Skip to content

Commit 459f707

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the actions group with 13 updates
Bumps the actions group with 13 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `7.0.1` | | [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.7.5` | `2.11.0` | | [actions/cache](https://github.com/actions/cache) | `4.3.0` | `6.1.0` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `5.0.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.34.0` | `4.37.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.34.0` | `4.37.3` | | [dawidd6/action-send-mail](https://github.com/dawidd6/action-send-mail) | `6e502825a508b867ab2954ad6343b68787624c01` | `12335b969ae3fb71bee5f2c6b829744261aec34c` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.5.0` | `3.0.2` | | [erlef/setup-beam](https://github.com/erlef/setup-beam) | `1.20.4` | `1.24.1` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.8` | `8.0.1` | Updates `actions/checkout` from 4.1.1 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.1.1...3d3c42e) Updates `haskell-actions/setup` from 2.7.5 to 2.11.0 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](haskell-actions/setup@ec49483...cd0d9bd) Updates `actions/cache` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...55cc834) Updates `actions/configure-pages` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@983d773...45bfe01) Updates `actions/upload-pages-artifact` from 3.0.1 to 5.0.0 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@56afc60...fc324d3) Updates `actions/deploy-pages` from 4.0.5 to 5.0.0 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@d6db901...cd2ce8f) Updates `github/codeql-action/init` from 4.34.0 to 4.37.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c6f9311...e4fba86) Updates `github/codeql-action/analyze` from 4.34.0 to 4.37.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c6f9311...e4fba86) Updates `dawidd6/action-send-mail` from 6e502825a508b867ab2954ad6343b68787624c01 to 12335b969ae3fb71bee5f2c6b829744261aec34c - [Release notes](https://github.com/dawidd6/action-send-mail/releases) - [Commits](dawidd6/action-send-mail@6e50282...12335b9) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) Updates `softprops/action-gh-release` from 2.5.0 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@a06a81a...3d0d988) Updates `erlef/setup-beam` from 1.20.4 to 1.24.1 - [Release notes](https://github.com/erlef/setup-beam/releases) - [Commits](erlef/setup-beam@e6d7c94...54075bc) Updates `actions/download-artifact` from 4.1.8 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@fa0a91b...3e5f45b) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: haskell-actions/setup dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/configure-pages dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-pages-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dawidd6/action-send-mail dependency-version: 12335b969ae3fb71bee5f2c6b829744261aec34c dependency-type: direct:production dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: erlef/setup-beam dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 6ed79bc commit 459f707

9 files changed

Lines changed: 34 additions & 34 deletions

File tree

‎.github/workflows/abi-ffi-gate.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
name: ABI ↔ FFI structural conformance
2121
runs-on: ubuntu-latest
2222
steps:
23-
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
23+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2424
- name: Install Julia 1.11.5
2525
run: |
2626
curl -fsSL https://julialang-s3.julialang.org/bin/linux/x64/1.11/julia-1.11.5-linux-x86_64.tar.gz -o /tmp/julia.tar.gz
@@ -35,7 +35,7 @@ jobs:
3535
name: Zig FFI builds + tests (Zig 0.14.0)
3636
runs-on: ubuntu-latest
3737
steps:
38-
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4
38+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3939
- name: Install Zig 0.14.0
4040
run: |
4141
curl -fsSL https://ziglang.org/download/0.14.0/zig-linux-x86_64-0.14.0.tar.xz -o /tmp/zig.tar.xz

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
runs-on: ubuntu-latest
1010
steps:
1111
- name: Checkout
12-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
12+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
1313
- name: Trigger BoJ Server (Casket/ssg-mcp)
1414
run: |
1515
# Send a secure trigger to boj-server to build this repository

‎.github/workflows/casket-pages.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -20,22 +20,22 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Checkout
23-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
23+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
2424

2525
- name: Checkout casket-ssg
26-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
26+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
2727
with:
2828
repository: hyperpolymath/casket-ssg
2929
path: .casket-ssg
3030

3131
- name: Setup GHCup
32-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
32+
uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2
3333
with:
3434
ghc-version: '9.8.2'
3535
cabal-version: '3.10'
3636

3737
- name: Cache Cabal
38-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
38+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
3939
with:
4040
path: |
4141
~/.cabal/packages
@@ -97,10 +97,10 @@ jobs:
9797
touch ../_site/.nojekyll
9898
9999
- name: Setup Pages
100-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
100+
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
101101

102102
- name: Upload artifact
103-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
103+
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
104104
with:
105105
path: '_site'
106106

@@ -113,4 +113,4 @@ jobs:
113113
steps:
114114
- name: Deploy to GitHub Pages
115115
id: deployment
116-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
116+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,15 +35,15 @@ jobs:
3535

3636
steps:
3737
- name: Checkout
38-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
38+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3939

4040
- name: Initialize CodeQL
41-
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
41+
uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3
4242
with:
4343
languages: ${{ matrix.language }}
4444
build-mode: ${{ matrix.build-mode }}
4545

