chore(deps): bump the actions group with 8 updates (#3)

dependabot[bot] · web-flow · commit 632ac4678dde · 2025-12-16T05:21:34.000Z
Bumps the actions group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [github/codeql-action](https://github.com/github/codeql-action) | `3`
| `4` |
| [erlef/setup-beam](https://github.com/erlef/setup-beam) | `1.16.0` |
`1.20.4` |
| [actions/cache](https://github.com/actions/cache) | `3` | `5` |
|
[slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml](https://github.com/slsa-framework/slsa-github-generator)
| `1.4.0` | `2.1.0` |
|
[actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact)
| `3` | `4` |
| [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) |
`0.9.0` | `0.9.1` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) |
`2.3.1` | `2.4.3` |

Updates `actions/checkout` from 4 to 6
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/actions/checkout/releases"&gt;actions/checkout's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v6.0.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update README to include Node.js 24 support details and requirements
by &lt;a href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2248"&gt;actions/checkout#2248&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Persist creds to a separate file by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2286"&gt;actions/checkout#2286&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;v6-beta by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2298"&gt;actions/checkout#2298&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;update readme/changelog for v6 by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2311"&gt;actions/checkout#2311&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0"&gt;https://github.com/actions/checkout/compare/v5.0.0...v6.0.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v6-beta&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;p&gt;Updated persist-credentials to store the credentials under
&lt;code&gt;$RUNNER_TEMP&lt;/code&gt; instead of directly in the local git
config.&lt;/p&gt;
&lt;p&gt;This requires a minimum Actions Runner version of &lt;a
href="https://github.com/actions/runner/releases/tag/v2.329.0"&gt;v2.329.0&lt;/a&gt;
to access the persisted credentials for &lt;a
href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action"&gt;Docker
container action&lt;/a&gt; scenarios.&lt;/p&gt;
&lt;h2&gt;v5.0.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Port v6 cleanup to v5 by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2301"&gt;actions/checkout#2301&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v5...v5.0.1"&gt;https://github.com/actions/checkout/compare/v5...v5.0.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v5.0.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update actions checkout to use node 24 by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2226"&gt;actions/checkout#2226&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Prepare v5.0.0 release by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2238"&gt;actions/checkout#2238&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;⚠️ Minimum Compatible Runner Version&lt;/h2&gt;
&lt;p&gt;&lt;strong&gt;v2.327.1&lt;/strong&gt;&lt;br /&gt;
&lt;a
href="https://github.com/actions/runner/releases/tag/v2.327.1"&gt;Release
Notes&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;Make sure your runner is updated to this version or newer to use this
release.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v4...v5.0.0"&gt;https://github.com/actions/checkout/compare/v4...v5.0.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v4.3.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Port v6 cleanup to v4 by &lt;a
href="https://github.com/ericsciple"&gt;&lt;code&gt;@​ericsciple&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2305"&gt;actions/checkout#2305&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/checkout/compare/v4...v4.3.1"&gt;https://github.com/actions/checkout/compare/v4...v4.3.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v4.3.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;docs: update README.md by &lt;a
href="https://github.com/motss"&gt;&lt;code&gt;@​motss&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/1971"&gt;actions/checkout#1971&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Add internal repos for checking out multiple repositories by &lt;a
href="https://github.com/mouismail"&gt;&lt;code&gt;@​mouismail&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/1977"&gt;actions/checkout#1977&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Documentation update - add recommended permissions to Readme by &lt;a
href="https://github.com/benwells"&gt;&lt;code&gt;@​benwells&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/checkout/pull/2043"&gt;actions/checkout#2043&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/8e8c483db84b4bee98b60c0593521ed34d9990e8"&gt;&lt;code&gt;8e8c483&lt;/code&gt;&lt;/a&gt;
Clarify v6 README (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2328"&gt;#2328&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/033fa0dc0b82693d8986f1016a0ec2c5e7d9cbb1"&gt;&lt;code&gt;033fa0d&lt;/code&gt;&lt;/a&gt;
Add worktree support for persist-credentials includeIf (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2327"&gt;#2327&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5"&gt;&lt;code&gt;c2d88d3&lt;/code&gt;&lt;/a&gt;
Update all references from v5 and v4 to v6 (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2314"&gt;#2314&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/1af3b93b6815bc44a9784bd300feb67ff0d1eeb3"&gt;&lt;code&gt;1af3b93&lt;/code&gt;&lt;/a&gt;
update readme/changelog for v6 (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2311"&gt;#2311&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/71cf2267d89c5cb81562390fa70a37fa40b1305e"&gt;&lt;code&gt;71cf226&lt;/code&gt;&lt;/a&gt;
v6-beta (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2298"&gt;#2298&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/069c6959146423d11cd0184e6accf28f9d45f06e"&gt;&lt;code&gt;069c695&lt;/code&gt;&lt;/a&gt;
Persist creds to a separate file (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2286"&gt;#2286&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493"&gt;&lt;code&gt;ff7abcd&lt;/code&gt;&lt;/a&gt;
Update README to include Node.js 24 support details and requirements (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2248"&gt;#2248&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"&gt;&lt;code&gt;08c6903&lt;/code&gt;&lt;/a&gt;
Prepare v5.0.0 release (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2238"&gt;#2238&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/checkout/commit/9f265659d3bb64ab1440b03b12f4d47a24320917"&gt;&lt;code&gt;9f26565&lt;/code&gt;&lt;/a&gt;
Update actions checkout to use node 24 (&lt;a
href="https://redirect.github.com/actions/checkout/issues/2226"&gt;#2226&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;See full diff in &lt;a
href="https://github.com/actions/checkout/compare/v4...v6"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `github/codeql-action` from 3 to 4
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/github/codeql-action/releases"&gt;github/codeql-action's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v3.31.8&lt;/h2&gt;
&lt;h1&gt;CodeQL Action Changelog&lt;/h1&gt;
&lt;p&gt;See the &lt;a
href="https://github.com/github/codeql-action/releases"&gt;releases
page&lt;/a&gt; for the relevant changes to the CodeQL CLI and language
packs.&lt;/p&gt;
&lt;h2&gt;3.31.8 - 11 Dec 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.8. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3354"&gt;#3354&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;See the full &lt;a
href="https://github.com/github/codeql-action/blob/v3.31.8/CHANGELOG.md"&gt;CHANGELOG.md&lt;/a&gt;
for more information.&lt;/p&gt;
&lt;h2&gt;v3.31.7&lt;/h2&gt;
&lt;h1&gt;CodeQL Action Changelog&lt;/h1&gt;
&lt;p&gt;See the &lt;a
href="https://github.com/github/codeql-action/releases"&gt;releases
page&lt;/a&gt; for the relevant changes to the CodeQL CLI and language
packs.&lt;/p&gt;
&lt;h2&gt;3.31.7 - 05 Dec 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.7. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3343"&gt;#3343&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;See the full &lt;a
href="https://github.com/github/codeql-action/blob/v3.31.7/CHANGELOG.md"&gt;CHANGELOG.md&lt;/a&gt;
for more information.&lt;/p&gt;
&lt;h2&gt;v3.31.6&lt;/h2&gt;
&lt;h1&gt;CodeQL Action Changelog&lt;/h1&gt;
&lt;p&gt;See the &lt;a
href="https://github.com/github/codeql-action/releases"&gt;releases
page&lt;/a&gt; for the relevant changes to the CodeQL CLI and language
packs.&lt;/p&gt;
&lt;h2&gt;3.31.6 - 01 Dec 2025&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;p&gt;See the full &lt;a
href="https://github.com/github/codeql-action/blob/v3.31.6/CHANGELOG.md"&gt;CHANGELOG.md&lt;/a&gt;
for more information.&lt;/p&gt;
&lt;h2&gt;v3.31.5&lt;/h2&gt;
&lt;h1&gt;CodeQL Action Changelog&lt;/h1&gt;
&lt;p&gt;See the &lt;a
href="https://github.com/github/codeql-action/releases"&gt;releases
page&lt;/a&gt; for the relevant changes to the CodeQL CLI and language
packs.&lt;/p&gt;
&lt;h2&gt;3.31.5 - 24 Nov 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.6. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3321"&gt;#3321&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;See the full &lt;a
href="https://github.com/github/codeql-action/blob/v3.31.5/CHANGELOG.md"&gt;CHANGELOG.md&lt;/a&gt;
for more information.&lt;/p&gt;
&lt;h2&gt;v3.31.4&lt;/h2&gt;
&lt;h1&gt;CodeQL Action Changelog&lt;/h1&gt;
&lt;p&gt;See the &lt;a
href="https://github.com/github/codeql-action/releases"&gt;releases
page&lt;/a&gt; for the relevant changes to the CodeQL CLI and language
packs.&lt;/p&gt;
&lt;h2&gt;3.31.4 - 18 Nov 2025&lt;/h2&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md"&gt;github/codeql-action's
changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;4.31.5 - 24 Nov 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.6. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3321"&gt;#3321&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.4 - 18 Nov 2025&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;h2&gt;4.31.3 - 13 Nov 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;CodeQL Action v3 will be deprecated in December 2026. The Action now
logs a warning for customers who are running v3 but could be running v4.
