Skip to content

Commit 5f89192

Browse files
chore(deps): Bump the actions group across 1 directory with 3 updates (#58)
Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [github/codeql-action](https://github.com/github/codeql-action) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog). Updates `actions/checkout` from 4.1.7 to 6.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Update changelog by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2357">actions/checkout#2357</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>Update changelog for v6.0.3 by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2446">actions/checkout#2446</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yaananth"><code>@​yaananth</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.3">https://github.com/actions/checkout/compare/v6...v6.0.3</a></p> <h2>v6.0.2</h2> <h2>What's Changed</h2> <ul> <li>Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set by <a href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2355">actions/checkout#2355</a></li> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6.0.1...v6.0.2">https://github.com/actions/checkout/compare/v6.0.1...v6.0.2</a></p> <h2>v6.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update all references from v5 and v4 to v6 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2314">actions/checkout#2314</a></li> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> <li>Clarify v6 README by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2328">actions/checkout#2328</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v6...v6.0.1">https://github.com/actions/checkout/compare/v6...v6.0.1</a></p> <h2>v6.0.0</h2> <h2>What's Changed</h2> <ul> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>v6-beta by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2298">actions/checkout#2298</a></li> <li>update readme/changelog for v6 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2311">actions/checkout#2311</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0">https://github.com/actions/checkout/compare/v5.0.0...v6.0.0</a></p> <h2>v6-beta</h2> <h2>What's Changed</h2> <p>Updated persist-credentials to store the credentials under <code>$RUNNER_TEMP</code> instead of directly in the local git config.</p> <p>This requires a minimum Actions Runner version of <a href="https://github.com/actions/runner/releases/tag/v2.329.0">v2.329.0</a> to access the persisted credentials for <a href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action">Docker container action</a> scenarios.</p> <h2>v5.0.1</h2> <h2>What's Changed</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v6.0.3</h2> <ul> <li>Fix checkout init for SHA-256 repositories by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2439">actions/checkout#2439</a></li> <li>fix: expand merge commit SHA regex and add SHA-256 test cases by <a href="https://github.com/yaananth"><code>@​yaananth</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2414">actions/checkout#2414</a></li> </ul> <h2>v6.0.2</h2> <ul> <li>Fix tag handling: preserve annotations and explicit fetch-tags by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2356">actions/checkout#2356</a></li> </ul> <h2>v6.0.1</h2> <ul> <li>Add worktree support for persist-credentials includeIf by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2327">actions/checkout#2327</a></li> </ul> <h2>v6.0.0</h2> <ul> <li>Persist creds to a separate file by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li> <li>Update README to include Node.js 24 support details and requirements by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li> </ul> <h2>v5.0.1</h2> <ul> <li>Port v6 cleanup to v5 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li> </ul> <h2>v5.0.0</h2> <ul> <li>Update actions checkout to use node 24 by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li> </ul> <h2>v4.3.1</h2> <ul> <li>Port v6 cleanup to v4 by <a href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li> </ul> <h2>v4.3.0</h2> <ul> <li>docs: update README.md by <a href="https://github.com/motss"><code>@​motss</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li> <li>Add internal repos for checking out multiple repositories by <a href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li> <li>Documentation update - add recommended permissions to Readme by <a href="https://github.com/benwells"><code>@​benwells</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li> <li>Adjust positioning of user email note and permissions heading by <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li> <li>Update CODEOWNERS for actions by <a href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li> <li>Update package dependencies by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li> </ul> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <h2>v4.2.0</h2> <ul> <li>Add Ref and Commit outputs by <a href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li> <li>Dependency updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>, <a