Skip to content

Commit f2c4efd

Browse files
dependabot[bot]hyperpolymath
dependabot[bot]
authored and
hyperpolymath
committed
chore(deps): bump the actions group with 15 updates
Bumps the actions group with 15 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `6.0.3` | | [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.7.5` | `2.11.0` | | [actions/cache](https://github.com/actions/cache) | `4.3.0` | `5.0.5` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `5.0.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` | | [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia) | `2.7.0` | `3.0.2` | | [julia-actions/cache](https://github.com/julia-actions/cache) | `3.0.0` | `3.1.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.32.6` | `4.36.2` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.2.0` | `3.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/github-script](https://github.com/actions/github-script) | `8.0.0` | `9.0.0` | | [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) | `0.9.1` | `0.10.0` | | [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `efa25f7f19611383d5b0ccf2d1c8914531636bf9` | `3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.93.8` | `3.95.5` | Updates `actions/checkout` from 4.1.1 to 6.0.3 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.1.1...df4cb1c) Updates `haskell-actions/setup` from 2.7.5 to 2.11.0 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](haskell-actions/setup@ec49483...cd0d9bd) Updates `actions/cache` from 4.3.0 to 5.0.5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...27d5ce7) Updates `actions/configure-pages` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@983d773...45bfe01) Updates `actions/upload-pages-artifact` from 3.0.1 to 5.0.0 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@56afc60...fc324d3) Updates `actions/deploy-pages` from 4.0.5 to 5.0.0 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@d6db901...cd2ce8f) Updates `julia-actions/setup-julia` from 2.7.0 to 3.0.2 - [Release notes](https://github.com/julia-actions/setup-julia/releases) - [Commits](julia-actions/setup-julia@4c0cb0f...fa02766) Updates `julia-actions/cache` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/julia-actions/cache/releases) - [Commits](julia-actions/cache@e33b4bf...a45e8fa) Updates `github/codeql-action` from 4.32.6 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.32.6...8aad20d) Updates `dependabot/fetch-metadata` from 2.2.0 to 3.1.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](dependabot/fetch-metadata@dbb049a...25dd0e3) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) Updates `actions/github-script` from 8.0.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@ed59741...3a2844b) Updates `webfactory/ssh-agent` from 0.9.1 to 0.10.0 - [Release notes](https://github.com/webfactory/ssh-agent/releases) - [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md) - [Commits](webfactory/ssh-agent@a6f90b1...e838748) Updates `dtolnay/rust-toolchain` from efa25f7f19611383d5b0ccf2d1c8914531636bf9 to 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](dtolnay/rust-toolchain@efa25f7...3c5f7ea) Updates `trufflesecurity/trufflehog` from 3.93.8 to 3.95.5 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@6c05c4a...d411fff) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: haskell-actions/setup dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 5.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/configure-pages dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-pages-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: julia-actions/setup-julia dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: julia-actions/cache dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dependabot/fetch-metadata dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: webfactory/ssh-agent dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dtolnay/rust-toolchain dependency-version: 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 dependency-type: direct:production dependency-group: actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent e15a3a1 commit f2c4efd

11 files changed

Lines changed: 47 additions & 47 deletions

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
timeout-minutes: 15
1111
steps:
1212
- name: Checkout
13-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
13+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
1414
- name: Trigger BoJ Server (Casket/ssg-mcp)
1515
run: |
1616
# Send a secure trigger to boj-server to build this repository

‎.github/workflows/casket-pages.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,19 +17,19 @@ jobs:
1717
timeout-minutes: 15
1818
steps:
1919
- name: Checkout
20-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
20+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
2121
- name: Checkout casket-ssg
22-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
22+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
2323
with:
2424
repository: hyperpolymath/casket-ssg
2525
path: .casket-ssg
2626
- name: Setup GHCup
27-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
27+
uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2
2828
with:
2929
ghc-version: '9.8.2'
3030
cabal-version: '3.10'
3131
- name: Cache Cabal
32-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
32+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3333
with:
3434
path: |
3535
~/.cabal/packages
@@ -87,9 +87,9 @@ jobs:
8787
cd .casket-ssg && cabal run casket-ssg -- build ../.site-src ../_site
8888
touch ../_site/.nojekyll
8989
- name: Setup Pages
90-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
90+
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
9191
- name: Upload artifact
92-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
92+
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
9393
with:
9494
path: '_site'
9595
deploy:
@@ -102,4 +102,4 @@ jobs:
102102
steps:
103103
- name: Deploy to GitHub Pages
104104
id: deployment
105-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
105+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

