feat: add --batch-size flag to push refs in batches (#173 )

* feat: add --batch-size flag to push refs in batches Add support for pushing refs in smaller batches to avoid server-side limits and timeouts when syncing large repositories with many tags/branches. - Add --batch-size flag (default 0 = no batching, original behavior) - Add References() method to GitRepository interface - Implement collectRefs() and pushRefsInBatches() helpers - Add MinBatchSize validation (must be 0 or >= 10) This addresses issues where repositories with 1000+ refs fail to sync to GHES with 'command error on refs/heads/<branch>: failed' errors. * test: add tests for batch-size flag and push batching functionality * fix: pin tool dependencies to versions compatible with Go 1.21 * ci: fix docker compose v2 syntax and update setup-ruby action * refactor: address PR review feedback - Remove unused RefInfo struct from git.go - Remove redundant pushedAny variable tracking in pushRefsInBatches - Remove incomplete TestPushRefsInBatches_PartialUpToDate test (already covered by existing test case) * docs: add --batch-size flag to README
chore: update CODEOWNERS with active teams (#174 )
2026-01-27 15:19:55 -06:00 · 2026-01-27 15:17:06 -06:00 · 2025-09-15 10:21:27 +02:00 · 2025-09-05 16:10:19 -04:00 · 2025-06-09 18:20:10 +01:00 · 2025-06-06 11:51:27 +01:00
419 changed files with 4262 additions and 52234 deletions
@@ -1,2 +1,2 @@
-* @actions/actions-delivery-nexus @actions/actions-oss-maintainers
+* @actions/actions-oss-maintainers @actions/actions-sync-maintainers

@@ -9,8 +9,8 @@ jobs:
    - name: Checkout
      uses: actions/checkout@v4
    - name: Lint
-      run: docker-compose run --rm lint
+      run: docker compose run --rm lint
    - name: Test
-      run: docker-compose run --rm test
+      run: docker compose run --rm test
    - name: E2E
-      run: docker-compose run --rm test-build
+      run: docker compose run --rm test-build
@@ -0,0 +1,22 @@
+name: Close inactive issues
+on:
+  schedule:
+    - cron: "30 1 * * *"
+
+jobs:
+  close-issues:
+    runs-on: ubuntu-latest
+    permissions:
+      issues: write
+      pull-requests: write
+    steps:
+      - uses: actions/stale@v9
+        with:
+          days-before-issue-stale: 30
+          days-before-issue-close: 14
+          stale-issue-label: "stale"
+          stale-issue-message: "This issue is stale because it has been open for 30 days with no activity."
+          close-issue-message: "This issue was closed because it has been inactive for 14 days since being marked as stale."
+          days-before-pr-stale: -1
+          days-before-pr-close: -1
+          repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -42,7 +42,7 @@ jobs:

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
-        uses: github/codeql-action/init@v2
+        uses: github/codeql-action/init@v3
        with:
          languages: ${{ matrix.language }}
          # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
      # If this step fails, then you should remove it and run the build manually (see below)
      - name: Autobuild
-        uses: github/codeql-action/autobuild@v2
+        uses: github/codeql-action/autobuild@v3

      # ℹ️ Command-line programs to run using the OS shell.
      # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
      #   make release

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@v2
+        uses: github/codeql-action/analyze@v3
@@ -26,7 +26,7 @@ jobs:
          fetch-depth: 0

      - name: Install Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod

@@ -35,7 +35,7 @@ jobs:
      - run: go mod vendor

      # Ruby is required for licensed
-      - uses: ruby/setup-ruby@bc1dd263b68cb5626dbb55d5c89777d79372c484
+      - uses: ruby/setup-ruby@90be1154f987f4dc0fe0dd0feedac9e473aa4ba8 # v1
        with:
          ruby-version: "3.2"

