PLT-332: stop using Travis secret

.github/workflows/codeql-analysis.yml

@@ -24,17 +24,17 @@ jobs:
     steps:
     - name: Configure git for private modules
       env:
-        GOPRIVATE_TOKEN: ${{secrets.TOKEN_VEND_TRAVIS}}
+        GOPRIVATE_TOKEN: ${{secrets.TOKEN_VEND_PIPELINE}}
       run: |-
         go env -w GOPRIVATE=github.com/vend/*
         git config --global url."https://${GOPRIVATE_TOKEN}@github.com/vend".insteadOf "https://github.com/vend"
     - name: Checkout repository
-      uses: actions/checkout@v2
+      uses: actions/checkout@v4
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
+      uses: github/codeql-action/init@v2
       with:
         languages: ${{ matrix.language }}
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
+      uses: github/codeql-action/autobuild@v2
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1
+      uses: github/codeql-action/analyze@v2

.github/workflows/go.yml

@@ -7,14 +7,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
 
-    - name: Set up Go 1.13
-      uses: actions/setup-go@v1
+    - name: Set up Go 1.21
+      uses: actions/setup-go@v4
       with:
-        go-version: 1.13
+        go-version: 1.21
       id: go
 
     - name: Check out code into the Go module directory
-      uses: actions/checkout@v1
+      uses: actions/checkout@v4
 
     - name: Get dependencies
       run: |

.github/workflows/release.yml

@@ -1,26 +1,30 @@
 name: goreleaser
 
 on:
-  pull_request:
   push:
+    tags:
+      - '**'
 
 jobs:
   goreleaser:
     runs-on: ubuntu-latest
     steps:
       -
         name: Checkout
-        uses: actions/checkout@v1
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - run: git fetch --force --tags
       -
         name: Set up Go
-        uses: actions/setup-go@v1
+        uses: actions/setup-go@v4
         with:
-          go-version: 1.13.x
+          go-version: 1.21
       -
         name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@v1
+        uses: goreleaser/goreleaser-action@v5
         with:
           version: latest
-          args: release --rm-dist
+          args: release --clean
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}