Merge remote-tracking branch 'origin/dev' into dev

# Conflicts:
#	.github/workflows/todos.yaml

.github/workflows/check.yaml

@@ -5,7 +5,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v') == false
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4
       - uses: actions/setup-go@v4.1.0
         with:
           go-version-file: 'go.mod'

.github/workflows/release.yaml

@@ -5,7 +5,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/v') == true
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3.3.0
+      - uses: actions/checkout@v4
       - uses: actions/setup-go@v4.1.0
         with:
           go-version-file: 'go.mod'

go.mod

@@ -3,7 +3,7 @@ module github.com/nothub/mrpack-install
 go 1.21
 
 require (
-	github.com/google/uuid v1.3.0
+	github.com/google/uuid v1.3.1
 	github.com/nothub/hashutils v0.4.0
 	github.com/samber/lo v1.38.1
 	github.com/spf13/cobra v1.7.0

go.sum

@@ -1,6 +1,6 @@
 github.com/cpuguy83/go-md2man/v2 v2.0.2/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o=
-github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
-github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
+github.com/google/uuid v1.3.1 h1:KjJaJ9iWZ3jOFZIf1Lqf4laDRCasjl0BCmnEGxkdLb4=
+github.com/google/uuid v1.3.1/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8=
 github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw=
 github.com/nothub/hashutils v0.4.0 h1:/lQiOrqXreZ8HRvNdhVZxyhVlhb7Pk3lXhicropKzow=