‎.github/workflows/ci.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,10 +24,10 @@ jobs:
2424
- julia-version: '1.11'
2525
os: macos-latest
2626
steps:
27-
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
28-
- uses: julia-actions/setup-julia@4c0cb0fce8556fdb04a90347310e5db8b1f98fb9 # v2
27+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
28+
- uses: julia-actions/setup-julia@fa02766e078afaaf09b14210362cee14137e6a32 # v3.0.2
2929
with:
3030
version: ${{ matrix.julia-version }}
31-
- uses: julia-actions/cache@e33b4bfa0ea7cd9caedd7cb82b0e36956ef40285 # v2
31+
- uses: julia-actions/cache@a45e8fa8be21c18a06b7177052533149e61e9b38 # v2
3232
- name: Install, build, test
3333
run: julia --project=. -e 'using Pkg; Pkg.instantiate(); Pkg.build(); Pkg.test()'

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -31,13 +31,13 @@ jobs:
3131
build-mode: none
3232
steps:
3333
- name: Checkout
34-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
34+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3535
- name: Initialize CodeQL
36-
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
36+
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
3737
with:
3838
languages: ${{ matrix.language }}
3939
build-mode: ${{ matrix.build-mode }}
4040
- name: Perform CodeQL Analysis
41-
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
41+
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
4242
with:
4343
category: "/language:${{ matrix.language }}"

‎.github/workflows/dependabot-automerge.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ jobs:
5151
steps:
5252
- name: Fetch Dependabot metadata
5353
id: meta
54-
uses: dependabot/fetch-metadata@dbb049abf0d677abbd7f7eee0375145b417fdd34 # v2.2.0
54+
uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
5555
with:
5656
github-token: ${{ secrets.GITHUB_TOKEN }}
5757
# --- Policy gate -------------------------------------------------------

‎.github/workflows/dogfood-gate.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
timeout-minutes: 15
2323
steps:
2424
- name: Checkout repository
25-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
25+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
2626
- name: Check for A2ML files
2727
id: detect
2828
run: |
@@ -62,7 +62,7 @@ jobs:
6262
timeout-minutes: 15
6363
steps:
6464
- name: Checkout repository
65-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
65+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6666
- name: Check for K9 files
6767
id: detect
6868
run: |
@@ -107,7 +107,7 @@ jobs:
107107
timeout-minutes: 15
108108
steps:
109109
- name: Checkout repository
110-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
110+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
111111
- name: Scan for invisible characters
112112
id: lint
113113
run: |
@@ -168,7 +168,7 @@ jobs:
168168
timeout-minutes: 15
169169
steps:
170170
- name: Checkout repository
171-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
171+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
172172
- name: Check for Groove manifest
173173
id: groove
174174
run: |
@@ -225,7 +225,7 @@ jobs:
225225
if: always()
226226
steps:
227227
- name: Checkout repository
228-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
228+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
229229
- name: Generate dogfooding scorecard
230230
run: |
231231
SCORE=0

‎.github/workflows/hypatia-scan.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
timeout-minutes: 15
4444
steps:
4545
- name: Checkout repository
46-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
46+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4747
with:
4848
fetch-depth: 0 # Full history for better pattern analysis
4949
- name: Setup Elixir for Hypatia scanner
@@ -97,7 +97,7 @@ jobs:
9797
echo "- High: $HIGH" >> $GITHUB_STEP_SUMMARY
9898
echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY
9999
- name: Upload findings artifact
100-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
100+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
101101
with:
102102
name: hypatia-findings
103103
path: hypatia-findings.json
@@ -235,7 +235,7 @@ jobs:
235235
236236
237237
github.event.pull_request.head.repo.fork != true)
238-
uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.28.1
238+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.28.1
239239
with:
240240
sarif_file: hypatia.sarif
241241
# Distinct category so Hypatia results coexist with CodeQL's
@@ -327,6 +327,6 @@ jobs:
327327
# the pull-requests: write permission above: a token/API hiccup or
328328
# a fork PR (read-only token) skips the comment, not the check.
329329
continue-on-error: true
330-
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v7
330+
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v7
331331
with:
332332
script: "const fs = require('fs');\nconst findings = JSON.parse(fs.readFileSync('hypatia-findings.json', 'utf8'));\n\nconst critical = findings.filter(f => f.severity === 'critical').length;\nconst high = findings.filter(f => f.severity === 'high').length;\n\nlet comment = `## \U0001F50D Hypatia Security Scan\\n\\n`;\ncomment += `**Findings:** ${findings.length} issues detected\\n\\n`;\ncomment += `| Severity | Count |\\n|----------|-------|\\n`;\ncomment += `| \U0001F534 Critical | ${critical} |\\n`;\ncomment += `| \U0001F7E0 High | ${high} |\\n`;\ncomment += `| \U0001F7E1 Medium | ${findings.length - critical - high} |\\n\\n`;\n\nif (critical > 0) {\n comment += `⚠️ **Action Required:** Critical security issues found!\\n\\n`;\n}\n\ncomment += `<details><summary>View findings</summary>\\n\\n`;\ncomment += `\\`\\`\\`json\\n${JSON.stringify(findings.slice(0, 10), null, 2)}\\n\\`\\`\\`\\n`;\ncomment += `</details>\\n\\n`;\ncomment += `*Powered by Hypatia Neurosymbolic CI/CD Intelligence*`;\n\ngithub.rest.issues.createComment({\n owner: context.repo.owner,\n repo: context.repo.repo,\n issue_number: context.issue.number,\n body: comment\n});"