For more information, see &lt;a
href="https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/"&gt;Upcoming
deprecation of CodeQL Action v3&lt;/a&gt;.&lt;/li&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.5. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3288"&gt;#3288&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.2 - 30 Oct 2025&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;h2&gt;4.31.1 - 30 Oct 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;The &lt;code&gt;add-snippets&lt;/code&gt; input has been removed from the
&lt;code&gt;analyze&lt;/code&gt; action. This input has been deprecated since CodeQL
Action 3.26.4 in August 2024 when this removal was announced.&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.31.0 - 24 Oct 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Bump minimum CodeQL bundle version to 2.17.6. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3223"&gt;#3223&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;When SARIF files are uploaded by the &lt;code&gt;analyze&lt;/code&gt; or
&lt;code&gt;upload-sarif&lt;/code&gt; actions, the CodeQL Action automatically
performs post-processing steps to prepare the data for the upload.
Previously, these post-processing steps were only performed before an
upload took place. We are now changing this so that the post-processing
steps will always be performed, even when the SARIF files are not
uploaded. This does not change anything for the
&lt;code&gt;upload-sarif&lt;/code&gt; action. For &lt;code&gt;analyze&lt;/code&gt;, this may
affect Advanced Setup for CodeQL users who specify a value other than
&lt;code&gt;always&lt;/code&gt; for the &lt;code&gt;upload&lt;/code&gt; input. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3222"&gt;#3222&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.30.9 - 17 Oct 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.3. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3205"&gt;#3205&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Experimental: A new &lt;code&gt;setup-codeql&lt;/code&gt; action has been added
which is similar to &lt;code&gt;init&lt;/code&gt;, except it only installs the
CodeQL CLI and does not initialize a database. Do not use this in
production as it is part of an internal experiment and subject to change
at any time. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3204"&gt;#3204&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;4.30.8 - 10 Oct 2025&lt;/h2&gt;
&lt;p&gt;No user facing changes.&lt;/p&gt;
&lt;h2&gt;4.30.7 - 06 Oct 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;[v4+ only] The CodeQL Action now runs on Node.js v24. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3169"&gt;#3169&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;3.30.6 - 02 Oct 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update default CodeQL bundle version to 2.23.2. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3168"&gt;#3168&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;3.30.5 - 26 Sep 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;We fixed a bug that was introduced in &lt;code&gt;3.30.4&lt;/code&gt; with
&lt;code&gt;upload-sarif&lt;/code&gt; which resulted in files without a
&lt;code&gt;.sarif&lt;/code&gt; extension not getting uploaded. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3160"&gt;#3160&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;3.30.4 - 25 Sep 2025&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;We have improved the CodeQL Action's ability to validate that the
workflow it is used in does not use different versions of the CodeQL
Action for different workflow steps. Mixing different versions of the
CodeQL Action in the same workflow is unsupported and can lead to
unpredictable results. A warning will now be emitted from the
&lt;code&gt;codeql-action/init&lt;/code&gt; step if different versions of the CodeQL
Action are detected in the workflow file. Additionally, an error will
now be thrown by the other CodeQL Action steps if they load a
configuration file that was generated by a different version of the
&lt;code&gt;codeql-action/init&lt;/code&gt; step. &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3099"&gt;#3099&lt;/a&gt;
and &lt;a
href="https://redirect.github.com/github/codeql-action/pull/3100"&gt;#3100&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/c4efbda2999d6895931c401bf16d97750bd3650e"&gt;&lt;code&gt;c4efbda&lt;/code&gt;&lt;/a&gt;
Overlay: Check database metadata for overlayBaseSpecifier&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/dd8914320f183a2820ffe1a91b9fc453164493e6"&gt;&lt;code&gt;dd89143&lt;/code&gt;&lt;/a&gt;
CodeQL: Add resolveDatabase method&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/78357d3fc9e24912713f993f791b2aef1b04bf6d"&gt;&lt;code&gt;78357d3&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/github/codeql-action/issues/3341"&gt;#3341&lt;/a&gt;
from github/mbg/ci/update-cs-config-cli-tests&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/d61a6fa793c84c98e08555552b4b9c6374665d24"&gt;&lt;code&gt;d61a6fa&lt;/code&gt;&lt;/a&gt;
Update CLI config test to account for overlay db changes on PRs&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/ce27e95f791dfda287706648ff69d9226c4526c2"&gt;&lt;code&gt;ce27e95&lt;/code&gt;&lt;/a&gt;
Rebuild&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/43224eb34e6efd92aee9cf38e9f97e15518511be"&gt;&lt;code&gt;43224eb&lt;/code&gt;&lt;/a&gt;
Bump &lt;code&gt;@​eslint/eslintrc&lt;/code&gt; from 3.3.1 to 3.3.3 in the npm-minor
group&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/f0ac9bfbe331b3cc7be1482df79cca2865cb79b6"&gt;&lt;code&gt;f0ac9bf&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/github/codeql-action/issues/3337"&gt;#3337&lt;/a&gt;
from github/mergeback/v4.31.6-to-main-fe4161a2&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/c1ca379fc0b6429602e9a3f43c60ac0bb355636f"&gt;&lt;code&gt;c1ca379&lt;/code&gt;&lt;/a&gt;
Rebuild&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/c3455c55c1eca92492f511e20f52b4cc9ed44afd"&gt;&lt;code&gt;c3455c5&lt;/code&gt;&lt;/a&gt;
Update changelog and version after v4.31.6&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/github/codeql-action/commit/fe4161a26a8629af62121b670040955b330f9af2"&gt;&lt;code&gt;fe4161a&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/github/codeql-action/issues/3336"&gt;#3336&lt;/a&gt;
from github/update-v4.31.6-ecec1f887&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/github/codeql-action/compare/v3...v4"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `erlef/setup-beam` from 1.16.0 to 1.20.4
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/erlef/setup-beam/releases"&gt;erlef/setup-beam's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v1.20.4&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Fix: more versioning around &lt;code&gt;nightly&lt;/code&gt; and
&lt;code&gt;maint&lt;/code&gt;/&lt;code&gt;main&lt;/code&gt; by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/359"&gt;erlef/setup-beam#359&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Dependabot updates&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Bump eslint from 9.30.0 to 9.30.1 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/362"&gt;erlef/setup-beam#362&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.30.0 to 9.30.1 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/360"&gt;erlef/setup-beam#360&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump globals from 16.2.0 to 16.3.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/361"&gt;erlef/setup-beam#361&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1.20.3...v1.20.4"&gt;https://github.com/erlef/setup-beam/compare/v1.20.3...v1.20.4&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.3&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Handle &lt;code&gt;.tool-versions&lt;/code&gt;' line break on Windows by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/357"&gt;erlef/setup-beam#357&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1.20...v1.20.3"&gt;https://github.com/erlef/setup-beam/compare/v1.20...v1.20.3&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.2&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Test for updated doc. on &lt;code&gt;latest&lt;/code&gt; / ranges /