@@ -14,11 +14,11 @@ jobs:
        with:
          fetch-depth: 0
      - name: Set up Go
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
      - name: Set CURRENT_TAG
        run: echo "GORELEASER_CURRENT_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
      - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@14707cd26fbb4b6c8abf03fb8ea4eb6c59711a62
+        uses: goreleaser/goreleaser-action@f09f1a7bee7ae6b5153daf4e8c63cc8ce8c7e7d5
        with:
          version: latest
          args: release --clean
@@ -1,16 +1,26 @@
-project_name: gh
+project_name: actions/actions-sync

 builds:
-  - <<: &build_defaults
-      binary: bin/actions-sync
-    id: macos
-    goos: [darwin]
-    goarch: [amd64, arm64]
-  - <<: *build_defaults
-    id: linux
-    goos: [linux]
-    goarch: [amd64, arm64]
-  - <<: *build_defaults
-    id: windows
-    goos: [windows]
-    goarch: [amd64]
+  - id: build
+    goos:
+      - linux
+      - darwin
+      - windows
+    goarch:
+      - amd64
+      - arm64
+    binary: bin/actions-sync
+    ignore:
+      - goos: windows
+        goarch: arm64
+    env:
+      - CGO_ENABLED=0
+release:
+  github:
+    owner: actions
+    name: actions-sync
+  # Create the release as a draft so it can be tested before being published
+  # To test, go to the Actions tab and run the "Actions Sync E2E Sanity Test" workflow
+  draft: true
+
+
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/bitcurves
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/bitcurves
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/brainpool
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package brainpool implements Brainpool elliptic curves.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/brainpool
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/eax
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: 'Package eax provides an implementation of the EAX (encrypt-authenticate-translate)
  mode of operation, as described in Bellare, Rogaway, and Wagner "THE EAX MODE OF
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/internal/byteutil
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/internal/byteutil
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/ocb
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: 'Package ocb provides an implementation of the OCB (offset codebook) mode
  of operation, as described in RFC-7253 of the IRTF and in Rogaway, Bellare, Black
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package openpgp implements high level operations on OpenPGP messages.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/aes/keywrap
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package keywrap is an implementation of the RFC 3394 AES key wrapping algorithm.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/aes/keywrap
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/armor
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package armor implements OpenPGP ASCII Armor, see RFC 4880.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/armor
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/ecdh
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package ecdh implements ECDH encryption, suitable for OpenPGP, as specified
  in RFC 6637, section 8.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/ecdsa
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package ecdsa implements ECDSA signature, suitable for OpenPGP, as specified
  in RFC 6637, section 5.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/eddsa
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package eddsa implements EdDSA signature, suitable for OpenPGP, as specified
  in https://datatracker.ietf.org/doc/html/draft-ietf-openpgp-crypto-refresh-06#section-13.7
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/elgamal
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package elgamal implements ElGamal encryption, suitable for OpenPGP, as specified
  in "A Public-Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms,"
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/errors
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package errors contains common error types for the OpenPGP packages.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/errors
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/internal/algorithm
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/internal/algorithm
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/internal/ecc
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package ecc implements a generic interface for ECDH, ECDSA, and EdDSA.
 homepage: https://pkg.go.dev/github.com/ProtonMail/go-crypto/openpgp/internal/ecc
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/internal/encoding
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package encoding implements openpgp packet field encodings as specified in
  RFC 4880 and 6637.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/packet
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package packet implements parsing and serialization of OpenPGP packets, as
  specified in RFC 4880.
@@ -1,6 +1,6 @@
 ---
 name: github.com/ProtonMail/go-crypto/openpgp/s2k
-version: v0.0.0-20230828082145-3c4c8a2d2371
+version: v1.0.0
 type: go
 summary: Package s2k implements the various OpenPGP string-to-key transforms as specified
  in RFC 4800 section 3.7.1, and Argon2 specified in draft-ietf-openpgp-crypto-refresh-08
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: A highly extensible git implementation in pure Go.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/config
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package config contains the abstraction of multiple config files
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/config
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/internal/path_util
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/internal/path_util
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/internal/revision
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: 'Package revision extracts git revision from string More information about
  revision : https://www.kernel.org/pub/software/scm/git/docs/gitrevisions.html'
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/internal/url
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/internal/url
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: package plumbing implement the core interfaces and structs used by go-git
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/cache
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/cache
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/color
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/color
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/filemode
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/filemode
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/config
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package config implements encoding and decoding of git config files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/config
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/diff
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/diff
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/gitignore
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package gitignore implements matching file system paths to gitignore patterns
  that can be automatically read from a git repository tree in the order of definition
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/idxfile
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package idxfile implements encoding and decoding of packfile idx files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/idxfile
