Merge pull request #27 from ko-build/dependabot/github_actions/all-edf2abb101

Bumps the all group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4.1.5 to 4.1.6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](44c2b7a8a4...a5ac7e51b4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>

.github/dependabot.yml

@@ -0,0 +1,23 @@
+---
+version: 2
+updates:
+  - package-ecosystem: gomod
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10
+    groups:
+      all:
+        update-types:
+          - "patch"
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    open-pull-requests-limit: 10
+    groups:
+      all:
+        update-types:
+          - "minor"
+          - "patch"

.github/workflows/ci.yaml

@@ -0,0 +1,55 @@
+name: ci
+
+on:
+  pull_request:
+
+jobs:
+  test-ko-action:
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
+        with:
+          go-version: '1.22'
+          check-latest: 'true'
+
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
+
+      # Minimal publish
+      - uses: ./
+
+      - run: ko publish --bare ./
+        if: ${{ github.event_name == 'pull_request' }}
+        env:
+          KO_DOCKER_REPO: ko.local
+
+      - name: Install old release
+        uses: ./
+        with:
+          version: v0.8.0
+
+      - name: Check installed version
+        run: ko version | grep 0.8.0
+
+      - name: Install from tip
+        uses: ./
+        with:
+          version: tip
+
+      - name: Check installed version (tip)
+        run: |
+          sudo rm /usr/local/bin/ko # Uninstall previous versions.
+          ko version
+
+      # If KO_DOCKER_REPO is set during setup, it's set for future steps.
+      - name: Pre-set KO_DOCKER_REPO
+        uses: ./
+        env:
+          KO_DOCKER_REPO: already-set
+
+      - name: Check pre-set KO_DOCKER_REPO
+        run: |
+          if [[ "${KO_DOCKER_REPO}" != "already-set" ]]; then
+            echo "${KO_DOCKER_REPO} != already-set"
+            exit 1
+          fi

.github/workflows/use-action.yaml

@@ -2,30 +2,39 @@ name: Use Action
 
 on:
   push:
-    branches: ['main']
+    branches:
+      - 'main'
 
 jobs:
   use-action:
     name: Use Action
+
     strategy:
       matrix:
-        platform: [ubuntu-latest, macos-latest]
+        platform:
+          - ubuntu-latest
+          - macos-latest
+
     runs-on: ${{ matrix.platform }}
 
     steps:
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
         with:
-          go-version: 1.18
-      - uses: actions/checkout@v2
+          go-version: '1.22'
+          check-latest: 'true'
+
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
 
       # Minimal publish
       - uses: ko-build/setup-ko@main
+
       - run: ko publish --bare ./
 
       - name: Install old release
         uses: ko-build/setup-ko@main
         with:
           version: v0.8.0
+
       - name: Check installed version
         run: ko version | grep 0.8.0
 
@@ -33,6 +42,7 @@ jobs:
         uses: ko-build/setup-ko@main
         with:
           version: tip
+
       - name: Check installed version (tip)
         run: |
           sudo rm /usr/local/bin/ko # Uninstall previous versions.
@@ -43,6 +53,7 @@ jobs:
         uses: ko-build/setup-ko@main
         env:
           KO_DOCKER_REPO: already-set
+
       - name: Check pre-set KO_DOCKER_REPO
         run: |
           if [[ "${KO_DOCKER_REPO}" != "already-set" ]]; then

README.md

@@ -3,7 +3,7 @@
 [![Build](https://github.com/ko-build/setup-ko/actions/workflows/use-action.yaml/badge.svg)](https://github.com/ko-build/setup-ko/actions/workflows/use-action.yaml)
 
 > :warning: Note: `ko` recently [moved to its own GitHub org](https://github.com/ko-build/ko/issues/791), which broke `setup-ko@v0.5` if the `ko` version wasn't specified.
-> 
+>
 > To fix this, either upgrade to [`setup-ko@v0.6`](https://github.com/ko-build/setup-ko/releases/tag/v0.6) or specify `version`
 
 ## Example usage
@@ -20,10 +20,10 @@ jobs:
     name: Publish
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v4
         with:
           go-version: '1.20.x'
-      - uses: actions/checkout@v2
+      - uses: actions/checkout@v3
 
       - uses: ko-build/setup-ko@v0.6
       - run: ko build
@@ -47,7 +47,7 @@ You can select a version with the `version` parameter:
 ```yaml
 - uses: ko-build/setup-ko@v0.6
   with:
-    version: v0.11.2
+    version: v0.14.1
 ```
 
 To build and install `ko` from source using `go install`, specify `version: tip`.
@@ -86,17 +86,18 @@ name: Publish Release YAML
 
 on:
   release:
-    types: ['created']
+    types:
+      - 'created'
 
 jobs:
   publish-release-yaml:
     name: Publish Release YAML
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v2
+      - uses: actions/setup-go@v4
         with:
-          go-version: '1.20.x'
-      - uses: actions/checkout@v2
+          go-version: '1.20'
+      - uses: actions/checkout@v3
       - uses: ko-build/setup-ko@v0.6
 
       - name: Generate and upload release.yaml

action.yml

@@ -5,7 +5,7 @@ branding:
   color: green
 inputs:
   version:
-    description: 'Version of ko to install (tip, latest-release, v0.8.2, etc.)'
+    description: 'Version of ko to install (tip, latest-release, v0.14.1, etc.)'
     required: true
     default: 'latest-release'
 runs:

go.mod

@@ -1,3 +1,3 @@
 module github.com/ko-build/setup-ko
 
-go 1.16
+go 1.22