chore(deps): update actions/checkout action to v7

.gitea/workflows/build-docker-image.yml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx

.gitea/workflows/cog-check.yml

@@ -15,14 +15,14 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
 
       - name: Semver release
-        uses: cocogitto/cocogitto-action@v3
+        uses: cocogitto/cocogitto-action@v4
         with:
-          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
-          check-latest-tag-only: true
+          command: check
+          args: --from-latest-tag
           git-user: "gitea-bot"
           git-user-email: "bot@git.palkoi.net"

.gitea/workflows/cog-release.yml

@@ -1,15 +1,12 @@
 ---
 name: Cog release
 on:
-  push:
-    branches:
-      - main
   workflow_call:
-    # inputs:
-    #   check-latest-tag-only:
-    #     type: boolean
-    #     required: false
-    #     default: true
+    inputs:
+      ref:
+        type: string
+        required: false
+        default: ""
 
 jobs:
   release:
@@ -17,9 +14,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           fetch-depth: 0
+          ref: ${{ inputs.ref == '' && github.sha || inputs.ref }}
 
       - run: |
           git config user.name gitea-bot
@@ -28,20 +26,23 @@ jobs:
           git config --global user.name gitea-bot
 
       - name: Semver release
-        uses: cocogitto/cocogitto-action@v3
+        uses: cocogitto/cocogitto-action@v4
         id: release
         with:
-          release: true
+          command: bump
+          args: --auto
           git-user: "gitea-bot"
           git-user-email: "bot@git.palkoi.net"
-          check-latest-tag-only: true
-          # check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
 
       - name: Generate Changelog
-        run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md
+        id: changelog
+        uses: cocogitto/cocogitto-action@v4
+        with:
+          command: changelog
+          args: --at ${{ steps.release.outputs.version }} -t full_hash
 
       - name: Upload github release
         uses: softprops/action-gh-release@v2
         with:
-          body_path: GITHUB_CHANGELOG.md
+          body: ${{ steps.changelog.outputs.stdout }}
           tag_name: ${{ steps.release.outputs.version }}

.gitea/workflows/otf-apply.yml

@@ -27,10 +27,10 @@ jobs:
 
     steps:
       - name: Clone repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Retrieve artifacts
         id: download
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v3
         with:
           name: artifacts
       - name: Check if job errored
@@ -42,7 +42,7 @@ jobs:
             exit "$(cat exitcode)";
           fi
       - name: Clone blackbox repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         if: ${{ steps.check.outputs.code == 2 }}
         with:
           repository: xaked/blackbox

.gitea/workflows/otf-plan.yml

@@ -31,9 +31,9 @@ jobs:
           tofu_version: ${{ inputs.tofu-version }}
           cli_config_credentials_token: ${{ secrets.tf-api-token }}
       - name: Clone repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Clone blackbox repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: xaked/blackbox
           path: blackbox
@@ -77,7 +77,7 @@ jobs:
         shell: bash
         run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v3
         with:
           name: artifacts
           path: |

.gitea/workflows/release.yml

@@ -0,0 +1,12 @@
+---
+name: Cog release
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    name: Create release
+    runs-on: ubuntu-latest
+    uses: ./.gitea/workflows/cog-release.yml

.gitea/workflows/sec-blackbox-decrypt.yml

@@ -13,7 +13,7 @@ jobs:
 
     steps:
       - name: Clone blackbox repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: xaked/blackbox
           path: blackbox

.gitea/workflows/sec-checks-trivy.yml

@@ -9,7 +9,7 @@ jobs:
 
     steps:
       - name: Clone repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Run Trivy vulnerability scanner in IaC mode (LOW/MED)
         uses: aquasecurity/trivy-action@master
         with:

.gitea/workflows/sec-megalinter.yml

@@ -43,7 +43,7 @@ jobs:
     steps:
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           token: ${{ secrets.gitea-token }}
           fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
@@ -65,7 +65,7 @@ jobs:
       # Upload MegaLinter artifacts
       - name: Archive production artifacts
         if: success() || failure()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v3
         with:
           name: MegaLinter reports
           path: |

.gitea/workflows/tf-apply.yml

@@ -22,10 +22,10 @@ jobs:
 
     steps:
       - name: Clone repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Retrieve artifacts
         id: download
-        uses: actions/download-artifact@v7
+        uses: actions/download-artifact@v3
         with:
           name: artifacts
       - name: Check if job errored
@@ -37,7 +37,7 @@ jobs:
             exit "$(cat exitcode)";
           fi
       - name: Clone blackbox repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         if: ${{ steps.check.outputs.code == 2 }}
         with:
           repository: xaked/blackbox

.gitea/workflows/tf-docs.yml

@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
         with:
           ref: ${{ github.event.pull_request.head.ref }}
       - name: Install terraform docs

.gitea/workflows/tf-plan.yml

@@ -26,9 +26,9 @@ jobs:
           terraform_version: 1.7.5
           cli_config_credentials_token: ${{ secrets.tf-api-token }}
       - name: Clone repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
       - name: Clone blackbox repo
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           repository: xaked/blackbox
           path: blackbox
@@ -72,7 +72,7 @@ jobs:
         shell: bash
         run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
       - name: Upload artifacts
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v3
         with:
           name: artifacts
           path: |