Merge pull request #290 from crazy-max/bot/upx-releases-json

Update `.github/upx-releases.json`
Merge pull request #291 from crazy-max/dependabot/github_actions/docker/bake-action-7.0.0
2026-04-14 10:32:59 -06:00 · 2026-03-29 01:22:14 +01:00 · 2026-03-29 01:21:56 +01:00 · 2026-03-29 01:21:46 +01:00 · 2026-03-29 01:21:28 +01:00 · 2026-03-29 01:21:19 +01:00
10 changed files with 115 additions and 59 deletions
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,6 +4,8 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    cooldown:
+      default-days: 2
    labels:
      - "kind/dependencies"
      - "bot"
@@ -11,6 +13,8 @@ updates:
    directory: "/"
    schedule:
      interval: "daily"
+    cooldown:
+      default-days: 2
    versioning-strategy: "increase"
    allow:
      - dependency-type: "production"
--- a/.github/upx-releases.json
+++ b/.github/upx-releases.json
@@ -1,23 +1,44 @@
 {
  "latest": {
-    "id": 274789817,
-    "tag_name": "v5.1.0",
-    "html_url": "https://github.com/upx/upx/releases/tag/v5.1.0",
+    "id": 293545149,
+    "tag_name": "v5.1.1",
+    "html_url": "https://github.com/upx/upx/releases/tag/v5.1.1",
    "assets": [
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-amd64_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-arm64_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-arm_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-armeb_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-dos.zip",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-i386_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-mips_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-mipsel_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-powerpc64le_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-powerpc_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-riscv64_linux.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-src.tar.xz",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-win32.zip",
-      "https://github.com/upx/upx/releases/download/v5.1.0/upx-5.1.0-win64.zip"
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-amd64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-arm64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-arm_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-armeb_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-dos.zip",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-i386_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-mips_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-mipsel_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-powerpc64le_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-powerpc_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-riscv64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-src.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-win32.zip",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-win64.zip"
+    ]
+  },
+  "v5.1.1": {
+    "id": 293545149,
+    "tag_name": "v5.1.1",
+    "html_url": "https://github.com/upx/upx/releases/tag/v5.1.1",
+    "assets": [
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-amd64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-arm64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-arm_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-armeb_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-dos.zip",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-i386_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-mips_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-mipsel_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-powerpc64le_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-powerpc_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-riscv64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-src.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-win32.zip",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-win64.zip"
    ]
  },
  "v5.1.0": {
@@ -281,6 +302,27 @@
      "https://github.com/upx/upx/releases/download/v4.0.0/upx-4.0.0-win64.zip"
    ]
  },
+  "edge": {
+    "id": 293545149,
+    "tag_name": "v5.1.1",
+    "html_url": "https://github.com/upx/upx/releases/tag/v5.1.1",
+    "assets": [
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-amd64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-arm64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-arm_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-armeb_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-dos.zip",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-i386_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-mips_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-mipsel_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-powerpc64le_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-powerpc_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-riscv64_linux.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-src.tar.xz",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-win32.zip",
+      "https://github.com/upx/upx/releases/download/v5.1.1/upx-5.1.1-win64.zip"
+    ]
+  },
  "v3.99": {
    "id": 81217748,
    "tag_name": "v3.99",
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -4,7 +4,6 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
 permissions:
  contents: read

@@ -18,8 +17,6 @@ on:
    tags:
      - 'v*'
  pull_request:
-    paths-ignore:
-      - '.github/upx-releases.json'

 jobs:
  ci:
@@ -36,7 +33,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download files
        shell: bash
@@ -73,7 +70,7 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: UPX
        uses: ./
--- a/.github/workflows/labels.yml
+++ b/.github/workflows/labels.yml
@@ -4,7 +4,6 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
 permissions:
  contents: read

@@ -24,16 +23,14 @@ jobs:
  labeler:
    runs-on: ubuntu-latest
    permissions:
-      # same as global permissions
-      contents: read
-      # required to update labels
-      issues: write
+      contents: read # same as global permissions
+      issues: write # required to update labels
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Run Labeler
-        uses: crazy-max/ghaction-github-labeler@v5
+        uses: crazy-max/ghaction-github-labeler@548a7c3603594ec17c819e1239f281a3b801ab4d # v6.0.0
        with:
          dry-run: ${{ github.event_name == 'pull_request' }}
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -4,7 +4,6 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
 permissions:
  contents: read