href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li> </ul> <h2>v4.1.7</h2> <ul> <li>Bump the minor-npm-dependencies group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li> <li>Check out other refs/* by commit by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/df4cb1c069e1874edd31b4311f1884172cec0e10"><code>df4cb1c</code></a> Update changelog for v6.0.3 (<a href="https://redirect.github.com/actions/checkout/issues/2446">#2446</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1cce3390c2bfda521930d01229c073c7ff920824"><code>1cce339</code></a> Fix checkout init for SHA-256 repositories (<a href="https://redirect.github.com/actions/checkout/issues/2439">#2439</a>)</li> <li><a href="https://github.com/actions/checkout/commit/900f2210b1d28bbbd0bd22d17926b9e224e8f231"><code>900f221</code></a> fix: expand merge commit SHA regex and add SHA-256 test cases (<a href="https://redirect.github.com/actions/checkout/issues/2414">#2414</a>)</li> <li><a href="https://github.com/actions/checkout/commit/0c366fd6a839edf440554fa01a7085ccba70ac98"><code>0c366fd</code></a> Update changelog (<a href="https://redirect.github.com/actions/checkout/issues/2357">#2357</a>)</li> <li><a href="https://github.com/actions/checkout/commit/de0fac2e4500dabe0009e67214ff5f5447ce83dd"><code>de0fac2</code></a> Fix tag handling: preserve annotations and explicit fetch-tags (<a href="https://redirect.github.com/actions/checkout/issues/2356">#2356</a>)</li> <li><a href="https://github.com/actions/checkout/commit/064fe7f3312418007dea2b49a19844a9ee378f49"><code>064fe7f</code></a> Add orchestration_id to git user-agent when ACTIONS_ORCHESTRATION_ID is set (...</li> <li><a href="https://github.com/actions/checkout/commit/8e8c483db84b4bee98b60c0593521ed34d9990e8"><code>8e8c483</code></a> Clarify v6 README (<a href="https://redirect.github.com/actions/checkout/issues/2328">#2328</a>)</li> <li><a href="https://github.com/actions/checkout/commit/033fa0dc0b82693d8986f1016a0ec2c5e7d9cbb1"><code>033fa0d</code></a> Add worktree support for persist-credentials includeIf (<a href="https://redirect.github.com/actions/checkout/issues/2327">#2327</a>)</li> <li><a href="https://github.com/actions/checkout/commit/c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5"><code>c2d88d3</code></a> Update all references from v5 and v4 to v6 (<a href="https://redirect.github.com/actions/checkout/issues/2314">#2314</a>)</li> <li><a href="https://github.com/actions/checkout/commit/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"><code>1af3b93</code></a> update readme/changelog for v6 (<a href="https://redirect.github.com/actions/checkout/issues/2311">#2311</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v4.1.7...df4cb1c069e1874edd31b4311f1884172cec0e10">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action` from 4.36.0 to 4.36.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.36.2</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>v4.36.1</h2> <p>No user facing changes.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>4.36.2 - 04 Jun 2026</h2> <ul> <li>Cache CodeQL CLI version information across Actions steps. <a href="https://redirect.github.com/github/codeql-action/pull/3943">#3943</a></li> <li>Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. <a href="https://redirect.github.com/github/codeql-action/pull/3937">#3937</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6">2.25.6</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3948">#3948</a></li> </ul> <h2>4.36.1 - 02 Jun 2026</h2> <p>No user facing changes.</p> <h2>4.36.0 - 22 May 2026</h2> <ul> <li><em>Breaking change</em>: Bump the minimum required CodeQL bundle version to 2.19.4. <a href="https://redirect.github.com/github/codeql-action/pull/3894">#3894</a></li> <li>Add support for SHA-256 Git object IDs. <a href="https://redirect.github.com/github/codeql-action/pull/3893">#3893</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5">2.25.5</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3926">#3926</a></li> </ul> <h2>4.35.5 - 15 May 2026</h2> <ul> <li>We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3899">#3899</a></li> <li>For performance and accuracy reasons, <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. <a href="https://redirect.github.com/github/codeql-action/pull/3791">#3791</a></li> <li>If multiple inputs are provided for the GitHub-internal <code>analysis-kinds</code> input, only <code>code-scanning</code> will be enabled. The <code>analysis-kinds</code> input is experimental, for GitHub-internal use only, and may change without notice at any time. <a href="https://redirect.github.com/github/codeql-action/pull/3892">#3892</a></li> <li>Added an experimental change which, when running a Code Scanning analysis for a PR with <a href="https://redirect.github.com/github/roadmap/issues/1158">improved incremental analysis</a> enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. <a href="https://redirect.github.com/github/codeql-action/pull/3880">#3880</a></li> </ul> <h2>4.35.4 - 07 May 2026</h2> <ul> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4">2.25.4</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3881">#3881</a></li> </ul> <h2>4.35.3 - 01 May 2026</h2> <ul> <li><em>Upcoming breaking change</em>: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. <a href="https://redirect.github.com/github/codeql-action/pull/3837">#3837</a></li> <li>Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. <a href="https://redirect.github.com/github/codeql-action/pull/3850">#3850</a></li> <li>Best-effort connection tests for private registries now use <code>GET</code> requests instead of <code>HEAD</code> for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. <a href="https://redirect.github.com/github/codeql-action/pull/3853">#3853</a></li> <li>Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. <a href="https://redirect.github.com/github/codeql-action/pull/3852">#3852</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3">2.25.3</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3865">#3865</a></li> </ul> <h2>4.35.2 - 15 Apr 2026</h2> <ul> <li>The undocumented TRAP cache cleanup feature that could be enabled using the <code>CODEQL_ACTION_CLEANUP_TRAP_CACHES</code> environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the <code>trap-caching: false</code> input to the <code>init</code> Action. <a href="https://redirect.github.com/github/codeql-action/pull/3795">#3795</a></li> <li>The Git version 2.36.0 requirement for improved incremental analysis now only applies to repositories that contain submodules. <a href="https://redirect.github.com/github/codeql-action/pull/3789">#3789</a></li> <li>Python analysis on GHES no longer extracts the standard library, relying instead on models of the standard library. This should result in significantly faster extraction and analysis times, while the effect on alerts should be minimal. <a href="https://redirect.github.com/github/codeql-action/pull/3794">#3794</a></li> <li>Fixed a bug in the validation of OIDC configurations for private registries that was added in CodeQL Action 4.33.0 / 3.33.0. <a href="https://redirect.github.com/github/codeql-action/pull/3807">#3807</a></li> <li>Update default CodeQL bundle version to <a href="https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.2">2.25.2</a>. <a href="https://redirect.github.com/github/codeql-action/pull/3823">#3823</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/8aad20d150bbac5944a9f9d289da16a4b0d87c1e"><code>8aad20d</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3949">#3949</a> from github/update-v4.36.2-dcb947ce1</li> <li><a href="https://github.com/github/codeql-action/commit/f521b08cd8f468ab193ea950a589cb2e9c869c6a"><code>f521b08</code></a> Add additional changelog notes</li> <li><a href="https://github.com/github/codeql-action/commit/8aeff0ffb7b78582ee0d0e6eebb8140684400d08"><code>8aeff0f</code></a> Update changelog for v4.36.2</li> <li><a href="https://github.com/github/codeql-action/commit/dcb947ce15976d40ea82935510b2db4872ec124c"><code>dcb947c</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3948">#3948</a> from github/update-bundle/codeql-bundle-v2.25.6</li> <li><a href="https://github.com/github/codeql-action/commit/c251bcefa178f7780f62f150002acffe3d07fde9"><code>c251bce</code></a> Add changelog note</li> <li><a href="https://github.com/github/codeql-action/commit/62953c18b35f59e28351d2f1e806925aef8b1e3c"><code>62953c1</code></a> Update default bundle to codeql-bundle-v2.25.6</li> <li><a href="https://github.com/github/codeql-action/commit/423b570baf1976cd7a3daeba5d6e9f9b76432f37"><code>423b570</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3946">#3946</a> from github/dependabot/npm_and_yarn/npm-minor-5d507a...</li> <li><a href="https://github.com/github/codeql-action/commit/c35d1b164463ee62a100735382aaaa525c5d3496"><code>c35d1b1</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3947">#3947</a> from github/dependabot/github_actions/dot-github/wor...</li> <li><a href="https://github.com/github/codeql-action/commit/cb1a588b02755b176e7b9d033ed4b69312f0e1bd"><code>cb1a588</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3937">#3937</a> from github/robertbrignull/waitForProcessing_backoff</li> <li><a href="https://github.com/github/codeql-action/commit/ba47406412c54532b5b4fcfbaf877c9e2382b206"><code>ba47406</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/3943">#3943</a> from github/henrymercer/cache-cli-version-info</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e">compare view</a></li> </ul> </details> <br /> Updates `trufflesecurity/trufflehog` from 3.95.3 to 3.95.