chore(deps): bump the github-actions group across 1 directory with 4 …

…updates Bumps the github-actions group with 4 updates in the / directory: [contributor-assistant/github-action](https://github.com/contributor-assistant/github-action), [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action), [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) and [arduino/setup-task](https://github.com/arduino/setup-task). Updates `contributor-assistant/github-action` from 2.3.1 to 2.4.0 - [Release notes](https://github.com/contributor-assistant/github-action/releases) - [Commits](contributor-assistant/github-action@v2.3.1...v2.4.0) Updates `golangci/golangci-lint-action` from 4.0.0 to 6.0.1 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@v4.0.0...v6.0.1) Updates `lycheeverse/lychee-action` from 1.9.3 to 1.10.0 - [Release notes](https://github.com/lycheeverse/lychee-action/releases) - [Commits](lycheeverse/lychee-action@v1.9.3...v1.10.0) Updates `arduino/setup-task` from 1 to 2 - [Release notes](https://github.com/arduino/setup-task/releases) - [Commits](arduino/setup-task@v1...v2) --- updated-dependencies: - dependency-name: contributor-assistant/github-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: golangci/golangci-lint-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: lycheeverse/lychee-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: arduino/setup-task dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
openimsdk · dependabot · Jun 20, 2024 · Jun 20, 2024 · 6a7e9efaa4395b549819e0849acc493821495599
commit 6a7e9efaa4395b549819e0849acc493821495599
diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
@@ -41,7 +41,7 @@ jobs:
     steps:
       - name: "CLA Assistant"
         if: (github.event.comment.body == 'recheck' || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA') || github.event_name == 'pull_request_target'
-        uses: contributor-assistant/github-action@v2.3.1
+        uses: contributor-assistant/github-action@v2.4.0
         env:
           GITHUB_TOKEN: ${{ secrets.BOT_GITHUB_TOKEN }}
           PERSONAL_ACCESS_TOKEN: ${{ secrets.REDBOT_GITHUB_TOKEN }}

diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml
@@ -29,7 +29,7 @@ jobs:
             go-version: '1.22'
             cache: false
         - name: golangci-lint
-          uses: golangci/golangci-lint-action@v4.0.0
+          uses: golangci/golangci-lint-action@v6.0.1
           with:
             # Require: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
             version: v1.54

diff --git a/.github/workflows/link-pr.yml b/.github/workflows/link-pr.yml
@@ -27,7 +27,7 @@ jobs:
 
       - name: Link Checker
         id: lychee
-        uses: lycheeverse/lychee-action@v1.9.3
+        uses: lycheeverse/lychee-action@v1.10.0
         with:
             # For parameter description, see https://github.com/lycheeverse/lychee#commandline-parameters
             # Actions Link address -> https://github.com/lycheeverse/lychee-action

diff --git a/.github/workflows/openimci.yaml b/.github/workflows/openimci.yaml
@@ -50,7 +50,7 @@ jobs:
       id: go
 
     - name: Install Task
-      uses: arduino/setup-task@v1
+      uses: arduino/setup-task@v2
       with:
         version: '3.x' # If available, use the latest major version that's compatible
         repo-token: ${{ secrets.GITHUB_TOKEN }}

diff --git a/discovery/etcd/etcd.go b/discovery/etcd/etcd.go
 func NewSvcDiscoveryRegistry(rootDirectory string, endpoints []string, options ...ZkOption) (*SvcDiscoveryRegistryImpl, error) {
 	cfg := clientv3.Config{
 		Endpoints:   endpoints,
 		DialTimeout: 5 * time.Second,
 		// Increase keep-alive queue capacity and message size
 		PermitWithoutStream: true,
 		Logger:              createNoOpLogger(),
 		MaxCallSendMsgSize:  10 * 1024 * 1024, // 10 MB
 	}

 	// Apply provided options to the config
 	}
 	r.endpointMgr = em

 	leaseResp, err := r.client.Grant(context.Background(), 30) //
 	if err != nil {
 		return err
 	}
 	if cfg.DialTimeout != 0 {
 		opCtx, cancel = context.WithTimeout(ctx, cfg.DialTimeout)
 	} else {
 		opCtx, cancel = context.WithTimeout(ctx, 10*time.Second)
 	}
 	defer cancel()

diff --git a/log/zap.go b/log/zap.go
 	if !ok {
 		s = _unknownLevelColor[zapcore.ErrorLevel]
 	}
 	pid := stringutil.FormatString(fmt.Sprintf("["+"PID:"+"%d"+"]", os.Getpid()), 15, true)
 	color := _levelToColor[level]
 	enc.AppendString(s)
 	enc.AppendString(color.Add(pid))
 	if l.moduleName != "" {
 		moduleName := stringutil.FormatString(l.moduleName, 25, true)
 		enc.AppendString(color.Add(moduleName))
 	}
 	if l.moduleVersion != "" {
 		moduleVersion := stringutil.FormatString(fmt.Sprintf("["+"version:"+"%s"+"]", l.moduleVersion), 17, true)
 		enc.AppendString(moduleVersion)
 	}
 }
diff --git a/mq/memamq/queue.go b/mq/memamq/queue.go
 	select {
 	case mq.taskChan <- task:
 		return nil
 	case <-time.After(time.Millisecond * 100): // Timeout to prevent deadlock/blocking
 		return errors.New("push failed: queue is full")
 	}
 }
diff --git a/s3/cont/controller.go b/s3/cont/controller.go
 			for i := 0; i < maxParts; i++ {
 				partNumbers[i] = i + 1
 			}
 			authSign, err = c.impl.AuthSign(ctx, upload.UploadID, upload.Key, time.Hour*24, partNumbers)
 			if err != nil {
 				return nil, err
 			}
 	if err != nil {
 		return nil, err
 	}
 	if md5Sum := md5.Sum([]byte(strings.Join(partHashs, partSeparator))); hex.EncodeToString(md5Sum[:]) != upload.Hash {
 		return nil, errors.New("md5 mismatching")
 	}
 	if info, err := c.StatObject(ctx, c.HashPath(upload.Hash)); err == nil {
diff --git a/utils/mageutil/sys.go b/utils/mageutil/sys.go
 package mageutil