&lt;code&gt;-rc&lt;/code&gt; by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/349"&gt;erlef/setup-beam#349&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump eslint from 9.29.0 to 9.30.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/354"&gt;erlef/setup-beam#354&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump prettier from 3.6.0 to 3.6.2 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/353"&gt;erlef/setup-beam#353&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.29.0 to 9.30.0 by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/352"&gt;erlef/setup-beam#352&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Fix calculating &lt;code&gt;-otp-&lt;/code&gt; major for Elixir by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/351"&gt;erlef/setup-beam#351&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1.20...v1.20.2"&gt;https://github.com/erlef/setup-beam/compare/v1.20...v1.20.2&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Add back deprecated runners with warning by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/348"&gt;erlef/setup-beam#348&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/erlef/setup-beam/compare/v1...v1.20.1"&gt;https://github.com/erlef/setup-beam/compare/v1...v1.20.1&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v1.20.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Fix broken link in &lt;code&gt;CODE_OF_CONDUCT.md&lt;/code&gt; by &lt;a
href="https://github.com/vkatsuba"&gt;&lt;code&gt;@​vkatsuba&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/335"&gt;erlef/setup-beam#335&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Improve output when failing to get a version from &amp;quot;a
place&amp;quot; by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/334"&gt;erlef/setup-beam#334&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Support macOS via &lt;a
href="https://github.com/erlef/otp_builds"&gt;https://github.com/erlef/otp_builds&lt;/a&gt;
by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/332"&gt;erlef/setup-beam#332&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Minor maintenance updates by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/336"&gt;erlef/setup-beam#336&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Update 3rd party licenses (automation) by &lt;a
href="https://github.com/github-actions"&gt;&lt;code&gt;@​github-actions&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/337"&gt;erlef/setup-beam#337&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Act on CodeQL's suggestions for tightening security / improving
performance by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/338"&gt;erlef/setup-beam#338&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Dependabot version updates by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/340"&gt;erlef/setup-beam#340&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Match only on what we know should match (versions start with
numbers, after OTP-) by &lt;a
href="https://github.com/paulo-ferraz-oliveira"&gt;&lt;code&gt;@​paulo-ferraz-oliveira&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/341"&gt;erlef/setup-beam#341&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;&lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt;&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Bump eslint from 9.27.0 to 9.28.0 in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/343"&gt;erlef/setup-beam#343&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.27.0 to 9.28.0 in &lt;a
href="https://redirect.github.com/erlef/setup-beam/pull/342"&gt;erlef/setup-beam#342&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/e6d7c94229049569db56a7ad5a540c051a010af9"&gt;&lt;code&gt;e6d7c94&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to fceaea9&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/fceaea9f54d3e1728dcde37c9a0915bb4cfffeae"&gt;&lt;code&gt;fceaea9&lt;/code&gt;&lt;/a&gt;
Fix: more versioning around &lt;code&gt;nightly&lt;/code&gt; and
&lt;code&gt;maint&lt;/code&gt;/&lt;code&gt;main&lt;/code&gt; (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/359"&gt;#359&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/2bb5b653d0dc50a139d649c97f117eb9afe7a2be"&gt;&lt;code&gt;2bb5b65&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 1d4efdd&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/1d4efdd2e925d87a724996fcb24daf76e8a6e79f"&gt;&lt;code&gt;1d4efdd&lt;/code&gt;&lt;/a&gt;
Bump globals from 16.2.0 to 16.3.0 (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/361"&gt;#361&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/73f047e3287cd08b822367defd635d37a0da60d3"&gt;&lt;code&gt;73f047e&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 6dd8a1a&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/6dd8a1a852cab582718c385599c7cb9c22f5d5af"&gt;&lt;code&gt;6dd8a1a&lt;/code&gt;&lt;/a&gt;
Bump &lt;code&gt;@​eslint/js&lt;/code&gt; from 9.30.0 to 9.30.1 (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/360"&gt;#360&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/fd9a2e183fe60ca9731ee821a94a6a878cf63cb5"&gt;&lt;code&gt;fd9a2e1&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 65085e3&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/65085e37bcd79d7f8065964f111366eabf6f5be0"&gt;&lt;code&gt;65085e3&lt;/code&gt;&lt;/a&gt;
Bump eslint from 9.30.0 to 9.30.1 (&lt;a
href="https://redirect.github.com/erlef/setup-beam/issues/362"&gt;#362&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/80c16595164d4aee66fe8c2a6beca905a73d0381"&gt;&lt;code&gt;80c1659&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 8e7fdef&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/erlef/setup-beam/commit/8e7fdef09ffa3ea54328b5000c170a3b9b20ca96"&gt;&lt;code&gt;8e7fdef&lt;/code&gt;&lt;/a&gt;
Automation: update setup-beam version output to 1fe9179&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/erlef/setup-beam/compare/61e01a43a562a89bfc54c7f9a378ff67b03e4a21...e6d7c94229049569db56a7ad5a540c051a010af9"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `actions/cache` from 3 to 5
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/actions/cache/releases"&gt;actions/cache's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v5.0.0&lt;/h2&gt;
&lt;blockquote&gt;
&lt;p&gt;[!IMPORTANT]
&lt;strong&gt;&lt;code&gt;actions/cache@v5&lt;/code&gt; runs on the Node.js 24 runtime and
requires a minimum Actions Runner version of
&lt;code&gt;2.327.1&lt;/code&gt;.&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;If you are using self-hosted runners, ensure they are updated before
upgrading.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;hr /&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Upgrade to use node24 by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/cache/pull/1630"&gt;actions/cache#1630&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Prepare v5.0.0 release by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/cache/pull/1684"&gt;actions/cache#1684&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/cache/compare/v4.3.0...v5.0.0"&gt;https://github.com/actions/cache/compare/v4.3.0...v5.0.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v4.3.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Add note on runner versions by &lt;a
href="https://github.com/GhadimiR"&gt;&lt;code&gt;@​GhadimiR&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/cache/pull/1642"&gt;actions/cache#1642&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Prepare &lt;code&gt;v4.3.0&lt;/code&gt; release by &lt;a
href="https://github.com/Link"&gt;&lt;code&gt;@​Link&lt;/code&gt;&lt;/a&gt;- in &lt;a
href="https://redirect.github.com/actions/cache/pull/1655"&gt;actions/cache#1655&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/GhadimiR"&gt;&lt;code&gt;@​GhadimiR&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/actions/cache/pull/1642"&gt;actions/cache#1642&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/cache/compare/v4...v4.3.0"&gt;https://github.com/actions/cache/compare/v4...v4.3.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v4.2.4&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update README.md by &lt;a
href="https://github.com/nebuk89"&gt;&lt;code&gt;@​nebuk89&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/cache/pull/1620"&gt;actions/cache#1620&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Upgrade &lt;code&gt;@actions/cache&lt;/code&gt; to &lt;code&gt;4.0.5&lt;/code&gt; and move
&lt;code&gt;@protobuf-ts/plugin&lt;/code&gt; to dev depdencies by &lt;a
href="https://github.com/Link"&gt;&lt;code&gt;@​Link&lt;/code&gt;&lt;/a&gt;- in &lt;a
href="https://redirect.github.com/actions/cache/pull/1634"&gt;actions/cache#1634&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Prepare release &lt;code&gt;4.2.4&lt;/code&gt; by &lt;a
href="https://github.com/Link"&gt;&lt;code&gt;@​Link&lt;/code&gt;&lt;/a&gt;- in &lt;a
href="https://redirect.github.com/actions/cache/pull/1636"&gt;actions/cache#1636&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/nebuk89"&gt;&lt;code&gt;@​nebuk89&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/actions/cache/pull/1620"&gt;actions/cache#1620&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/cache/compare/v4...v4.2.4"&gt;https://github.com/actions/cache/compare/v4...v4.2.4&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v4.2.3&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Update to use &lt;code&gt;@​actions/cache&lt;/code&gt; 4.0.3 package &amp;amp;