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.95.5</h2> <h2>What's Changed</h2> <ul> <li>[INS-461] Add test to ensure new detectors are registered in defaults.go by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4915">trufflesecurity/trufflehog#4915</a></li> <li>[INS-455] Unify common logic in Atlassian Data Center detectors by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4907">trufflesecurity/trufflehog#4907</a></li> <li>fix(github): cache repo info under original URL on redirect by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4958">trufflesecurity/trufflehog#4958</a></li> <li>Added GitLab OAuth Detector by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4729">trufflesecurity/trufflehog#4729</a></li> <li>Box Detector: Extract Subject ID for Analyzer Integration by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4761">trufflesecurity/trufflehog#4761</a></li> <li>[INS-346] SpectralOps Personal API Key Detector by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4770">trufflesecurity/trufflehog#4770</a></li> <li>[INS-335] Added AWS Appsync Detector by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4803">trufflesecurity/trufflehog#4803</a></li> <li>fix(twilio): deduplicate matches to prevent O(N×M) result explosion by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4954">trufflesecurity/trufflehog#4954</a></li> <li>Automate corpora testing in CI by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4927">trufflesecurity/trufflehog#4927</a></li> <li>Enable errcheck and staticcheck for golangci-lint v2 and resolve all issues by <a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4924">trufflesecurity/trufflehog#4924</a></li> <li>feat: add host, db and username to ExtraData for database detectors by <a href="https://github.com/mariocj89"><code>@​mariocj89</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4849">trufflesecurity/trufflehog#4849</a></li> <li>Remove over speculation from Corpora CI workflow by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4974">trufflesecurity/trufflehog#4974</a></li> <li>Fix line numbers for duplicate secrets within a chunk by <a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4910">trufflesecurity/trufflehog#4910</a></li> <li>Add feature flags for Pinecone, Cloudinary, and GitLab OAuth detectors by <a href="https://github.com/camgunz"><code>@​camgunz</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4961">trufflesecurity/trufflehog#4961</a></li> <li>Update Go security dependencies by <a href="https://github.com/cursor"><code>@​cursor</code></a>[bot] in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4986">trufflesecurity/trufflehog#4986</a></li> <li>Pin GitHub Actions to SHA digests by <a href="https://github.com/bryanbeverly"><code>@​bryanbeverly</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4985">trufflesecurity/trufflehog#4985</a></li> <li>Update CODEOWNERS: replace 5 slugs with scanning + integrations by <a href="https://github.com/bryanbeverly"><code>@​bryanbeverly</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4983">trufflesecurity/trufflehog#4983</a></li> <li>Added source config flags to sharepoint proto by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4972">trufflesecurity/trufflehog#4972</a></li> <li>[SCAN-795] HTML decoder: ASPX and entity-encoded HTML support by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4981">trufflesecurity/trufflehog#4981</a></li> <li>adds some debugging info for APKs and fixes issues parsing obfuscated APKs by <a href="https://github.com/johannestaas-trufflesec"><code>@​johannestaas-trufflesec</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4991">trufflesecurity/trufflehog#4991</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mariocj89"><code>@​mariocj89</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4849">trufflesecurity/trufflehog#4849</a></li> <li><a href="https://github.com/cursor"><code>@​cursor</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4986">trufflesecurity/trufflehog#4986</a></li> <li><a href="https://github.com/johannestaas-trufflesec"><code>@​johannestaas-trufflesec</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4991">trufflesecurity/trufflehog#4991</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.95.3...v3.95.5">https://github.com/trufflesecurity/trufflehog/compare/v3.95.3...v3.95.5</a></p> <h2>v3.95.4</h2> <h2>What's Changed</h2> <ul> <li>[INS-461] Add test to ensure new detectors are registered in defaults.go by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4915">trufflesecurity/trufflehog#4915</a></li> <li>[INS-455] Unify common logic in Atlassian Data Center detectors by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4907">trufflesecurity/trufflehog#4907</a></li> <li>fix(github): cache repo info under original URL on redirect by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4958">trufflesecurity/trufflehog#4958</a></li> <li>Added GitLab OAuth Detector by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4729">trufflesecurity/trufflehog#4729</a></li> <li>Box Detector: Extract Subject ID for Analyzer Integration by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4761">trufflesecurity/trufflehog#4761</a></li> <li>[INS-346] SpectralOps Personal API Key Detector by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4770">trufflesecurity/trufflehog#4770</a></li> <li>[INS-335] Added