From 1903efac916b664e12ad6bf402fe327ca702a282 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 3 Oct 2025 04:03:49 +0000 Subject: [PATCH] chore(deps): bump the github-actions-dependencies group across 1 directory with 4 updates Bumps the github-actions-dependencies group with 4 updates in the / directory: [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common), [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish), [github/codeql-action](https://github.com/github/codeql-action) and [actions/dependency-review-action](https://github.com/actions/dependency-review-action). Updates `hoverkraft-tech/ci-github-common` from 0.24.0 to 0.26.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](https://github.com/hoverkraft-tech/ci-github-common/compare/b4883995e100e291a1fed68678d47a560328ed08...1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2) Updates `hoverkraft-tech/ci-github-publish` from 0.8.0 to 0.10.1 - [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases) - [Commits](https://github.com/hoverkraft-tech/ci-github-publish/compare/6d9e5d48da1a80c085e8ed867d680a5e99b28217...00adc3757296add499b60fd72a124b06974a100e) Updates `github/codeql-action` from 3.30.4 to 3.30.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9...64d10c13136e1c5bce3e5fbde8d4906eeaafc885) Updates `actions/dependency-review-action` from 4.7.3 to 4.8.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/595b5aeba73380359d98a5e087f648dbb0edce1b...56339e523c0409420f6c2c9a2f4292bbb3c07dd3) --- updated-dependencies: - dependency-name: hoverkraft-tech/ci-github-common dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-publish dependency-version: 0.10.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: github/codeql-action dependency-version: 3.30.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/dependency-review-action dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/__greetings.yml | 2 +- .github/workflows/__main-ci.yml | 2 +- .github/workflows/__need-fix-to-issue.yml | 2 +- .github/workflows/__shared-ci.yml | 2 +- .github/workflows/__stale.yml | 2 +- .github/workflows/continuous-integration.yml | 18 +++++++++--------- 6 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/__greetings.yml b/.github/workflows/__greetings.yml index 831efe7..ec64ddd 100644 --- a/.github/workflows/__greetings.yml +++ b/.github/workflows/__greetings.yml @@ -13,4 +13,4 @@ permissions: jobs: greetings: - uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml index c175bab..4d12d77 100644 --- a/.github/workflows/__main-ci.yml +++ b/.github/workflows/__main-ci.yml @@ -32,7 +32,7 @@ jobs: release: needs: ci if: github.event_name != 'schedule' - uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@6d9e5d48da1a80c085e8ed867d680a5e99b28217 # 0.8.0 + uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@00adc3757296add499b60fd72a124b06974a100e # 0.10.1 with: update-all: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' }} github-app-id: ${{ vars.CI_BOT_APP_ID }} diff --git a/.github/workflows/__need-fix-to-issue.yml b/.github/workflows/__need-fix-to-issue.yml index 231140a..60a24bc 100644 --- a/.github/workflows/__need-fix-to-issue.yml +++ b/.github/workflows/__need-fix-to-issue.yml @@ -24,7 +24,7 @@ concurrency: jobs: main: - uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 with: manual-commit-ref: ${{ inputs.manual-commit-ref }} manual-base-ref: ${{ inputs.manual-base-ref }} diff --git a/.github/workflows/__shared-ci.yml b/.github/workflows/__shared-ci.yml index d48b405..22c3f66 100644 --- a/.github/workflows/__shared-ci.yml +++ b/.github/workflows/__shared-ci.yml @@ -13,7 +13,7 @@ permissions: jobs: linter: - uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 test-action-dependencies-cache: name: Test action "dependencies-cache" diff --git a/.github/workflows/__stale.yml b/.github/workflows/__stale.yml index bfb21c2..525e98d 100644 --- a/.github/workflows/__stale.yml +++ b/.github/workflows/__stale.yml @@ -10,4 +10,4 @@ permissions: jobs: main: - uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml index e0e94fb..a0ad44d 100644 --- a/.github/workflows/continuous-integration.yml +++ b/.github/workflows/continuous-integration.yml @@ -66,11 +66,11 @@ jobs: security-events: write runs-on: "ubuntu-latest" steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 - - uses: github/codeql-action/init@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.30.4 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 + - uses: github/codeql-action/init@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6 with: languages: ${{ inputs.code-ql }} - - uses: github/codeql-action/analyze@303c0aef88fc2fe5ff6d63d3b1596bfd83dfa1f9 # v3.30.4 + - uses: github/codeql-action/analyze@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.30.6 dependency-review: name: 🛡️ Dependency Review @@ -79,8 +79,8 @@ jobs: contents: read runs-on: "ubuntu-latest" steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 - - uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 + - uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0 setup: name: ⚙️ Setup @@ -93,7 +93,7 @@ jobs: build-commands: ${{ steps.build-variables.outputs.commands }} build-artifact: ${{ steps.build-variables.outputs.artifact }} steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659 # jscpd:ignore-start @@ -172,7 +172,7 @@ jobs: contents: read id-token: write steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659 - id: oidc @@ -210,7 +210,7 @@ jobs: contents: read id-token: write steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 if: needs.setup.outputs.build-commands # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659 @@ -275,7 +275,7 @@ jobs: contents: read id-token: write steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@b4883995e100e291a1fed68678d47a560328ed08 # 0.24.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@1c379f7f6e0fc850fe5a7111f74d54e159b4dcd2 # 0.26.0 - if: needs.setup.outputs.build-artifact uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0