Skip to content

Commit e98a559

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the actions group with 7 updates
Bumps the actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `6.0.1` | | [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.7.5` | `2.10.3` | | [actions/cache](https://github.com/actions/cache) | `4.0.2` | `5.0.2` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `4.0.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.27.0` | `4.31.10` | | [webfactory/ssh-agent](https://github.com/webfactory/ssh-agent) | `0.9.0` | `0.9.1` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.0` | `2.4.3` | Updates `actions/checkout` from 4.1.1 to 6.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4.1.1...v6.0.1) Updates `haskell-actions/setup` from 2.7.5 to 2.10.3 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](haskell-actions/setup@ec49483...f9150cb) Updates `actions/cache` from 4.0.2 to 5.0.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0c45773...8b402f5) Updates `actions/upload-pages-artifact` from 3.0.1 to 4.0.0 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@56afc60...7b1f4a7) Updates `github/codeql-action` from 3.27.0 to 4.31.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](github/codeql-action@v3.27.0...v4.31.10) Updates `webfactory/ssh-agent` from 0.9.0 to 0.9.1 - [Release notes](https://github.com/webfactory/ssh-agent/releases) - [Changelog](https://github.com/webfactory/ssh-agent/blob/master/CHANGELOG.md) - [Commits](webfactory/ssh-agent@dc588b6...a6f90b1) Updates `ossf/scorecard-action` from 2.4.0 to 2.4.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Commits](ossf/scorecard-action@v2.4.0...v2.4.3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: haskell-actions/setup dependency-version: 2.10.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 5.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-pages-artifact dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.31.10 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: webfactory/ssh-agent dependency-version: 0.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 7001366 commit e98a559

7 files changed

Lines changed: 29 additions & 29 deletions

File tree

‎.github/workflows/casket-pages.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,22 +20,22 @@ jobs:
2020
runs-on: ubuntu-latest
2121
steps:
2222
- name: Checkout
23-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
23+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
2424

2525
- name: Checkout casket-ssg
26-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
26+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
2727
with:
2828
repository: hyperpolymath/casket-ssg
2929
path: .casket-ssg
3030

3131
- name: Setup GHCup
32-
uses: haskell-actions/setup@ec49483bfc012387b227434aba94f59a6ecd0900 # v2
32+
uses: haskell-actions/setup@f9150cb1d140e9a9271700670baa38991e6fa25c # v2
3333
with:
3434
ghc-version: '9.8.2'
3535
cabal-version: '3.10'
3636

3737
- name: Cache Cabal
38-
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
38+
uses: actions/cache@8b402f58fbc84540c8b491a91e594a4576fec3d7 # v4
3939
with:
4040
path: |
4141
~/.cabal/packages
@@ -82,7 +82,7 @@ jobs:
8282
uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
8383

8484
- name: Upload artifact
85-
uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
85+
uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v3
8686
with:
8787
path: '_site'
8888

‎.github/workflows/codeql.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ jobs:
6666

6767
# Initializes the CodeQL tools for scanning.
6868
- name: Initialize CodeQL
69-
uses: github/codeql-action/init@v4
69+
uses: github/codeql-action/init@v4.31.10
7070
with:
7171
languages: ${{ matrix.language }}
7272
build-mode: ${{ matrix.build-mode }}
@@ -95,6 +95,6 @@ jobs:
9595
exit 1
9696
9797
- name: Perform CodeQL Analysis
98-
uses: github/codeql-action/analyze@v4
98+
uses: github/codeql-action/analyze@v4.31.10
9999
with:
100100
category: "/language:${{matrix.language}}"

‎.github/workflows/mirror.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,11 @@ jobs:
1414
runs-on: ubuntu-latest
1515
if: vars.GITLAB_MIRROR_ENABLED == 'true'
1616
steps:
17-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
17+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
1818
with:
1919
fetch-depth: 0
2020

21-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
21+
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
2222
with:
2323
ssh-private-key: ${{ secrets.GITLAB_SSH_KEY }}
2424

@@ -32,11 +32,11 @@ jobs:
3232
runs-on: ubuntu-latest
3333
if: vars.BITBUCKET_MIRROR_ENABLED == 'true'
3434
steps:
35-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
35+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
3636
with:
3737
fetch-depth: 0
3838

