Repository: google/osv-scanner
Pull request #499 (2023-08-20 18:19:24)

chore(deps): update golangci/golangci-lint-action action to v3.7.0
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [golangci/golangci-lint-action](https://togithub.com/golangci/golangci-lint-action) | action | minor | `v3.6.0` -> `v3.7.0` |

---

### Release Notes

<details>
<summary>golangci/golangci-lint-action (golangci/golangci-lint-action)</summary>

### [`v3.7.0`](https://togithub.com/golangci/golangci-lint-action/releases/tag/v3.7.0)

[Compare Source](https://togithub.com/golangci/golangci-lint-action/compare/v3.6.0...v3.7.0)

<!-- Release notes generated using configuration in .github/release.yml at v3.7.0 -->

#### What's Changed

##### Changes

-   feat: working-directory with only-new-issues by [@&#8203;CfirTsabari](https://togithub.com/CfirTsabari) in [https://github.com/golangci/golangci-lint-action/pull/795](https://togithub.com/golangci/golangci-lint-action/pull/795)

##### Documentation

-   docs: improve `How to use` section in README.md by [@&#8203;tungbq](https://togithub.com/tungbq) in [https://github.com/golangci/golangci-lint-action/pull/780](https://togithub.com/golangci/golangci-lint-action/pull/780)

##### Dependencies

-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.2.5 to 20.3.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/771](https://togithub.com/golangci/golangci-lint-action/pull/771)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.59.8 to 5.59.9 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/772](https://togithub.com/golangci/golangci-lint-action/pull/772)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.59.8 to 5.59.9 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/773](https://togithub.com/golangci/golangci-lint-action/pull/773)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.59.9 to 5.59.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/776](https://togithub.com/golangci/golangci-lint-action/pull/776)
-   build(deps-dev): bump eslint from 8.42.0 to 8.43.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/775](https://togithub.com/golangci/golangci-lint-action/pull/775)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.3.0 to 20.3.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/777](https://togithub.com/golangci/golangci-lint-action/pull/777)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.59.9 to 5.59.11 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/778](https://togithub.com/golangci/golangci-lint-action/pull/778)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.59.11 to 5.60.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/782](https://togithub.com/golangci/golangci-lint-action/pull/782)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.59.11 to 5.60.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/783](https://togithub.com/golangci/golangci-lint-action/pull/783)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.3.1 to 20.3.3 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/784](https://togithub.com/golangci/golangci-lint-action/pull/784)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.60.0 to 5.60.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/785](https://togithub.com/golangci/golangci-lint-action/pull/785)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.60.0 to 5.60.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/786](https://togithub.com/golangci/golangci-lint-action/pull/786)
-   build(deps-dev): bump typescript from 5.1.3 to 5.1.6 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/787](https://togithub.com/golangci/golangci-lint-action/pull/787)
-   build(deps-dev): bump eslint from 8.43.0 to 8.44.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/788](https://togithub.com/golangci/golangci-lint-action/pull/788)
-   build(deps): bump tough-cookie and [@&#8203;azure/ms-rest-js](https://togithub.com/azure/ms-rest-js) by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/790](https://togithub.com/golangci/golangci-lint-action/pull/790)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.3.3 to 20.4.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/791](https://togithub.com/golangci/golangci-lint-action/pull/791)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.60.1 to 5.61.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/792](https://togithub.com/golangci/golangci-lint-action/pull/792)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.60.1 to 5.61.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/793](https://togithub.com/golangci/golangci-lint-action/pull/793)
-   build(deps): bump semver from 6.3.0 to 6.3.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/796](https://togithub.com/golangci/golangci-lint-action/pull/796)
-   build(deps-dev): bump prettier from 2.8.8 to 3.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/794](https://togithub.com/golangci/golangci-lint-action/pull/794)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.4.1 to 20.4.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/798](https://togithub.com/golangci/golangci-lint-action/pull/798)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 5.61.0 to 5.62.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/799](https://togithub.com/golangci/golangci-lint-action/pull/799)
-   build(deps-dev): bump eslint from 8.44.0 to 8.45.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/801](https://togithub.com/golangci/golangci-lint-action/pull/801)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 5.61.0 to 6.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/800](https://togithub.com/golangci/golangci-lint-action/pull/800)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.4.2 to 20.4.4 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/803](https://togithub.com/golangci/golangci-lint-action/pull/803)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 6.0.0 to 6.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/804](https://togithub.com/golangci/golangci-lint-action/pull/804)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 6.0.0 to 6.1.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/805](https://togithub.com/golangci/golangci-lint-action/pull/805)
-   build(deps-dev): bump eslint-plugin-import from 2.27.5 to 2.28.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/808](https://togithub.com/golangci/golangci-lint-action/pull/808)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.4.4 to 20.4.5 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/809](https://togithub.com/golangci/golangci-lint-action/pull/809)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 6.1.0 to 6.2.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/810](https://togithub.com/golangci/golangci-lint-action/pull/810)
-   build(deps-dev): bump eslint-config-prettier from 8.8.0 to 8.9.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/811](https://togithub.com/golangci/golangci-lint-action/pull/811)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 6.1.0 to 6.2.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/812](https://togithub.com/golangci/golangci-lint-action/pull/812)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.4.5 to 20.4.8 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/815](https://togithub.com/golangci/golangci-lint-action/pull/815)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 6.2.0 to 6.2.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/816](https://togithub.com/golangci/golangci-lint-action/pull/816)
-   build(deps-dev): bump prettier from 3.0.0 to 3.0.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/817](https://togithub.com/golangci/golangci-lint-action/pull/817)
-   build(deps-dev): bump eslint-config-prettier from 8.9.0 to 9.0.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/818](https://togithub.com/golangci/golangci-lint-action/pull/818)
-   build(deps): bump [@&#8203;actions/http-client](https://togithub.com/actions/http-client) from 2.1.0 to 2.1.1 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/819](https://togithub.com/golangci/golangci-lint-action/pull/819)
-   build(deps-dev): bump [@&#8203;typescript-eslint/parser](https://togithub.com/typescript-eslint/parser) from 6.2.0 to 6.3.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/821](https://togithub.com/golangci/golangci-lint-action/pull/821)
-   build(deps-dev): bump eslint from 8.45.0 to 8.47.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/823](https://togithub.com/golangci/golangci-lint-action/pull/823)
-   build(deps): bump [@&#8203;types/node](https://togithub.com/types/node) from 20.4.8 to 20.5.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/824](https://togithub.com/golangci/golangci-lint-action/pull/824)
-   build(deps-dev): bump [@&#8203;typescript-eslint/eslint-plugin](https://togithub.com/typescript-eslint/eslint-plugin) from 6.2.1 to 6.3.0 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/822](https://togithub.com/golangci/golangci-lint-action/pull/822)
-   build(deps): bump [@&#8203;actions/cache](https://togithub.com/actions/cache) from 3.2.1 to 3.2.2 by [@&#8203;dependabot](https://togithub.com/dependabot) in [https://github.com/golangci/golangci-lint-action/pull/825](https://togithub.com/golangci/golangci-lint-action/pull/825)