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/index
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package index implements encoding and decoding of index format files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/index
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/objfile
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package objfile implements encoding and decoding of object files.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/objfile
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/packfile
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package packfile implements encoding and decoding of packfile format.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/format/packfile
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/format/pktline
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package pktline implements reading payloads form pkt-lines and encoding pkt-lines
  from payloads.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/hash
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: package hash provides a way for managing the underlying hash implementations
  used across go-git.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/object
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package object contains implementations of all Git objects and utility functions
  to work with them.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/protocol/packp
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/protocol/packp
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/protocol/packp/capability
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package capability defines the server and client capabilities.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/protocol/packp/capability
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/protocol/packp/sideband
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package sideband implements a sideband mutiplex/demultiplexer
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/protocol/packp/sideband
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/revlist
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package revlist provides support to access the ancestors of commits, in a
  similar way as the git-rev-list command.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/storer
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package storer defines the interfaces to store objects, references, etc.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/storer
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package transport includes the implementation for different transport protocols.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/client
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package client contains helper function to deal with the different client
  protocols.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/file
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package file implements the file transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/file
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/git
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package git implements the git transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/git
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/http
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package http implements the HTTP transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/http
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/internal/common
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package common implements the git pack protocol with a pluggable transport.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/internal/common
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/server
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package server implements the git server protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/server
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/plumbing/transport/ssh
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package ssh implements the SSH transport protocol.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/plumbing/transport/ssh
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/storage
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/storage/filesystem
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package filesystem is a storage backend base on filesystems
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage/filesystem
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/storage/filesystem/dotgit
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: https://github.com/git/git/blob/master/Documentation/gitrepository-layout.txt
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage/filesystem/dotgit
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/storage/memory
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package memory is a storage backend base on memory
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/storage/memory
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/binary
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package binary implements syntax-sugar functions on top of the standard library
  binary package
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/diff
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package diff implements line oriented diffs, similar to the ancient Unix
  diff command.
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/ioutil
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package ioutil implements some I/O utility functions.
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/ioutil
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package merkletrie provides support for n-ary trees that are at the same
  time Merkle trees and Radix trees (tries).
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/filesystem
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/merkletrie/filesystem
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/index
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/merkletrie/index
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/internal/frame
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/merkletrie/internal/frame
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/merkletrie/noder
-version: v5.11.0
+version: v5.12.0
 type: go
 summary: Package noder provide an interface for defining nodes in a merkletrie, their
  hashes and their paths (a noders and its ancestors).
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/sync
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/sync
@@ -1,6 +1,6 @@
 ---
 name: github.com/go-git/go-git/v5/utils/trace
-version: v5.11.0
+version: v5.12.0
 type: go
 summary:
 homepage: https://pkg.go.dev/github.com/go-git/go-git/v5/utils/trace
@@ -1,6 +1,6 @@
 ---
 name: github.com/sergi/go-diff/diffmatchpatch
-version: v1.2.0
+version: v1.3.2-0.20230802210424-5b0b94c5c0d3
 type: go
 summary: Package diffmatchpatch offers robust algorithms to perform the operations
  required for synchronizing plain text.
@@ -1,6 +1,6 @@
 ---
 name: github.com/skeema/knownhosts
-version: v1.2.1
+version: v1.2.2
 type: go
 summary: Package knownhosts is a thin wrapper around golang.org/x/crypto/ssh/knownhosts,
  adding the ability to obtain the list of host key algorithms for a known host.
@@ -212,7 +212,7 @@ licenses:
       limitations under the License.
 - sources: README.md
  text: |-
-    **Source code copyright 2023 Skeema LLC and the Skeema Knownhosts authors**
+    **Source code copyright 2024 Skeema LLC and the Skeema Knownhosts authors**

