Skip to content

Commit 6a73ab7

Browse files
bleggettbleggett
authored
Merge pull request #148 from edera-dev/dependabot/github_actions/actions-updates-8c4d2e4539
chore(deps): bump the actions-updates group across 1 directory with 6 updates
2 parents 47e8151 + 3e88007 commit 6a73ab7

4 files changed

Lines changed: 28 additions & 28 deletions

File tree

‎.github/workflows/ci-actions.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -19,25 +19,25 @@ jobs:
1919
actions: read # Needed to read actions
2020
steps:
2121
- name: Harden the runner (Audit all outbound calls)
22-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
22+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2323
with:
2424
egress-policy: audit
2525

2626
- name: Checkout repository
27-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
27+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
2828
with:
2929
persist-credentials: false
3030

3131
- name: Install the latest version of uv
32-
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
32+
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
3333

3434
- name: Run zizmor
3535
run: uvx zizmor --pedantic --format sarif . > results.sarif
3636
env:
3737
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
3838

3939
- name: Upload SARIF file
40-
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
40+
uses: github/codeql-action/upload-sarif@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1
4141
with:
4242
sarif_file: results.sarif
4343
category: zizmor

‎.github/workflows/ci-code.yaml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
cache-key: ${{ steps.cache-cargo-make.outputs.cache-primary-key }}
2525
steps:
2626
- name: Harden the runner (Audit all outbound calls)
27-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
27+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2828
with:
2929
egress-policy: audit
3030

@@ -59,12 +59,12 @@ jobs:
5959
needs: setup-cargo-make
6060
steps:
6161
- name: harden runner
62-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
62+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
6363
with:
6464
egress-policy: audit
6565

6666
- name: checkout repository
67-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
67+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
6868
with:
6969
submodules: recursive
7070
persist-credentials: false
@@ -84,12 +84,12 @@ jobs:
8484
needs: setup-cargo-make
8585
steps:
8686
- name: harden runner
87-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
87+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
8888
with:
8989
egress-policy: audit
9090

9191
- name: checkout repository
92-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
92+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
9393
with:
9494
submodules: recursive
9595
persist-credentials: false
@@ -115,12 +115,12 @@ jobs:
115115
needs: setup-cargo-make
116116
steps:
117117
- name: harden runner
118-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
118+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
119119
with:
120120
egress-policy: audit
121121

122122
- name: checkout repository
123-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
123+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
124124
with:
125125
submodules: recursive
126126
persist-credentials: false
@@ -147,12 +147,12 @@ jobs:
147147
name: 'Full build linux-${{ matrix.arch }}'
148148
steps:
149149
- name: harden runner
150-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
150+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
151151
with:
152152
egress-policy: audit
153153

154154
- name: checkout repository
155-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
155+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
156156
with:
157157
submodules: recursive
158158
persist-credentials: false
@@ -179,12 +179,12 @@ jobs:
179179
name: 'Full test linux-${{ matrix.arch }}'
180180
steps:
181181
- name: harden runner
182-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
182+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
183183
with:
184184
egress-policy: audit
185185

186186
- name: checkout repository
187-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
187+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
188188
with:
189189
submodules: recursive
190190
persist-credentials: false
@@ -210,12 +210,12 @@ jobs:
210210
name: 'Full clippy linux-${{ matrix.arch }}'
211211
steps:
212212
- name: harden runner
213-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
213+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
214214
with:
215215
egress-policy: audit
216216

217217
- name: checkout repository
218-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
218+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
219219
with:
220220
submodules: recursive
221221
persist-credentials: false

‎.github/workflows/publish.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,12 +42,12 @@ jobs:
4242
runs-on: '${{ matrix.platform.on }}'
4343
steps:
4444
- name: Harden the runner (Audit all outbound calls)
45-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
45+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
4646
with:
4747
egress-policy: audit
4848

4949
- name: Checkout repository
50-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
50+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
5151
with:
5252
fetch-depth: 0
5353
persist-credentials: false
@@ -93,7 +93,7 @@ jobs:
9393
9494
- name: generate cultivator token
9595
if: ${{ github.event_name == 'release' }}
96-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
96+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
9797
id: generate-token
9898
with:
9999
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"

‎.github/workflows/release.yaml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -21,12 +21,12 @@ jobs:
2121
id-token: write # Needed for trusted publishing
2222
steps:
2323
- name: Harden the runner (Audit all outbound calls)
24-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
24+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2525
with:
2626
egress-policy: audit
2727

2828
- name: Checkout repository
29-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
29+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3030
with:
3131
fetch-depth: 0
3232
persist-credentials: false
@@ -35,14 +35,14 @@ jobs:
3535
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # zizmor: ignore[stale-action-refs] -- pinned to stable branch
3636

3737
- name: generate cultivator token
38-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
38+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
3939
id: generate-token
4040
with:
4141
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"
4242
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
4343

4444
- name: Run release-plz
45-
uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5
45+
uses: release-plz/action@064f4d1e36c843611ddf013be726beaa4ad804db # v0.5
4646
with:
4747
command: release
4848
env:
@@ -62,12 +62,12 @@ jobs:
6262
cancel-in-progress: false
6363
steps:
6464
- name: Harden the runner (Audit all outbound calls)
65-
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
65+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
6666
with:
6767
egress-policy: audit
6868

6969
- name: Checkout repository
70-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
70+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
7171
with:
7272
fetch-depth: 0
7373
persist-credentials: false
@@ -76,14 +76,14 @@ jobs:
7676
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # zizmor: ignore[stale-action-refs] -- pinned to stable branch
7777

7878
- name: generate cultivator token
79-
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
79+
uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
8080
id: generate-token
8181
with:
8282
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"
8383
private-key: "${{ secrets.EDERA_CULTIVATION_APP_PRIVATE_KEY }}"
8484

8585
- name: Run release-plz
86-
uses: release-plz/action@1528104d2ca23787631a1c1f022abb64b34c1e11 # v0.5
86+
uses: release-plz/action@064f4d1e36c843611ddf013be726beaa4ad804db # v0.5
8787
with:
8888
command: release-pr
8989
env:

0 commit comments

Comments
 (0)