39-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
39+
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
4040
with:
4141
ssh-private-key: ${{ secrets.BITBUCKET_SSH_KEY }}
4242

@@ -50,11 +50,11 @@ jobs:
5050
runs-on: ubuntu-latest
5151
if: vars.CODEBERG_MIRROR_ENABLED == 'true'
5252
steps:
53-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
53+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
5454
with:
5555
fetch-depth: 0
5656

57-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
57+
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
5858
with:
5959
ssh-private-key: ${{ secrets.CODEBERG_SSH_KEY }}
6060

@@ -68,11 +68,11 @@ jobs:
6868
runs-on: ubuntu-latest
6969
if: vars.SOURCEHUT_MIRROR_ENABLED == 'true'
7070
steps:
71-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
71+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
7272
with:
7373
fetch-depth: 0
7474

75-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
75+
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
7676
with:
7777
ssh-private-key: ${{ secrets.SOURCEHUT_SSH_KEY }}
7878

@@ -86,11 +86,11 @@ jobs:
8686
runs-on: ubuntu-latest
8787
if: vars.DISROOT_MIRROR_ENABLED == 'true'
8888
steps:
89-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
89+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
9090
with:
9191
fetch-depth: 0
9292

93-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
93+
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
9494
with:
9595
ssh-private-key: ${{ secrets.DISROOT_SSH_KEY }}
9696

@@ -104,11 +104,11 @@ jobs:
104104
runs-on: ubuntu-latest
105105
if: vars.GITEA_MIRROR_ENABLED == 'true'
106106
steps:
107-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
107+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
108108
with:
109109
fetch-depth: 0
110110

111-
- uses: webfactory/ssh-agent@dc588b651fe13675774614f8e6a936a468676387 # v0.9.0
111+
- uses: webfactory/ssh-agent@a6f90b1f127823b31d4d4a8d96047790581349bd # v0.9.1
112112
with:
113113
ssh-private-key: ${{ secrets.GITEA_SSH_KEY }}
114114

@@ -122,7 +122,7 @@ jobs:
122122
runs-on: ubuntu-latest
123123
if: vars.RADICLE_MIRROR_ENABLED == 'true'
124124
steps:
125-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
125+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
126126
with:
127127
fetch-depth: 0
128128

‎.github/workflows/scorecard-enforcer.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -18,19 +18,19 @@ jobs:
1818
security-events: write
1919
id-token: write # For OIDC
2020
steps:
21-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
21+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
2222
with:
2323
persist-credentials: false
2424

2525
- name: Run Scorecard
26-
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
26+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
2727
with:
2828
results_file: results.sarif
2929
results_format: sarif
3030
publish_results: true
3131

3232
- name: Upload SARIF
33-
uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3
33+
uses: github/codeql-action/upload-sarif@fb650c22f965a3eff7e20c5535e51a256dd16bf1 # v3
3434
with:
3535
sarif_file: results.sarif
3636

@@ -53,7 +53,7 @@ jobs:
5353
check-critical:
5454
runs-on: ubuntu-latest
5555
steps:
56-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
56+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
5757

5858
- name: Check SECURITY.md exists
5959
run: |

‎.github/workflows/scorecard.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -26,6 +26,6 @@ jobs:
2626
results_format: sarif
2727

2828
- name: Upload results
29-
uses: github/codeql-action/upload-sarif@v4
29+
uses: github/codeql-action/upload-sarif@v4.31.10
3030
with:
3131
sarif_file: results.sarif

‎.github/workflows/secret-scanner.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
trufflehog:
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
16+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
1717
with:
1818
fetch-depth: 0 # Full history for scanning
1919

@@ -25,7 +25,7 @@ jobs:
2525
gitleaks:
2626
runs-on: ubuntu-latest
2727
steps:
28-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
28+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
2929
with:
3030
fetch-depth: 0
3131

@@ -39,7 +39,7 @@ jobs:
3939
runs-on: ubuntu-latest
4040
if: hashFiles('**/Cargo.toml') != ''
4141
steps:
42-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
42+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
4343

4444
- name: Check for hardcoded secrets in Rust
4545
run: |

‎.github/workflows/workflow-linter.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
lint-workflows:
1717
runs-on: ubuntu-latest
1818
steps:
19-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
19+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4
2020

2121
- name: Check SPDX headers
2222
run: |

0 commit comments

Comments
 (0)