From 6299da0fe43d678d91ecd925ec1181d0003c5c4f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 10 Jun 2026 01:16:06 +0000 Subject: [PATCH] deps(deps): bump the production-dependencies group with 11 updates Bumps the production-dependencies group with 11 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` | | [expo/expo-github-action](https://github.com/expo/expo-github-action) | `8` | `9` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.14.0` | `2.19.4` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `4.0.0` | `6.0.8` | | [actions/cache](https://github.com/actions/cache) | `4` | `5` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3` | `5` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `4` | `6` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4` | `5` | | [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) | `2` | `3` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v6) Updates `actions/setup-node` from 4 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v6) Updates `expo/expo-github-action` from 8 to 9 - [Release notes](https://github.com/expo/expo-github-action/releases) - [Changelog](https://github.com/expo/expo-github-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/expo/expo-github-action/compare/v8...v9) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `step-security/harden-runner` from 2.14.0 to 2.19.4 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/20cf305ff2072d973412fa9b1e3a4f227bda3c76...9af89fc71515a100421586dfdb3dc9c984fbf411) Updates `pnpm/action-setup` from 4.0.0 to 6.0.8 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/fe02b34f77f8bc703788d5817da081398fad5dd2...0e279bb959325dab635dd2c09392533439d90093) Updates `actions/cache` from 4 to 5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v4...v5) Updates `actions/upload-pages-artifact` from 3 to 5 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](https://github.com/actions/upload-pages-artifact/compare/v3...v5) Updates `actions/configure-pages` from 4 to 6 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](https://github.com/actions/configure-pages/compare/v4...v6) Updates `actions/deploy-pages` from 4 to 5 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v4...v5) Updates `gitleaks/gitleaks-action` from 2 to 3 - [Release notes](https://github.com/gitleaks/gitleaks-action/releases) - [Commits](https://github.com/gitleaks/gitleaks-action/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: expo/expo-github-action dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: step-security/harden-runner dependency-version: 2.19.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: pnpm/action-setup dependency-version: 6.0.8 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: actions/upload-pages-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: actions/configure-pages dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: actions/deploy-pages dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: gitleaks/gitleaks-action dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/build-android.yml | 14 +++++++------- .github/workflows/ci.yml | 20 ++++++++++---------- .github/workflows/deploy-web.yml | 10 +++++----- .github/workflows/eas-build.yml | 8 ++++---- .github/workflows/gitleaks.yml | 4 ++-- .github/workflows/verify.yml | 6 +++--- 6 files changed, 31 insertions(+), 31 deletions(-) diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml index 8cdb80e..b616bf7 100644 --- a/.github/workflows/build-android.yml +++ b/.github/workflows/build-android.yml @@ -12,16 +12,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 20.x cache: 'npm' - name: Setup Expo and EAS - uses: expo/expo-github-action@v8 + uses: expo/expo-github-action@v9 with: expo-version: latest eas-version: latest @@ -48,7 +48,7 @@ jobs: EXPO_TOKEN: ${{ secrets.EXPO_TOKEN }} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: build-artifacts @@ -63,10 +63,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 20.x cache: 'npm' @@ -98,7 +98,7 @@ jobs: echo "npm版本: $(npm --version)" >> build-report.txt - name: Upload build report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: build-report path: build-report.txt diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ac23c89..c6d9831 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,15 +20,15 @@ jobs: timeout-minutes: 5 steps: - name: Harden Runner - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Set up Node - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: "20" @@ -42,12 +42,12 @@ jobs: - name: Install pnpm if: steps.pm.outputs.pm == 'pnpm' - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.1.0 + uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v4.1.0 with: version: 9 - name: Cache deps - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: | node_modules @@ -94,15 +94,15 @@ jobs: timeout-minutes: 15 steps: - name: Harden Runner - uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 + uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 with: egress-policy: audit - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Set up Node - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: "20" @@ -116,12 +116,12 @@ jobs: - name: Install pnpm if: steps.pm.outputs.pm == 'pnpm' - uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 # v4.1.0 + uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v4.1.0 with: version: 9 - name: Cache deps - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: | node_modules diff --git a/.github/workflows/deploy-web.yml b/.github/workflows/deploy-web.yml index 2f5a549..ba9c28e 100644 --- a/.github/workflows/deploy-web.yml +++ b/.github/workflows/deploy-web.yml @@ -20,10 +20,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 20 cache: npm @@ -88,7 +88,7 @@ jobs: ls -la dist | head -5 - name: Upload artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@v5 with: path: ./dist @@ -101,8 +101,8 @@ jobs: needs: build steps: - name: Setup Pages - uses: actions/configure-pages@v4 + uses: actions/configure-pages@v6 - name: Deploy id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@v5 diff --git a/.github/workflows/eas-build.yml b/.github/workflows/eas-build.yml index d6bdee7..cd8f9b3 100644 --- a/.github/workflows/eas-build.yml +++ b/.github/workflows/eas-build.yml @@ -28,16 +28,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: 'npm' - name: Setup Expo and EAS - uses: expo/expo-github-action@v8 + uses: expo/expo-github-action@v9 with: expo-version: latest eas-version: latest @@ -63,7 +63,7 @@ jobs: echo "See BUILD_APK.md for instructions on how to build locally!" >> build-status.txt - name: Upload Report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: build-info path: build-status.txt diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml index e8e9eed..bd806cc 100644 --- a/.github/workflows/gitleaks.yml +++ b/.github/workflows/gitleaks.yml @@ -19,12 +19,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout (full history) - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Run gitleaks - uses: gitleaks/gitleaks-action@v2 + uses: gitleaks/gitleaks-action@v3 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITLEAKS_ENABLE_UPLOAD_ARTIFACT: true diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml index c29e3de..793e4a1 100644 --- a/.github/workflows/verify.yml +++ b/.github/workflows/verify.yml @@ -16,10 +16,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: 'npm' @@ -47,7 +47,7 @@ jobs: echo "3. Repository: https://github.com/badhope/TaskFlow" >> verification-report.txt - name: Upload Report - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: verification-report path: verification-report.txt