chore(deps): cocogitto/cocogitto-action - checkout head sha

.gitea/workflows/build-docker-image.yml

@@ -46,7 +46,7 @@ jobs:
           username: ${{ secrets.registry-user }}
           password: ${{ secrets.registry-password }}
       - name: Build and push
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64,linux/arm64

.gitea/workflows/cog-check.yml

@@ -20,9 +20,9 @@ jobs:
           fetch-depth: 0
 
       - name: Semver release
-        uses: cocogitto/cocogitto-action@v3
+        uses: cocogitto/cocogitto-action@v4
         with:
-          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
-          check-latest-tag-only: true
+          command: check
+          args: --from-latest-tag
           git-user: "gitea-bot"
           git-user-email: "bot@git.palkoi.net"

.gitea/workflows/cog-release.yml

@@ -20,6 +20,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          ref: ${{ github.event.pull_request.head.sha }}
 
       - run: |
           git config user.name gitea-bot
@@ -28,20 +29,23 @@ jobs:
           git config --global user.name gitea-bot
 
       - name: Semver release
-        uses: cocogitto/cocogitto-action@v3
+        uses: cocogitto/cocogitto-action@v4
         id: release
         with:
-          release: true
+          command: bump
+          args: --auto
           git-user: "gitea-bot"
           git-user-email: "bot@git.palkoi.net"
-          check-latest-tag-only: true
-          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
 
       - name: Generate Changelog
-        run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md
+        id: changelog
+        uses: cocogitto/cocogitto-action@v4
+        with:
+          command: changelog
+          args: --at ${{ steps.release.outputs.version }} -t full_hash
 
       - name: Upload github release
         uses: softprops/action-gh-release@v2
         with:
-          body_path: GITHUB_CHANGELOG.md
+          body_path: ${{ steps.changelog.outputs.stdout }}
           tag_name: ${{ steps.release.outputs.version }}

.gitea/workflows/sec-megalinter.yml

@@ -53,7 +53,7 @@ jobs:
         id: ml
         # You can override MegaLinter flavor used to have faster performances
         # More info at https://megalinter.io/flavors/
-        uses: oxsecurity/megalinter@v7
+        uses: oxsecurity/megalinter@v9
         env:
           # All available variables are described in documentation
           # https://megalinter.io/configuration/

.gitea/workflows/tf-docs.yml

@@ -25,7 +25,7 @@ jobs:
           terraform-docs --version
           terraform-docs markdown table --output-file README.md --output-mode inject .
       - name: Verify Changed files
-        uses: tj-actions/verify-changed-files@v19
+        uses: tj-actions/verify-changed-files@v20
         id: verify-changed-files
         with:
           files: |