mirror of
https://github.com/open-telemetry/opentelemetry-go.git
synced 2025-01-07 23:02:15 +02:00
afb6af0419
* Bump Go versions used in CI systems The latest releases of Go 1.22 and 1.21 contain security fixes for `net/http`. Explicitly set the CI system to not use vulnerable versions when testing so our vulnerable checker does not fail (and we aren't vulnerable). * Upgrade golang.org/x/net to v0.23.0 * Add changelog entry
26 lines
580 B
YAML
26 lines
580 B
YAML
name: dependabot-pr
|
|
|
|
on:
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
create-pr:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Install Go
|
|
uses: actions/setup-go@v5
|
|
with:
|
|
go-version: "~1.21.9"
|
|
check-latest: true
|
|
cache-dependency-path: "**/go.sum"
|
|
|
|
- uses: actions/checkout@v4
|
|
|
|
- name: Install zsh
|
|
run: sudo apt-get update; sudo apt-get install zsh
|
|
|
|
- name: Run dependabot-pr.sh
|
|
run: ./.github/workflows/scripts/dependabot-pr.sh
|
|
env:
|
|
GITHUB_TOKEN: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }}
|