Skip to content

Commit d34c980

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the github-actions group across 1 directory with 11 updates
Bumps the github-actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.3.1` | `6.0.2` | | [actions/setup-java](https://github.com/actions/setup-java) | `4.8.0` | `5.2.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `5.5.4` | `6.0.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.19.2` | `7.1.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.10.0` | `6.0.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.12.0` | `4.0.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.7.0` | `4.1.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `6.4.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `6.2.0` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.3` | `0.5.6` | Updates `actions/checkout` from 4.3.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@34e1148...de0fac2) Updates `actions/setup-java` from 4.8.0 to 5.2.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@c1e3236...be666c2) Updates `codecov/codecov-action` from 5.5.4 to 6.0.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@75cd116...e79a696) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) Updates `docker/build-push-action` from 6.19.2 to 7.1.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@10e90e3...bcafcac) Updates `docker/metadata-action` from 5.10.0 to 6.0.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@c299e40...030e881) Updates `docker/setup-buildx-action` from 3.12.0 to 4.0.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@8d2750c...4d04d5d) Updates `docker/login-action` from 3.7.0 to 4.1.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@c94ce9f...4907a6d) Updates `actions/setup-node` from 4.4.0 to 6.4.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@49933ea...48b55a0) Updates `actions/setup-python` from 5.6.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a26af69...a309ff8) Updates `zizmorcore/zizmor-action` from 0.5.3 to 0.5.6 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@b1d7e1f...5f14fd0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/metadata-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 59187c8 commit d34c980

4 files changed

Lines changed: 36 additions & 36 deletions

File tree

‎.github/workflows/ci-cd-java.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
runs-on: ubuntu-latest
3838
steps:
3939
- name: Checkout
40-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
40+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4141
with:
4242
clean: 'true'
4343
fetch-depth: 2
@@ -61,7 +61,7 @@ jobs:
6161
echo "shared_workflow_ref=${SHARED_WORKFLOW_REF}" >> "$GITHUB_OUTPUT"
6262
6363
- name: Checkout shared workflow scripts
64-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
64+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6565
with:
6666
repository: HSLdevcom/transitdata-shared-workflows
6767
ref: ${{ steps.resolve_shared_workflow_ref.outputs.shared_workflow_ref }}
@@ -84,7 +84,7 @@ jobs:
8484
echo "perform_release=${PERFORM_RELEASE}" >> "$GITHUB_OUTPUT"
8585
8686
- name: Setup JDK
87-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0
87+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
8888
with:
8989
distribution: 'temurin'
9090
java-version: '25'
@@ -150,15 +150,15 @@ jobs:
150150
run: mvn -B verify
151151

152152
- name: Upload coverage reports to Codecov
153-
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
153+
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
154154
with:
155155
token: ${{ secrets.CODECOV_TOKEN }}
156156
fail_ci_if_error: true
157157
verbose: true
158158

159159
- name: Upload test results to Codecov
160160
if: ${{ !cancelled() }}
161-
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
161+
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
162162
with:
163163
token: ${{ secrets.CODECOV_TOKEN }}
164164
fail_ci_if_error: true
@@ -172,7 +172,7 @@ jobs:
172172

173173
- name: Upload .jar artifact
174174
if: ${{ inputs.uploadJarArtifact }}
175-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
175+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
176176
with:
177177
name: 'app.jar'
178178
path: '/app/app.jar'
@@ -190,7 +190,7 @@ jobs:
190190
echo "IMAGE_NAME=${IMAGE_NAME}" >> "$GITHUB_ENV"
191191
192192
- name: Build Docker Image
193-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
193+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
194194
with:
195195
context: ${{ inputs.workingDirectory }}
196196
push: 'false'
@@ -203,7 +203,7 @@ jobs:
203203
- name: Extract Docker metadata
204204
if: ${{ steps.release_check.outputs.perform_release == 'true' }}
205205
id: meta
206-
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
206+
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
207207
with:
208208
images: ${{ env.IMAGE_NAME }}
209209
tags: |
@@ -216,18 +216,18 @@ jobs:
216216
217217
- name: Setup Docker Buildx
218218
if: ${{ steps.release_check.outputs.perform_release == 'true' }}
219-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
219+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
220220

221221
- name: Login to Docker Hub
222222
if: ${{ steps.release_check.outputs.perform_release == 'true' }}
223-
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
223+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
224224
with:
225225
username: ${{ secrets.DOCKER_HUB_INFODEVOPS_USERNAME }}
226226
password: ${{ secrets.DOCKER_HUB_INFODEVOPS_TOKEN }}
227227

228228
- name: Build & Push Docker image
229229
if: ${{ steps.release_check.outputs.perform_release == 'true' }}
230-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
230+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
231231
with:
232232
context: ${{ inputs.workingDirectory }}
233233
push: ${{ steps.release_check.outputs.perform_release }}

‎.github/workflows/ci-cd-kotlin.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
runs-on: ubuntu-latest
4040
steps:
4141
- name: Checkout
42-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
42+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4343
with:
4444
clean: 'true'
4545
fetch-depth: 2
@@ -62,7 +62,7 @@ jobs:
6262
echo "SHARED_WORKFLOW_REF=${SHARED_WORKFLOW_REF}" >> "$GITHUB_ENV"
6363
6464
- name: Checkout shared workflow scripts
65-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
65+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6666
with:
6767
repository: HSLdevcom/transitdata-shared-workflows
6868
ref: ${{ env.SHARED_WORKFLOW_REF }}
@@ -85,7 +85,7 @@ jobs:
8585
echo "perform_release=${PERFORM_RELEASE}" >> "$GITHUB_OUTPUT"
8686
8787
- name: Setup JDK
88-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4.8.0
88+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
8989
with:
9090
distribution: 'temurin'
9191
java-version: '11'
@@ -142,23 +142,23 @@ jobs:
142142
run: ./gradlew test integrationTest jacocoTestReport --stacktrace
143143