prepare for new release by &lt;a
href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/cache/pull/1577"&gt;actions/cache#1577&lt;/a&gt;
(SAS tokens for cache entries are now masked in debug logs)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/salmanmkc"&gt;&lt;code&gt;@​salmanmkc&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/actions/cache/pull/1577"&gt;actions/cache#1577&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/cache/compare/v4.2.2...v4.2.3"&gt;https://github.com/actions/cache/compare/v4.2.2...v4.2.3&lt;/a&gt;&lt;/p&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/actions/cache/blob/main/RELEASES.md"&gt;actions/cache's
changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h1&gt;Releases&lt;/h1&gt;
&lt;h2&gt;Changelog&lt;/h2&gt;
&lt;h3&gt;5.0.1&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update &lt;code&gt;@azure/storage-blob&lt;/code&gt; to &lt;code&gt;^12.29.1&lt;/code&gt; via
&lt;code&gt;@actions/cache@5.0.1&lt;/code&gt; &lt;a
href="https://redirect.github.com/actions/cache/pull/1685"&gt;#1685&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;5.0.0&lt;/h3&gt;
&lt;blockquote&gt;
&lt;p&gt;[!IMPORTANT]
&lt;code&gt;actions/cache@v5&lt;/code&gt; runs on the Node.js 24 runtime and
requires a minimum Actions Runner version of &lt;code&gt;2.327.1&lt;/code&gt;.
If you are using self-hosted runners, ensure they are updated before
upgrading.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;h3&gt;4.3.0&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Bump &lt;code&gt;@actions/cache&lt;/code&gt; to &lt;a
href="https://redirect.github.com/actions/toolkit/pull/2132"&gt;v4.1.0&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;4.2.4&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Bump &lt;code&gt;@actions/cache&lt;/code&gt; to v4.0.5&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;4.2.3&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Bump &lt;code&gt;@actions/cache&lt;/code&gt; to v4.0.3 (obfuscates SAS token in
debug logs for cache entries)&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;4.2.2&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Bump &lt;code&gt;@actions/cache&lt;/code&gt; to v4.0.2&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;4.2.1&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Bump &lt;code&gt;@actions/cache&lt;/code&gt; to v4.0.1&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;4.2.0&lt;/h3&gt;
&lt;p&gt;TLDR; The cache backend service has been rewritten from the ground up
for improved performance and reliability. &lt;a
href="https://github.com/actions/cache"&gt;actions/cache&lt;/a&gt; now integrates
with the new cache service (v2) APIs.&lt;/p&gt;
&lt;p&gt;The new service will gradually roll out as of &lt;strong&gt;February 1st,
2025&lt;/strong&gt;. The legacy service will also be sunset on the same date.
Changes in these release are &lt;strong&gt;fully backward
compatible&lt;/strong&gt;.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;We are deprecating some versions of this action&lt;/strong&gt;. We
recommend upgrading to version &lt;code&gt;v4&lt;/code&gt; or &lt;code&gt;v3&lt;/code&gt; as
soon as possible before &lt;strong&gt;February 1st, 2025.&lt;/strong&gt; (Upgrade
instructions below).&lt;/p&gt;
&lt;p&gt;If you are using pinned SHAs, please use the SHAs of versions
&lt;code&gt;v4.2.0&lt;/code&gt; or &lt;code&gt;v3.4.0&lt;/code&gt;&lt;/p&gt;
&lt;p&gt;If you do not upgrade, all workflow runs using any of the deprecated
&lt;a href="https://github.com/actions/cache"&gt;actions/cache&lt;/a&gt; will
fail.&lt;/p&gt;
&lt;p&gt;Upgrading to the recommended versions will not break your
workflows.&lt;/p&gt;
&lt;h3&gt;4.1.2&lt;/h3&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/9255dc7a253b0ccc959486e2bca901246202afeb"&gt;&lt;code&gt;9255dc7&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/cache/issues/1686"&gt;#1686&lt;/a&gt;
from actions/cache-v5.0.1-release&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/8ff5423e8b66eacab4e638ee52abbd2cb831366a"&gt;&lt;code&gt;8ff5423&lt;/code&gt;&lt;/a&gt;
chore: release v5.0.1&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/9233019a152bc768059ac1768b8e4403b5da16c1"&gt;&lt;code&gt;9233019&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/cache/issues/1685"&gt;#1685&lt;/a&gt;
from salmanmkc/node24-storage-blob-fix&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/b975f2bb844529e1063ad882c609b224bcd66eb6"&gt;&lt;code&gt;b975f2b&lt;/code&gt;&lt;/a&gt;
fix: add peer property to package-lock.json for dependencies&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/d0a0e1813491d01d574c95f8d189f62622bbb2ae"&gt;&lt;code&gt;d0a0e18&lt;/code&gt;&lt;/a&gt;
fix: update license files for &lt;code&gt;@​actions/cache&lt;/code&gt;,
fast-xml-parser, and strnum&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/74de208dcfcbe85c0e7154e7b17e4105fe2554ff"&gt;&lt;code&gt;74de208&lt;/code&gt;&lt;/a&gt;
fix: update &lt;code&gt;@​actions/cache&lt;/code&gt; to ^5.0.1 for Node.js 24
punycode fix&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/ac7f1152ead02e89c14b5456d14ab17591e74cfb"&gt;&lt;code&gt;ac7f115&lt;/code&gt;&lt;/a&gt;
peer&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/b0f846b50b6061d7a2ca6f1a2fea61d4a65d1a16"&gt;&lt;code&gt;b0f846b&lt;/code&gt;&lt;/a&gt;
fix: update &lt;code&gt;@​actions/cache&lt;/code&gt; with storage-blob fix for
Node.js 24 punycode depr...&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/a7833574556fa59680c1b7cb190c1735db73ebf0"&gt;&lt;code&gt;a783357&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/cache/issues/1684"&gt;#1684&lt;/a&gt;
from actions/prepare-cache-v5-release&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/cache/commit/3bb0d78750a39cefce0c2b5a0a9801052b4359ad"&gt;&lt;code&gt;3bb0d78&lt;/code&gt;&lt;/a&gt;
docs: highlight v5 runner requirement in releases&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/actions/cache/compare/v3...v5"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates
`slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml`
from 1.4.0 to 2.1.0
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/slsa-framework/slsa-github-generator/releases"&gt;slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v2.1.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;chore: v2.0.0: update tags to v2.0.0 by &lt;a
href="https://github.com/ramonpetgrave64"&gt;&lt;code&gt;@​ramonpetgrave64&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3584"&gt;slsa-framework/slsa-github-generator#3584&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: use &lt;code&gt;@​sigstore/cli&lt;/code&gt; in
e2e.sign-attestations.schedule.yml by &lt;a
href="https://github.com/ramonpetgrave64"&gt;&lt;code&gt;@​ramonpetgrave64&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3572"&gt;slsa-framework/slsa-github-generator#3572&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: fix broken links by &lt;a
href="https://github.com/suzuki-shunsuke"&gt;&lt;code&gt;@​suzuki-shunsuke&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3605"&gt;slsa-framework/slsa-github-generator#3605&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(setup-go): update actions/setup-go to resolve the warning by
&lt;a
href="https://github.com/suzuki-shunsuke"&gt;&lt;code&gt;@​suzuki-shunsuke&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3604"&gt;slsa-framework/slsa-github-generator#3604&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: Update release docs by &lt;a
href="https://github.com/ramonpetgrave64"&gt;&lt;code&gt;@​ramonpetgrave64&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3589"&gt;slsa-framework/slsa-github-generator#3589&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: Add Atsign-Foundation NoPorts to the Hall of Fame by &lt;a
href="https://github.com/cpswan"&gt;&lt;code&gt;@​cpswan&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3616"&gt;slsa-framework/slsa-github-generator#3616&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: Add v2.0.0 to SECURITY.md by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3630"&gt;slsa-framework/slsa-github-generator#3630&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: Add links to CHANGELOG by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3631"&gt;slsa-framework/slsa-github-generator#3631&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;ci: fix PR title checker by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3632"&gt;slsa-framework/slsa-github-generator#3632&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;ci: Add issue reopener by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3629"&gt;slsa-framework/slsa-github-generator#3629&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: update softprops/action-gh-release to v2.0.5 by &lt;a
