ci(deps): bump the github-actions group across 1 directory with 17 updates#85
Open
dependabot[bot] wants to merge 1 commit into
Conversation
…dates Bumps the github-actions group with 17 updates in the /.github/workflows directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.16.1` | `2.19.4` | | [step-security/action-gh-release](https://github.com/step-security/action-gh-release) | `2.6.1` | `3.0.0` | | [mozilla-actions/sccache-action](https://github.com/mozilla-actions/sccache-action) | `0.0.9` | `0.0.10` | | [step-security/rust-cache](https://github.com/step-security/rust-cache) | `2.8.3` | `2.9.1` | | [step-security/docker-login-action](https://github.com/step-security/docker-login-action) | `3.7.0` | `4.1.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `6.0.0` | `6.1.0` | | [step-security/docker-build-push-action](https://github.com/step-security/docker-build-push-action) | `6.18.0` | `7.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` | | [step-security/action-semantic-pull-request](https://github.com/step-security/action-semantic-pull-request) | `6.1.1` | `6.1.2` | | [step-security/mise-action](https://github.com/step-security/mise-action) | `3.6.1` | `4.0.1` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.73.0` | `2.79.7` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `6.0.0` | `6.0.1` | | [step-security/paths-filter](https://github.com/step-security/paths-filter) | `3.0.5` | `4.0.1` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.35.1` | `4.36.0` | | [actions/labeler](https://github.com/actions/labeler) | `6.0.1` | `6.1.0` | | [googleapis/release-please-action](https://github.com/googleapis/release-please-action) | `4.4.0` | `5.0.0` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.9.0` | `5.0.0` | Updates `step-security/harden-runner` from 2.16.1 to 2.19.4 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@fe10465...9af89fc) Updates `step-security/action-gh-release` from 2.6.1 to 3.0.0 - [Release notes](https://github.com/step-security/action-gh-release/releases) - [Commits](step-security/action-gh-release@dc29ef0...277bfa8) Updates `mozilla-actions/sccache-action` from 0.0.9 to 0.0.10 - [Release notes](https://github.com/mozilla-actions/sccache-action/releases) - [Commits](Mozilla-Actions/sccache-action@7d986dd...9e7fa8a) Updates `step-security/rust-cache` from 2.8.3 to 2.9.1 - [Release notes](https://github.com/step-security/rust-cache/releases) - [Commits](step-security/rust-cache@9be15b8...851174d) Updates `step-security/docker-login-action` from 3.7.0 to 4.1.0 - [Release notes](https://github.com/step-security/docker-login-action/releases) - [Commits](step-security/docker-login-action@6aa05fe...870af64) Updates `docker/metadata-action` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](docker/metadata-action@030e881...80c7e94) Updates `step-security/docker-build-push-action` from 6.18.0 to 7.1.0 - [Release notes](https://github.com/step-security/docker-build-push-action/releases) - [Commits](step-security/docker-build-push-action@a8c3d08...846549b) Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@bbbca2d...043fb46) Updates `step-security/action-semantic-pull-request` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/step-security/action-semantic-pull-request/releases) - [Commits](step-security/action-semantic-pull-request@bc0cf74...75d2dd5) Updates `step-security/mise-action` from 3.6.1 to 4.0.1 - [Release notes](https://github.com/step-security/mise-action/releases) - [Commits](step-security/mise-action@88aa01c...c7396e2) Updates `taiki-e/install-action` from 2.73.0 to 2.79.7 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](taiki-e/install-action@7a562df...d9be7d8) Updates `codecov/codecov-action` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@57e3a13...e79a696) Updates `step-security/paths-filter` from 3.0.5 to 4.0.1 - [Release notes](https://github.com/step-security/paths-filter/releases) - [Commits](step-security/paths-filter@6eee183...5c5241b) Updates `github/codeql-action` from 4.35.1 to 4.36.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c10b806...7211b7c) Updates `actions/labeler` from 6.0.1 to 6.1.0 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](actions/labeler@634933e...f27b608) Updates `googleapis/release-please-action` from 4.4.0 to 5.0.0 - [Release notes](https://github.com/googleapis/release-please-action/releases) - [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md) - [Commits](googleapis/release-please-action@16a9c90...45996ed) Updates `actions/dependency-review-action` from 4.9.0 to 5.0.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@2031cfc...a1d282b) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.19.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: step-security/action-gh-release dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: mozilla-actions/sccache-action dependency-version: 0.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: step-security/rust-cache dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: step-security/docker-login-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/metadata-action dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: step-security/docker-build-push-action dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: step-security/action-semantic-pull-request dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: step-security/mise-action dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-version: 2.79.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: step-security/paths-filter dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/labeler dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: googleapis/release-please-action dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
github-actions
Bot
added
area/config
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 17 updates in the /.github/workflows directory:
2.16.12.19.42.6.13.0.00.0.90.0.102.8.32.9.13.7.04.1.06.0.06.1.06.18.07.1.07.0.07.0.16.1.16.1.23.6.14.0.12.73.02.79.76.0.06.0.13.0.54.0.14.35.14.36.06.0.16.1.04.4.05.0.04.9.05.0.0Updates
step-security/harden-runnerfrom 2.16.1 to 2.19.4Release notes
Sourced from step-security/harden-runner's releases.
