Skip to content

Commit e4239d0

Browse files
CopilotCopilot
authored
chore(deps): consolidate dependabot GitHub Actions updates (PRs #235-#239) (#241)
- step-security/harden-runner v2.16.0 -> v2.19.1 - github/codeql-action v4.35.1 -> v4.35.3 - actions/upload-artifact v7.0.0 -> v7.0.1 - ARM-software/cmsis-actions v1.1 -> v1.2 - actions/setup-node v6.3.0 -> v6.4.0
1 parent 7d18764 commit e4239d0

8 files changed

Lines changed: 42 additions & 42 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939

4040
steps:
4141
- name: Harden the runner (Audit all outbound calls)
42-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
42+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
4343
with:
4444
egress-policy: audit
4545

@@ -53,7 +53,7 @@ jobs:
5353
fetch-depth: 0
5454

5555
- name: Setup Node
56-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
56+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
5757
env:
5858
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
5959
with:
@@ -178,42 +178,42 @@ jobs:
178178
run: npm run package -- --target darwin-arm64
179179

180180
- name: Upload win32-x64 VSIX package
181-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
181+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
182182
with:
183183
name: vscode-cmsis-solution-win32-x64
184184
path: ./*win32-x64*.vsix
185185
retention-days: 1
186186

187187
- name: Upload win32-arm64 VSIX package
188-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
188+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
189189
with:
190190
name: vscode-cmsis-solution-win32-arm64
191191
path: ./*win32-arm64*.vsix
192192
retention-days: 1
193193

194194
- name: Upload linux-x64 VSIX package
195-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
195+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
196196
with:
197197
name: vscode-cmsis-solution-linux-x64
198198
path: ./*linux-x64*.vsix
199199
retention-days: 1
200200

201201
- name: Upload linux-arm64 VSIX package
202-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
202+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
203203
with:
204204
name: vscode-cmsis-solution-linux-arm64
205205
path: ./*linux-arm64*.vsix
206206
retention-days: 1
207207

208208
- name: Upload darwin-x64 VSIX package
209-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
209+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
210210
with:
211211
name: vscode-cmsis-solution-darwin-x64
212212
path: ./*darwin-x64*.vsix
213213
retention-days: 1
214214

215215
- name: Upload darwin-arm64 VSIX package
216-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
216+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
217217
with:
218218
name: vscode-cmsis-solution-darwin-arm64
219219
path: ./*darwin-arm64*.vsix
@@ -223,7 +223,7 @@ jobs:
223223
run: git diff > new-version.patch
224224

225225
- name: Store version bump patch
226-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
226+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
227227
with:
228228
name: new-version-patch
229229
path: ./new-version.patch
@@ -253,7 +253,7 @@ jobs:
253253

254254
steps:
255255
- name: Harden the runner (Audit all outbound calls)
256-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
256+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
257257
with:
258258
egress-policy: audit
259259

@@ -264,7 +264,7 @@ jobs:
264264
fetch-depth: 0
265265

266266
- name: Setup Node
267-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
267+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
268268
env:
269269
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
270270
with:
@@ -281,7 +281,7 @@ jobs:
281281
- name: Run Test
282282
run: npm run test
283283

284-
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
284+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
285285
if: ${{ matrix.target == 'linux-x64' }}
286286
with:
287287
name: unit-test-coverage
@@ -303,7 +303,7 @@ jobs:
303303
contents: write
304304
steps:
305305
- name: Harden the runner (Audit all outbound calls)
306-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
306+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
307307
with:
308308
egress-policy: audit
309309

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333

3434
steps:
3535
- name: Harden the runner (Audit all outbound calls)
36-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
36+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3737
with:
3838
egress-policy: audit
3939

@@ -43,16 +43,16 @@ jobs:
4343

4444
- name: Initialize CodeQL
4545
id: initialize
46-
uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
46+
uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
4747
with:
4848
queries: security-extended
4949
languages: TypeScript
5050
source-root: src
5151

5252
- name: Autobuild
5353
id: autobuild
54-
uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
54+
uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
5555

5656
- name: Perform CodeQL Analysis
5757
id: analyze
58-
uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
58+
uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3

‎.github/workflows/dependency-review.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222

2323
steps:
2424
- name: Harden Runner
25-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
25+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
2626
with:
2727
egress-policy: audit
2828

‎.github/workflows/devcontainer.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Harden the runner (Audit all outbound calls)
30-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
30+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3131
with:
3232
egress-policy: audit
3333

‎.github/workflows/markdown.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
actions: read
2828
steps:
2929
- name: Harden Runner
30-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
30+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3131
with:
3232
egress-policy: audit
3333

@@ -44,7 +44,7 @@ jobs:
4444
run: echo "::add-matcher::.github/markdownlint.json"
4545

4646
- name: Setup Node
47-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
47+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4848
env:
4949
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
5050
with:
@@ -70,7 +70,7 @@ jobs:
7070
runs-on: ubuntu-latest
7171
steps:
7272
- name: Harden the runner (Audit all outbound calls)
73-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
73+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
7474
with:
7575
egress-policy: audit
7676