href="https://github.com/suzuki-shunsuke"&gt;&lt;code&gt;@​suzuki-shunsuke&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3619"&gt;slsa-framework/slsa-github-generator#3619&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(renovate): use cron syntax for schedule by &lt;a
href="https://github.com/rarkins"&gt;&lt;code&gt;@​rarkins&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3638"&gt;slsa-framework/slsa-github-generator#3638&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: Fix Renovate config by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3635"&gt;slsa-framework/slsa-github-generator#3635&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;feat: workflow to update actions dist by &lt;a
href="https://github.com/ramonpetgrave64"&gt;&lt;code&gt;@​ramonpetgrave64&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3653"&gt;slsa-framework/slsa-github-generator#3653&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update dependency &lt;code&gt;@​sigstore/rekor-types&lt;/code&gt; to
v2 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3650"&gt;slsa-framework/slsa-github-generator#3650&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update github-actions (major) by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3648"&gt;slsa-framework/slsa-github-generator#3648&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update dependency org.json:json to v20231013 [security]
by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3641"&gt;slsa-framework/slsa-github-generator#3641&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update module github.com/sigstore/cosign/v2 to v2.2.4
[security] by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3640"&gt;slsa-framework/slsa-github-generator#3640&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update dependency pathspec to v0.12.1 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3644"&gt;slsa-framework/slsa-github-generator#3644&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update dependency &lt;code&gt;@​actions/github&lt;/code&gt; to v6 by
&lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3649"&gt;slsa-framework/slsa-github-generator#3649&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update module golang.org/x/oauth2 to v0.20.0 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3646"&gt;slsa-framework/slsa-github-generator#3646&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update npm by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3647"&gt;slsa-framework/slsa-github-generator#3647&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: formatting by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3655"&gt;slsa-framework/slsa-github-generator#3655&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update github-actions by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3642"&gt;slsa-framework/slsa-github-generator#3642&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: Add openfga as another user of slsa-github-generator via
Github Actions by &lt;a
href="https://github.com/aaguiarz"&gt;&lt;code&gt;@​aaguiarz&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/2950"&gt;slsa-framework/slsa-github-generator#2950&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update dependency org.apache.maven:maven-plugin-api to
v3.9.6 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3645"&gt;slsa-framework/slsa-github-generator#3645&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: allow Renovate to create new config warning issues by &lt;a
href="https://github.com/HonkingGoose"&gt;&lt;code&gt;@​HonkingGoose&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3662"&gt;slsa-framework/slsa-github-generator#3662&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: Fix markdown issues by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3658"&gt;slsa-framework/slsa-github-generator#3658&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update npm dev by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3643"&gt;slsa-framework/slsa-github-generator#3643&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;feat: Record vars in SLSA generators by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3633"&gt;slsa-framework/slsa-github-generator#3633&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update github-actions by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3679"&gt;slsa-framework/slsa-github-generator#3679&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update dependency org.apache.maven:maven-plugin-api to
v3.9.7 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3680"&gt;slsa-framework/slsa-github-generator#3680&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;docs: Remove expected GA for Node.js builder by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3659"&gt;slsa-framework/slsa-github-generator#3659&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;ci: Add formatting pre-submit check by &lt;a
href="https://github.com/ianlewis"&gt;&lt;code&gt;@​ianlewis&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3654"&gt;slsa-framework/slsa-github-generator#3654&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update dependency org.apache.maven:maven-plugin-api to
v3.9.8 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3712"&gt;slsa-framework/slsa-github-generator#3712&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): bump the npm_and_yarn group across 10 directories with
2 updates by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3714"&gt;slsa-framework/slsa-github-generator#3714&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update github-actions by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3711"&gt;slsa-framework/slsa-github-generator#3711&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): bump the go_modules group with 2 updates by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3715"&gt;slsa-framework/slsa-github-generator#3715&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore: slsa-verifier v2.6.0: Update action.yml by &lt;a
href="https://github.com/ramonpetgrave64"&gt;&lt;code&gt;@​ramonpetgrave64&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3736"&gt;slsa-framework/slsa-github-generator#3736&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: Update maven helper plugin build by &lt;a
href="https://github.com/loosebazooka"&gt;&lt;code&gt;@​loosebazooka&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3746"&gt;slsa-framework/slsa-github-generator#3746&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix: maven e2e: remove verify job by &lt;a
href="https://github.com/ramonpetgrave64"&gt;&lt;code&gt;@​ramonpetgrave64&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3748"&gt;slsa-framework/slsa-github-generator#3748&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update github-actions by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3753"&gt;slsa-framework/slsa-github-generator#3753&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): bump github.com/docker/docker from 24.0.9+incompatible
to 25.0.6+incompatible in the go_modules group by &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3760"&gt;slsa-framework/slsa-github-generator#3760&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(config): migrate renovate config by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3774"&gt;slsa-framework/slsa-github-generator#3774&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update dependency
org.apache.maven.plugins:maven-javadoc-plugin to v3.10.1 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3758"&gt;slsa-framework/slsa-github-generator#3758&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update dependency
org.apache.maven.plugins:maven-deploy-plugin to v3.1.3 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3820"&gt;slsa-framework/slsa-github-generator#3820&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;chore(deps): update dependency
org.apache.maven.plugins:maven-gpg-plugin to v3.2.5 by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3757"&gt;slsa-framework/slsa-github-generator#3757&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;fix(deps): update npm by &lt;a
href="https://github.com/renovate-bot"&gt;&lt;code&gt;@​renovate-bot&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/pull/3754"&gt;slsa-framework/slsa-github-generator#3754&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md"&gt;slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml's
changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v2.1.0&lt;/h2&gt;
&lt;h3&gt;v2.1.0: Sigstore Bundles for Generic Generator and Go Builder&lt;/h3&gt;
&lt;p&gt;The workflows &lt;code&gt;generator_generic_slsa3.yml&lt;/code&gt; and
&lt;code&gt;builder_go_slsa3.yml&lt;/code&gt;
have been updated to produce signed Sigstore Bundles, just like all the
other builders
that use the BYOB framework.&lt;/p&gt;
&lt;p&gt;The workflow logs will now print a LogIndex, rather than a LogUUID.
