Skip to content

Commit 6c57341

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the actions group with 13 updates (#8)
Bumps the actions group with 13 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `6.0.2` | | [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.7.5` | `2.11.0` | | [actions/cache](https://github.com/actions/cache) | `4.3.0` | `5.0.5` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `5.0.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.32.6` | `4.36.0` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.2.0` | `3.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/github-script](https://github.com/actions/github-script) | `8.0.0` | `9.0.0` | | [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) | `0.9.1` | `0.10.0` | | [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561` | `3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.93.8` | `3.95.3` | Updates `actions/checkout` from 4.1.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4.1.1...de0fac2) Updates `haskell-actions/setup` from 2.7.5 to 2.11.0 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](haskell-actions/setup@ec49483...cd0d9bd) Updates `actions/cache` from 4.3.0 to 5.0.5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...27d5ce7) Updates `actions/configure-pages` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@983d773...45bfe01) Updates `actions/upload-pages-artifact` from 3.0.1 to 5.0.0 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@56afc60...fc324d3) Updates `actions/deploy-pages` from 4.0.5 to 5.0.0 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@d6db901...cd2ce8f) Updates `github/codeql-action` from 4.32.6 to 4.36.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v4.32.6...7211b7c) Updates `dependabot/fetch-metadata` from 2.2.0 to 3.1.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](dependabot/fetch-metadata@dbb049a...25dd0e3) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) Updates `actions/github-script` from 8.0.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@ed59741...3a2844b) Updates `webfactory/ssh-agent` from 0.9.1 to 0.10.0 - [Release notes](https://github.com/webfactory/ssh-agent/releases) - [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md) - [Commits](webfactory/ssh-agent@a6f90b1...e838748) Updates `dtolnay/rust-toolchain` from f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 to 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](dtolnay/rust-toolchain@f7ccc83...3c5f7ea) Updates `trufflesecurity/trufflehog` from 3.93.8 to 3.95.3 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@6c05c4a...37b7700) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: haskell-actions/setup dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 5.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/configure-pages dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-pages-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dependabot/fetch-metadata dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: webfactory/ssh-agent dependency-version: 0.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dtolnay/rust-toolchain dependency-version: 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 dependency-type: direct:production dependency-group: actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 4f83eae commit 6c57341

10 files changed

Lines changed: 36 additions & 36 deletions

‎.github/workflows/boj-build.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
runs-on: ubuntu-latest
1010
steps:
1111
- name: Checkout
12-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
12+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1313
- name: Trigger BoJ Server (Casket/ssg-mcp)
1414
run: |
1515
# Send a secure trigger to boj-server to build this repository

‎.github/workflows/casket-pages.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -20,22 +20,22 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Checkout
23-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
23+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2424

2525
- name: Checkout casket-ssg
26-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
26+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
2727
with:
2828
repository: hyperpolymath/casket-ssg
2929
path: .casket-ssg
3030

3131
- name: Setup GHCup
32-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
32+
uses: haskell-actions/setup@cd0d9bdd65b20557f41bea4dbe43d0b5fbbfe553 # v2
3333
with:
3434
ghc-version: '9.8.2'
3535
cabal-version: '3.10'
3636

3737
- name: Cache Cabal
38-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
38+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
3939
with:
4040
path: |
4141
~/.cabal/packages
@@ -97,10 +97,10 @@ jobs:
9797
touch ../_site/.nojekyll
9898
9999
- name: Setup Pages
100-
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
100+
uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
101101

102102
- name: Upload artifact
103-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
103+
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
104104
with:
105105
path: '_site'
106106

@@ -113,4 +113,4 @@ jobs:
113113
steps:
114114
- name: Deploy to GitHub Pages
115115
id: deployment
116-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
116+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

‎.github/workflows/codeql.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,12 +38,12 @@ jobs:
3838
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3939

4040
- name: Initialize CodeQL
41-
uses: github/codeql-action/init@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
41+
uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3
4242
with:
4343
languages: ${{ matrix.language }}
4444
build-mode: ${{ matrix.build-mode }}
4545

4646
- name: Perform CodeQL Analysis
47-
uses: github/codeql-action/analyze@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3
47+
uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3
4848
with:
4949
category: "/language:${{ matrix.language }}"

‎.github/workflows/dependabot-automerge.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ jobs:
5454
steps:
5555
- name: Fetch Dependabot metadata
5656
id: meta
57-
uses: dependabot/fetch-metadata@dbb049abf0d677abbd7f7eee0375145b417fdd34 # v2.2.0
57+
uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
5858
with:
5959
github-token: ${{ secrets.GITHUB_TOKEN }}
6060

‎.github/workflows/dogfood-gate.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Checkout repository
28-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
28+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2929

3030
- name: Check for A2ML files
3131
id: detect
@@ -69,7 +69,7 @@ jobs:
6969

7070
steps:
7171
- name: Checkout repository
72-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
72+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7373

7474
- name: Check for K9 files
7575
id: detect
@@ -118,7 +118,7 @@ jobs:
118118

119119
steps:
120120
- name: Checkout repository
121-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
121+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
122122

123123
- name: Scan for invisible characters
124124
id: lint
@@ -182,7 +182,7 @@ jobs:
182182