‎.github/workflows/nightly.yml‎

Lines changed: 15 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
runs-on: ubuntu-latest
2828
steps:
2929
- name: Harden the runner (Audit all outbound calls)
30-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
30+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3131
with:
3232
egress-policy: audit
3333

@@ -51,7 +51,7 @@ jobs:
5151

5252
steps:
5353
- name: Harden the runner (Audit all outbound calls)
54-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
54+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
5555
with:
5656
egress-policy: audit
5757

@@ -62,7 +62,7 @@ jobs:
6262
fetch-depth: 0
6363

6464
- name: Setup Node
65-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
65+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
6666
env:
6767
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
6868
with:
@@ -180,42 +180,42 @@ jobs:
180180
run: npm run package -- --target darwin-arm64
181181

182182
- name: Upload win32-x64 VSIX package
183-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
183+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
184184
with:
185185
name: vscode-cmsis-solution-nightly-win32-x64
186186
path: ./*win32-x64*.vsix
187187
retention-days: 1
188188

189189
- name: Upload win32-arm64 VSIX package
190-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
190+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
191191
with:
192192
name: vscode-cmsis-solution-nightly-win32-arm64
193193
path: ./*win32-arm64*.vsix
194194
retention-days: 1
195195

196196
- name: Upload linux-x64 VSIX package
197-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
197+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
198198
with:
199199
name: vscode-cmsis-solution-nightly-linux-x64
200200
path: ./*linux-x64*.vsix
201201
retention-days: 1
202202

203203
- name: Upload linux-arm64 VSIX package
204-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
204+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
205205
with:
206206
name: vscode-cmsis-solution-nightly-linux-arm64
207207
path: ./*linux-arm64*.vsix
208208
retention-days: 1
209209

210210
- name: Upload darwin-x64 VSIX package
211-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
211+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
212212
with:
213213
name: vscode-cmsis-solution-nightly-darwin-x64
214214
path: ./*darwin-x64*.vsix
215215
retention-days: 1
216216

217217
- name: Upload darwin-arm64 VSIX package
218-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
218+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
219219
with:
220220
name: vscode-cmsis-solution-nightly-darwin-arm64
221221
path: ./*darwin-arm64*.vsix
@@ -231,7 +231,7 @@ jobs:
231231
actions: read
232232
steps:
233233
- name: Harden the runner (Audit all outbound calls)
234-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
234+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
235235
with:
236236
egress-policy: audit
237237

@@ -242,7 +242,7 @@ jobs:
242242
fetch-depth: 0
243243

244244
- name: Setup Node
245-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
245+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
246246
env:
247247
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
248248
with:
@@ -265,15 +265,15 @@ jobs:
265265
name: vscode-cmsis-solution-nightly-win32-x64
266266

267267
- name: Setup Node
268-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
268+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
269269
env:
270270
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
271271
with:
272272
node-version: '24'
273273
package-manager-cache: false
274274

275275
- name: Setup vcpkg environment
276-
uses: ARM-software/cmsis-actions/vcpkg@afc8e1a46fad8a5e1a08f8477b71050d442f60a7 # v1.1
276+
uses: ARM-software/cmsis-actions/vcpkg@1ab1da03e6e9787dc903bcf041ba541e59b5739f # v1.2
277277
with:
278278
config: './src/e2e-tests/vcpkg-configuration.json'
279279

@@ -297,14 +297,14 @@ jobs:
297297

298298
- name: Upload HTML report
299299
if: always() && steps.tests.conclusion != 'skipped'
300-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
300+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
301301
with:
302302
name: e2e-report
303303
path: e2e-report
304304

305305
- name: Upload Screenshots
306306
if: always() && steps.tests.conclusion != 'skipped'
307-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
307+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
308308
with:
309309
name: e2e-screenshots
310310
path: e2e-screenshots

‎.github/workflows/scorecard.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Harden Runner
30-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
30+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3131
with:
3232
egress-policy: audit
3333

@@ -44,13 +44,13 @@ jobs:
4444
publish_results: true
4545

4646
- name: "Upload artifact"
47-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
47+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
4848
with:
4949
name: SARIF file
5050
path: results.sarif
5151
retention-days: 5
5252

5353
- name: "Upload to code-scanning"
54-
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
54+
uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3
5555
with:
5656
sarif_file: results.sarif

‎.github/workflows/tpip.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131

3232
steps:
3333
- name: Harden the runner (Audit all outbound calls)
34-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
34+
uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1
3535
with:
3636
egress-policy: audit
3737

@@ -41,7 +41,7 @@ jobs:
4141
ref: ${{ github.event.pull_request.head.ref }}
4242

4343
- name: Setup Node
44-
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
44+
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
4545
env:
4646
NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
4747
with:

0 commit comments

Comments
 (0)