Bump the github-actions group with 8 updates (#18284)

dependabot[bot] · web-flow · commit 41dd2f40fa8f · 2025-05-01T14:10:01.000Z
Bumps the github-actions group with 8 updates: | Package | From | To | | --- | --- | --- | | [hendrikmuhs/ccache-action](https://github.com/hendrikmuhs/ccache-action) | `1.2.17` | `1.2.18` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.5.0` | `5.6.0` | | [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action) | `2.18.0` | `2.19.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `3.4.0` | | [aminya/setup-cpp](https://github.com/aminya/setup-cpp) | `1.1.1` | `1.5.3` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.2.0` | `4.4.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2.2.3` | `2.3.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.2.1` | `2.2.2` | Updates `hendrikmuhs/ccache-action` from 1.2.17 to 1.2.18 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hendrikmuhs/ccache-action/releases">hendrikmuhs/ccache-action's releases</a>.</em></p> <blockquote> <h2>v1.2.18</h2> <h2>What's Changed</h2> <ul> <li>Bump ts-jest from 29.2.5 to 29.2.6 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/291">hendrikmuhs/ccache-action#291</a></li> <li>Bump typescript from 5.7.3 to 5.8.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/294">hendrikmuhs/ccache-action#294</a></li> <li>Bump <code>@​types/node</code> from 22.13.0 to 22.13.9 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/296">hendrikmuhs/ccache-action#296</a></li> <li>set cache to readonly if skipping save by <a href="https://github.com/planetmarshall"><code>@​planetmarshall</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/301">hendrikmuhs/ccache-action#301</a></li> <li>Update sccache version to v0.10.0 by <a href="https://github.com/mhegazy"><code>@​mhegazy</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/315">hendrikmuhs/ccache-action#315</a></li> <li>Bump <code>@​types/node</code> from 22.13.9 to 22.15.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/316">hendrikmuhs/ccache-action#316</a></li> <li>Bump ts-jest from 29.2.6 to 29.3.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/312">hendrikmuhs/ccache-action#312</a></li> <li>Bump typescript from 5.8.2 to 5.8.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/311">hendrikmuhs/ccache-action#311</a></li> <li>Bump <code>@​actions/cache</code> from 4.0.0 to 4.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/299">hendrikmuhs/ccache-action#299</a></li> <li>Don't append <code>-</code> when <code>append-timestamp</code> is disabled. by <a href="https://github.com/Naros"><code>@​Naros</code></a> in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/306">hendrikmuhs/ccache-action#306</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mhegazy"><code>@​mhegazy</code></a> made their first contribution in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/315">hendrikmuhs/ccache-action#315</a></li> <li><a href="https://github.com/Naros"><code>@​Naros</code></a> made their first contribution in <a href="https://redirect.github.com/hendrikmuhs/ccache-action/pull/306">hendrikmuhs/ccache-action#306</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/hendrikmuhs/ccache-action/compare/v1...v1.2.18">https://github.com/hendrikmuhs/ccache-action/compare/v1...v1.2.18</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/63069e3931dedbf3b63792097479563182fe70d1"><code>63069e3</code></a> update code</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/15457da8f7bbf9b2c71f2efebd847c1a84650208"><code>15457da</code></a> Don't append <code>-</code> when <code>append-timestamp</code> is disabled. (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/306">#306</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/25d49ca51adf245e1fc66fbf5485fa70ff353f64"><code>25d49ca</code></a> update code</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/5107eae3c4885a3f516e7b3391c85539abee811c"><code>5107eae</code></a> Bump <code>@​actions/cache</code> from 4.0.0 to 4.0.3 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/299">#299</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/0be57ad590dbc0ddc23d1915149acb8d1d035482"><code>0be57ad</code></a> Bump typescript from 5.8.2 to 5.8.3 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/311">#311</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/82ea68836f4698bbc2a53332fb4357aec9fe5a80"><code>82ea688</code></a> Bump ts-jest from 29.2.6 to 29.3.2 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/312">#312</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/1442e5b70da90a19cbbe567fa450d6349b819e41"><code>1442e5b</code></a> Bump ts-jest from 29.2.6 to 29.3.2 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/312">#312</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/e3bfc65f9cf257b6332793c3d965c05100350a6e"><code>e3bfc65</code></a> Bump <code>@​types/node</code> from 22.13.9 to 22.15.2 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/316">#316</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/fc9101105b417abd4b0a58457a3d0327aa1fa597"><code>fc91011</code></a> Update sccache version to v0.10.0 (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/315">#315</a>)</li> <li><a href="https://github.com/hendrikmuhs/ccache-action/commit/15fe4dd483de6883ed9b919e77778f61f69fc053"><code>15fe4dd</code></a> set cache to readonly if skipping save (<a href="https://redirect.github.com/hendrikmuhs/ccache-action/issues/301">#301</a>)</li> <li>Additional commits viewable in <a href="https://github.com/hendrikmuhs/ccache-action/compare/a1209f81afb8c005c13b4296c32e363431bffea5...63069e3931dedbf3b63792097479563182fe70d1">compare view</a></li> </ul> </details> <br /> Updates `actions/setup-python` from 5.5.0 to 5.6.