Skip to content

Commit a4ffaf4

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the github-actions group across 1 directory with 8 updates
Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.3.1` | `6.0.3` | | [gradle/actions](https://github.com/gradle/actions) | `48b5f213c81028ace310571dc5ec0fbbca0b2947` | `ed408507eac070d1f99cc633dbcf757c94c7933a` | | [actions/setup-java](https://github.com/actions/setup-java) | `4.8.0` | `5.2.0` | | [lukka/get-cmake](https://github.com/lukka/get-cmake) | `4.0.2` | `4.3.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.0.0` | `5.0.0` | | [google/osv-scanner-action](https://github.com/google/osv-scanner-action) | `2.0.2` | `2.3.8` | | [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `4.0.0` | `5.0.0` | Updates `actions/checkout` from 4.3.1 to 6.0.3 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@34e1148...df4cb1c) Updates `gradle/actions` from 48b5f213c81028ace310571dc5ec0fbbca0b2947 to ed408507eac070d1f99cc633dbcf757c94c7933a - [Release notes](https://github.com/gradle/actions/releases) - [Commits](gradle/actions@48b5f21...ed40850) Updates `actions/setup-java` from 4.8.0 to 5.2.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@c1e3236...be666c2) Updates `lukka/get-cmake` from 4.0.2 to 4.3.3 - [Release notes](https://github.com/lukka/get-cmake/releases) - [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md) - [Commits](lukka/get-cmake@ea00481...591817e) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) Updates `actions/dependency-review-action` from 4.0.0 to 5.0.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@4901385...a1d282b) Updates `google/osv-scanner-action` from 2.0.2 to 2.3.8 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](google/osv-scanner-action@e69cc6c...9a49870) Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0 - [Release notes](https://github.com/peter-evans/create-or-update-comment/releases) - [Commits](peter-evans/create-or-update-comment@71345be...e8674b0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: google/osv-scanner-action dependency-version: 2.3.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: gradle/actions dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: lukka/get-cmake dependency-version: 4.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: peter-evans/create-or-update-comment dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent dc72e32 commit a4ffaf4

9 files changed

Lines changed: 46 additions & 46 deletions

‎.github/workflows/android.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -42,11 +42,11 @@ jobs:
4242
runs-on: ubuntu-latest
4343

4444
steps:
45-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
45+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4646
with:
4747
submodules: recursive
4848

49-
- uses: gradle/actions/wrapper-validation@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
49+
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
5050

5151
- name: Check root crash/replay logs
5252
run: bash scripts/check-no-root-crash-logs.sh
@@ -64,16 +64,16 @@ jobs:
6464
run: bash scripts/check-fastlane-metadata.sh
6565

6666
- name: Set up JDK 17
67-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
67+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
6868
with:
6969
java-version: 17
7070
distribution: temurin
7171

7272
- name: Set up CMake and Ninja
73-
uses: lukka/get-cmake@ea004816823209b8d1211e47b216185caee12cc5 # v4.0.2
73+
uses: lukka/get-cmake@591817e96fcad43505fb4eae36172462abb3a42e # v4.3.3
7474

7575
- name: Cache Gradle
76-
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
76+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
7777

7878
- name: Verify no-network contract (N7.1)
7979
run: ./gradlew :app:verifyNoInternetPermission
@@ -138,14 +138,14 @@ jobs:
138138
echo "All shipped native libraries (if any) are 16 KB aligned."
139139
140140
- name: Upload debug APK
141-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
141+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
142142
with:
143143
name: app-debug.apk
144144
path: app/build/outputs/apk/debug/app-debug.apk
145145

146146
- name: Upload lint report
147147
if: always()
148-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
148+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
149149
with:
150150
name: lint-debug-report
151151
path: |
@@ -155,7 +155,7 @@ jobs:
155155
156156
- name: Upload unit-test report
157157
if: always()
158-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
158+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
159159
with:
160160
name: unit-test-report
161161
path: app/build/reports/tests/testDebugUnitTest/

‎.github/workflows/benchmark-regression.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -42,23 +42,23 @@ jobs:
4242
timeout-minutes: 90
4343

4444
steps:
45-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
45+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4646
with:
4747
submodules: recursive
4848

