chore(deps): bump the dependencies group with 5 updates

dependabot[bot] · web-flow · commit dd2510746b49 · 2026-03-20T21:06:20.000Z
Bumps the dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `0.5.8` | `0.6.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.33.0` | `4.34.1` | | [github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `0.5.8` | `0.6.0` | | [github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `0.5.8` | `0.6.0` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.23.1` | `0.24.0` | Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml` from 0.5.8 to 0.6.0 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release-discussion.md) - [Commits](github-community-projects/ospo-reusable-workflows@5d90c7a...a0cf79b) Updates `github/codeql-action` from 4.33.0 to 4.34.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b1bff81...3869755) Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml` from 0.5.8 to 0.6.0 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release-discussion.md) - [Commits](github-community-projects/ospo-reusable-workflows@5d90c7a...a0cf79b) Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml` from 0.5.8 to 0.6.0 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release-discussion.md) - [Commits](github-community-projects/ospo-reusable-workflows@5d90c7a...a0cf79b) Updates `anchore/sbom-action` from 0.23.1 to 0.24.0 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](anchore/sbom-action@57aae52...e22c389) --- updated-dependencies: - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github/codeql-action dependency-version: 4.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml dependency-version: 0.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: anchore/sbom-action dependency-version: 0.24.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/.github/workflows/auto-labeler.yml b/.github/workflows/auto-labeler.yml
@@ -11,7 +11,7 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-    uses: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@5d90c7aff008ad7aa4a87b1e23849a5a8691e356 # v0.5.8
+    uses: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@a0cf79bd8756e0a9c1555bf4975eae7ce7a8e8dc # v0.6.0
     with:
       config-name: release-drafter.yml
     secrets:
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -69,7 +69,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
+      uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
       with:
         languages: ${{ matrix.language }}
         build-mode: ${{ matrix.build-mode }}
@@ -97,6 +97,6 @@ jobs:
         exit 1
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@b1bff81932f5cdfc8695c7752dcee935dcd061c8 # v4.33.0
+      uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
       with:
         category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml
@@ -11,6 +11,6 @@ jobs:
       contents: read
       pull-requests: read
       statuses: write
-    uses: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml@5d90c7aff008ad7aa4a87b1e23849a5a8691e356 # v0.5.8
+    uses: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml@a0cf79bd8756e0a9c1555bf4975eae7ce7a8e8dc # v0.6.0
     secrets:
       github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -10,7 +10,7 @@ jobs:
     permissions:
       contents: write
       pull-requests: read
-    uses: github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml@5d90c7aff008ad7aa4a87b1e23849a5a8691e356 # v0.5.8
+    uses: github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml@a0cf79bd8756e0a9c1555bf4975eae7ce7a8e8dc # v0.6.0
     with:
       publish: true
       release-config-name: release-drafter.yml
@@ -36,7 +36,7 @@ jobs:
         with:
           go-version-file: go.mod
       - name: Install Syft
-        uses: anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
+        uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
         with:
           syft-version: v1.33.0
       - name: Run GoReleaser
