From b07c8824c05cc7a391cc8911ef93b5d29f1d491c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Oct 2025 06:19:46 +0000 Subject: [PATCH] Bump the all group with 3 updates Bumps the all group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action), [chainguard-dev/actions](https://github.com/chainguard-dev/actions) and [octo-sts/action](https://github.com/octo-sts/action). Updates `github/codeql-action` from 4.30.8 to 4.30.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f443b600d91635bebf5b0d9ebc620189c0d6fba5...16140ae1a102900babc80a33c44059580f687047) Updates `chainguard-dev/actions` from 1.5.6 to 1.5.7 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Changelog](https://github.com/chainguard-dev/actions/blob/main/.goreleaser.yml) - [Commits](https://github.com/chainguard-dev/actions/compare/94249a4828defae94ef3eaeaafaff2f95f1b446f...1b32103f5aa389c31ab0be75a8edc38d7e4750d8) Updates `octo-sts/action` from 1.0.2 to 1.0.3 - [Release notes](https://github.com/octo-sts/action/releases) - [Commits](https://github.com/octo-sts/action/compare/a26b0c6455c7f13316f29a8766287f939e75f6c8...d6c70ad3b9ac85df6da6b9749014d7283987cfec) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.30.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: chainguard-dev/actions dependency-version: 1.5.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: octo-sts/action dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yaml | 8 ++++---- .github/workflows/release.yaml | 4 ++-- .github/workflows/scorecard.yml | 2 +- .github/workflows/style.yaml | 4 ++-- .github/workflows/third-party.yaml | 4 ++-- .github/workflows/version.yaml | 4 ++-- 6 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index b6994766d..2a3452d97 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -56,7 +56,7 @@ jobs: check-latest: true cache: false - name: Initialize CodeQL - uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8 + uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4.30.9 with: languages: go build-mode: manual @@ -64,7 +64,7 @@ jobs: go build -o /dev/null ./... go test -o /dev/null -c ./... - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8 + uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4.30.9 with: category: "/language:go" analyze-actions: @@ -82,11 +82,11 @@ jobs: - name: Checkout repository uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Initialize CodeQL - uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8 + uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4.30.9 with: languages: actions build-mode: none - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8 + uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4.30.9 with: category: "/language:actions" diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index d29fea9f8..1f619627b 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -22,9 +22,9 @@ jobs: egress-policy: audit - name: Checkout code uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - - uses: chainguard-dev/actions/setup-gitsign@94249a4828defae94ef3eaeaafaff2f95f1b446f + - uses: chainguard-dev/actions/setup-gitsign@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 - name: Set up Octo-STS - uses: octo-sts/action@a26b0c6455c7f13316f29a8766287f939e75f6c8 # v1.0.2 + uses: octo-sts/action@d6c70ad3b9ac85df6da6b9749014d7283987cfec # v1.0.3 id: octo-sts with: scope: chainguard-dev/malcontent diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 52f423db2..cdb9a761b 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -75,6 +75,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8 + uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9 with: sarif_file: results.sarif diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml index b67b5a2d6..68ddce22d 100644 --- a/.github/workflows/style.yaml +++ b/.github/workflows/style.yaml @@ -87,7 +87,7 @@ jobs: go-version-file: go.mod check-latest: true - - uses: chainguard-dev/actions/gofmt@94249a4828defae94ef3eaeaafaff2f95f1b446f # main + - uses: chainguard-dev/actions/gofmt@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 # main with: args: -s @@ -111,7 +111,7 @@ jobs: go-version-file: go.mod check-latest: true - - uses: chainguard-dev/actions/goimports@94249a4828defae94ef3eaeaafaff2f95f1b446f # main + - uses: chainguard-dev/actions/goimports@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 # main golangci-lint: name: golangci-lint diff --git a/.github/workflows/third-party.yaml b/.github/workflows/third-party.yaml index 3332fd093..70ff2d0fb 100644 --- a/.github/workflows/third-party.yaml +++ b/.github/workflows/third-party.yaml @@ -38,9 +38,9 @@ jobs: - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Trust repository run: git config --global --add safe.directory "${GITHUB_WORKSPACE}" - - uses: chainguard-dev/actions/setup-gitsign@94249a4828defae94ef3eaeaafaff2f95f1b446f + - uses: chainguard-dev/actions/setup-gitsign@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 - name: Set up Octo-STS - uses: octo-sts/action@a26b0c6455c7f13316f29a8766287f939e75f6c8 # v1.0.2 + uses: octo-sts/action@d6c70ad3b9ac85df6da6b9749014d7283987cfec # v1.0.3 id: octo-sts with: scope: chainguard-dev/malcontent diff --git a/.github/workflows/version.yaml b/.github/workflows/version.yaml index 900effbdf..e6e4d9651 100644 --- a/.github/workflows/version.yaml +++ b/.github/workflows/version.yaml @@ -27,9 +27,9 @@ jobs: with: egress-policy: audit - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - - uses: chainguard-dev/actions/setup-gitsign@94249a4828defae94ef3eaeaafaff2f95f1b446f + - uses: chainguard-dev/actions/setup-gitsign@1b32103f5aa389c31ab0be75a8edc38d7e4750d8 - name: Set up Octo-STS - uses: octo-sts/action@a26b0c6455c7f13316f29a8766287f939e75f6c8 # v1.0.2 + uses: octo-sts/action@d6c70ad3b9ac85df6da6b9749014d7283987cfec # v1.0.3 id: octo-sts with: scope: chainguard-dev/malcontent