Skip to content

Commit 6405e69

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the actions-updates group across 1 directory with 4 updates
Bumps the actions-updates group with 4 updates in the / directory: [step-security/harden-runner](https://github.com/step-security/harden-runner), [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv), [actions/create-github-app-token](https://github.com/actions/create-github-app-token) and [release-plz/action](https://github.com/release-plz/action). Updates `step-security/harden-runner` from 2.13.1 to 2.16.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@f4a75cf...fa2e9d6) Updates `astral-sh/setup-uv` from 7.1.0 to 7.6.0 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](astral-sh/setup-uv@3259c62...37802ad) Updates `actions/create-github-app-token` from 2.2.1 to 3.0.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Commits](actions/create-github-app-token@29824e6...f8d387b) Updates `release-plz/action` from 0.5.118 to 0.5.128 - [Release notes](https://github.com/release-plz/action/releases) - [Commits](release-plz/action@d529f73...1528104) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: astral-sh/setup-uv dependency-version: 7.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: actions/create-github-app-token dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-updates - dependency-name: release-plz/action dependency-version: 0.5.128 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 776de30 commit 6405e69

4 files changed

Lines changed: 17 additions & 17 deletions

File tree

‎.github/workflows/ci-actions.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
actions: read # Needed to read actions
2020
steps:
2121
- name: Harden the runner (Audit all outbound calls)
22-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
22+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
2323
with:
2424
egress-policy: audit
2525

@@ -29,7 +29,7 @@ jobs:
2929
persist-credentials: false
3030

3131
- name: Install the latest version of uv
32-
uses: astral-sh/setup-uv@3259c6206f993105e3a61b142c2d97bf4b9ef83d # v7.1.0
32+
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
3333

3434
- name: Run zizmor
3535
run: uvx zizmor --pedantic --format sarif . > results.sarif

‎.github/workflows/ci-code.yaml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
cache-key: ${{ steps.cache-cargo-make.outputs.cache-primary-key }}
2525
steps:
2626
- name: Harden the runner (Audit all outbound calls)
27-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
27+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
2828
with:
2929
egress-policy: audit
3030

@@ -59,7 +59,7 @@ jobs:
5959
needs: setup-cargo-make
6060
steps:
6161
- name: harden runner
62-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
62+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
6363
with:
6464
egress-policy: audit
6565

@@ -84,7 +84,7 @@ jobs:
8484
needs: setup-cargo-make
8585
steps:
8686
- name: harden runner
87-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
87+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
8888
with:
8989
egress-policy: audit
9090

@@ -115,7 +115,7 @@ jobs:
115115
needs: setup-cargo-make
116116
steps:
117117
- name: harden runner
118-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
118+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
119119
with:
120120
egress-policy: audit
121121

@@ -147,7 +147,7 @@ jobs:
147147
name: 'Full build linux-${{ matrix.arch }}'
148148
steps:
149149
- name: harden runner
150-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
150+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
151151
with:
152152
egress-policy: audit
153153

@@ -179,7 +179,7 @@ jobs:
179179
name: 'Full test linux-${{ matrix.arch }}'
180180
steps:
181181
- name: harden runner
182-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
182+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
183183
with:
184184
egress-policy: audit
185185

@@ -210,7 +210,7 @@ jobs:
210210
name: 'Full clippy linux-${{ matrix.arch }}'
211211
steps:
212212
- name: harden runner
213-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
213+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
214214
with:
215215
egress-policy: audit
216216

‎.github/workflows/publish.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242
runs-on: '${{ matrix.platform.on }}'
4343
steps:
4444
- name: Harden the runner (Audit all outbound calls)
45-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
45+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
4646
with:
4747
egress-policy: audit
4848

@@ -93,7 +93,7 @@ jobs:
9393
9494
- name: generate cultivator token
9595
if: ${{ github.event_name == 'release' }}
96-
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
96+
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
9797
id: generate-token
9898
with:
9999
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"

‎.github/workflows/release.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
id-token: write # Needed for trusted publishing
2222
steps:
2323
- name: Harden the runner (Audit all outbound calls)
24-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
24+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
2525
with:
2626
egress-policy: audit
2727

@@ -35,14 +35,14 @@ jobs:
3535
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # zizmor: ignore[stale-action-refs] -- pinned to stable branch
3636

3737
- name: generate cultivator token
38-
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
38+
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
3939
id: generate-token
4040
with:
4141
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"
4242
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
4343

4444
- name: Run release-plz
45-
uses: release-plz/action@d529f731ae3e89610ada96eda34e5c6ba3b12214 # v0.5
45+
uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5
4646
with:
4747
command: release
4848
env:
@@ -62,7 +62,7 @@ jobs:
6262
cancel-in-progress: false
6363
steps:
6464
- name: Harden the runner (Audit all outbound calls)
65-
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
65+
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
6666
with:
6767
egress-policy: audit
6868

@@ -76,14 +76,14 @@ jobs:
7676
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # zizmor: ignore[stale-action-refs] -- pinned to stable branch
7777

7878
- name: generate cultivator token
79-
uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1
79+
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
8080
id: generate-token
8181
with:
8282
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"
8383
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
8484

8585
- name: Run release-plz
86-
uses: release-plz/action@d529f731ae3e89610ada96eda34e5c6ba3b12214 # v0.5
86+
uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5
8787
with:
8888
command: release-pr
8989
env:

0 commit comments

Comments
 (0)