ci: updated workflow dependency versions

Author: MarvinJWendt

.github/workflows/atomicgo.yml

@@ -23,17 +23,20 @@ jobs:
   test:
     name: Test Go Code
     runs-on: ${{ matrix.os }}
+    permissions:
+      contents: read
+      id-token: write
     strategy:
       matrix:
         os: [ubuntu-latest, windows-latest, macos-latest]
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v6
         with:
           go-version: stable
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Get dependencies
         run: go get -v -t -d ./...
@@ -45,7 +48,11 @@ jobs:
         run: go test -coverprofile="coverage.txt" -covermode=atomic -v -p 1 .
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v6
+        with:
+          files: ./coverage.txt
+          fail_ci_if_error: true
+          use_oidc: true
 
   build:
     name: Build AtomicGo Package
@@ -57,7 +64,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
@@ -68,7 +75,7 @@ jobs:
           wget https://raw.githubusercontent.com/atomicgo/atomicgo/main/templates/readme.md -O .templates/readme.md
 
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v6
         with:
           go-version: stable
 

.github/workflows/go.yml

@@ -13,6 +13,10 @@ name: Go
 on:
   pull_request:
 
+permissions:
+  contents: read
+  id-token: write
+
 jobs:
   test:
     name: Test Go code
@@ -22,12 +26,12 @@ jobs:
         os: [ubuntu-latest, windows-latest, macos-latest]
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v6
         with:
           go-version: stable
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v6
 
       - name: Get dependencies
         run: go get -v -t -d ./...
@@ -39,4 +43,8 @@ jobs:
         run: go test -coverprofile="coverage.txt" -covermode=atomic -v -p 1 .
 
       - name: Upload coverage to Codecov
-        uses: codecov/codecov-action@v1
+        uses: codecov/codecov-action@v6
+        with:
+          files: ./coverage.txt
+          fail_ci_if_error: true
+          use_oidc: ${{ github.event.pull_request.head.repo.full_name == github.repository }}

.github/workflows/release.yml

@@ -13,19 +13,19 @@ name: Release
 on:
   push:
     tags:
-      - "*"
+      - "v*.*.*"
 
 permissions:
   contents: write
 
 jobs:
-  release:
-    name: Release pushed tag
+  build:
     runs-on: ubuntu-latest
-
     steps:
+      - name: Checkout
+        uses: actions/checkout@v6
       - name: Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@v3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           generate_release_notes: true