 import (
 	"fmt"
	func NewSvcDiscoveryRegistry(rootDirectory string, endpoints []string, options ...ZkOption) (*SvcDiscoveryRegistryImpl, error) {
	cfg := clientv3.Config{
	Endpoints: endpoints,
	DialTimeout: 5 * time.Second,
Check failure on line 58 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 5, in <assign> detected (gomnd)` Check failure on line 58 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 5, in <assign> detected (gomnd)`
	// Increase keep-alive queue capacity and message size
	PermitWithoutStream: true,
	Logger: createNoOpLogger(),
	MaxCallSendMsgSize: 10 * 1024 * 1024, // 10 MB
Check failure on line 62 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 1024, in <assign> detected (gomnd)` Check failure on line 62 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 1024, in <assign> detected (gomnd)`
	}

	// Apply provided options to the config
	}
	r.endpointMgr = em

	leaseResp, err := r.client.Grant(context.Background(), 30) //
Check failure on line 180 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 30, in <argument> detected (gomnd)` Check failure on line 180 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 30, in <argument> detected (gomnd)`
	if err != nil {
	return err
	}
	if cfg.DialTimeout != 0 {
	opCtx, cancel = context.WithTimeout(ctx, cfg.DialTimeout)
	} else {
	opCtx, cancel = context.WithTimeout(ctx, 10*time.Second)
Check failure on line 295 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 10, in <argument> detected (gomnd)` Check failure on line 295 in discovery/etcd/etcd.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 10, in <argument> detected (gomnd)`
	}
	defer cancel()
	if !ok {
	s = _unknownLevelColor[zapcore.ErrorLevel]
	}
	pid := stringutil.FormatString(fmt.Sprintf("["+"PID:"+"%d"+"]", os.Getpid()), 15, true)
Check failure on line 305 in log/zap.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 15, in <argument> detected (gomnd)` Check failure on line 305 in log/zap.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 15, in <argument> detected (gomnd)`
	color := _levelToColor[level]
	enc.AppendString(s)
	enc.AppendString(color.Add(pid))
	if l.moduleName != "" {
	moduleName := stringutil.FormatString(l.moduleName, 25, true)
Check failure on line 310 in log/zap.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 25, in <argument> detected (gomnd)` Check failure on line 310 in log/zap.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 25, in <argument> detected (gomnd)`
	enc.AppendString(color.Add(moduleName))
	}
	if l.moduleVersion != "" {
	moduleVersion := stringutil.FormatString(fmt.Sprintf("["+"version:"+"%s"+"]", l.moduleVersion), 17, true)
Check failure on line 314 in log/zap.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 17, in <argument> detected (gomnd)` Check failure on line 314 in log/zap.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 17, in <argument> detected (gomnd)`
	enc.AppendString(moduleVersion)
	}
	}
	select {
	case mq.taskChan <- task:
	return nil
	case <-time.After(time.Millisecond * 100): // Timeout to prevent deadlock/blocking
Check failure on line 60 in mq/memamq/queue.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 100, in <argument> detected (gomnd)` Check failure on line 60 in mq/memamq/queue.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 100, in <argument> detected (gomnd)`
	return errors.New("push failed: queue is full")
	}
	}
	for i := 0; i < maxParts; i++ {
	partNumbers[i] = i + 1
	}
	authSign, err = c.impl.AuthSign(ctx, upload.UploadID, upload.Key, time.Hour*24, partNumbers)
Check failure on line 152 in s3/cont/controller.go GitHub Actions / Test with go 1.21 on ubuntu-latest `Magic number: 24, in <argument> detected (gomnd)` Check failure on line 152 in s3/cont/controller.go GitHub Actions / Test with go 1.22 on ubuntu-latest `Magic number: 24, in <argument> detected (gomnd)`
	if err != nil {
	return nil, err
	}
	if err != nil {
	return nil, err
	}
	if md5Sum := md5.Sum([]byte(strings.Join(partHashs, partSeparator))); hex.EncodeToString(md5Sum[:]) != upload.Hash {
Check failure on line 177 in s3/cont/controller.go GitHub Actions / Test with go 1.21 on ubuntu-latest `G401: Use of weak cryptographic primitive (gosec)` Check failure on line 177 in s3/cont/controller.go GitHub Actions / Test with go 1.22 on ubuntu-latest `G401: Use of weak cryptographic primitive (gosec)`
	return nil, errors.New("md5 mismatching")
	}
	if info, err := c.StatObject(ctx, c.HashPath(upload.Hash)); err == nil {
	package mageutil
Check failure on line 1 in utils/mageutil/sys.go GitHub Actions / comment-language-detector `Lines [63]`

	import (
	"fmt"