49-
- uses: gradle/actions/wrapper-validation@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
49+
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
5050

5151
- name: Set up JDK 17
52-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
52+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
5353
with:
5454
java-version: 17
5555
distribution: temurin
5656

5757
- name: Set up CMake and Ninja
58-
uses: lukka/get-cmake@ea004816823209b8d1211e47b216185caee12cc5 # v4.0.2
58+
uses: lukka/get-cmake@591817e96fcad43505fb4eae36172462abb3a42e # v4.3.3
5959

6060
- name: Cache Gradle
61-
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
61+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
6262

6363
- name: Build benchmark APKs
6464
run: ./gradlew :app:assembleBenchmark :benchmark:assembleBenchmark
@@ -141,7 +141,7 @@ jobs:
141141
142142
- name: Upload benchmark trend report
143143
if: always()
144-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
144+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
145145
with:
146146
name: benchmark-trend-report
147147
path: |

‎.github/workflows/crowdin-upload.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121

2222
steps:
2323
- name: Checkout
24-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
24+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
2525
- name: Upload
2626
# SHA pin: crowdin/github-action@v2 = 8868a33591d21088edfc398968173a3b98d51706
2727
# Verified 2026-05-17 via `GET /repos/crowdin/github-action/git/refs/tags/v2`.

‎.github/workflows/dependency-scan.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -40,36 +40,36 @@ jobs:
4040
if: github.event_name == 'pull_request'
4141
runs-on: ubuntu-latest
4242
steps:
43-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
43+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4444
with:
4545
submodules: recursive
4646
- name: Run dependency-review
47-
uses: actions/dependency-review-action@4901385134134e04cec5fbe5ddfe3b2c5bd5d976 # v4
47+
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v4
4848
with:
4949
fail-on-severity: high
5050
comment-summary-in-pr: on-failure
5151

5252
osv-scanner:
5353
runs-on: ubuntu-latest
5454
steps:
55-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
55+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
5656
with:
5757
submodules: recursive
5858

5959
- name: Set up JDK 17
60-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
60+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
6161
with:
6262
java-version: 17
6363
distribution: temurin
6464

6565
- name: Cache Gradle
66-
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
66+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
6767

6868
- name: Generate Gradle dependency tree
6969
run: ./gradlew :app:dependencies --configuration releaseRuntimeClasspath > gradle-deps.txt
7070

7171
- name: Run OSV-Scanner against the lockfiles + dep tree
72-
uses: google/osv-scanner-action/osv-scanner-action@e69cc6c86b31f1e7e23935bbe7031b50e51082de # v2.0.2
72+
uses: google/osv-scanner-action/osv-scanner-action@9a498708959aeaef5ef730655706c5a1df1edbc2 # v2.3.8
7373
with:
7474
scan-args: |-
7575
--recursive
@@ -79,7 +79,7 @@ jobs:
7979

8080
- name: Upload dep tree artifact
8181
if: always()
82-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
82+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8383
with:
8484
name: gradle-dep-tree
8585
path: gradle-deps.txt

‎.github/workflows/emulator-smoke.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -28,23 +28,23 @@ jobs:
2828
timeout-minutes: 35
2929

3030
steps:
31-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
31+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3232
with:
3333
submodules: recursive
3434

35-
- uses: gradle/actions/wrapper-validation@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
35+
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
3636

3737
- name: Set up JDK 17
38-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
38+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
3939
with:
4040
java-version: 17
4141
distribution: temurin
4242

4343
- name: Set up CMake and Ninja
44-
uses: lukka/get-cmake@ea004816823209b8d1211e47b216185caee12cc5 # v4.0.2
44+
uses: lukka/get-cmake@591817e96fcad43505fb4eae36172462abb3a42e # v4.3.3
4545

4646
- name: Cache Gradle
47-
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
47+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
4848

4949
- name: Build debug APK
5050
run: ./gradlew :app:assembleDebug
@@ -77,7 +77,7 @@ jobs:
7777
7878
- name: Upload emulator smoke logcat
7979
if: always()
80-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
80+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8181
with:
8282
name: emulator-smoke-logcat
8383
path: emulator-smoke-logcat.txt

