Update GitHub Actions

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change	Pending
actions/setup-go	action	digest	4a36011 → 924ae3a
actions/setup-go	action	minor	v6.4.0 → v6.5.0
docker/login-action	action	digest	650006c → af1e73f
golangci/golangci-lint	uses-with	minor	v2.9.0 → v2.12.2
golangci/golangci-lint-action	action	minor	v9.2.0 → v9.3.0
rancher-eio/read-vault-secrets	action	digest	7282bf9 → 0da8515
rancher/ecm-distro-tools	action	minor	v0.69.4 → v0.75.0	v0.75.1
rancher/renovate-config	action	digest	ca9c958 → de9ca81
updatecli/updatecli-action	action	minor	v3.2.0 → v3.3.0	v3.4.0

---

Release Notes

actions/setup-go (actions/setup-go)

v6.5.0

Compare Source

What's Changed

Dependency update

• Upgrade actions dependencies by @​priyagupta108 with @​Copilot in #​744
• Upgrade @​types/node and typescript-eslint dependencies to resolve npm audit findings by @​HarithaVattikuti in #​755
• Upgrade @​actions/cache to 5.1.0, log cache write denied by @​jasongin in #​758
• Upgrade version to 6.5.0 in package.json and package-lock.json by @​HarithaVattikuti in #​762

New Contributors

• @​priyagupta108 with @​Copilot made their first contribution in #​744
• @​jasongin made their first contribution in #​758

Full Changelog: actions/setup-go@v6...v6.5.0

golangci/golangci-lint (golangci/golangci-lint)

v2.12.2

Compare Source

Released on 2026-05-06

1. Linters bug fixes
   • gomodguard_v2: fix blocked configuration
   • gomodguard_v2: from 2.1.0 to 2.1.3
   • iface: from 1.4.1 to 1.4.2

v2.12.1

Compare Source

Released on 2026-05-01

1. Linters bug fixes
   • gomodguard_v2: fix panic with migration suggestion
2. Misc.
   • fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Compare Source

Released on 2026-05-01

1. New linters
   • Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter
2. Linters new features or changes
   • dupl: from f665c8d to c99c5cf (extended detection)
   • funcorder: from 0.5.0 to 0.6.0 (new option: function)
   • goconst: add an option to ignore strings from tests
   • goconst: from 1.8.2 to 1.10.0 (extended detection)
   • gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
   • gosec: from 619ce21 to 2.26.1 (new checks: G124, G708, G709, G710)
   • govet: add inline analyzer
   • makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
   • paralleltest: expose checkcleanup option
   • sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
   • wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
3. Linters bug fixes
   • forbidigo: from 2.3.0 to 2.3.1
   • godot: from 1.5.4 to 1.5.6
   • govet-modernize: from 0.43.0 to 0.44.0
   • ireturn: from 0.4.0 to 0.4.1
   • rowserrcheck: from 1.1.1 to c5f79b8
4. Misc.
   • Decrease cache entropy
   • Embed the JSON schema in the binary
   • Filter env vars when cloning the repository with the custom command

v2.11.4

Compare Source

Released on 2026-03-22

1. Linters bug fixes
   • govet-modernize: from 0.42.0 to 0.43.0
   • noctx: from 0.5.0 to 0.5.1
   • sqlclosecheck: from 0.5.1 to 0.6.0

v2.11.3

Compare Source

Released on 2026-03-10

1. Linters bug fixes
   • gosec: from v2.24.7 to 619ce21

v2.11.2

Compare Source

Released on 2026-03-07

1. Fixes
   • fmt: fix error when using the fmt command with explicit paths.

v2.11.1

Compare Source

Released on 2026-03-06

Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published.

This release contains the same things as v2.11.0.

v2.11.0

Compare Source

Released on 2026-03-06

1. Linters new features or changes
   • errcheck: from 1.9.0 to 1.10.0 (exclude crypto/rand.Read by default)
   • gosec: from 2.23.0 to 2.24.6 (new rules: G113, G118, G119, G120, G121, G122, G123, G408, G707)
   • noctx: from 0.4.0 to 0.5.0 (new detection: httptest.NewRequestWithContext)
   • prealloc: from 1.0.2 to 1.1.0
   • revive: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from var-naming to a new rule package-naming)
2. Linters bug fixes
   • gocognit: from 1.2.0 to 1.2.1
   • gosec: from 2.24.6 to 2.24.7
   • unqueryvet: from 1.5.3 to 1.5.4

v2.10.1

Compare Source

Released on 2026-02-17

1. Fixes
   • buildssa panic

v2.10.0

Compare Source

Released on 2026-02-17

1. Linters new features or changes
   • ginkgolinter: from 0.22.0 to 0.23.0
   • gosec: from 2.22.11 to 2.23.0 (new rules: G117, G602, G701, G702, G703, G704, G705, G706)
   • staticcheck: from 0.6.1 to 0.7.0
2. Linters bug fixes
   • godoclint: from 0.11.1 to 0.11.2

golangci/golangci-lint-action (golangci/golangci-lint-action)

v9.3.0

Compare Source

What's Changed

Changes

• feat: add no-run-logs-group as experimental option by @​ldez in #​1403

Dependencies

• build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-actions group by @​dependabot[bot] in #​1395
• build(deps): bump tmp from 0.2.5 to 0.2.6 by @​dependabot[bot] in #​1397
• build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-actions group by @​dependabot[bot] in #​1398
• build(deps): bump tmp from 0.2.6 to 0.2.7 by @​dependabot[bot] in #​1399
• build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 by @​dependabot[bot] in #​1400

Full Changelog: golangci/golangci-lint-action@v9.2.1...v9.3.0

v9.2.1

Compare Source

What's Changed

IMPORTANT: this is the first immutable release.