    ```text
    Licensed under the Apache License, Version 2.0 (the "License");
@@ -230,7 +230,7 @@ licenses:
 notices:
 - sources: NOTICE
  text: |-
-    Copyright 2023 Skeema LLC and the Skeema Knownhosts authors
+    Copyright 2024 Skeema LLC and the Skeema Knownhosts authors

    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.
@@ -1,6 +1,6 @@
 ---
 name: github.com/spf13/cobra
-version: v1.4.0
+version: v1.8.0
 type: go
 summary: Package cobra is a commander providing a simple interface to create powerful
  modern CLI interfaces.
@@ -184,5 +184,5 @@ licenses:
          incurred by, or claims asserted against, such Contributor by reason
          of your accepting any such warranty or additional liability.
 - sources: README.md
-  text: Cobra is released under the Apache 2.0 license. See [LICENSE.txt](https://github.com/spf13/cobra/blob/master/LICENSE.txt)
+  text: Cobra is released under the Apache 2.0 license. See [LICENSE.txt](https://github.com/spf13/cobra/blob/main/LICENSE.txt)
 notices: []
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/argon2
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package argon2 implements the key derivation function Argon2.
 homepage: https://pkg.go.dev/golang.org/x/crypto/argon2
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/blake2b
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package blake2b implements the BLAKE2b hash algorithm defined by RFC 7693
  and the extendable output function (XOF) BLAKE2Xb.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/blowfish
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package blowfish implements Bruce Schneier's Blowfish encryption algorithm.
 homepage: https://pkg.go.dev/golang.org/x/crypto/blowfish
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/cast5
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package cast5 implements CAST5, as defined in RFC 2144.
 homepage: https://pkg.go.dev/golang.org/x/crypto/cast5
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/curve25519
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package curve25519 provides an implementation of the X25519 function, which
  performs scalar multiplication on the elliptic curve known as Curve25519.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package openpgp implements high level operations on OpenPGP messages.
 homepage: https://pkg.go.dev/golang.org/x/crypto/openpgp
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/armor
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package armor implements OpenPGP ASCII Armor, see RFC 4880.
 homepage: https://pkg.go.dev/golang.org/x/crypto/openpgp/armor
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/elgamal
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package elgamal implements ElGamal encryption, suitable for OpenPGP, as specified
  in "A Public-Key Cryptosystem and a Signature Scheme Based on Discrete Logarithms,"
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/errors
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package errors contains common error types for the OpenPGP packages.
 homepage: https://pkg.go.dev/golang.org/x/crypto/openpgp/errors
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/packet
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package packet implements parsing and serialization of OpenPGP packets, as
  specified in RFC 4880.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/openpgp/s2k
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package s2k implements the various OpenPGP string-to-key transforms as specified
  in RFC 4800 section 3.7.1.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/sha3
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package sha3 implements the SHA-3 fixed-output-length hash functions and
  the SHAKE variable-output-length hash functions defined by FIPS-202.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package ssh implements an SSH client and server.
 homepage: https://pkg.go.dev/golang.org/x/crypto/ssh
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh/agent
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package agent implements the ssh-agent protocol, and provides both a client
  and a server.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package bcrypt_pbkdf implements bcrypt_pbkdf(3) from OpenBSD.
 homepage: https://pkg.go.dev/golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/crypto/ssh/knownhosts
-version: v0.17.0
+version: v0.21.0
 type: go
 summary: Package knownhosts implements a parser for the OpenSSH known_hosts host key
  database, and provides utility functions for writing OpenSSH compliant known_hosts
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/net/context
-version: v0.19.0
+version: v0.23.0
 type: go
 summary: Package context defines the Context type, which carries deadlines, cancelation
  signals, and other request-scoped values across API boundaries and between processes.
@@ -1,63 +0,0 @@
---
-name: golang.org/x/net/context/ctxhttp
-version: v0.19.0
-type: go