Both are equally searchanble on
&lt;a
href="https://search.sigstore.dev/"&gt;https://search.sigstore.dev/&lt;/a&gt;.&lt;/p&gt;
&lt;h3&gt;v2.1.0: Vars context recorded in provenance&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;strong&gt;Updated&lt;/strong&gt;: GitHub &lt;code&gt;vars&lt;/code&gt; context is now
recorded in provenance for the generic and
container generators. The &lt;code&gt;vars&lt;/code&gt; context cannot affect the
build in the Go
builder so it is not recorded.&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v2.0.0&lt;/h2&gt;
&lt;h3&gt;v2.0.0: Breaking Change: upload-artifact and download-artifact&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Our workflows now use the new &lt;code&gt;@v4&lt;/code&gt;s of
&lt;code&gt;actions/upload-artifact&lt;/code&gt; and
&lt;code&gt;actions/download-artifact&lt;/code&gt;, which are incompatiblle with the
prior &lt;code&gt;@v3&lt;/code&gt;. See
Our docs on the &lt;a
href="https://github.com/slsa-framework/slsa-github-generator/blob/main/internal/builders/generic/README.md#compatibility-with-actionsdownload-artifact"&gt;generic
generator&lt;/a&gt;
for more information and how to upgrade.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;v2.0.0: Breaking Change: attestation-name Workflow Input and
Output&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;&lt;code&gt;attestation-name&lt;/code&gt; as a workflow input to
&lt;code&gt;.github/workflows/generator_generic_slsa3.yml&lt;/code&gt; is now
removed. Use
&lt;code&gt;provenance-name&lt;/code&gt; instead.&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;v2.0.0: DSSE Rekor Type&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;When uploading signed provenance to the log, the entry created in
the log is now
a DSSE Rekor type. This fixes a bug where the current intoto type does
not
persist provenance signatures. The attestation will no longer be
persisted
in Rekor (&lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/issues/3299"&gt;#3299&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v1.10.0&lt;/h2&gt;
&lt;p&gt;Release &lt;a
href="https://github.com/slsa-framework/slsa-github-generator/releases/tag/v1.10.0"&gt;v1.10.0&lt;/a&gt;
includes bug fixes and new features.&lt;/p&gt;
&lt;p&gt;See the &lt;a
href="https://github.com/slsa-framework/slsa-github-generator/compare/v1.9.0...v1.10.0"&gt;full
change list&lt;/a&gt;.&lt;/p&gt;
&lt;h3&gt;v1.10.0: TUF fix&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;The cosign TUF roots were fixed (&lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/issues/3350"&gt;#3350&lt;/a&gt;).
More details &lt;a
href="https://github.com/slsa-framework/slsa-github-generator/blob/v1.10.0/README.md#error-updating-to-tuf-remote-mirror-invalid"&gt;here&lt;/a&gt;.&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/f7dd8c54c2067bafc12ca7a55595d5ee9b75204a"&gt;&lt;code&gt;f7dd8c5&lt;/code&gt;&lt;/a&gt;
update the ref in the pre-submit&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/0a5124b181e38cc2890f186c2990ecec131012bc"&gt;&lt;code&gt;0a5124b&lt;/code&gt;&lt;/a&gt;
fix jq for the sigstore bundles&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/fbeecf0c1e9cbb70c6828b0d311037a9e6cce717"&gt;&lt;code&gt;fbeecf0&lt;/code&gt;&lt;/a&gt;
update docs&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/f701310a334f5d712a8869541c8e19ecb4eefc24"&gt;&lt;code&gt;f701310&lt;/code&gt;&lt;/a&gt;
update workflows&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/361859811395a7dfc81e24fb4dfe843a59715a40"&gt;&lt;code&gt;3618598&lt;/code&gt;&lt;/a&gt;
v2.1.0-rc.3&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/46f81fc6ad1b81b30ecdcf73ef9968b9787dc2c5"&gt;&lt;code&gt;46f81fc&lt;/code&gt;&lt;/a&gt;
chore: update refs to v2.1.0-rc.1 (&lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/issues/4120"&gt;#4120&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/5d20c9315555cc3ea10212f5ab25b0d883f3d428"&gt;&lt;code&gt;5d20c93&lt;/code&gt;&lt;/a&gt;
chore: use builder tag v2.1.0-rc.0 (&lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/issues/4118"&gt;#4118&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/e27b237be2003c8ae32f1300b9f5c3cc9c71dce7"&gt;&lt;code&gt;e27b237&lt;/code&gt;&lt;/a&gt;
chore: braces and ejs vulns (&lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/issues/4116"&gt;#4116&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/8967e1c98e3dcee60e8651c796b4f5a99300eadc"&gt;&lt;code&gt;8967e1c&lt;/code&gt;&lt;/a&gt;
chore: Update CODEOWNERS (&lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/issues/4115"&gt;#4115&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/slsa-framework/slsa-github-generator/commit/47d1954c9e926d98abb20faffbf6352b3f736dce"&gt;&lt;code&gt;47d1954&lt;/code&gt;&lt;/a&gt;
chore: update octokit deps (&lt;a
href="https://redirect.github.com/slsa-framework/slsa-github-generator/issues/4114"&gt;#4114&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/slsa-framework/slsa-github-generator/compare/v1.4.0...v2.1.0"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `actions/upload-pages-artifact` from 3 to 4
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/actions/upload-pages-artifact/releases"&gt;actions/upload-pages-artifact's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v4.0.0&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Potentially breaking change: hidden files (specifically dotfiles)
will not be included in the artifact by &lt;a
href="https://github.com/tsusdere"&gt;&lt;code&gt;@​tsusdere&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/pull/102"&gt;actions/upload-pages-artifact#102&lt;/a&gt;
If you need to include dotfiles in your artifact: instead of using this
action, create your own artifact according to these requirements &lt;a
href="https://github.com/actions/upload-pages-artifact?tab=readme-ov-file#artifact-validation"&gt;https://github.com/actions/upload-pages-artifact?tab=readme-ov-file#artifact-validation&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;Pin &lt;code&gt;actions/upload-artifact&lt;/code&gt; to SHA by &lt;a
href="https://github.com/heavymachinery"&gt;&lt;code&gt;@​heavymachinery&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/pull/127"&gt;actions/upload-pages-artifact#127&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/actions/upload-pages-artifact/compare/v3.0.1...v4.0.0"&gt;https://github.com/actions/upload-pages-artifact/compare/v3.0.1...v4.0.0&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v3.0.1&lt;/h2&gt;
&lt;h1&gt;Changelog&lt;/h1&gt;
&lt;ul&gt;
&lt;li&gt;Group tar's output to prevent it from messing up action logs &lt;a
href="https://github.com/SilverRainZ"&gt;&lt;code&gt;@​SilverRainZ&lt;/code&gt;&lt;/a&gt; (&lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/94"&gt;#94&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Update README.md &lt;a
href="https://github.com/uiolee"&gt;&lt;code&gt;@​uiolee&lt;/code&gt;&lt;/a&gt; (&lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/88"&gt;#88&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Bump the non-breaking-changes group with 1 update &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; (&lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/92"&gt;#92&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Update Dependabot config to group non-breaking changes &lt;a
href="https://github.com/JamesMGreene"&gt;&lt;code&gt;@​JamesMGreene&lt;/code&gt;&lt;/a&gt;
(&lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/91"&gt;#91&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Bump actions/checkout from 3 to 4 &lt;a
href="https://github.com/dependabot"&gt;&lt;code&gt;@​dependabot&lt;/code&gt;&lt;/a&gt; (&lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/76"&gt;#76&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;See details of &lt;a
href="https://github.com/actions/upload-pages-artifact/compare/v3.0.0...v3.0.1"&gt;all
code changes&lt;/a&gt; since previous release.&lt;/p&gt;
