debt: Upgrade dependencies to their latest stable versions.

.github/workflows/ci.yaml

@@ -55,7 +55,7 @@ jobs:
 
       # Ref: https://github.com/actions/setup-go
       - name: Install Go
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
 

.github/workflows/release.yaml

@@ -42,7 +42,7 @@ jobs:
 
       # See: https://github.com/actions/setup-go
       - name: "Install Go"
-        uses: actions/setup-go@v6
+        uses: actions/setup-go@v7
         with:
           go-version-file: go.mod
 
@@ -55,7 +55,7 @@ jobs:
       - name: Install Cosign
         uses: sigstore/cosign-installer@v4.1.2
         with:
-          cosign-release: 'v3.1.1'
+          cosign-release: 'v3.1.3'
 
       # See: https://github.com/anchore/sbom-action
       - name: Generate SBOM via Syft

CHANGELOG.md

@@ -19,6 +19,19 @@ Date format: `YYYY-MM-DD`
 
 ---
 
+## [1.59.3] - 2026-08-13
+
+### Added
+### Changed
+- **debt:** Upgraded dependencies to their latest stable versions.
+
+### Deprecated
+### Removed
+### Fixed
+### Security
+
+---
+
 ## [1.59.2] - 2026-06-29
 
 ### Added
@@ -553,7 +566,8 @@ package sixafter.types.proto.v1;
 ### Fixed
 ### Security
 
-[Unreleased]: https://github.com/sixafter/types/compare/v1.59.2...HEAD
+[Unreleased]: https://github.com/sixafter/types/compare/v1.59.3...HEAD
+[1.59.3]: https://github.com/sixafter/types/compare/v1.59.2...v1.59.3
 [1.59.2]: https://github.com/sixafter/types/compare/v1.59.1...v1.59.2
 [1.59.1]: https://github.com/sixafter/types/compare/v1.59.0...v1.59.1
 [1.59.0]: https://github.com/sixafter/types/compare/v1.58.0...v1.59.0

README.md

@@ -29,10 +29,10 @@ This module is a set of common types expressed as [Google Protocol Buffers](http
 To verify the integrity of the `types` source, run the following commands:
 
 ```sh
-# Fetch the latest release tag from GitHub API (e.g., "v1.59.0")
+# Fetch the latest release tag from GitHub API (e.g., "v1.59.3")
 TAG=$(curl -s https://api.github.com/repos/sixafter/types/releases/latest | jq -r .tag_name)
 
-# Remove the leading "v" for filenames (e.g., "v1.59.0" -> "1.59.0")
+# Remove the leading "v" for filenames (e.g., "v1.59.3" -> "1.59.3")
 VERSION=${TAG#v}
 
 # ---------------------------------------------------------------------

go.mod

@@ -23,7 +23,7 @@ require (
 	github.com/google/uuid v1.6.0
 	github.com/stretchr/testify v1.11.1
 	google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b
-	google.golang.org/protobuf v1.36.11
+	google.golang.org/protobuf v1.36.12
 )
 
 require (

go.sum

@@ -10,8 +10,8 @@ github.com/stretchr/testify v1.11.1 h1:7s2iGBzp5EwR7/aIZr8ao5+dra3wiQyKjjFuvgVKu
 github.com/stretchr/testify v1.11.1/go.mod h1:wZwfW3scLgRK+23gO65QZefKpKQRnfz6sD981Nm4B6U=
 google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b h1:uA40e2M6fYRBf0+8uN5mLlqUtV192iiksiICIBkYJ1E=
 google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b/go.mod h1:Xa7le7qx2vmqB/SzWUBa7KdMjpdpAHlh5QCSnjessQk=
-google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE=
-google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
+google.golang.org/protobuf v1.36.12 h1:pJOKDDOyeXErUroCihFAd5LQuwXBSpVnKGrj5o/fwxc=
+google.golang.org/protobuf v1.36.12/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=