chore(deps): update docker/build-push-action action to v6

chore(deps): update stefanzweifel/git-auto-commit-action action to v7
chore(deps): update oxsecurity/megalinter action to v9
2026-01-03 17:51:15 +02:00 · 2026-01-03 17:51:09 +02:00 · 2026-01-03 17:51:03 +02:00 · 2026-01-03 15:42:12 +00:00 · 2026-01-03 17:40:45 +02:00 · 2026-01-03 17:38:49 +02:00
12 changed files with 87 additions and 34 deletions
--- a/.gitea/workflows/build-docker-image.yml
+++ b/.gitea/workflows/build-docker-image.yml
@@ -21,7 +21,7 @@ jobs:

    steps:
      - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
@@ -46,7 +46,7 @@ jobs:
          username: ${{ secrets.registry-user }}
          password: ${{ secrets.registry-password }}
      - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
        with:
          context: .
          platforms: linux/amd64,linux/arm64
--- a/.gitea/workflows/cog-check.yml
+++ b/.gitea/workflows/cog-check.yml
@@ -0,0 +1,28 @@
+---
+name: Cog check
+on:
+  pull_request:
+  workflow_call:
+    # inputs:
+    #   check-latest-tag-only:
+    #     type: boolean
+    #     required: false
+    #     default: true
+
+jobs:
+  release:
+    name: Create release
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+
+      - name: Semver release
+        uses: cocogitto/cocogitto-action@v3
+        with:
+          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
+          check-latest-tag-only: true
+          git-user: "gitea-bot"
+          git-user-email: "bot@git.palkoi.net"
--- a/.gitea/workflows/cog-release.yml
+++ b/.gitea/workflows/cog-release.yml
@@ -1,6 +1,15 @@
-name: Release
+---
+name: Cog release
 on:
+  push:
+    branches:
+      - main
  workflow_call:
+    # inputs:
+    #   check-latest-tag-only:
+    #     type: boolean
+    #     required: false
+    #     default: true

 jobs:
  release:
@@ -8,7 +17,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          fetch-depth: 0

@@ -26,6 +35,7 @@ jobs:
          git-user: "gitea-bot"
          git-user-email: "bot@git.palkoi.net"
          check-latest-tag-only: true
+          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}

      - name: Generate Changelog
        run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md
--- a/.gitea/workflows/otf-apply.yml
+++ b/.gitea/workflows/otf-apply.yml
@@ -27,10 +27,10 @@ jobs:

    steps:
      - name: Clone repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
      - name: Retrieve artifacts
        id: download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v7
        with:
          name: artifacts
      - name: Check if job errored
@@ -42,7 +42,7 @@ jobs:
            exit "$(cat exitcode)";
          fi
      - name: Clone blackbox repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
        if: ${{ steps.check.outputs.code == 2 }}
        with:
          repository: xaked/blackbox
@@ -76,7 +76,7 @@ jobs:
          known-hosts: ${{ secrets.ssh-known-hosts }}
      - name: Restore tofu cache
        if: ${{ steps.check.outputs.code == 2 }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
        id: cache-tofu-restore
        with:
          path: .terraform
@@ -96,7 +96,7 @@ jobs:
        run: tofu apply -input=false -auto-approve tfplan.binary;
      - name: Save tofu cache
        if: ${{ steps.check.outputs.code == 2 }}
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v5
        id: cache-tofu-save
        with:
          path: .terraform
--- a/.gitea/workflows/otf-plan.yml
+++ b/.gitea/workflows/otf-plan.yml
@@ -31,9 +31,9 @@ jobs:
          tofu_version: ${{ inputs.tofu-version }}
          cli_config_credentials_token: ${{ secrets.tf-api-token }}
      - name: Clone repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
      - name: Clone blackbox repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
        with:
          repository: xaked/blackbox
          path: blackbox
@@ -57,7 +57,7 @@ jobs:
          private-key-name: id_ed25519
          known-hosts: ${{ secrets.ssh-known-hosts }}
      - name: Restore tofu cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
        id: cache-tofu-restore
        with:
          path: .terraform
@@ -77,7 +77,7 @@ jobs:
        shell: bash
        run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
      - name: Upload artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v6
        with:
          name: artifacts
          path: |
@@ -90,7 +90,7 @@ jobs:
            exit 1;
          fi
      - name: Save tofu cache
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v5
        id: cache-tofu-save
        with:
          path: .terraform
--- a/.gitea/workflows/sec-blackbox-decrypt.yml
+++ b/.gitea/workflows/sec-blackbox-decrypt.yml
@@ -13,7 +13,7 @@ jobs:

    steps:
      - name: Clone blackbox repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
        with:
          repository: xaked/blackbox
          path: blackbox
--- a/.gitea/workflows/sec-checks-trivy.yml
+++ b/.gitea/workflows/sec-checks-trivy.yml
@@ -9,7 +9,7 @@ jobs:

    steps:
      - name: Clone repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
      - name: Run Trivy vulnerability scanner in IaC mode (LOW/MED)
        uses: aquasecurity/trivy-action@master
        with:
--- a/.gitea/workflows/sec-megalinter.yml
+++ b/.gitea/workflows/sec-megalinter.yml
@@ -43,7 +43,7 @@ jobs:
    steps:
      # Git Checkout
      - name: Checkout Code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
        with:
          token: ${{ secrets.gitea-token }}
          fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
@@ -53,7 +53,7 @@ jobs:
        id: ml
        # You can override MegaLinter flavor used to have faster performances
        # More info at https://megalinter.io/flavors/
-        uses: oxsecurity/megalinter@v7
+        uses: oxsecurity/megalinter@v9
        env:
          # All available variables are described in documentation
          # https://megalinter.io/configuration/
@@ -65,7 +65,7 @@ jobs:
      # Upload MegaLinter artifacts
      - name: Archive production artifacts
        if: success() || failure()
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v6
        with:
          name: MegaLinter reports
          path: |
@@ -81,7 +81,7 @@ jobs:
      - name: Create Pull Request with applied fixes
        id: cpr
        if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix')
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@v8
        with:
          token: ${{ secrets.gitea-token }}
          commit-message: "[MegaLinter] Apply linters automatic fixes"
@@ -99,7 +99,7 @@ jobs:
        run: sudo chown -Rc $UID .git/
      - name: Commit and push applied linter fixes
        if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix')
-        uses: stefanzweifel/git-auto-commit-action@v4
+        uses: stefanzweifel/git-auto-commit-action@v7
        with:
          branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }}
          commit_message: "feat(linter): apply linters fixes"
--- a/.gitea/workflows/tf-apply.yml
+++ b/.gitea/workflows/tf-apply.yml
@@ -22,10 +22,10 @@ jobs:

    steps:
      - name: Clone repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
      - name: Retrieve artifacts
        id: download
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v7
        with:
          name: artifacts
      - name: Check if job errored
@@ -37,7 +37,7 @@ jobs:
            exit "$(cat exitcode)";
          fi
      - name: Clone blackbox repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
        if: ${{ steps.check.outputs.code == 2 }}
        with:
          repository: xaked/blackbox
@@ -71,7 +71,7 @@ jobs:
          known-hosts: ${{ secrets.ssh-known-hosts }}
      - name: Restore terraform cache
        if: ${{ steps.check.outputs.code == 2 }}
-        uses: actions/cache@v4
+        uses: actions/cache@v5
        id: cache-terraform-restore
        with:
          path: .terraform
@@ -91,7 +91,7 @@ jobs:
        run: terraform apply -input=false -auto-approve tfplan.binary;
      - name: Save terraform cache
        if: ${{ steps.check.outputs.code == 2 }}
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v5
        id: cache-terraform-save
        with:
          path: .terraform
--- a/.gitea/workflows/tf-docs.yml
+++ b/.gitea/workflows/tf-docs.yml
@@ -8,7 +8,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
        with:
          ref: ${{ github.event.pull_request.head.ref }}
      - name: Install terraform docs
@@ -25,14 +25,14 @@ jobs:
          terraform-docs --version
          terraform-docs markdown table --output-file README.md --output-mode inject .
      - name: Verify Changed files
-        uses: tj-actions/verify-changed-files@v19
+        uses: tj-actions/verify-changed-files@v20
        id: verify-changed-files
        with:
          files: |
            README.md
      - name: Commit and push new terraform docs version
        if: steps.verify-changed-files.outputs.files_changed == 'true'
-        uses: stefanzweifel/git-auto-commit-action@v4
+        uses: stefanzweifel/git-auto-commit-action@v7
        with:
          branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }}
          commit_message: "docs(tf-docs): update docs"
--- a/.gitea/workflows/tf-plan.yml
+++ b/.gitea/workflows/tf-plan.yml
@@ -26,9 +26,9 @@ jobs:
          terraform_version: 1.7.5
          cli_config_credentials_token: ${{ secrets.tf-api-token }}
      - name: Clone repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
      - name: Clone blackbox repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
        with:
          repository: xaked/blackbox
          path: blackbox
@@ -52,7 +52,7 @@ jobs:
          private-key-name: id_ed25519
          known-hosts: ${{ secrets.ssh-known-hosts }}
      - name: Restore terraform cache
-        uses: actions/cache@v4
+        uses: actions/cache@v5
        id: cache-terraform-restore
        with:
          path: .terraform
@@ -72,7 +72,7 @@ jobs:
        shell: bash
        run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
      - name: Upload artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v6
        with:
          name: artifacts
          path: |
@@ -85,7 +85,7 @@ jobs:
            exit 1;
          fi
      - name: Save terraform cache
-        uses: actions/cache/save@v4
+        uses: actions/cache/save@v5
        id: cache-terraform-save
        with:
          path: .terraform
--- a/cog.toml
+++ b/cog.toml
@@ -0,0 +1,15 @@
+# [packages]
+# build-docker-image = { path = ".gitea/workflows/build-docker-image.yml" }
+# cog-check = { path = ".gitea/workflows/cog-check.yml" }
+# cog-release = { path = ".gitea/workflows/cog-release.yml" }
+# otf-apply = { path = ".gitea/workflows/otf-apply.yml" }
+# otf-plan = { path = ".gitea/workflows/otf-plan.yml" }
+# sec-blackbox-decrypt = { path = ".gitea/workflows/sec-blackbox-decrypt.yml" }
+# sec-checks-trivy = { path = ".gitea/workflows/sec-checks-trivy.yml" }
+# sec-megalinter = { path = ".gitea/workflows/sec-megalinter.yml" }
+# tf-apply = { path = ".gitea/workflows/tf-apply.yml" }
+# tf-docs = { path = ".gitea/workflows/tf-docs.yml" }
+# tf-plan = { path = ".gitea/workflows/tf-plan.yml" }
+[commit_types]
+version = { bump_patch = true, changelog_title = "Version" }
+chore = { bump_patch = true, changelog_title = "Chore" }
Author	SHA1	Message	Date
Renovate Bot	f6750482a7	chore(deps): update docker/build-push-action action to v6 All checks were successful Cog release / Create release (push) Successful in 7s Details	2026-01-03 17:51:15 +02:00
Renovate Bot	4d667c9fe0	chore(deps): update stefanzweifel/git-auto-commit-action action to v7 Some checks failed Cog release / Create release (push) Has been cancelled Details	2026-01-03 17:51:09 +02:00
Renovate Bot	d9ffd2726f	chore(deps): update oxsecurity/megalinter action to v9 Some checks failed Cog release / Create release (push) Has been cancelled Details	2026-01-03 17:51:03 +02:00
Renovate Bot	d7dde0e936	chore(deps): update tj-actions/verify-changed-files action to v20 Some checks failed Cog check / Create release (pull_request) Successful in 6s Details Cog release / Create release (push) Has been cancelled Details	2026-01-03 15:42:12 +00:00
Mykhailo Nikiforov	173c01c9ca	chore: update cocogitto config All checks were successful Cog release / Create release (push) Successful in 7s Details	2026-01-03 17:40:45 +02:00
Renovate Bot	39fd0b7054	chore(deps): update peter-evans/create-pull-request action to v8 All checks were successful Cog release / Create release (push) Successful in 7s Details	2026-01-03 17:38:49 +02:00
Renovate Bot	9104c113dc	chore(deps): update actions/cache action to v5 Some checks failed Cog release / Create release (push) Has been cancelled Details	2026-01-03 17:38:41 +02:00
Renovate Bot	2ce0f74e27	chore(deps): update github artifact actions Some checks failed Cog release / Create release (push) Has been cancelled Details	2026-01-03 17:38:32 +02:00
Renovate Bot	728bae9120	chore(deps): update actions/checkout action to v6 All checks were successful Cog check / Create release (pull_request) Successful in 11s Details Cog release / Create release (push) Successful in 8s Details	2025-11-21 00:01:07 +00:00
Mykhailo Nikiforov	2ae472fd70	feat(cog): disable monorepo packages All checks were successful Cog release / Create release (push) Successful in 7s Details	2024-11-21 22:53:30 +02:00
Mykhailo Nikiforov	bff92f363b	feat(cog): format files All checks were successful Cog release / Create release (push) Successful in 7s Details	2024-11-21 22:51:18 +02:00
Mykhailo Nikiforov	5eefad3bfc	feat(cog): remove ability to specify if we need to check from latest tag only All checks were successful Cog Release / Create release (push) Successful in 7s Details	2024-11-21 22:48:40 +02:00
Mykhailo Nikiforov	fcc9ac5d86	feat(cog): add ability to specify if we need to check from latest tag only	2024-11-21 22:40:53 +02:00
Mykhailo Nikiforov	3512ce520d	feat(cog): update package names Some checks failed Cog Check / Create release (pull_request) Successful in 6s Details Cog Release / Create release (push) Failing after 7s Details	2024-11-21 22:30:37 +02:00
Mykhailo Nikiforov	c5017145ca	feat(cog): specify git username/email Some checks failed Cog Check / Create release (pull_request) Failing after 5s Details	2024-11-21 22:27:41 +02:00
Mykhailo Nikiforov	6daafc6841	feat(cog)!: update how releases are handled	2024-11-21 22:27:22 +02:00