&lt;/blockquote&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/7b1f4a764d45c48632c6b24a0339c27f5614fb0b"&gt;&lt;code&gt;7b1f4a7&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/127"&gt;#127&lt;/a&gt;
from heavymachinery/pin-sha&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/4cc19c7d3f3e6c87c68366501382a03c8b1ba6db"&gt;&lt;code&gt;4cc19c7&lt;/code&gt;&lt;/a&gt;
Pin &lt;code&gt;actions/upload-artifact&lt;/code&gt; to SHA&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/2d163be3ddce01512f3eea7ac5b7023b5d643ce1"&gt;&lt;code&gt;2d163be&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/107"&gt;#107&lt;/a&gt;
from KittyChiu/main&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/c70484322b1c476728dcd37fac23c4dea2a0c51a"&gt;&lt;code&gt;c704843&lt;/code&gt;&lt;/a&gt;
fix: linted README&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/9605915f1d2fc79418cdce4d5fbe80511c457655"&gt;&lt;code&gt;9605915&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/106"&gt;#106&lt;/a&gt;
from KittyChiu/kittychiu/update-readme-1&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/e59cdfe6d6b061aab8f0619e759cded914f3ab03"&gt;&lt;code&gt;e59cdfe&lt;/code&gt;&lt;/a&gt;
Update README.md&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/a2d67043267d885050434d297d3dd3a3a14fd899"&gt;&lt;code&gt;a2d6704&lt;/code&gt;&lt;/a&gt;
doc: updated usage section in readme&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/984864e7b70fb5cb764344dc9c4b5c087662ef50"&gt;&lt;code&gt;984864e&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/105"&gt;#105&lt;/a&gt;
from actions/Jcambass-patch-1&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/45dc78884ca148c05eddcd8ac0a804d3365e9014"&gt;&lt;code&gt;45dc788&lt;/code&gt;&lt;/a&gt;
Add workflow file for publishing releases to immutable action
package&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/actions/upload-pages-artifact/commit/efaad07812d4b9ad2e8667cd46426fdfb7c22e22"&gt;&lt;code&gt;efaad07&lt;/code&gt;&lt;/a&gt;
Merge pull request &lt;a
href="https://redirect.github.com/actions/upload-pages-artifact/issues/102"&gt;#102&lt;/a&gt;
from actions/hidden-files&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a
href="https://github.com/actions/upload-pages-artifact/compare/v3...v4"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `webfactory/ssh-agent` from 0.9.0 to 0.9.1
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/webfactory/ssh-agent/releases"&gt;webfactory/ssh-agent's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v0.9.1&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;Acknowledge custom command inputs in cleanup.js by &lt;a
href="https://github.com/janopae"&gt;&lt;code&gt;@​janopae&lt;/code&gt;&lt;/a&gt; in &lt;a
href="https://redirect.github.com/webfactory/ssh-agent/pull/235"&gt;webfactory/ssh-agent#235&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a href="https://github.com/janopae"&gt;&lt;code&gt;@​janopae&lt;/code&gt;&lt;/a&gt; made
their first contribution in &lt;a
href="https://redirect.github.com/webfactory/ssh-agent/pull/235"&gt;webfactory/ssh-agent#235&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/webfactory/ssh-agent/compare/v0.9.0...v0.9.1"&gt;https://github.com/webfactory/ssh-agent/compare/v0.9.0...v0.9.1&lt;/a&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Changelog&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md"&gt;webfactory/ssh-agent's
changelog&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h1&gt;Changelog&lt;/h1&gt;
&lt;p&gt;All notable changes to this project will be documented in this
file.&lt;/p&gt;
&lt;p&gt;The format is based on &lt;a
href="https://keepachangelog.com/en/1.0.0/"&gt;Keep a Changelog&lt;/a&gt;,
and this project adheres to &lt;a
href="https://semver.org/spec/v2.0.0.html"&gt;Semantic Versioning&lt;/a&gt;.&lt;/p&gt;
&lt;h2&gt;[Unreleased]&lt;/h2&gt;
&lt;h2&gt;v0.9.1 [2024-03-17]&lt;/h2&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Fix path used to execute ssh-agent in cleanup.js to respect custom
paths set by input (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/235"&gt;#235&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v0.9.0 [2024-02-06]&lt;/h2&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update all versions of &lt;code&gt;actions/checkout&lt;/code&gt; to v4 (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/199"&gt;#199&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Update to Node 20 (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/201"&gt;#201&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v0.8.0 [2023-03-24]&lt;/h2&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;No longer writing GitHub's SSH host keys to &lt;code&gt;known_hosts&lt;/code&gt;
(&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/171"&gt;#171&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Update to actions/checkout@v3 (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/143"&gt;#143&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Allow the user to override the commands for git, ssh-agent, and
ssh-add (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/154"&gt;#154&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v0.7.0 [2022-10-19]&lt;/h2&gt;
&lt;h3&gt;Added&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Add the &lt;code&gt;log-public-key&lt;/code&gt; input that can be used to turn
off logging key identities (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/122"&gt;#122&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Fix path to &lt;code&gt;git&lt;/code&gt; binary on Windows, assuming
GitHub-hosted runners (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/136"&gt;#136&lt;/a&gt;,
&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/137"&gt;#137&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Fix a nonsensical log message (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/139"&gt;#139&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v0.6.0 [2022-10-19]&lt;/h2&gt;
&lt;h3&gt;Changed&lt;/h3&gt;
&lt;ul&gt;
&lt;li&gt;Update the version of Node used by the action from 12 to 16 (&lt;a
href="https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/"&gt;https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/&lt;/a&gt;).&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;v0.5.4 [2021-11-21]&lt;/h2&gt;
&lt;h3&gt;Fixed&lt;/h3&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/webfactory/ssh-agent/commit/a6f90b1f127823b31d4d4a8d96047790581349bd"&gt;&lt;code&gt;a6f90b1&lt;/code&gt;&lt;/a&gt;
Release v0.9.1&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/webfactory/ssh-agent/commit/72c0bfd31ab22a2e11716951e3f107a9647dc97e"&gt;&lt;code&gt;72c0bfd&lt;/code&gt;&lt;/a&gt;
Improve documentation on why we use os.userInfo()&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/webfactory/ssh-agent/commit/e3f1a8e046525bfed3725ef54a31ca91aed399f4"&gt;&lt;code&gt;e3f1a8e&lt;/code&gt;&lt;/a&gt;
Acknowledge custom command inputs in cleanup.js (&lt;a
href="https://redirect.github.com/webfactory/ssh-agent/issues/235"&gt;#235&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/webfactory/ssh-agent/commit/b504c19775343714e11b8c754e4fe1f02dc7b8e7"&gt;&lt;code&gt;b504c19&lt;/code&gt;&lt;/a&gt;
Update CHANGELOG.md&lt;/li&gt;
&lt;li&gt;See full diff in &lt;a
href="https://github.com/webfactory/ssh-agent/compare/dc588b651fe13675774614f8e6a936a468676387...a6f90b1f127823b31d4d4a8d96047790581349bd"&gt;compare
view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;
&lt;br /&gt;

Updates `ossf/scorecard-action` from 2.3.1 to 2.4.3
&lt;details&gt;
&lt;summary&gt;Release notes&lt;/summary&gt;
&lt;p&gt;&lt;em&gt;Sourced from &lt;a
href="https://github.com/ossf/scorecard-action/releases"&gt;ossf/scorecard-action's
releases&lt;/a&gt;.&lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;
&lt;h2&gt;v2.4.3&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;p&gt;This update bumps the Scorecard version to the v5.3.0 release. For a
complete list of changes, please refer to the &lt;a
href="https://github.com/ossf/scorecard/releases/tag/v5.3.0"&gt;Scorecard
v5.3.0 release notes&lt;/a&gt;.&lt;/p&gt;