AWS Appsync Detector by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4803">trufflesecurity/trufflehog#4803</a></li> <li>fix(twilio): deduplicate matches to prevent O(N×M) result explosion by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4954">trufflesecurity/trufflehog#4954</a></li> <li>Automate corpora testing in CI by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4927">trufflesecurity/trufflehog#4927</a></li> <li>Enable errcheck and staticcheck for golangci-lint v2 and resolve all issues by <a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4924">trufflesecurity/trufflehog#4924</a></li> <li>feat: add host, db and username to ExtraData for database detectors by <a href="https://github.com/mariocj89"><code>@​mariocj89</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4849">trufflesecurity/trufflehog#4849</a></li> <li>Remove over speculation from Corpora CI workflow by <a href="https://github.com/mustansir14"><code>@​mustansir14</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4974">trufflesecurity/trufflehog#4974</a></li> <li>Fix line numbers for duplicate secrets within a chunk by <a href="https://github.com/amanfcp"><code>@​amanfcp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4910">trufflesecurity/trufflehog#4910</a></li> <li>Add feature flags for Pinecone, Cloudinary, and GitLab OAuth detectors by <a href="https://github.com/camgunz"><code>@​camgunz</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4961">trufflesecurity/trufflehog#4961</a></li> <li>Update Go security dependencies by <a href="https://github.com/cursor"><code>@​cursor</code></a>[bot] in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4986">trufflesecurity/trufflehog#4986</a></li> <li>Pin GitHub Actions to SHA digests by <a href="https://github.com/bryanbeverly"><code>@​bryanbeverly</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4985">trufflesecurity/trufflehog#4985</a></li> <li>Update CODEOWNERS: replace 5 slugs with scanning + integrations by <a href="https://github.com/bryanbeverly"><code>@​bryanbeverly</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4983">trufflesecurity/trufflehog#4983</a></li> <li>Added source config flags to sharepoint proto by <a href="https://github.com/MuneebUllahKhan222"><code>@​MuneebUllahKhan222</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4972">trufflesecurity/trufflehog#4972</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/d411fff7b8879a62509f3fa98c07f247ac089a51"><code>d411fff</code></a> feat(apk): adds some debugging info for APKs and fixes issues parsing obfusca...</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/26eae1f2969f4240acfd3fc363b504b1b43255d4"><code>26eae1f</code></a> [SCAN-795] HTML decoder: ASPX and entity-encoded HTML support (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4981">#4981</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/6c8f64071ba92640f5cc6f4177a91e9a09b0db12"><code>6c8f640</code></a> Added source config flags to sharepoint proto (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4972">#4972</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/9f0b97f1600cd5f51e5ecb8380087807acb790f9"><code>9f0b97f</code></a> Update CODEOWNERS: replace 5 slugs with scanning + integrations (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4983">#4983</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/36f6f697079e637bccb1e05561a481d8b4016862"><code>36f6f69</code></a> Pin GitHub Actions to SHA digests (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4985">#4985</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/52ebebb9b0a762ad5b84a8c2205d38dcf471bd2d"><code>52ebebb</code></a> Update Go security dependencies (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4986">#4986</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/ec67ff26cdeb5c8600a2ca83992d9347975c172a"><code>ec67ff2</code></a> Add feature flags for Pinecone, Cloudinary, and GitLab OAuth detectors (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4961">#4961</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/0ec3634f6cf66a61912a923fee9d20cc45633a67"><code>0ec3634</code></a> Fix line numbers for duplicate secrets within a chunk (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4910">#4910</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/79acbf4703fe7eebd5f190073bd89b16456da7d4"><code>79acbf4</code></a> Remove over speculation from Corpora CI workflow (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4974">#4974</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/d86254ee022cc6533192c5601c143a42706c1004"><code>d86254e</code></a> feat: add host, db and username to ExtraData for database detectors (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4849">#4849</a>)</li> <li>Additional commits viewable in <a href="https://github.com/trufflesecurity/trufflehog/compare/37b77001d0174ebec2fcca2bd83ff83a6d45a3ab...d411fff7b8879a62509f3fa98c07f247ac089a51">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 380577c commit 5f89192