... (truncated)
Commits
9af89fcMerge pull request #667 from step-security/update-agent-v1.8.6485dce8Update agent to v1.8.6ab7a940Merge pull request #665 from step-security/fix/use-policy-store-default-auditec41b78Default to audit mode when api-key missing with use-policy-store9ca718dMerge pull request #664 from step-security/update-agent-v1.8.51dee3dfUpdate agent to v1.8.5a5ad31dMerge pull request #657 from devantler/fix/ubuntu-slim-user-env6e92856build dist and trim ubuntu-slim message4e0504eMerge branch 'main' into fix/ubuntu-slim-user-env8d3c67dRelease v2.19.0 (#661)Updates
step-security/action-gh-releasefrom 2.6.1 to 3.0.0Release notes
Sourced from step-security/action-gh-release's releases.
Commits
277bfa8Merge pull request #86 from step-security/auto-cherry-pickfcbd57achore: Cherry-pick conflicting changes from upstream28e0835fix: apply code build script147407frelease: cut v3.0.0 for Node 24 upgrade (#670)b06017crelease: cut v3.0.0 for Node 24 upgrade (#670)7f52c03Merge pull request #87 from step-security/npm-audit-fixe09057efix: apply audit fixes38e3839fix: apply audit fixes30dad22Merge pull request #85 from step-security/auto-cherry-picke5ef807chore: Bump version to 2.6.2Updates
mozilla-actions/sccache-actionfrom 0.0.9 to 0.0.10Release notes
Sourced from mozilla-actions/sccache-action's releases.
Commits
9e7fa8aMerge pull request #251 from sylvestre/ver3ca012dprepare version 0.0.107cf1643Merge pull request #231 from Mozilla-Actions/dependabot/npm_and_yarn/js-yaml-...b2be802Merge pull request #246 from baseplate-admin/patch-184812a5Merge pull request #250 from Mozilla-Actions/dependabot/npm_and_yarn/handleba...4e28318Merge pull request #249 from Mozilla-Actions/dependabot/npm_and_yarn/picomatc...cfa813eMerge pull request #248 from Mozilla-Actions/dependabot/npm_and_yarn/flatted-...ef3762bMerge pull request #245 from cakebaker/bump_to_node24919bfb6Bump handlebars from 4.7.8 to 4.7.9167904bBump picomatch from 2.3.1 to 2.3.2Updates
step-security/rust-cachefrom 2.8.3 to 2.9.1Release notes
Sourced from step-security/rust-cache's releases.
Commits
851174dfix: test vulns fixed (#279)f0d17cdMerge branch 'main' into fix/test-vulnerabilities-fixed90bb4a5chore: Cherry-picked changes from upstream (#281)595123aMerge pull request #280 from step-security/auto-cherry-pickb1072ebconflicted commits cherry-picked374bbf5fix: apply code build scriptdd5ecfffix: apply code build script7791ac0Compare case-insenitively for full cache key match (#303)49df1bdConsider all installed toolchains in cache key (#293)84286e5Consider all installed toolchains in cache key (#293)Updates
step-security/docker-login-actionfrom 3.7.0 to 4.1.0Release notes
Sourced from step-security/docker-login-action's releases.
