From 7953c779d051759b09e307f7991dd2b1ca82dc3f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Thu, 28 May 2026 05:19:19 +0000
Subject: [PATCH] Bump the gcp-actions group across 1 directory with 3 updates

Bumps the gcp-actions group with 3 updates in the / directory: [google-github-actions/auth](https://github.com/google-github-actions/auth), [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) and [google-github-actions/deploy-cloudrun](https://github.com/google-github-actions/deploy-cloudrun).


Updates `google-github-actions/auth` from 2 to 3
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Commits](https://github.com/google-github-actions/auth/compare/v2...v3)

Updates `google-github-actions/setup-gcloud` from 2 to 3
- [Release notes](https://github.com/google-github-actions/setup-gcloud/releases)
- [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google-github-actions/setup-gcloud/compare/v2...v3)

Updates `google-github-actions/deploy-cloudrun` from 2 to 3
- [Release notes](https://github.com/google-github-actions/deploy-cloudrun/releases)
- [Changelog](https://github.com/google-github-actions/deploy-cloudrun/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google-github-actions/deploy-cloudrun/compare/v2...v3)

---
updated-dependencies:
- dependency-name: google-github-actions/auth
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gcp-actions
- dependency-name: google-github-actions/setup-gcloud
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gcp-actions
- dependency-name: google-github-actions/deploy-cloudrun
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: gcp-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/despliega-cloud-run.yaml | 4 ++--
 .github/workflows/envia-a-packages.yml     | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/despliega-cloud-run.yaml b/.github/workflows/despliega-cloud-run.yaml
index d507b3d..a6c33fa 100644
--- a/.github/workflows/despliega-cloud-run.yaml
+++ b/.github/workflows/despliega-cloud-run.yaml
@@ -62,13 +62,13 @@ jobs:
         # Workload Identity Federation: GitHub Actions actúa como proveedor OIDC.
         # No se almacenan llaves JSON de service account en ningún secreto.
         # El binding en iam.tf restringe el acceso al repositorio y entorno exactos.
-        uses: google-github-actions/auth@v2
+        uses: google-github-actions/auth@v3
         with:
           workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
           service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}
 
       - name: Configurar gcloud CLI
-        uses: google-github-actions/setup-gcloud@v2
+        uses: google-github-actions/setup-gcloud@v3
 
       - name: Construir referencia de imagen
         # Usa la imagen publicada en GHCR por envia-a-packages.yml con el mismo git tag.
diff --git a/.github/workflows/envia-a-packages.yml b/.github/workflows/envia-a-packages.yml
index 79ac105..6de5b8e 100644
--- a/.github/workflows/envia-a-packages.yml
+++ b/.github/workflows/envia-a-packages.yml
@@ -202,7 +202,7 @@ jobs:
       - name: Autenticar en GCP via OIDC — solo prod
         if: needs.resolve-env.outputs.target == 'prod'
         id: gcp_auth
-        uses: google-github-actions/auth@c200f3691d83b41bf9bbd8638997a462592937ed
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
         with:
           workload_identity_provider: ${{ vars.GCP_WORKLOAD_IDENTITY_PROVIDER }}
           service_account: ${{ vars.GCP_SERVICE_ACCOUNT }}
@@ -229,7 +229,7 @@ jobs:
 
       - name: Desplegar en Cloud Run — solo prod
         if: needs.resolve-env.outputs.target == 'prod'
-        uses: google-github-actions/deploy-cloudrun@v2
+        uses: google-github-actions/deploy-cloudrun@v3
         with:
           service: ${{ vars.GCP_CLOUD_RUN_SERVICE }}
           region: ${{ vars.GCP_REGION }}