@@ -14,8 +13,6 @@ on:
      - 'master'
      - 'releases/v*'
  pull_request:
-    paths-ignore:
-      - '.github/upx-releases.json'

 jobs:
  test:
@@ -23,16 +20,16 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Test
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
        with:
          source: .
          targets: test
      -
        name: Upload coverage
-        uses: codecov/codecov-action@v5
+        uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
        with:
          files: ./coverage/clover.xml
          token: ${{ secrets.CODECOV_TOKEN }}
--- a/.github/workflows/upx-releases-json.yml
+++ b/.github/workflows/upx-releases-json.yml
@@ -4,7 +4,6 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
 permissions:
  contents: read

@@ -16,23 +15,19 @@ on:
    branches:
      - 'master'
  pull_request:
-    paths-ignore:
-      - '.github/upx-releases.json'

 jobs:
  generate:
-    uses: crazy-max/.github/.github/workflows/releases-json.yml@fa6141aedf23596fb8bdcceab9cce8dadaa31bd9
+    uses: crazy-max/.github/.github/workflows/releases-json.yml@bb328ea508cd6a89d0865555ddbeb148e5724aed # v1.3.0
    with:
      repository: upx/upx
      artifact_name: upx-releases-json
      filename: upx-releases.json
-    secrets: inherit

  open-pr:
    runs-on: ubuntu-22.04
    if: github.event_name != 'pull_request'
    permissions:
-      # required to create PR
      contents: write
      pull-requests: write
    needs:
@@ -40,10 +35,10 @@ jobs:
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
        name: Download
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
        with:
          name: upx-releases-json
          path: .github
@@ -53,7 +48,7 @@ jobs:
          git add -A .
      -
        name: Create PR
-        uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f  # v7.0.5
+        uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
        with:
          base: master
          branch: bot/upx-releases-json
--- a/.github/workflows/validate.yml
+++ b/.github/workflows/validate.yml
@@ -4,7 +4,6 @@ concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

-# https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
 permissions:
  contents: read

@@ -21,15 +20,15 @@ jobs:
  prepare:
    runs-on: ubuntu-latest
    outputs:
-      targets: ${{ steps.generate.outputs.targets }}
+      matrix: ${{ steps.generate.outputs.matrix }}
    steps:
      -
        name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
      -
-        name: List targets
+        name: Generate matrix
        id: generate
-        uses: docker/bake-action/subaction/list-targets@v6
+        uses: docker/bake-action/subaction/matrix@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
        with:
          target: validate