Commits
870af64Merge pull request #36 from step-security/fix/subscription_code31c9f9dfix: unused dependency removedad9fbe6fix: dist updated1bb40b7Merge branch 'main' into fix/subscription_coded0c3707fix: fixed subscription check codef047736Merge pull request #35 from step-security/auto-cherry-pickf3dad61chore: cherry-picked conflicting changesae453c3fix: apply code build script750d643fix: apply code build script243626afix scoped Docker Hub cleanup path when registry is omittedUpdates
docker/metadata-actionfrom 6.0.0 to 6.1.0Release notes
Sourced from docker/metadata-action's releases.
Commits
80c7e94Merge pull request #613 from docker/dependabot/npm_and_yarn/docker/actions-to...8e0ddabchore: update generated contenta8db14bchore(deps): Bump@docker/actions-toolkitfrom 0.79.0 to 0.90.063a7371Merge pull request #617 from docker/dependabot/npm_and_yarn/csv-parse-6.2.0c6916a6chore: update generated contentaca9205chore(deps): Bump csv-parse from 6.1.0 to 6.2.19dcfe60Merge pull request #629 from docker/dependabot/npm_and_yarn/handlebars-4.7.943dea76chore: update generated content7a56f5achore(deps): Bump handlebars from 4.7.8 to 4.7.9e49e0aaMerge pull request #658 from docker/dependabot/npm_and_yarn/brace-expansion-5...Updates
step-security/docker-build-push-actionfrom 6.18.0 to 7.1.0Release notes
Sourced from step-security/docker-build-push-action's releases.
Commits
846549bMerge pull request #42 from step-security/feat/update-subscription-checkf9b1572banner added back899b61ereadme updated2b5119efeat: added banner and update subscription check to make maintained actions f...b2ce443Merge pull request #41 from step-security/auto-cherry-picke1d2cd3readme updateda5e683bci updatedf751cf9ci updated0bbe4cbconflicted commits cherry-picked46acbdffix test since secrets are not written to temp path anymoreUpdates
actions/upload-artifactfrom 7.0.0 to 7.0.1Release notes
Sourced from actions/upload-artifact's releases.
Commits
043fb46Merge pull request #797 from actions/yacaovsnc/update-dependency634250cInclude changes in typespec/ts-http-runtime 0.3.5e454baaReadme: bump all the example versions to v7 (#796)74fad66Update the readme with direct upload details (#795)Updates
step-security/action-semantic-pull-requestfrom 6.1.1 to 6.1.2Release notes
Sourced from step-security/action-semantic-pull-request's releases.
Commits
75d2dd5Merge pull request #162 from step-security/Raj-StepSecurity-patch-11dce66eeUpdate actions_release.yml80eb62bMerge pull request #161 from step-security/yarn-audit-fixac0700ffix: apply audit fixes92d4228fix: apply audit fixes91fa82ffix: apply audit fixesfed9df2Merge pull request #160 from step-security/feat/update-subscription-check9d0ba60code linted21be1b8feat: added banner and update subscription check to make maintained actions f...57d5042Merge pull request #159 from step-security/yarn-audit-fixUpdates
step-security/mise-actionfrom 3.6.1 to 4.0.1Release notes
Sourced from step-security/mise-action's releases.
Commits
c7396e2Merge pull request #208 from step-security/npm-audit-fixb9722aafix: apply audit fixes6b3a113fix: apply audit fixesb8ed6bcfix: apply audit fixesd25d72bfix: apply audit fixes9e6e870Merge pull request #207 from step-security/auto-cherry-pick343774cchore: cherry-picked conflicting changes3660f92chore: cherry-picked conflicting changesd1a0b66fix: apply code build script77dca75fix: apply code build scriptUpdates
taiki-e/install-actionfrom 2.73.0 to 2.79.7Release notes
Sourced from taiki-e/install-action's releases.