183183
steps:
184184
- name: Checkout repository
185-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
185+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
186186

187187
- name: Check for Groove manifest
188188
id: groove
@@ -242,7 +242,7 @@ jobs:
242242

243243
steps:
244244
- name: Checkout repository
245-
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
245+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
246246

247247
- name: Generate dogfooding scorecard
248248
run: |

‎.github/workflows/hypatia-scan.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -105,7 +105,7 @@ jobs:
105105
echo "- Medium: $MEDIUM" >> $GITHUB_STEP_SUMMARY
106106
107107
- name: Upload findings artifact
108-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
108+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
109109
with:
110110
name: hypatia-findings
111111
path: hypatia-findings.json
@@ -241,7 +241,7 @@ jobs:
241241
always() &&
242242
(github.event_name != 'pull_request' ||
243243
github.event.pull_request.head.repo.fork != true)
244-
uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v3.28.1
244+
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.28.1
245245
with:
246246
sarif_file: hypatia.sarif
247247
# Distinct category so Hypatia results coexist with CodeQL's
@@ -381,7 +381,7 @@ jobs:
381381
# the pull-requests: write permission above: a token/API hiccup or
382382
# a fork PR (read-only token) skips the comment, not the check.
383383
continue-on-error: true
384-
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v7
384+
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v7
385385
with:
386386
script: |
387387
const fs = require('fs');

‎.github/workflows/mirror.yml‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,11 @@ jobs:
1515
runs-on: ubuntu-latest
1616
if: vars.GITLAB_MIRROR_ENABLED == 'true'
1717
steps:
18-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
18+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
1919
with:
2020
fetch-depth: 0
2121

22-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
22+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
2323
with:
2424
ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
2525

@@ -33,11 +33,11 @@ jobs:
3333
runs-on: ubuntu-latest
3434
if: vars.BITBUCKET_MIRROR_ENABLED == 'true'
3535
steps:
36-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
36+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
3737
with:
3838
fetch-depth: 0
3939

40-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
40+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
4141
with:
4242
ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
4343

@@ -51,11 +51,11 @@ jobs:
5151
runs-on: ubuntu-latest
5252
if: vars.CODEBERG_MIRROR_ENABLED == 'true'
5353
steps:
54-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
54+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
5555
with:
5656
fetch-depth: 0
5757

58-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
58+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
5959
with:
6060
ssh-private-key: ${{ secrets.CODEBERG_SSH_KEY }}
6161

@@ -69,11 +69,11 @@ jobs:
6969
runs-on: ubuntu-latest
7070
if: vars.SOURCEHUT_MIRROR_ENABLED == 'true'
7171
steps:
72-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
72+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
7373
with:
7474
fetch-depth: 0
7575

76-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
76+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
7777
with:
7878
ssh-private-key: ${{ secrets.SOURCEHUT_SSH_KEY }}
7979

@@ -87,11 +87,11 @@ jobs:
8787
runs-on: ubuntu-latest
8888
if: vars.DISROOT_MIRROR_ENABLED == 'true'
8989
steps:
90-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
90+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
9191
with:
9292
fetch-depth: 0
9393

94-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
94+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
9595
with:
9696
ssh-private-key: ${{ secrets.DISROOT_SSH_KEY }}
9797

@@ -105,11 +105,11 @@ jobs:
105105
runs-on: ubuntu-latest
106106
if: vars.GITEA_MIRROR_ENABLED == 'true'
107107
steps:
108-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
108+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
109109
with:
110110
fetch-depth: 0
111111

112-
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
112+
- uses: webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555 # v0.10.0
113113
with:
114114
ssh-private-key: ${{ secrets.GITEA_SSH_KEY }}
115115

@@ -123,12 +123,12 @@ jobs:
123123
runs-on: ubuntu-latest
124124
if: vars.RADICLE_MIRROR_ENABLED == 'true'
125125
steps:
126-
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
126+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4
127127
with:
128128
fetch-depth: 0
129129

130130
- name: Setup Rust
131-
uses: dtolnay/rust-toolchain@f7ccc83f9ed1e5b9c81d8a67d7ad1a747e22a561 # stable
131+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # stable
132132
with:
133133
toolchain: stable
134134

‎.github/workflows/scorecard-enforcer.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
publish_results: true
4040

4141
- name: Upload SARIF
42-
uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v4
42+
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4
4343
with:
4444
sarif_file: results.sarif
4545

‎.github/workflows/scorecard.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,6 +36,6 @@ jobs:
3636
results_format: sarif
3737

3838
- name: Upload results
39-
uses: github/codeql-action/upload-sarif@c6f931105cb2c34c8f901cc885ba1e2e259cf745 # v3.31.8
39+
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.31.8
4040
with:
4141
sarif_file: results.sarif

‎.github/workflows/secret-scanner.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
fetch-depth: 0 # Full history for scanning
2828

2929
- name: TruffleHog Secret Scan
30-
uses: trufflesecurity/trufflehog@6c05c4a00b91aa542267d8e32a8254774799d68d # v3
30+
uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab # v3
3131
with:
3232
# The v3 action injects --fail automatically on pull_request events.
3333
# Passing --fail here triggers "flag 'fail' cannot be repeated".

0 commit comments

Comments
 (0)