-summary: Package ctxhttp provides helper functions for performing context-aware HTTP
-  requests.
-homepage: https://pkg.go.dev/golang.org/x/net/context/ctxhttp
-license: other
-licenses:
- sources: net/LICENSE
-  text: |
-    Copyright (c) 2009 The Go Authors. All rights reserved.
-
-    Redistribution and use in source and binary forms, with or without
-    modification, are permitted provided that the following conditions are
-    met:
-
-       * Redistributions of source code must retain the above copyright
-    notice, this list of conditions and the following disclaimer.
-       * Redistributions in binary form must reproduce the above
-    copyright notice, this list of conditions and the following disclaimer
-    in the documentation and/or other materials provided with the
-    distribution.
-       * Neither the name of Google Inc. nor the names of its
-    contributors may be used to endorse or promote products derived from
-    this software without specific prior written permission.
-
-    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
-    "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
-    LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
-    A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
-    OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
-    LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
-    DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
-    THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
-    (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
-    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- sources: net/PATENTS
-  text: |
-    Additional IP Rights Grant (Patents)
-
-    "This implementation" means the copyrightable works distributed by
-    Google as part of the Go project.
-
-    Google hereby grants to You a perpetual, worldwide, non-exclusive,
-    no-charge, royalty-free, irrevocable (except as stated in this section)
-    patent license to make, have made, use, offer to sell, sell, import,
-    transfer and otherwise run, modify and propagate the contents of this
-    implementation of Go, where such license applies only to those patent
-    claims, both currently owned or controlled by Google and acquired in
-    the future, licensable by Google that are necessarily infringed by this
-    implementation of Go.  This grant does not include claims that would be
-    infringed only as a consequence of further modification of this
-    implementation.  If you or your agent or exclusive licensee institute or
-    order or agree to the institution of patent litigation against any
-    entity (including a cross-claim or counterclaim in a lawsuit) alleging
-    that this implementation of Go or any code incorporated within this
-    implementation of Go constitutes direct or contributory patent
-    infringement, or inducement of patent infringement, then any patent
-    rights granted to you under this License for this implementation of Go
-    shall terminate as of the date such litigation is filed.
-notices: []
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/net/internal/socks
-version: v0.19.0
+version: v0.23.0
 type: go
 summary: Package socks provides a SOCKS version 5 client implementation.
 homepage: https://pkg.go.dev/golang.org/x/net/internal/socks
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/net/proxy
-version: v0.19.0
+version: v0.23.0
 type: go
 summary: Package proxy provides support for a variety of protocols to proxy network
  data.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/oauth2
-version: v0.0.0-20220411215720-9780585627b5
+version: v0.19.0
 type: go
 summary: Package oauth2 provides support for making OAuth2 authorized and authenticated
  HTTP requests, as specified in RFC 6749.
@@ -36,9 +36,4 @@ licenses:
    THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
    (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
-notices:
- sources: AUTHORS
-  text: |-
-    # This source code refers to The Go Authors for copyright purposes.
-    # The master list of authors is in the main Go distribution,
-    # visible at http://tip.golang.org/AUTHORS.
+notices: []
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/oauth2/internal
-version: v0.0.0-20220411215720-9780585627b5
+version: v0.19.0
 type: go
 summary: Package internal contains support packages for oauth2 package.
 homepage: https://pkg.go.dev/golang.org/x/oauth2/internal
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/sys/execabs
-version: v0.15.0
+version: v0.18.0
 type: go
 summary: Package execabs is a drop-in replacement for os/exec that requires PATH lookups
  to find absolute paths.
@@ -1,6 +1,6 @@
 ---
 name: golang.org/x/sys/unix
-version: v0.15.0
+version: v0.18.0
 type: go
 summary: Package unix contains an interface to the low-level operating system primitives.
 homepage: https://pkg.go.dev/golang.org/x/sys/unix
@@ -14,6 +14,24 @@ It is designed to work when:
 * The GitHub Enterprise instance is separate from the rest of the internet.
 * The GitHub Enterprise instance is connected to the rest of the internet.

