From cbf48f5a4052014d1b339c509ea77cd0b9fc0fa9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 6 Aug 2024 17:02:29 +0000 Subject: [PATCH] Bump the version-updates group across 1 directory with 4 updates Bumps the version-updates group with 4 updates in the / directory: [fish-shop/workflows](https://github.com/fish-shop/workflows), [step-security/harden-runner](https://github.com/step-security/harden-runner), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [github/codeql-action](https://github.com/github/codeql-action). Updates `fish-shop/workflows` from 1.9.6 to 1.9.7 - [Release notes](https://github.com/fish-shop/workflows/releases) - [Commits](https://github.com/fish-shop/workflows/compare/6a65387b9d8807b9140bfde501823dd96243f611...0ab266814f754c4b1706b523a4e90ccd97bcc362) Updates `step-security/harden-runner` from 2.9.0 to 2.9.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/0d381219ddf674d61a7572ddd19d7941e271515c...5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde) Updates `actions/upload-artifact` from 4.3.4 to 4.3.6 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/0b2256b8c012f0828dc542b3febcab082c67f72b...834a144ee995460fba8ed112a2fc961b36a5ec5a) Updates `github/codeql-action` from 3.25.15 to 3.26.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/afb54ba388a7dca6ecae48f608c4ff05ff4cc77a...eb055d739abdc2e8de2e5f4ba1a8b246daa779aa) --- updated-dependencies: - dependency-name: fish-shop/workflows dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: version-updates - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/dependency-review.yml | 2 +- .github/workflows/markdown-links.yml | 2 +- .github/workflows/openssf-scorecard.yml | 6 +++--- .github/workflows/release-tags.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 7be616d..ddbefaf 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -10,4 +10,4 @@ jobs: dependency-review: permissions: pull-requests: write - uses: fish-shop/workflows/.github/workflows/dependency-review.yml@6a65387b9d8807b9140bfde501823dd96243f611 # v1.9.6 + uses: fish-shop/workflows/.github/workflows/dependency-review.yml@0ab266814f754c4b1706b523a4e90ccd97bcc362 # v1.9.7 diff --git a/.github/workflows/markdown-links.yml b/.github/workflows/markdown-links.yml index 3cb9612..56a09b2 100644 --- a/.github/workflows/markdown-links.yml +++ b/.github/workflows/markdown-links.yml @@ -10,4 +10,4 @@ jobs: markdown-links: permissions: pull-requests: write - uses: fish-shop/workflows/.github/workflows/markdown-links.yml@6a65387b9d8807b9140bfde501823dd96243f611 # v1.9.6 + uses: fish-shop/workflows/.github/workflows/markdown-links.yml@0ab266814f754c4b1706b523a4e90ccd97bcc362 # v1.9.7 diff --git a/.github/workflows/openssf-scorecard.yml b/.github/workflows/openssf-scorecard.yml index df32fb9..6e2ee23 100644 --- a/.github/workflows/openssf-scorecard.yml +++ b/.github/workflows/openssf-scorecard.yml @@ -17,7 +17,7 @@ jobs: id-token: write # Needed to publish results to OpenSSF API and get a badge (see publish_results below) steps: - name: Harden runner - uses: step-security/harden-runner@0d381219ddf674d61a7572ddd19d7941e271515c # v2.9.0 + uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 with: egress-policy: audit - name: Checkout repository @@ -31,12 +31,12 @@ jobs: results_format: sarif publish_results: true - name: Upload Actions artifact - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 with: name: SARIF file path: results.sarif retention-days: 5 - name: Upload to code scanning dashboard - uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15 + uses: github/codeql-action/upload-sarif@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # v3.26.0 with: sarif_file: results.sarif diff --git a/.github/workflows/release-tags.yml b/.github/workflows/release-tags.yml index c1f09f2..95a4284 100644 --- a/.github/workflows/release-tags.yml +++ b/.github/workflows/release-tags.yml @@ -10,4 +10,4 @@ jobs: release-tags: permissions: contents: write - uses: fish-shop/workflows/.github/workflows/release-tags.yml@6a65387b9d8807b9140bfde501823dd96243f611 # v1.9.6 + uses: fish-shop/workflows/.github/workflows/release-tags.yml@0ab266814f754c4b1706b523a4e90ccd97bcc362 # v1.9.7