chore(deps): update oxsecurity/megalinter action to v9

.gitea/workflows/build-docker-image.yml

@@ -46,7 +46,7 @@ jobs:
           username: ${{ secrets.registry-user }}
           password: ${{ secrets.registry-password }}
       - name: Build and push
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@v5
         with:
           context: .
           platforms: linux/amd64,linux/arm64

.gitea/workflows/cog-check.yml

@@ -20,9 +20,9 @@ jobs:
           fetch-depth: 0
 
       - name: Semver release
-        uses: cocogitto/cocogitto-action@v4
+        uses: cocogitto/cocogitto-action@v3
         with:
-          command: check
+          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
-          args: --from-latest-tag
+          check-latest-tag-only: true
           git-user: "gitea-bot"
           git-user-email: "bot@git.palkoi.net"

.gitea/workflows/cog-release.yml

@@ -1,12 +1,15 @@
 ---
 name: Cog release
 on:
+  push:
+    branches:
+      - main
   workflow_call:
-    inputs:
+    # inputs:
-      ref:
+    #   check-latest-tag-only:
-        type: string
+    #     type: boolean
-        required: false
+    #     required: false
-        default: ""
+    #     default: true
 
 jobs:
   release:
@@ -17,7 +20,6 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
-          ref: ${{ inputs.ref == '' && github.sha || inputs.ref }}
 
       - run: |
           git config user.name gitea-bot
@@ -26,23 +28,20 @@ jobs:
           git config --global user.name gitea-bot
 
       - name: Semver release
-        uses: cocogitto/cocogitto-action@v4
+        uses: cocogitto/cocogitto-action@v3
         id: release
         with:
-          command: bump
+          release: true
-          args: --auto
           git-user: "gitea-bot"
           git-user-email: "bot@git.palkoi.net"
+          check-latest-tag-only: true
+          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
 
       - name: Generate Changelog
-        id: changelog
+        run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md
-        uses: cocogitto/cocogitto-action@v4
-        with:
-          command: changelog
-          args: --at ${{ steps.release.outputs.version }} -t full_hash
 
       - name: Upload github release
         uses: softprops/action-gh-release@v2
         with:
-          body: ${{ steps.changelog.outputs.stdout }}
+          body_path: GITHUB_CHANGELOG.md
           tag_name: ${{ steps.release.outputs.version }}

.gitea/workflows/release.yml

@@ -1,12 +0,0 @@
----
-name: Cog release
-on:
-  push:
-    branches:
-      - main
-
-jobs:
-  release:
-    name: Create release
-    runs-on: ubuntu-latest
-    uses: ./.gitea/workflows/cog-release.yml

.gitea/workflows/sec-megalinter.yml

@@ -99,7 +99,7 @@ jobs:
         run: sudo chown -Rc $UID .git/
       - name: Commit and push applied linter fixes
         if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'commit' && github.ref != 'refs/heads/main' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix')
-        uses: stefanzweifel/git-auto-commit-action@v7
+        uses: stefanzweifel/git-auto-commit-action@v4
         with:
           branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }}
           commit_message: "feat(linter): apply linters fixes"

.gitea/workflows/tf-docs.yml

@@ -25,14 +25,14 @@ jobs:
           terraform-docs --version
           terraform-docs markdown table --output-file README.md --output-mode inject .
       - name: Verify Changed files
-        uses: tj-actions/verify-changed-files@v20
+        uses: tj-actions/verify-changed-files@v19
         id: verify-changed-files
         with:
           files: |
             README.md
       - name: Commit and push new terraform docs version
         if: steps.verify-changed-files.outputs.files_changed == 'true'
-        uses: stefanzweifel/git-auto-commit-action@v7
+        uses: stefanzweifel/git-auto-commit-action@v4
         with:
           branch: ${{ github.event.pull_request.head.ref || github.head_ref || github.ref }}
           commit_message: "docs(tf-docs): update docs"