+### Note
+
+Thank you for your interest in this GitHub action, however, right now we are not taking contributions.
+
+We continue to focus our resources on strategic areas that help our customers be successful while making developers' lives easier. While GitHub Actions remains a key part of this vision, we are allocating resources towards other areas of Actions and are not taking contributions to this repository at this time. The GitHub public roadmap is the best place to follow along for any updates on features we’re working on and what stage they’re in.
+
+We are taking the following steps to better direct requests related to GitHub Actions, including:
+
+1. We will be directing questions and support requests to our [Community Discussions area](https://github.com/orgs/community/discussions/categories/actions)
+
+2. High Priority bugs can be reported through Community Discussions or you can report these to our support team https://support.github.com/contact/bug-report.
+
+3. Security Issues should be handled as per our [security.md](security.md)
+
+We will still provide security updates for this project and fix major breaking changes during this time.
+
+You are welcome to still raise bugs in this repo.
+
 ## Connected instances

 When there are machines which have access to both the public internet and the GHES instance run `actions-sync sync`.
@@ -38,6 +56,8 @@ When there are machines which have access to both the public internet and the GH
   A path to a file containing a newline separated list of repositories to be synced. Each entry follows the format of `repo-name`.
 - `actions-admin-user` _(optional)_
   The name of the Actions admin user, which will be used for updating the chosen action. To use the default user, pass `actions-admin`. If not set, the impersonation is disabled. Note that `site_admin` scope is required in the token for the impersonation to work.
+- `batch-size` _(optional)_
+   Number of refs to push in each batch. Default is 0 (no batching). Use a value like 100 if pushing fails for large repositories with many branches and tags.

 **Example Usage:**

@@ -96,6 +116,8 @@ When no machine has access to both the public internet and the GHES instance:
   Limit push to specific repositories in the cache directory.
 - `actions-admin-user` _(optional)_
   The name of the Actions admin user, which will be used for updating the chosen action. To use the default user, pass `actions-admin`. If not set, the impersonation is disabled. Note that `site_admin` scope is required in the token for the impersonation to work.
+- `batch-size` _(optional)_
+   Number of refs to push in each batch. Default is 0 (no batching). Use a value like 100 if pushing fails for large repositories with many branches and tags.

 **Example Usage:**

@@ -110,7 +132,3 @@ When no machine has access to both the public internet and the GHES instance:

 When creating a personal access token include the `repo` and `workflow` scopes. Include the `site_admin` scope (optional) if you want organizations to be created as necessary or you want to use the impersonation logic for the `push` or `sync` commands.

-## Contributing
-
-If you would like to contribute your work back to the project, please see
-[`CONTRIBUTING.md`](CONTRIBUTING.md).
@@ -3,19 +3,19 @@ module github.com/actions/actions-sync
 go 1.21

 require (
-	github.com/go-git/go-git/v5 v5.11.0
+	github.com/go-git/go-git/v5 v5.12.0
 	github.com/google/go-github/v43 v43.0.0
-	github.com/gorilla/mux v1.7.4
+	github.com/gorilla/mux v1.8.1
 	github.com/pkg/errors v0.9.1
-	github.com/spf13/cobra v1.4.0
-	github.com/stretchr/testify v1.8.4
-	golang.org/x/oauth2 v0.0.0-20220411215720-9780585627b5
+	github.com/spf13/cobra v1.8.0
+	github.com/stretchr/testify v1.9.0
+	golang.org/x/oauth2 v0.19.0
 )

 require (
 	dario.cat/mergo v1.0.0 // indirect
 	github.com/Microsoft/go-winio v0.6.1 // indirect
-	github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect
+	github.com/ProtonMail/go-crypto v1.0.0 // indirect
 	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
@@ -23,24 +23,21 @@ require (
 	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
 	github.com/go-git/go-billy/v5 v5.5.0 // indirect
 	github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
-	github.com/golang/protobuf v1.5.2 // indirect
 	github.com/google/go-querystring v1.1.0 // indirect
-	github.com/inconshreveable/mousetrap v1.0.0 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
 	github.com/kevinburke/ssh_config v1.2.0 // indirect
 	github.com/pjbgf/sha1cd v0.3.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/sergi/go-diff v1.2.0 // indirect
-	github.com/skeema/knownhosts v1.2.1 // indirect
+	github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 // indirect
+	github.com/skeema/knownhosts v1.2.2 // indirect
 	github.com/spf13/pflag v1.0.5 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
-	golang.org/x/crypto v0.17.0 // indirect
+	golang.org/x/crypto v0.21.0 // indirect
 	golang.org/x/mod v0.12.0 // indirect
-	golang.org/x/net v0.19.0 // indirect
-	golang.org/x/sys v0.15.0 // indirect
+	golang.org/x/net v0.23.0 // indirect
+	golang.org/x/sys v0.18.0 // indirect
 	golang.org/x/tools v0.13.0 // indirect
-	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/protobuf v1.28.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
--- a/Show More
+++ b/Show More