to use actions/setup-go@v6 instead of v3.
  • Security: No direct issues, but newer versions are generally recommended for better security and support.

---

Security Advice & Points of Attention

• General Recommendation: While no specific vulnerabilities were flagged, updating GitHub Actions to their latest major versions is a proactive measure that can help prevent issues related to deprecated features or unpatched security flaws.
• Review Suggestion: Ensure that all workflows function as expected with actions/setup-go@v6, as major version upgrades can sometimes introduce breaking changes or require updated configuration options.

---

In summary:
This PR modernizes your CI workflows by upgrading the Go setup action to its latest major version across all relevant workflows, improving maintainability and potentially enhancing security. No immediate risks were found, but this is a positive step for long-term project health.
This is an AI-generated summary, which may be innacurate.
This aims only to assist human reviewers, and does not replace code reviews in any way.
Use responsibly and please submit any feedback to this form.