144144
- name: Upload coverage reports to Codecov
145-
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
145+
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
146146
with:
147147
token: ${{ secrets.CODECOV_TOKEN }}
148148
fail_ci_if_error: true
149149
verbose: true
150150

151151
- name: Upload test results to Codecov
152152
if: ${{ !cancelled() }}
153-
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
153+
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
154154
with:
155155
token: ${{ secrets.CODECOV_TOKEN }}
156156
fail_ci_if_error: true
157157
report_type: test_results
158158

159159
- name: Upload .jar artifact
160160
if: ${{ inputs.uploadJarArtifact }}
161-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
161+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
162162
with:
163163
name: ${{ inputs.jarArtifactName }}
164164
path: ${{ inputs.jarArtifactPath }}
@@ -173,20 +173,20 @@ jobs:
173173
run: |
174174
echo "IMAGE_NAME=${IMAGE_NAME_MIXED_CASE,,}" >> "${GITHUB_ENV}"
175175
- name: Build Docker Image
176-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
176+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
177177
with:
178178
context: .
179179
push: 'false'
180180
tags: 'hsldevcom/${{ env.IMAGE_NAME }}:${{ github.sha }}'
181181

182182
- name: Setup Docker Buildx
183183
if: steps.release_check.outputs.perform_release == 'true'
184-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
184+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
185185

186186
- name: Extract Docker metadata
187187
if: steps.release_check.outputs.perform_release == 'true'
188188
id: meta
189-
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
189+
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
190190
with:
191191
images: ${{ env.IMAGE_NAME }}
192192
tags: |
@@ -199,14 +199,14 @@ jobs:
199199
200200
- name: Login to Docker Hub
201201
if: steps.release_check.outputs.perform_release == 'true'
202-
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
202+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
203203
with:
204204
username: ${{ secrets.DOCKER_HUB_INFODEVOPS_USERNAME }}
205205
password: ${{ secrets.DOCKER_HUB_INFODEVOPS_TOKEN }}
206206

207207
- name: Build & Push Docker image
208208
if: steps.release_check.outputs.perform_release == 'true'
209-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
209+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
210210
with:
211211
context: .
212212
push: ${{ steps.release_check.outputs.perform_release }}

‎.github/workflows/ci-cd-typescript.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -32,14 +32,14 @@ jobs:
3232
runs-on: ubuntu-latest
3333
steps:
3434
- name: Checkout
35-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
35+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3636
with:
3737
clean: 'true'
3838
fetch-depth: 2
3939

4040
- name: Install Node
4141
# zizmor:ignore[cache-poisoning] Node binary tool-cache is implicit and cannot be disabled; no npm package cache is configured
42-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
42+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4343
with:
4444
node-version: "lts/*"
4545

@@ -51,15 +51,15 @@ jobs:
5151
run: npm run check-and-build
5252

5353
- name: Upload coverage reports to Codecov
54-
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
54+
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
5555
with:
5656
token: ${{ secrets.CODECOV_TOKEN }}
5757
fail_ci_if_error: true
5858
verbose: true
5959

6060
- name: Upload test results to Codecov
6161
if: ${{ !cancelled() }}
62-
uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5.5.4
62+
uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6.0.1
6363
with:
6464
token: ${{ secrets.CODECOV_TOKEN }}
6565
fail_ci_if_error: true
@@ -85,7 +85,7 @@ jobs:
8585
8686
- name: Extract docker metadata
8787
id: meta
88-
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
88+
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0
8989
with:
9090
images: ${{ env.IMAGE_NAME }}
9191
tags: |
@@ -97,11 +97,11 @@ jobs:
9797
9898
- name: Setup Docker Buildx
9999
if: env.PERFORM_RELEASE == 'true'
100-
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
100+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
101101

102102
- name: Build and export to Docker
103103
if: ${{ inputs.checkAndTestInsideDocker }}
104-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
104+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
105105
with:
106106
context: .
107107
load: true
@@ -116,14 +116,14 @@ jobs:
116116
117117
- name: Login to Docker Hub
118118
if: env.PERFORM_RELEASE == 'true'
119-
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
119+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
120120
with:
121121
username: ${{ secrets.DOCKER_HUB_INFODEVOPS_USERNAME }}
122122
password: ${{ secrets.DOCKER_HUB_INFODEVOPS_TOKEN }}
123123

124124
- name: Build and push
125125
if: env.PERFORM_RELEASE == 'true'
126-
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2
126+
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
127127
with:
128128
context: .
129129
push: true

‎.github/workflows/ci.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- name: Checkout
18-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
18+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1919
with:
2020
persist-credentials: false
2121

@@ -30,10 +30,10 @@ jobs:
3030
runs-on: ubuntu-latest
3131
steps:
3232
- name: Checkout
33-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
33+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3434

3535
- name: Setup Python
36-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
36+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3737
with:
3838
python-version: '3.x'
3939

@@ -50,9 +50,9 @@ jobs:
5050
security-events: write
5151
steps:
5252
- name: Checkout
53-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
53+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5454
with:
5555
persist-credentials: false
5656

5757
- name: Run zizmor
58-
uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3
58+
uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6

0 commit comments

Comments
 (0)