#### New Contributors

-   [@&#8203;tungbq](https://togithub.com/tungbq) made their first contribution in [https://github.com/golangci/golangci-lint-action/pull/780](https://togithub.com/golangci/golangci-lint-action/pull/780)
-   [@&#8203;CfirTsabari](https://togithub.com/CfirTsabari) made their first contribution in [https://github.com/golangci/golangci-lint-action/pull/795](https://togithub.com/golangci/golangci-lint-action/pull/795)

**Full Changelog**: https://github.com/golangci/golangci-lint-action/compare/v3...v3.7.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on monday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/google/osv-scanner).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi40My4yIiwidXBkYXRlZEluVmVyIjoiMzYuNDMuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->



Patch:
diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
index 4bc2903..014e8de 100644
--- a/.github/workflows/goreleaser.yml
+++ b/.github/workflows/goreleaser.yml
@@ -25,7 +25,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           go-version: 1.19
           check-latest: true
diff --git a/.github/workflows/lint-action/action.yml b/.github/workflows/lint-action/action.yml
index 4153a88..a0322ae 100644
--- a/.github/workflows/lint-action/action.yml
+++ b/.github/workflows/lint-action/action.yml
@@ -19,7 +19,7 @@ runs:
   using: composite
   steps:
     - name: Run golangci-lint
-      uses: golangci/golangci-lint-action@639cd343e1d3b897ff35927a75193d57cfcba299 # v3.6.0
+      uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3.7.0
       with:
         # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
         version: v1.51.1
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index f6fe300..cf3723c 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -37,7 +37,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           go-version: '1.19'
           check-latest: true


Test patch:
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index fbfb63c..5204170 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -37,7 +37,7 @@ jobs:
           persist-credentials: false
           fetch-depth: 0
       - name: Set up Go
-        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753 # v4.0.1
+        uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
         with:
           go-version: '1.19'
           check-latest: true