Skip to content

Commit 6a3ca36

Browse files
chore(deps): Bump the development-dependencies group with 4 updates
Bumps the development-dependencies group with 4 updates: [github/codeql-action](https://github.com/github/codeql-action), [taiki-e/install-action](https://github.com/taiki-e/install-action), [orhun/git-cliff-action](https://github.com/orhun/git-cliff-action) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action). Updates `github/codeql-action` from 4.32.3 to 4.32.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@9e907b5...89a39a4) Updates `taiki-e/install-action` from 2.68.3 to 2.68.7 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@1cf3de8...f92912f) Updates `orhun/git-cliff-action` from 4.7.0 to 4.7.1 - [Release notes](https://github.com/orhun/git-cliff-action/releases) - [Commits](orhun/git-cliff-action@e16f179...c93ef52) Updates `aquasecurity/trivy-action` from 0.34.0 to 0.34.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@c1824fd...e368e32) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: taiki-e/install-action dependency-version: 2.68.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: orhun/git-cliff-action dependency-version: 4.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 9a1c116 commit 6a3ca36

3 files changed

Lines changed: 8 additions & 8 deletions

File tree

.github/workflows/codeql.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,9 +26,9 @@ jobs:
2626
-
2727
# Initializes the CodeQL tools for scanning.
2828
name: Initialize CodeQL
29-
uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
29+
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
3030
with:
3131
languages: ${{ matrix.language }}
3232
-
3333
name: Analyze ${{ matrix.language }}
34-
uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
34+
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4

.github/workflows/release.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -93,7 +93,7 @@ jobs:
9393
-
9494
name: Install git-cliff [monorepo]
9595
if: ${{ inputs.is-monorepo == 'true' }}
96-
uses: taiki-e/install-action@1cf3de8de323df92fe08c793e53eaef58799aec4 # v2.68.3
96+
uses: taiki-e/install-action@f92912fad184299a31e22ad070a5059fd07d4f59 # v2.68.7
9797
with:
9898
tool: git-cliff
9999
-
@@ -316,7 +316,7 @@ jobs:
316316
env:
317317
GITHUB_TOKEN: ${{ github.token }}
318318
GITHUB_REPO: ${{ github.repository }}
319-
uses: orhun/git-cliff-action@e16f179f0be49ecdfe63753837f20b9531642772 # v4.7.0
319+
uses: orhun/git-cliff-action@c93ef52f3d0ddcdcc9bd5447d98d458a11cd4f72 # v4.7.1
320320
with:
321321
config: ${{ inputs.cliff-config }}
322322
args: >-
@@ -330,7 +330,7 @@ jobs:
330330
env:
331331
GITHUB_TOKEN: ${{ github.token }}
332332
GITHUB_REPO: ${{ github.repository }}
333-
uses: orhun/git-cliff-action@e16f179f0be49ecdfe63753837f20b9531642772 # v4.7.0
333+
uses: orhun/git-cliff-action@c93ef52f3d0ddcdcc9bd5447d98d458a11cd4f72 # v4.7.1
334334
with:
335335
config: ''
336336
args: >-

.github/workflows/scanner.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
cache: true
3939
-
4040
name: Vulnerability scan by trivy
41-
uses: aquasecurity/trivy-action@c1824fd6edce30d7ab345a9989de00bbd46ef284 # v0.34.0
41+
uses: aquasecurity/trivy-action@e368e328979b113139d6f9068e03accaed98a518 # v0.34.1
4242
with:
4343
scan-type: repo
4444
format: sarif
@@ -49,7 +49,7 @@ jobs:
4949
exit-code: 0
5050
-
5151
name: Upload trivy findings to code scanning dashboard
52-
uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
52+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
5353
with:
5454
category: trivy
5555
sarif_file: trivy-code-report.sarif
@@ -69,7 +69,7 @@ jobs:
6969
output-file: govulnscan-report.sarif
7070
-
7171
name: Upload govulnscan findings to code scanning dashboard
72-
uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3
72+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
7373
with:
7474
category: govulnscan
7575
sarif_file: govulnscan-report.sarif

0 commit comments

Comments
 (0)