@@ -40,10 +39,10 @@ jobs:
    strategy:
      fail-fast: false
      matrix:
-        target: ${{ fromJson(needs.prepare.outputs.targets) }}
+        include: ${{ fromJson(needs.prepare.outputs.matrix) }}
    steps:
      -
        name: Validate
-        uses: docker/bake-action@v6
+        uses: docker/bake-action@82490499d2e5613fcead7e128237ef0b0ea210f7 # v7.0.0
        with:
          targets: ${{ matrix.target }}
--- a/.github/workflows/zizmor.yml
+++ b/.github/workflows/zizmor.yml
@@ -0,0 +1,27 @@
+name: zizmor
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+      - 'releases/v*'
+  pull_request:
+
+jobs:
+  run:
+    uses: crazy-max/.github/.github/workflows/zizmor.yml@bbd31df64ee0f097a02f12495f541f9236f18c46 # v1.2.0
+    permissions:
+      contents: read
+      security-events: write
+    with:
+      min-severity: medium
+      min-confidence: medium
+      persona: pedantic
--- a/.github/zizmor.yml
+++ b/.github/zizmor.yml
@@ -0,0 +1,4 @@
+# https://docs.zizmor.sh/configuration/
+rules:
+  secrets-outside-env:
+    disable: true
--- a/README.md
+++ b/README.md
@@ -32,12 +32,9 @@ jobs:
  upx:
    runs-on: ubuntu-latest
    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v4
      -
        name: Run UPX
-        uses: crazy-max/ghaction-upx@v3
+        uses: crazy-max/ghaction-upx@v4
        with:
          version: latest
          files: |
@@ -57,12 +54,9 @@ jobs:
  upx:
    runs-on: ubuntu-latest
    steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v4
      -
        name: Install UPX
-        uses: crazy-max/ghaction-upx@v3
+        uses: crazy-max/ghaction-upx@v4
        with:
          install-only: true
      -
Author	SHA1	Message	Date
CrazyMax	6cf4739545	Merge pull request #290 from crazy-max/bot/upx-releases-json Update `.github/upx-releases.json`	2026-03-29 01:22:14 +01:00
CrazyMax	04b34cdacb	Merge pull request #291 from crazy-max/dependabot/github_actions/docker/bake-action-7.0.0 chore(deps): bump docker/bake-action from 6.10.0 to 7.0.0	2026-03-29 01:21:56 +01:00
CrazyMax	4a74ed7bac	Merge pull request #292 from crazy-max/dependabot/github_actions/actions/download-artifact-8.0.1 chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1	2026-03-29 01:21:46 +01:00
CrazyMax	d6e172b480	Merge pull request #293 from crazy-max/dependabot/github_actions/crazy-max/ghaction-github-labeler-6.0.0 chore(deps): bump crazy-max/ghaction-github-labeler from 5.3.0 to 6.0.0	2026-03-29 01:21:28 +01:00
CrazyMax	cb129cdb1c	Merge pull request #294 from crazy-max/dependabot/github_actions/peter-evans/create-pull-request-8.1.0 chore(deps): bump peter-evans/create-pull-request from 7.0.5 to 8.1.0	2026-03-29 01:21:19 +01:00
CrazyMax	a8cedf0ed1	Merge pull request #295 from crazy-max/dependabot/github_actions/actions/checkout-6.0.2 chore(deps): bump actions/checkout from 4.3.1 to 6.0.2	2026-03-29 01:21:09 +01:00
dependabot[bot]	5c4e13006c	chore(deps): bump actions/checkout from 4.3.1 to 6.0.2 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4.3.1...de0fac2e4500dabe0009e67214ff5f5447ce83dd) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 22:08:38 +00:00
dependabot[bot]	6a9dc6eb07	chore(deps): bump peter-evans/create-pull-request from 7.0.5 to 8.1.0 Bumps [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) from 7.0.5 to 8.1.0. - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](`5e914681df...c0f553fe54`) --- updated-dependencies: - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 22:08:29 +00:00
dependabot[bot]	ccb36ea028	chore(deps): bump crazy-max/ghaction-github-labeler from 5.3.0 to 6.0.0 Bumps [crazy-max/ghaction-github-labeler](https://github.com/crazy-max/ghaction-github-labeler) from 5.3.0 to 6.0.0. - [Release notes](https://github.com/crazy-max/ghaction-github-labeler/releases) - [Commits](`24d110aa46...548a7c3603`) --- updated-dependencies: - dependency-name: crazy-max/ghaction-github-labeler dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 22:08:22 +00:00
dependabot[bot]	dd548044af	chore(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4.3.0 to 8.0.1. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](`d3f86a106a...3e5f45b2cf`) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 22:08:17 +00:00
dependabot[bot]	5f767a5ad0	chore(deps): bump docker/bake-action from 6.10.0 to 7.0.0 Bumps [docker/bake-action](https://github.com/docker/bake-action) from 6.10.0 to 7.0.0. - [Release notes](https://github.com/docker/bake-action/releases) - [Commits](https://github.com/docker/bake-action/compare/v6.10.0...82490499d2e5613fcead7e128237ef0b0ea210f7) --- updated-dependencies: - dependency-name: docker/bake-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-03-27 22:08:06 +00:00
crazy-max	284106be92	update .github/upx-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-03-27 22:07:33 +00:00
CrazyMax	de3bb4857d	Merge pull request #289 from crazy-max/zizmor zizmor workflow	2026-03-27 23:07:09 +01:00
CrazyMax	81ddf9b7fe	fix zizmor findings	2026-03-27 23:06:04 +01:00
CrazyMax	d3c63954bf	zizmor workflow	2026-03-27 22:38:59 +01:00
CrazyMax	63211a80a3	Merge pull request #283 from crazy-max/bot/upx-releases-json Update `.github/upx-releases.json`	2026-03-06 02:40:19 +01:00
crazy-max	b372fe4809	update .github/upx-releases.json Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>	2026-03-06 00:15:27 +00:00
CrazyMax	d6af38d296	Merge pull request #282 from crazy-max/update-readme readme: update to v4	2026-03-02 23:35:30 +01:00
CrazyMax	12339ed48f	readme: update to v4	2026-03-02 23:34:27 +01:00