‎.github/workflows/mirror.yml‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,10 @@ jobs:
1212
timeout-minutes: 15
1313
if: vars.GITLAB_MIRROR_ENABLED == 'true' && secrets.GITLAB_SSH_KEY != ''
1414
steps:
15-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
15+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
1616
with:
1717
fetch-depth: 0
18-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
18+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
1919
with:
2020
ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
2121
- name: Mirror to GitLab
@@ -28,10 +28,10 @@ jobs:
2828
timeout-minutes: 15
2929
if: vars.BITBUCKET_MIRROR_ENABLED == 'true' && secrets.BITBUCKET_SSH_KEY != ''
3030
steps:
31-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
31+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3232
with:
3333
fetch-depth: 0
34-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
34+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
3535
with:
3636
ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
3737
- name: Mirror to Bitbucket
@@ -44,10 +44,10 @@ jobs:
4444
timeout-minutes: 15
4545
if: vars.CODEBERG_MIRROR_ENABLED == 'true' && secrets.CODEBERG_SSH_KEY != ''
4646
steps:
47-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
47+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
4848
with:
4949
fetch-depth: 0
50-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
50+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
5151
with:
5252
ssh-private-key: ${{ secrets.CODEBERG_SSH_KEY }}
5353
- name: Mirror to Codeberg
@@ -60,10 +60,10 @@ jobs:
6060
timeout-minutes: 15
6161
if: vars.SOURCEHUT_MIRROR_ENABLED == 'true' && secrets.SOURCEHUT_SSH_KEY != ''
6262
steps:
63-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
63+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6464
with:
6565
fetch-depth: 0
66-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
66+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
6767
with:
6868
ssh-private-key: ${{ secrets.SOURCEHUT_SSH_KEY }}
6969
- name: Mirror to SourceHut
@@ -76,10 +76,10 @@ jobs:
7676
timeout-minutes: 15
7777
if: vars.DISROOT_MIRROR_ENABLED == 'true' && secrets.DISROOT_SSH_KEY != ''
7878
steps:
79-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
79+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
8080
with:
8181
fetch-depth: 0
82-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
82+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
8383
with:
8484
ssh-private-key: ${{ secrets.DISROOT_SSH_KEY }}
8585
- name: Mirror to Disroot
@@ -92,10 +92,10 @@ jobs:
9292
timeout-minutes: 15
9393
if: vars.GITEA_MIRROR_ENABLED == 'true' && secrets.GITEA_SSH_KEY != ''
9494
steps:
95-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
95+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
9696
with:
9797
fetch-depth: 0
98-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
98+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
9999
with:
100100
ssh-private-key: ${{ secrets.GITEA_SSH_KEY }}
101101
- name: Mirror to Gitea
@@ -108,11 +108,11 @@ jobs:
108108
timeout-minutes: 15
109109
if: vars.RADICLE_MIRROR_ENABLED == 'true' && secrets.RADICLE_KEY != ''
110110
steps:
111-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
111+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
112112
with:
113113
fetch-depth: 0
114114
- name: Setup Rust
115-
uses: dtolnay/rust-toolchain@efa25f7f19611383d5b0ccf2d1c8914531636bf9 # stable
115+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
116116
with:
117117
toolchain: stable
118118
- name: Install Radicle

‎.github/workflows/scorecard-enforcer.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
security-events: write
3434
id-token: write # For OIDC
3535
steps:
36-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
36+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3737
with:
3838
persist-credentials: false
3939
- name: Run Scorecard
@@ -43,7 +43,7 @@ jobs:
4343
results_format: sarif
4444
publish_results: true
4545
- name: Upload SARIF
46-
uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4
46+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
4747
with:
4848
sarif_file: results.sarif
4949

@@ -61,7 +61,7 @@ jobs:
6161
permissions:
6262
contents: read
6363
steps:
64-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
64+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6565
with:
6666
persist-credentials: false
6767

@@ -91,7 +91,7 @@ jobs:
9191
runs-on: ubuntu-latest
9292
timeout-minutes: 15
9393
steps:
94-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
94+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
9595

9696
- name: Check SECURITY.md exists
9797
run: |

‎.github/workflows/scorecard.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
security-events: write
2424
id-token: write
2525
steps:
26-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
26+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
2727
with:
2828
persist-credentials: false
2929
- name: Run Scorecard
@@ -32,6 +32,6 @@ jobs:
3232
results_file: results.sarif
3333
results_format: sarif
3434
- name: Upload results
35-
uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.31.8
35+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.31.8
3636
with:
3737
sarif_file: results.sarif

0 commit comments

Comments
 (0)