Bump the ci group across 1 directory with 3 updates #1446

	name: build

	on:
	pull_request:
	push:
	branches:
	- main

	permissions:
	contents: read # for actions/checkout to fetch code

	jobs:
	test:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
	- name: Setup QEMU
	uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
	- name: Setup Docker Buildx
	id: buildx
	uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
	- name: Cache Docker layers
	uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
	id: cache
	with:
	path: /tmp/.buildx-cache
	key: ${{ runner.os }}-buildx-ghcache-${{ github.sha }}
	restore-keys: \|
	${{ runner.os }}-buildx-ghcache-
	- name: Setup Go
	uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
	with:
	go-version: 1.23.x
	cache-dependency-path: \|
	**/go.sum
	**/go.mod
	- name: Run tests
	run: make test
	- name: Check if working tree is dirty
	run: \|
	if [[ $(git diff --stat) != '' ]]; then
	git --no-pager diff
	echo 'run make test and commit changes'
	exit 1
	fi
	- name: Build container image
	run: \|
	make docker-build IMG=ghcr.io/fluxcd/${{ github.event.repository.name }}:latest \
	BUILD_PLATFORMS=linux/amd64 \
	BUILD_ARGS="--cache-from=type=local,src=/tmp/.buildx-cache \
	--cache-to=type=local,dest=/tmp/.buildx-cache-new,mode=max"
	- # Temp fix
	# https://github.com/docker/build-push-action/issues/252
	# https://github.com/moby/buildkit/issues/1896
	name: Move cache
	run: \|
	rm -rf /tmp/.buildx-cache
	mv /tmp/.buildx-cache-new /tmp/.buildx-cache

Provide feedback