deps(github/action): bump all dependencies (#2825)

updateclibot[bot] · web-flow · commit e87e84c2a840 · 2026-04-08T12:18:40.000+02:00
* chore: deps(github): bump Action tag for actions/add-to-project from ...

... v1.0.2 to 244f685bbc3b7adfa8466e08b698b5577571133e (Pinned from v1.0.2)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for actions/checkout from v4 to ...

... de0fac2e4500dabe0009e67214ff5f5447ce83dd (Pinned from v6.0.2)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for actions/setup-node from v4.4...

... .0 to 53b83947a5a98c8d113130e565377fae1a50d02f (Pinned from v6.3.0)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for peaceiris/actions-hugo from ...

... v3 to 75d2e84710de30f6ff7268e08f310b60ef14033f (Pinned from v3.0.0)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action branch for ruby/setup-ruby from v1 t...

... o e65c17d16e57e481586a6a5a0282698790062f92 (Pinned from v1)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for actions/checkout from v4 to ...

... de0fac2e4500dabe0009e67214ff5f5447ce83dd (Pinned from v6.0.2)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for github/codeql-action/init fr...

... om v3 to c10b8064de6f491fea524254123dbe5e09572f13 (Pinned from v4.35.1)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for github/codeql-action/autobui...

... ld from v3 to c10b8064de6f491fea524254123dbe5e09572f13 (Pinned from v4.35.1)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for github/codeql-action/analyze...

...  from v3 to c10b8064de6f491fea524254123dbe5e09572f13 (Pinned from v4.35.1)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action release for actions/checkout from 1a...

... f3b93b6815bc44a9784bd300feb67ff0d1eeb3 to de0fac2e4500dabe0009e67214ff5f5447ce83dd (Pinned from v6.0.2)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for crate-ci/typos from 631208b7...

... aac2daa8b707f55e7331f9112b0e062d to 02ea592e44b3a53c302f697cddca7641cd051c3d (Pinned from v1.45.0)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action release for actions/checkout from 1a...

... f3b93b6815bc44a9784bd300feb67ff0d1eeb3 to de0fac2e4500dabe0009e67214ff5f5447ce83dd (Pinned from v6.0.2)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for actions/checkout from v4 to ...

... de0fac2e4500dabe0009e67214ff5f5447ce83dd (Pinned from v6.0.2)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action release for updatecli/releasepost-ac...

... tion from v0.5.0 to 864390bddae97db06ee881ab4a08d159b4464643 (Pinned from v0.5.0)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action release for actions/checkout from 1a...

... f3b93b6815bc44a9784bd300feb67ff0d1eeb3 to de0fac2e4500dabe0009e67214ff5f5447ce83dd (Pinned from v6.0.2)

Made with ❤️️ by updatecli

* chore: deps(github): bump Action tag for actions/checkout from 1af3b9...

... 3b6815bc44a9784bd300feb67ff0d1eeb3 to de0fac2e4500dabe0009e67214ff5f5447ce83dd (Pinned from v6.0.2)