13 files changed

Lines changed: 38 additions & 38 deletions

.github/workflows/cargo-audit.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: ubuntu-latest
2323
timeout-minutes: 30
2424
steps:
25-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
25+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
2626

2727
- name: Install cargo-audit
2828
run: cargo install cargo-audit --locked
@@ -42,7 +42,7 @@ jobs:
4242
permissions:
4343
issues: write
4444
steps:
45-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
45+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
4646

4747
- name: Create vulnerability issue
4848
env:

.github/workflows/casket-pages.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,10 +21,10 @@ jobs:
2121
timeout-minutes: 30
2222
steps:
2323
- name: Checkout
24-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
24+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
2525

2626
- name: Checkout casket-ssg
27-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
27+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
2828
with:
2929
repository: hyperpolymath/casket-ssg
3030
path: .casket-ssg

.github/workflows/cflite_batch.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
runs-on: ubuntu-latest
1010
timeout-minutes: 30
1111
steps:
12-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
12+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
1313
- uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
1414
with:
1515
language: rust

.github/workflows/cflite_pr.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
runs-on: ubuntu-latest
1313
timeout-minutes: 30
1414
steps:
15-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
15+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
1616
- uses: google/clusterfuzzlite/actions/build_fuzzers@884713a6c30a92e5e8544c39945cd7cb630abcd1 # v1
1717
with:
1818
language: rust

.github/workflows/codeql.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,15 +35,15 @@ jobs:
3535

3636
steps:
3737
- name: Checkout
38-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
38+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3939

4040
- name: Initialize CodeQL
41-
uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.28.1
41+
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.28.1
4242
with:
4343
languages: ${{ matrix.language }}
4444
build-mode: ${{ matrix.build-mode }}
4545

4646
- name: Perform CodeQL Analysis
47-
uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.28.1
47+
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.28.1
4848
with:
4949
category: "/language:${{ matrix.language }}"

.github/workflows/comprehensive-quality.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
timeout-minutes: 30
1919
steps:
20-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
20+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
2121
- name: Check test coverage
2222
run: |
2323
echo "Checking for test files..."
@@ -37,9 +37,9 @@ jobs:
3737
runs-on: ubuntu-latest
3838
timeout-minutes: 30
3939
steps:
40-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
40+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
4141
- name: Secret scanning
42-
uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab # v3.95.3
42+
uses: trufflesecurity/trufflehog@d411fff7b8879a62509f3fa98c07f247ac089a51 # v3.95.5
4343
continue-on-error: true
4444
- name: Dependency vulnerabilities
4545
run: |
@@ -58,7 +58,7 @@ jobs:
5858
runs-on: ubuntu-latest
5959
timeout-minutes: 30
6060
steps:
61-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
61+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
6262
- name: Check API specs
6363
run: |
6464
if [ -f "openapi.yaml" ] || [ -f "openapi.json" ]; then
@@ -76,7 +76,7 @@ jobs:
7676
runs-on: ubuntu-latest
7777
timeout-minutes: 30
7878
steps:
79-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
79+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
8080
- name: Check for validation patterns
8181
run: |
8282
VALIDATION=$(grep -rE "validate|sanitize|Schema|Validator" --include="*.rs" --include="*.res" --include="*.ex" . 2>/dev/null | wc -l || echo "0")
@@ -91,7 +91,7 @@ jobs:
9191
contents: read
9292
attestations: write
9393
steps:
94-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
94+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
9595
- name: Generate SBOM
9696
run: |
9797
echo "SBOM generation would run here"
@@ -108,7 +108,7 @@ jobs:
108108
runs-on: ubuntu-latest
109109
timeout-minutes: 30
110110
steps:
111-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
111+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
112112
- name: Check SPARK proofs
113113
run: |
114114
if find . -name "*.ads" | grep -q .; then
@@ -125,7 +125,7 @@ jobs:
125125
runs-on: ubuntu-latest
126126
timeout-minutes: 30
127127
steps:
128-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
128+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
129129
- name: Check TODOs and FIXMEs
130130
run: |
131131
echo "=== Incomplete items ==="
@@ -139,7 +139,7 @@ jobs:
139139
runs-on: ubuntu-latest
140140
timeout-minutes: 30
141141
steps:
142-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
142+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
143143
- name: Check for benchmarks
144144
run: |
145145
BENCHES=$(find . -name "*bench*" -o -name "*perf*" | wc -l)
@@ -157,7 +157,7 @@ jobs:
157157
timeout-minutes: 30
158158
if: hashFiles('**/*.html') != ''
159159
steps:
160-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
160+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
161161
- name: HTML accessibility check
162162
run: |
163163
echo "Checking for a11y attributes..."
@@ -172,7 +172,7 @@ jobs:
172172
runs-on: ubuntu-latest
173173
timeout-minutes: 30
174174
steps:
175-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
175+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
176176
- name: Check license files
177177
run: |
178178
if [ -f "LICENSE" ] || [ -f "LICENSE.txt" ] || [ -f "LICENSE.md" ]; then
@@ -191,7 +191,7 @@ jobs:
191191
runs-on: ubuntu-latest
192192
timeout-minutes: 30
193193
steps:
194-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
194+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
195195
- name: Check docs completeness
196196
run: |
197197
DOCS=""

.github/workflows/jekyll-gh-pages.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
timeout-minutes: 30
3030
steps:
3131
- name: Checkout
32-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
32+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
3333
- name: Setup Pages
3434
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
3535
- name: Build with Jekyll

.github/workflows/proofs.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
timeout-minutes: 5
2222
steps:
2323
- name: Checkout code
24-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
24+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
2525
- name: Scan proof sources
2626
run: bash tools/proof-scan.sh .
2727

@@ -33,7 +33,7 @@ jobs:
3333
timeout-minutes: 30
3434
steps:
3535
- name: Checkout code
36-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
36+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
3737
- name: Install elan (Lean toolchain manager)
3838
run: |
3939
set -euo pipefail

.github/workflows/release.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
- aarch64-unknown-linux-musl
3131
- riscv64gc-unknown-linux-gnu
3232
steps:
33-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
33+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
3434

3535
- name: Install Rust
3636
uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # stable (was misnamed dtolnay/rust-action)
@@ -65,7 +65,7 @@ jobs:
6565
- x86_64-apple-darwin
6666
- aarch64-apple-darwin
6767
steps:
68-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
68+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
6969

7070
- name: Install Rust
7171
uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # stable (was misnamed dtolnay/rust-action)
@@ -92,7 +92,7 @@ jobs:
9292
runs-on: windows-latest
9393
timeout-minutes: 30
9494
steps:
95-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
95+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
9696

9797
- name: Install Rust
9898
uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # stable (was misnamed dtolnay/rust-action)
@@ -118,7 +118,7 @@ jobs:
118118
runs-on: ubuntu-latest
119119
timeout-minutes: 30
120120
steps:
121-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
121+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
122122

123123
- name: Install Gleam
124124
uses: erlef/setup-beam@fc68ffb90438ef2936bbb3251622353b3dcb2f93 # v1.18.2
@@ -144,7 +144,7 @@ jobs:
144144
runs-on: ubuntu-latest
145145
timeout-minutes: 30
146146
steps:
147-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
147+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
148148

149149
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
150150
with:

.github/workflows/scorecard-enforcer.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
security-events: write
2828
id-token: write # For OIDC
2929
steps:
30-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
30+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
3131
with:
3232
persist-credentials: false
3333

@@ -39,7 +39,7 @@ jobs:
3939
publish_results: true
4040

4141
- name: Upload SARIF
42-
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3
42+
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3
4343
with:
4444
sarif_file: results.sarif
4545

@@ -63,7 +63,7 @@ jobs:
6363
runs-on: ubuntu-latest
6464
timeout-minutes: 30
6565
steps:
66-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
66+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v4
6767

6868
- name: Check SECURITY.md exists
6969
run: |

0 commit comments

Comments
 (0)