Changes

• chore: improve workflows by @​ldez in #​1394

Dependencies

• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1325
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1326
• build(deps): bump the dependencies group with 4 updates by @​dependabot[bot] in #​1327
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1328
• build(deps): bump @​types/node from 25.0.2 to 25.0.3 in the dependencies group by @​dependabot[bot] in #​1329
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1330
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1332
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1333
• build(deps): bump the dependencies group with 6 updates by @​dependabot[bot] in #​1334
• build(deps-dev): bump the dev-dependencies group with 4 updates by @​dependabot[bot] in #​1335
• build(deps): bump the dependencies group with 2 updates by @​dependabot[bot] in #​1336
• build(deps-dev): bump the dev-dependencies group with 3 updates by @​dependabot[bot] in #​1337
• build(deps): bump @​types/node from 25.0.9 to 25.0.10 in the dependencies group by @​dependabot[bot] in #​1338
• build(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 by @​dependabot[bot] in #​1339
• build(deps-dev): bump the dev-dependencies group with 2 updates by @​dependabot[bot] in #​1340
• build(deps-dev): bump the dev-dependencies group across 1 directory with 3 updates by @​dependabot[bot] in #​1344
• build(deps): bump fast-xml-parser from 5.3.4 to 5.3.6 by @​dependabot[bot] in #​1346
• build(deps): bump minimatch by @​dependabot[bot] in #​1348
• build(deps): bump minimatch from 3.1.3 to 3.1.5 by @​dependabot[bot] in #​1350
• build(deps): bump fast-xml-parser from 5.3.6 to 5.4.1 by @​dependabot[bot] in #​1351
• build(deps): bump fast-xml-parser from 5.4.1 to 5.5.6 by @​dependabot[bot] in #​1357
• build(deps): bump fast-xml-parser from 5.5.6 to 5.5.7 by @​dependabot[bot] in #​1358
• build(deps-dev): bump flatted from 3.3.3 to 3.4.2 by @​dependabot[bot] in #​1359
• build(deps): bump picomatch from 4.0.3 to 4.0.4 by @​dependabot[bot] in #​1364
• build(deps): bump yaml from 2.8.2 to 2.8.3 by @​dependabot[bot] in #​1365
• build(deps): bump brace-expansion by @​dependabot[bot] in #​1370
• build(deps-dev): bump the dev-dependencies group across 1 directory with 7 updates by @​ldez in #​1374
• build(deps): bump github/codeql-action from 4 to 4.35.2 by @​dependabot[bot] in #​1384
• build(deps): bump fast-xml-builder from 1.1.5 to 1.2.0 by @​dependabot[bot] in #​1386
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @​dependabot[bot] in #​1389
• build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @​dependabot[bot] in #​1391

Full Changelog: golangci/golangci-lint-action@v9.2.0...v9.2.1

rancher/ecm-distro-tools (rancher/ecm-distro-tools)

v0.75.0

Compare Source

What's Changed

• chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.104.0 by @​renovate-rancher[bot] in #​996
• Add distros workflow automation by @​rafaelbreno in #​992
• add non critical cli tool for comparing charts by @​briandowns in #​998
• update librattler api by @​briandowns in #​999
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.26 by @​renovate-rancher[bot] in #​1000
• Update references workflow to support matrix by @​rafaelbreno in #​1002
• Add optional trigger-rke2 field to k3s update workflow by @​rafaelbreno in #​1004
• fix images locations unauthorized error and remove create tag workflow by @​tashima42 in #​1013

Full Changelog: rancher/ecm-distro-tools@v0.74.4...v0.75.0

v0.74.4

Compare Source

What's Changed

• Add release update rke2 references [version] command by @​rafaelbreno in #​975
• Bump slsactl to v0.1.35 by @​dereknola in #​989
• add release ecm distro tools action by @​tashima42 in #​990
• rollback pin version by @​tashima42 in #​995
• Update zizmorcore/zizmor-action action to v0.5.7 by @​renovate-rancher[bot] in #​991
• Update actions/checkout action to v7 by @​renovate-rancher[bot] in #​988
• Update rancher/ecm-distro-tools action to v0.74.3 by @​renovate-rancher[bot] in #​987
• Update docker/setup-qemu-action action to v4.1.0 by @​renovate-rancher[bot] in #​986
• Update module github.com/google/go-containerregistry to v0.21.7 by @​renovate-rancher[bot] in #​985
• Update docker/setup-buildx-action action to v4.1.0 by @​renovate-rancher[bot] in #​983
• Update docker/login-action action to v4.2.0 by @​renovate-rancher[bot] in #​982
• Update actions/setup-go digest to 924ae3a by @​renovate-rancher[bot] in #​980
• Update module github.com/aws/aws-sdk-go-v2/config to v1.32.25 by @​renovate-rancher[bot] in #​976

Full Changelog: rancher/ecm-distro-tools@v0.74.3...v0.74.4

v0.74.3

Compare Source

What's Changed

• chore(deps): update dependency mikefarah/yq to v4.53.3 by @​renovate-rancher[bot] in #​967
• chore(deps): update golang.org/x dependencies by @​renovate-rancher[bot] in #​966
• chore(deps): update github actions by @​renovate-rancher[bot] in #​962
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.24 by @​renovate-rancher[bot] in #​961
• install action: use /usr/local/bin by default by @​tashima42 in #​978

Full Changelog: rancher/ecm-distro-tools@v0.74.2...v0.74.3

v0.74.2

Compare Source

What's Changed

• fix ecm distro tools install path by @​tashima42 in #​973
• Add conditional to check if Auth is nil by @​rafaelbreno in #​974

Full Changelog: rancher/ecm-distro-tools@v0.74.1...v0.74.2

v0.74.1

Compare Source

What's Changed

• Add conditional to read GITHUB_TOKEN from env by @​rafaelbreno in #​969

Full Changelog: rancher/ecm-distro-tools@v0.74.0...v0.74.1

v0.74.0

Compare Source

What's Changed

• Add release stats cve command by @​rafaelbreno in #​941

Full Changelog: rancher/ecm-distro-tools@v0.73.2...v0.74.0

v0.73.2

Compare Source

What's Changed

• chore(deps): update github actions by @​renovate-rancher[bot] in #​955
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.20 by @​renovate-rancher[bot] in #​959

Full Changelog: rancher/ecm-distro-tools@v0.73.0...v0.73.2

v0.73.1

Compare Source

v0.73.0

Compare Source

v0.72.0

Compare Source

What's Changed

• add inspect button to redirect to sbom viewer by @​tashima42 in #​949
• chore(deps): update module github.com/go-git/go-git/v5 to v5.19.1 [security] by @​renovate-rancher[bot] in #​953
• chore(deps): update rancher/ecm-distro-tools action to v0.69.2 by @​renovate-rancher[bot] in #​954
• chore(deps): update module github.com/aws/aws-sdk-go-v2/config to v1.32.18 by @​renovate-rancher[bot] in #​917

Full Changelog: rancher/ecm-distro-tools@v0.71.0...v0.72.0

v0.71.0

Compare Source

What's Changed

• Specify slsactl version to be able to consume desired version by @​furkatgofurov7 in #​940
• start code clean up and remove unused code by @​briandowns in #​939
• fix linter warnings and remove rke2_release command by @​tashima42 in #​944
• chore(deps): update golang.org/x dependencies by @​renovate-rancher[bot] in #​948
• chore(deps): update module github.com/google/go-containerregistry to v0.21.6 by @​renovate-rancher[bot] in #​945
• chore(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.101.0 by @​renovate-rancher[bot] in #​928
• chore(deps): update module github.com/masterminds/semver/v3 to v3.5.0 by @​renovate-rancher[bot] in #​920
• chore(deps): update github actions by @​renovate-rancher[bot] in #​921
• chore(deps): update module golang.org/x/crypto to v0.52.0 [security] by @​renovate-rancher[bot] in #​942
• chore(deps): update rancher/ecm-distro-tools action to v0.69.0 by @​renovate-rancher[bot] in #​950

Full Changelog: rancher/ecm-distro-tools@v0.70.0...v0.71.0

v0.70.0

Compare Source

What's Changed

• chore: bump slsactl to v0.1.33 by @​furkatgofurov7 in #​924
• Add Tools section in Prime Ribs page by @​rafaelbreno in #​933

New Contributors

• @​furkatgofurov7 made their first contribution in #​924

Full Changelog: rancher/ecm-distro-tools@v0.69.4...v0.70.0

updatecli/updatecli-action (updatecli/updatecli-action)

v3.3.0: 🌈

Compare Source

Changes

• deps: update updatecli version to v0.118.0 @​updateclibot[bot] (#​1117)
• Bump "js-yaml" package version @​updateclibot[bot] (#​1115)
• Bump "eslint-plugin-prettier" package version @​updateclibot[bot] (#​1112)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1111)
• deps: update updatecli version to v0.117.1 @​updateclibot[bot] (#​1108)
• Bump "jest" package version @​updateclibot[bot] (#​1105)
• Bump "@​types/node" package version @​updateclibot[bot] (#​1104)

🧰 Maintenance

• deps: bump Updatecli GH action to v0.117.1 @​updateclibot[bot] (#​1109)
• deps: bump Updatecli GH action to v3.2.0 @​updateclibot[bot] (#​1103)

Contributors

@​updateclibot[bot] and updateclibot[bot]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[holyspectral]

This one again will break read-vault-secrets.