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -47,21 +47,21 @@ jobs:
4747
env:
4848
SIGNING_KEYSTORE_BASE64: ${{ secrets.SIGNING_KEYSTORE_BASE64 }}
4949
steps:
50-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
50+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
5151
with:
5252
submodules: recursive
5353
fetch-depth: 0
5454

55-
- uses: gradle/actions/wrapper-validation@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
55+
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
5656

5757
- name: Set up JDK 17
58-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
58+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
5959
with:
6060
java-version: 17
6161
distribution: temurin
6262

6363
- name: Cache Gradle
64-
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
64+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
6565

6666
- name: Make gradlew executable
6767
run: chmod +x ./gradlew
@@ -170,7 +170,7 @@ jobs:
170170
171171
- name: Upload OSV scan artifacts
172172
if: always()
173-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
173+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
174174
with:
175175
name: swiftfloris-v${{ inputs.version }}-osv
176176
path: |
@@ -280,7 +280,7 @@ jobs:
280280
echo '```' >> "$GITHUB_STEP_SUMMARY"
281281
282282
- name: Upload artifacts
283-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
283+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
284284
with:
285285
name: swiftfloris-v${{ inputs.version }}
286286
path: |

‎.github/workflows/reproducible-build.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -49,31 +49,31 @@ jobs:
4949
runs-on: ubuntu-latest
5050

5151
steps:
52-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
52+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
5353
with:
5454
submodules: recursive
5555
fetch-depth: 0
5656

57-
- uses: gradle/actions/wrapper-validation@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
57+
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
5858

5959
- name: Set up JDK 17
60-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
60+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
6161
with:
6262
java-version: 17
6363
distribution: temurin
6464

6565
- name: Set up CMake and Ninja
66-
uses: lukka/get-cmake@ea004816823209b8d1211e47b216185caee12cc5 # v4.0.2
66+
uses: lukka/get-cmake@591817e96fcad43505fb4eae36172462abb3a42e # v4.3.3
6767

6868
- name: Cache Gradle
69-
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
69+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
7070

7171
- name: Verify release APK reproducibility
7272
run: bash scripts/verify-reproducible-apk.sh "$RUNNER_TEMP/reproducible-apk"
7373

7474
- name: Upload reproducibility artifacts
7575
if: always()
76-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
76+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
7777
with:
7878
name: reproducible-apk-${{ github.sha }}
7979
path: ${{ runner.temp }}/reproducible-apk/

‎.github/workflows/roborazzi-baseline.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -36,20 +36,20 @@ jobs:
3636
runs-on: ubuntu-latest
3737

3838
steps:
39-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
39+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4040
with:
4141
submodules: recursive
4242

43-
- uses: gradle/actions/wrapper-validation@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
43+
- uses: gradle/actions/wrapper-validation@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
4444

4545
- name: Set up JDK 17
46-
uses: actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9 # v4
46+
uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
4747
with:
4848
java-version: 17
4949
distribution: temurin
5050

5151
- name: Cache Gradle
52-
uses: gradle/actions/setup-gradle@48b5f213c81028ace310571dc5ec0fbbca0b2947 # v4
52+
uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4
5353

5454
- name: Make gradlew executable
5555
run: chmod +x ./gradlew
@@ -83,7 +83,7 @@ jobs:
8383
8484
- name: Upload baseline artifact
8585
if: always()
86-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
86+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8787
with:
8888
name: roborazzi-baselines-${{ github.run_id }}${{ inputs.message && format('-{0}', inputs.message) || '' }}
8989
path: app/src/test/snapshots/images/

‎.github/workflows/validate-strings-no-translations.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ jobs:
6767
# while running on `pull_request_target` (base-repo context). A
6868
# floating tag would let an attacker who rotates the v4 ref exfiltrate
6969
# the token. Re-pin when bumping; never re-introduce `@v4`.
70-
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4
70+
uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
7171
if: steps.precheck.outputs.require_validation == 'true' && steps.fetch_changed_files.outputs.illegal_changes_list != ''
7272
with:
7373
issue-number: ${{ github.event.pull_request.number }}

0 commit comments

Comments
 (0)