Made with ❤️️ by updatecli

---------

Co-authored-by: updateclibot[bot] &lt;92153806+updateclibot[bot]@users.noreply.github.com&gt;
diff --git a/.github/workflows/add_issue_to_project.yaml b/.github/workflows/add_issue_to_project.yaml
@@ -3,13 +3,12 @@ on:
   issues:
     types:
       - opened
-
 jobs:
   add-to-project:
     name: Add issue to Updatecli project
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/add-to-project@v1.0.2
+      - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
         with:
           project-url: https://github.com/orgs/updatecli/projects/2
           github-token: ${{ secrets.ADD_TO_PROJECT_PAT }}
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -1,47 +1,36 @@
 name: Build
-
 on:
   merge_group:
     branches: master
   push:
     branches: master
   pull_request:
-
 jobs:
   build:
     runs-on: ubuntu-latest
-
     steps:
-    - uses: actions/checkout@v4
-
-    - name: Use Node.js
-      uses: actions/setup-node@v4.4.0
-      with:
-        node-version: 24
-
-    - name: Install Hugo
-      uses: peaceiris/actions-hugo@v3
-      with:
-        hugo-version: 0.159.1
-        extended: true
-
-    - name: Install Bundler
-      uses: ruby/setup-ruby@v1
-      with:
-        ruby-version: 2.7
-        bundler-cache: true
-
-    - name: Install asciidoctor
-      run: gem install asciidoctor
-
-    - name: Show Hugo Version
-      run: hugo version
-
-    - name: Install dependencies
-      run: npm install
-
-    - name: Run Hyas test script
-      run: npm test
-
-    - name: Build production website
-      run: npm run build
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - name: Use Node.js
+        uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        with:
+          node-version: 24
+      - name: Install Hugo
+        uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f # v3.0.0
+        with:
+          hugo-version: 0.159.1
+          extended: true
+      - name: Install Bundler
+        uses: ruby/setup-ruby@e65c17d16e57e481586a6a5a0282698790062f92 # v1
+        with:
+          ruby-version: 2.7
+          bundler-cache: true
+      - name: Install asciidoctor
+        run: gem install asciidoctor
+      - name: Show Hugo Version
+        run: hugo version
+      - name: Install dependencies
+        run: npm install
+      - name: Run Hyas test script
+        run: npm test
+      - name: Build production website
+        run: npm run build
diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml
@@ -4,7 +4,6 @@
 # You may wish to alter this file to override the set of languages analyzed,
 # or to provide custom queries or build logic.
 name: "CodeQL"
-
 on:
   merge_group:
     branches: master
@@ -15,12 +14,10 @@ on:
     branches: [master]
   schedule:
     - cron: '0 11 * * 5'
-
 jobs:
   analyze:
     name: Analyze
     runs-on: ubuntu-latest
-
     strategy:
       fail-fast: false
       matrix:
@@ -29,36 +26,30 @@ jobs:
         language: ['javascript']
         # Learn more...
         # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
-
     steps:
-    - name: Checkout repository
-      uses: actions/checkout@v4
-
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3
-      with:
-        languages: ${{ matrix.language }}
-        # If you wish to specify custom queries, you can do so here or in a config file.
-        # By default, queries listed here will override any specified in a config file.
-        # Prefix the list here with "+" to use these queries and those in the config file.
-        # queries: ./path/to/local/query, your-org/your-repo/queries@main
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v3
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      # Initializes the CodeQL tools for scanning.
+      - name: Initialize CodeQL
+        uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+        with:
+          languages: ${{ matrix.language }}
+          # If you wish to specify custom queries, you can do so here or in a config file.
+          # By default, queries listed here will override any specified in a config file.
+          # Prefix the list here with "+" to use these queries and those in the config file.
+          # queries: ./path/to/local/query, your-org/your-repo/queries@main
+      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
+      # If this step fails, then you should remove it and run the build manually (see below)
+      - name: Autobuild
+        uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
+      #- run: |
+      #   make bootstrap
+      #   make release
+      - name: Perform CodeQL Analysis
+        # ℹ️ Command-line programs to run using the OS shell.
+        # 📚 https://git.io/JvXDl
+
+        # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
+        #    and modify them (or add more) to build your code if your project
+        #    uses a compiled language
+        uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
diff --git a/.github/workflows/typos.yaml b/.github/workflows/typos.yaml
@@ -9,6 +9,6 @@ jobs:
       contents: read
     steps:
       - name: Checkout Actions Repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Check spelling of file.txt
-        uses: crate-ci/typos@631208b7aac2daa8b707f55e7331f9112b0e062d # v1.44.0
+        uses: crate-ci/typos@02ea592e44b3a53c302f697cddca7641cd051c3d # v1.45.0
diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
         with:
diff --git a/.github/workflows/updatecli_release.yaml b/.github/workflows/updatecli_release.yaml
@@ -18,15 +18,15 @@ jobs:
       pull-requests: write
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@v4"
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
       - name: "Install Updatecli"
         uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
         with:
           version: "v0.115.0"
       # releasepost is required by the Updatecli
       #   * policy ghcr.io/updatecli/policies/releasepost/releasepost
       - name: "Install Releasepost"
-        uses: "updatecli/releasepost-action@v0.5.0"
+        uses: "updatecli/releasepost-action@864390bddae97db06ee881ab4a08d159b4464643" # v0.5.0
       - name: "Run updatecli only on release pipelines"
         run: updatecli compose apply --clean-git-branches=true --labels="release:updatecli" --experimental
         env:
diff --git a/.github/workflows/updatecli_test.yaml b/.github/workflows/updatecli_test.yaml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
         with:
diff --git a/.github/workflows/updatecli_update.yaml b/.github/workflows/updatecli_update.yaml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: "Checkout"
-        uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0
+        uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2
       - name: "Setup updatecli"
         uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0
         with:
