Skip to content

Commit 23ce671

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the gha-dependencies group with 5 updates (#7486)
Bumps the gha-dependencies group with 5 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.10` | `3.28.13` | | [8398a7/action-slack](https://github.com/8398a7/action-slack) | `3.16.2` | `3.18.0` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.29.0` | `0.30.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `4.6.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.9` | `4.2.1` | Updates `github/codeql-action` from 3.28.10 to 3.28.13 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b56ba49...1b549b9) Updates `8398a7/action-slack` from 3.16.2 to 3.18.0 - [Release notes](https://github.com/8398a7/action-slack/releases) - [Commits](8398a7/action-slack@28ba43a...1750b50) Updates `aquasecurity/trivy-action` from 0.29.0 to 0.30.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@18f2510...6c175e9) Updates `actions/upload-artifact` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@4cec3d8...ea165f8) Updates `actions/download-artifact` from 4.1.9 to 4.2.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@cc20338...95815c3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.28.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha-dependencies - dependency-name: 8398a7/action-slack dependency-version: 3.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gha-dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gha-dependencies - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha-dependencies - dependency-name: actions/download-artifact dependency-version: 4.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gha-dependencies ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 353c06e commit 23ce671

File tree

6 files changed

+29
-29
lines changed

6 files changed

+29
-29
lines changed

Diff for: ‎.github/workflows/codeql-analysis.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ jobs:
4848

4949
# Initializes the CodeQL tools for scanning.
5050
- name: Initialize CodeQL
51-
uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
51+
uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
5252
with:
5353
languages: ${{ matrix.language }}
5454
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -64,4 +64,4 @@ jobs:
6464
make build
6565
6666
- name: Perform CodeQL Analysis
67-
uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
67+
uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13

Diff for: ‎.github/workflows/nightly.yaml

+8-8
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
run: CGO_ENABLED=1 make ci-go-race-detector
2020

2121
- name: Slack Notification
22-
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
22+
uses: 8398a7/action-slack@1750b5085f3ec60384090fb7c52965ef822e869e # v3.18.0
2323
env:
2424
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK }}
2525
if: ${{ failure() && env.SLACK_WEBHOOK_URL }}
@@ -51,7 +51,7 @@ jobs:
5151
run: find ast/testdata/fuzz ! -name '*.stmt' ! -type d -print -exec cat {} \;
5252

5353
- name: Slack Notification
54-
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
54+
uses: 8398a7/action-slack@1750b5085f3ec60384090fb7c52965ef822e869e # v3.18.0
5555
env:
5656
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK }}
5757
if: ${{ failure() && env.SLACK_WEBHOOK_URL }}
@@ -73,7 +73,7 @@ jobs:
7373
DOCKER_RUNNING: 0
7474

7575
- name: Slack Notification
76-
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
76+
uses: 8398a7/action-slack@1750b5085f3ec60384090fb7c52965ef822e869e # v3.18.0
7777
env:
7878
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK }}
7979
if: ${{ failure() && env.SLACK_WEBHOOK_URL }}
@@ -93,7 +93,7 @@ jobs:
9393
# Equivalent to:
9494
# $ trivy image openpolicyagent/opa:edge-static
9595
- name: Run Trivy scan on image
96-
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29.0
96+
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
9797
with:
9898
image-ref: 'openpolicyagent/opa:edge-static'
9999
format: table
@@ -105,7 +105,7 @@ jobs:
105105
TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
106106

107107
- name: Slack Notification
108-
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
108+
uses: 8398a7/action-slack@1750b5085f3ec60384090fb7c52965ef822e869e # v3.18.0
109109
env:
110110
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK }}
111111
if: ${{ failure() && env.SLACK_WEBHOOK_URL }}
@@ -123,7 +123,7 @@ jobs:
123123
# Equivalent to:
124124
# $ trivy fs .
125125
- name: Run Trivy scan on repo
126-
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # 0.29.0
126+
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # 0.30.0
127127
with:
128128
scan-type: fs
129129
format: table
@@ -135,7 +135,7 @@ jobs:
135135
TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
136136

137137
- name: Slack Notification
138-
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
138+
uses: 8398a7/action-slack@1750b5085f3ec60384090fb7c52965ef822e869e # v3.18.0
139139
env:
140140
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK }}
141141
if: ${{ failure() && env.SLACK_WEBHOOK_URL }}
@@ -161,7 +161,7 @@ jobs:
161161
- run: govulncheck ./...
162162

163163
- name: Slack Notification
164-
uses: 8398a7/action-slack@28ba43ae48961b90635b50953d216767a6bea486 # v3.16.2
164+
uses: 8398a7/action-slack@1750b5085f3ec60384090fb7c52965ef822e869e # v3.18.0
165165
env:
166166
SLACK_WEBHOOK_URL: ${{ secrets.SLACK_NOTIFICATION_WEBHOOK }}
167167
if: ${{ failure() && env.SLACK_WEBHOOK_URL }}

Diff for: ‎.github/workflows/post-merge.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -111,7 +111,7 @@ jobs:
111111
TELEMETRY_URL: ${{ secrets.TELEMETRY_URL }}
112112

113113
- name: Upload binaries
114-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
114+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
115115
if: always()
116116
with:
117117
name: binaries-linux-windows
@@ -149,7 +149,7 @@ jobs:
149149
TELEMETRY_URL: ${{ secrets.TELEMETRY_URL }}
150150

151151
- name: Upload binaries (darwin)
152-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
152+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
153153
if: always()
154154
with:
155155
name: binaries-darwin
@@ -168,7 +168,7 @@ jobs:
168168
timeout-minutes: 60
169169

170170
- name: Download release binaries
171-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
171+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
172172
with:
173173
pattern: binaries-*
174174
merge-multiple: true

Diff for: ‎.github/workflows/post-tag.yaml

+3-3
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
TELEMETRY_URL: ${{ secrets.TELEMETRY_URL }}
4747

4848
- name: Upload binaries
49-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
49+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
5050
if: always()
5151
with:
5252
name: binaries-linux-windows
@@ -84,7 +84,7 @@ jobs:
8484
TELEMETRY_URL: ${{ secrets.TELEMETRY_URL }}
8585

8686
- name: Upload binaries (darwin)
87-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
87+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
8888
if: always()
8989
with:
9090
name: binaries-darwin
@@ -103,7 +103,7 @@ jobs:
103103
run: echo "TAG_NAME=${GITHUB_REF##*/}" >> $GITHUB_ENV
104104

105105
- name: Download release binaries
106-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
106+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
107107
with:
108108
pattern: binaries-*
109109
merge-multiple: true

Diff for: ‎.github/workflows/pull-request.yaml

+11-11
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
run: make clean generate
2323

2424
- name: Upload generated artifacts
25-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
25+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
2626
with:
2727
name: generated
2828
path: |
@@ -78,7 +78,7 @@ jobs:
7878
if: matrix.os == 'darwin'
7979

8080
- name: Download generated artifacts
81-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
81+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
8282
with:
8383
name: generated
8484

@@ -89,14 +89,14 @@ jobs:
8989
timeout-minutes: 30
9090

9191
- name: Upload binaries - No Go tags
92-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
92+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
9393
if: ${{ matrix.go_tags == '' }}
9494
with:
9595
name: binaries-${{ matrix.os }}-${{ matrix.arch }}
9696
path: _release
9797

9898
- name: Upload binaries - Go tag variants
99-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
99+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
100100
if: ${{ matrix.go_tags != '' && matrix.variant_name != '' }}
101101
with:
102102
name: binaries-variant-${{ matrix.os }}-${{ matrix.arch }}-${{ matrix.variant_name }}
@@ -128,7 +128,7 @@ jobs:
128128
go-version: ${{ steps.go_version.outputs.go_version }}
129129

130130
- name: Download generated artifacts
131-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
131+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
132132
with:
133133
name: generated
134134

@@ -184,7 +184,7 @@ jobs:
184184
- 'test/cases/**'
185185
186186
- name: Download generated artifacts
187-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
187+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
188188
with:
189189
name: generated
190190
if: steps.changes.outputs.wasm == 'true'
@@ -210,7 +210,7 @@ jobs:
210210
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
211211

212212
- name: Download generated artifacts
213-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
213+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
214214
with:
215215
name: generated
216216

@@ -229,7 +229,7 @@ jobs:
229229
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
230230

231231
- name: Download generated artifacts
232-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
232+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
233233
with:
234234
name: generated
235235

@@ -252,7 +252,7 @@ jobs:
252252
platforms: arm64
253253

254254
- name: Download release binaries
255-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
255+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
256256
with:
257257
pattern: binaries-*
258258
merge-multiple: true
@@ -301,7 +301,7 @@ jobs:
301301
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
302302

303303
- name: Download release binaries
304-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
304+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
305305
with:
306306
name: binaries-${{ matrix.os }}-${{ matrix.arch }}
307307
path: _release
@@ -325,7 +325,7 @@ jobs:
325325
steps:
326326
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
327327
- name: Download generated artifacts
328-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # v4.1.9
328+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
329329
with:
330330
name: generated
331331
- uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0

Diff for: ‎.github/workflows/scorecards.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
5656
# format to the repository Actions tab.
5757
- name: "Upload artifact"
58-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
58+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
5959
with:
6060
name: SARIF file
6161
path: results.sarif
@@ -64,6 +64,6 @@ jobs:
6464
# Upload the results to GitHub's code scanning dashboard (optional).
6565
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
6666
- name: "Upload to code-scanning"
67-
uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
67+
uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
6868
with:
6969
sarif_file: results.sarif

0 commit comments

Comments
 (0)