&lt;h2&gt;Documentation&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;docs: clarify &lt;code&gt;GITHUB_TOKEN&lt;/code&gt; permissions needed for
private repos by &lt;a
href="https://github.com/pankajtaneja5"&gt;&lt;code&gt;@​pankajtaneja5&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1574"&gt;ossf/scorecard-action#1574&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;:book: Fix recommended command to test the image in development by
&lt;a
href="https://github.com/deivid-rodriguez"&gt;&lt;code&gt;@​deivid-rodriguez&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1583"&gt;ossf/scorecard-action#1583&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;Other&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;add missing top-level token permissions to workflows by &lt;a
href="https://github.com/timothyklee"&gt;&lt;code&gt;@​timothyklee&lt;/code&gt;&lt;/a&gt; in
&lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1566"&gt;ossf/scorecard-action#1566&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;setup codeowners for requesting reviews by &lt;a
href="https://github.com/spencerschrock"&gt;&lt;code&gt;@​spencerschrock&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1576"&gt;ossf/scorecard-action#1576&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;:seedling: Improve printing options by &lt;a
href="https://github.com/deivid-rodriguez"&gt;&lt;code&gt;@​deivid-rodriguez&lt;/code&gt;&lt;/a&gt;
in &lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1584"&gt;ossf/scorecard-action#1584&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;h2&gt;New Contributors&lt;/h2&gt;
&lt;ul&gt;
&lt;li&gt;&lt;a
href="https://github.com/timothyklee"&gt;&lt;code&gt;@​timothyklee&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1566"&gt;ossf/scorecard-action#1566&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/pankajtaneja5"&gt;&lt;code&gt;@​pankajtaneja5&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1574"&gt;ossf/scorecard-action#1574&lt;/a&gt;&lt;/li&gt;
&lt;li&gt;&lt;a
href="https://github.com/deivid-rodriguez"&gt;&lt;code&gt;@​deivid-rodriguez&lt;/code&gt;&lt;/a&gt;
made their first contribution in &lt;a
href="https://redirect.github.com/ossf/scorecard-action/pull/1584"&gt;ossf/scorecard-action#1584&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/ossf/scorecard-action/compare/v2.4.2...v2.4.3"&gt;https://github.com/ossf/scorecard-action/compare/v2.4.2...v2.4.3&lt;/a&gt;&lt;/p&gt;
&lt;h2&gt;v2.4.2&lt;/h2&gt;
&lt;h2&gt;What's Changed&lt;/h2&gt;
&lt;p&gt;This update bumps the Scorecard version to the v5.2.1 release. For a
complete list of changes, please refer to the Scorecard &lt;a
href="https://github.com/ossf/scorecard/releases/tag/v5.2.0"&gt;v5.2.0&lt;/a&gt;
and &lt;a
href="https://github.com/ossf/scorecard/releases/tag/v5.2.1"&gt;v5.2.1&lt;/a&gt;
release notes.&lt;/p&gt;
&lt;p&gt;&lt;strong&gt;Full Changelog&lt;/strong&gt;: &lt;a
href="https://github.com/ossf/scorecard-action/compare/v2.4.1...v2.4.2"&gt;…
diff --git a/.github/workflows/ada.yml b/.github/workflows/ada.yml
@@ -13,7 +13,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     - name: Set up GNAT toolchain
       run: >
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -55,7 +55,7 @@ jobs:
         # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@v6
 
     # Add any setup steps before running the `github/codeql-action/init` action.
     # This includes steps like installing compilers or runtimes (`actions/setup-node`
diff --git a/.github/workflows/elixir.yml b/.github/workflows/elixir.yml
@@ -21,14 +21,14 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v6
     - name: Set up Elixir
-      uses: erlef/setup-beam@61e01a43a562a89bfc54c7f9a378ff67b03e4a21 # v1.16.0
+      uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4
       with:
         elixir-version: '1.15.2' # [Required] Define the Elixir version
         otp-version: '26.0'      # [Required] Define the Erlang/OTP version
     - name: Restore dependencies cache
-      uses: actions/cache@v3
+      uses: actions/cache@v5
       with:
         path: deps
         key: ${{ runner.os }}-mix-${{ hashFiles('**/mix.lock') }}
diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml
@@ -23,7 +23,7 @@ jobs:
       digests: ${{ steps.hash.outputs.digests }}
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       # ========================================================
       #
@@ -60,7 +60,7 @@ jobs:
       actions: read   # To read the workflow path.
       id-token: write # To sign the provenance.
       contents: write # To add assets to a release.
-    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.4.0
+    uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v2.1.0
     with:
       base64-subjects: "${{ needs.build.outputs.digests }}"
       upload-assets: true # Optional: Upload to a new release
diff --git a/.github/workflows/guix-nix-policy.yml b/.github/workflows/guix-nix-policy.yml
@@ -4,7 +4,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Enforce Guix primary / Nix fallback
         run: |
           # Check for package manager files
diff --git a/.github/workflows/jekyll-gh-pages.yml b/.github/workflows/jekyll-gh-pages.yml
@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
       - name: Setup Pages
         uses: actions/configure-pages@v5
       - name: Build with Jekyll
@@ -36,7 +36,7 @@ jobs:
           source: ./
           destination: ./_site
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v4
 
   # Deployment job
   deploy:
diff --git a/.github/workflows/mirror.yml b/.github/workflows/mirror.yml
@@ -19,12 +19,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
 
       - name: Setup SSH
-        uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
+        uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
         with:
           ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
 
@@ -49,12 +49,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: 0
 
       - name: Setup SSH
-        uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
+        uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
         with:
           ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
 
diff --git a/.github/workflows/npm-bun-blocker.yml b/.github/workflows/npm-bun-blocker.yml
@@ -4,7 +4,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Block npm/bun
         run: |
           if [ -f "package-lock.json" ] || [ -f "bun.lockb" ] || [ -f ".npmrc" ]; then
diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml
@@ -5,7 +5,7 @@ jobs:
   lint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       
       - name: Check file permissions
         run: |
@@ -35,7 +35,7 @@ jobs:
   docs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Check documentation
         run: |
           MISSING=""
diff --git a/.github/workflows/rsr-antipattern.yml b/.github/workflows/rsr-antipattern.yml
@@ -16,7 +16,7 @@ jobs:
   antipattern-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Check for TypeScript
         run: |
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
@@ -14,17 +14,17 @@ jobs:
       security-events: write
       id-token: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
         with:
           persist-credentials: false
       
       - name: Run Scorecard
-        uses: ossf/scorecard-action@v2.3.1
+        uses: ossf/scorecard-action@v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif
       
       - name: Upload results
-        uses: github/codeql-action/upload-sarif@v3
+        uses: github/codeql-action/upload-sarif@v4
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml
@@ -4,7 +4,7 @@ jobs:
   check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       - name: Security checks
         run: |
           FAILED=false
diff --git a/.github/workflows/wellknown-enforcement.yml b/.github/workflows/wellknown-enforcement.yml
@@ -17,7 +17,7 @@ jobs:
   validate:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
       
       - name: RFC 9116 security.txt validation
         run: |