4646
- name: Perform CodeQL Analysis
47-
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
47+
uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3
4848
with:
4949
category: "/language:${{ matrix.language }}"

‎.github/workflows/dogfood-gate.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Checkout repository
28-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
28+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
2929

3030
- name: Check for A2ML files
3131
id: detect
@@ -65,7 +65,7 @@ jobs:
6565

6666
steps:
6767
- name: Checkout repository
68-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
68+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
6969

7070
- name: Check for K9 files
7171
id: detect
@@ -110,7 +110,7 @@ jobs:
110110

111111
steps:
112112
- name: Checkout repository
113-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
113+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
114114

115115
- name: Scan for invisible characters
116116
id: lint
@@ -174,7 +174,7 @@ jobs:
174174

175175
steps:
176176
- name: Checkout repository
177-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
177+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
178178

179179
- name: Check for Groove manifest
180180
id: groove
@@ -232,7 +232,7 @@ jobs:
232232

233233
steps:
234234
- name: Checkout repository
235-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
235+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
236236

237237
- name: Check and validate eclexiaiser manifest
238238
id: eclex
@@ -297,7 +297,7 @@ jobs:
297297

298298
steps:
299299
- name: Checkout repository
300-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
300+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
301301

302302
- name: Generate dogfooding scorecard
303303
run: |

‎.github/workflows/push-email-notify.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- name: Send push notification email
18-
uses: dawidd6/action-send-mail@6e502825a508b867ab2954ad6343b68787624c01 # pinned
18+
uses: dawidd6/action-send-mail@12335b969ae3fb71bee5f2c6b829744261aec34c # pinned
1919
with:
2020
server_address: ${{ secrets.SMTP_HOST }}
2121
server_port: ${{ secrets.SMTP_PORT }}

‎.github/workflows/release.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
permissions:
2222
contents: read
2323
steps:
24-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
24+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2525

2626
- name: Build
2727
run: |
@@ -48,7 +48,7 @@ jobs:
4848
changelog: ${{ steps.cliff.outputs.content }}
4949
version: ${{ steps.version.outputs.version }}
5050
steps:
51-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
51+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5252
with:
5353
fetch-depth: 0
5454

@@ -78,7 +78,7 @@ jobs:
7878
git cliff --output CHANGELOG.md
7979
8080
- name: Upload updated CHANGELOG.md
81-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
81+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8282
with:
8383
name: changelog
8484
path: CHANGELOG.md
@@ -91,7 +91,7 @@ jobs:
9191
permissions:
9292
contents: write
9393
steps:
94-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
94+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
9595

9696
# TODO: Download build artifacts if uploading to the release
9797
# - uses: actions/download-artifact@v4
@@ -100,7 +100,7 @@ jobs:
100100
# path: artifacts/
101101

102102
- name: Create GitHub Release
103-
uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2
103+
uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v2
104104
with:
105105
body: ${{ needs.changelog.outputs.changelog }}
106106
draft: false

‎.github/workflows/rhodibot.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
runs-on: ubuntu-latest
3030
steps:
3131
- name: Checkout
32-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
32+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v4
3333
with:
3434
fetch-depth: 1
3535

‎.github/workflows/static-analysis-gate.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222

2323
steps:
2424
- name: Checkout repository
25-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
25+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
2626
with:
2727
fetch-depth: 0
2828

@@ -105,7 +105,7 @@ jobs:
105105
echo "Skipped: panic-attack not available in this environment." >> "$GITHUB_STEP_SUMMARY"
106106
107107
- name: Upload panic-attack findings
108-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
108+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
109109
with:
110110
name: panic-attack-findings
111111
path: panic-attack-findings.json
@@ -126,14 +126,14 @@ jobs:
126126

127127
steps:
128128
- name: Checkout repository
129-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
129+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
130130
with:
131131
fetch-depth: 0
132132

133133
- name: Setup Elixir for Hypatia scanner
134134
id: beam
135135
continue-on-error: true
136-
uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.18.2
136+
uses: erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124 # v1.18.2
137137
with:
138138
elixir-version: '1.19.4'
139139
otp-version: '28.3'
@@ -217,7 +217,7 @@ jobs:
217217
echo "Skipped: Hypatia scanner not available in this environment." >> "$GITHUB_STEP_SUMMARY"
218218
219219
- name: Upload hypatia findings
220-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
220+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
221221
with:
222222
name: hypatia-findings
223223
path: hypatia-findings.json
@@ -240,13 +240,13 @@ jobs:
240240

241241
steps:
242242
- name: Download panic-attack findings
243-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
243+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4
244244
with:
245245
name: panic-attack-findings
246246
path: findings/
247247

248248
- name: Download hypatia findings
249-
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4
249+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v4
250250
with:
251251
name: hypatia-findings
252252
path: findings/
@@ -300,7 +300,7 @@ jobs:
300300
echo "low=$LOW" >> "$GITHUB_OUTPUT"
301301
302302
- name: Upload unified findings (fleet scanner picks these up)
303-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
303+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
304304
with:
305305
name: unified-findings
306306
path: findings/unified-findings.json

0 commit comments

Comments
 (0)