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-python/releases">actions/setup-python's releases</a>.</em></p> <blockquote> <h2>v5.6.0</h2> <h2>What's Changed</h2> <ul> <li>Workflow updates related to Ubuntu 20.04 by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1065">actions/setup-python#1065</a></li> <li>Fix for Candidate Not Iterable Error by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1082">actions/setup-python#1082</a></li> <li>Upgrade semver and <code>@​types/semver</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1091">actions/setup-python#1091</a></li> <li>Upgrade prettier from 2.8.8 to 3.5.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1046">actions/setup-python#1046</a></li> <li>Upgrade ts-jest from 29.1.2 to 29.3.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1081">actions/setup-python#1081</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v5...v5.6.0">https://github.com/actions/setup-python/compare/v5...v5.6.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-python/commit/a26af69be951a213d495a4c3e4e4022e16d87065"><code>a26af69</code></a> Bump ts-jest from 29.1.2 to 29.3.2 (<a href="https://redirect.github.com/actions/setup-python/issues/1081">#1081</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/30eafe95483bd95135b7eda0c66a0369af9afdf1"><code>30eafe9</code></a> Bump prettier from 2.8.8 to 3.5.3 (<a href="https://redirect.github.com/actions/setup-python/issues/1046">#1046</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/5d95bc16d4bc83bb56202da9630d84c6f8a2d8f5"><code>5d95bc1</code></a> Bump semver and <code>@​types/semver</code> (<a href="https://redirect.github.com/actions/setup-python/issues/1091">#1091</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/6ed2c67c8abe7646815dbd50364eea862d396fd9"><code>6ed2c67</code></a> Fix for Candidate Not Iterable Error (<a href="https://redirect.github.com/actions/setup-python/issues/1082">#1082</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/e348410e00f449ece8581cb8e88be8f0e7712da6"><code>e348410</code></a> Remove Ubuntu 20.04 from workflows due to deprecation from 2025-04-15 (<a href="https://redirect.github.com/actions/setup-python/issues/1065">#1065</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-python/compare/v5.5.0...v5.6.0">compare view</a></li> </ul> </details> <br /> Updates `EnricoMi/publish-unit-test-result-action` from 2.18.0 to 2.19.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/enricomi/publish-unit-test-result-action/releases">EnricoMi/publish-unit-test-result-action's releases</a>.</em></p> <blockquote> <h2>v2.19.0</h2> <p>Adds the following improvements:</p> <ul> <li>Add option to verify SSL/TLS connection (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/638">#638</a>)</li> <li>Mention composite replacement in <code>README.md</code> (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/647">#647</a>)</li> <li>Quote <code>$PYTHON_BIN</code> in deprecated composite action (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/646">#646</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/afb2984f4d89672b2f9d9c13ae23d53779671984"><code>afb2984</code></a> Releasing v2.19.0</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/a197a471e4f96ae417eb6dd55b8d2527e5733193"><code>a197a47</code></a> Add option to verify SSL/TLS connection (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/638">#638</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/e2824a5844448023e58dffc0f05ef45496eeb11c"><code>e2824a5</code></a> Add composite replacement to <code>README.md</code> (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/647">#647</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/6cc8c3c995f4260da1c8d1caeeaa5fab303fc57c"><code>6cc8c3c</code></a> Quote <code>$PYTHON_BIN</code> in deprecated composite action (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/646">#646</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/11089dfba4fe1676341e7528615f0fb22caec29b"><code>11089df</code></a> Fix YAML syntax in README.md</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/94749bdf1da0a470fcdb34eaf7ca2e5b7280c764"><code>94749bd</code></a> Add Windows 2025 to CI (<a href="https://redirect.github.com/enricomi/publish-unit-test-result-action/issues/642">#642</a>)</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/ab75628305f6c498bf5e8707af7a8088be34cb66"><code>ab75628</code></a> Remove macos-12 from CI</li> <li><a href="https://github.com/EnricoMi/publish-unit-test-result-action/commit/0bce8a17254f44ec22687728d01502b196fdee83"><code>0bce8a1</code></a> Ignore failure offlaky vulnerability scan</li> <li>See full diff in <a href="https://github.com/enricomi/publish-unit-test-result-action/compare/170bf24d20d201b842d7a52403b73ed297e6645b...afb2984f4d89672b2f9d9c13ae23d53779671984">compare view</a></li> </ul> </details> <br /> Updates `docker/login-action` from 3.3.0 to 3.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/login-action/releases">docker/login-action's releases</a>.</em></p> <blockquote> <h2>v3.4.0</h2> <ul> <li>Bump <code>@​actions/core</code> from 1.10.1 to 1.11.1 in <a href="https://redirect.github.com/docker/login-action/pull/791">docker/login-action#791</a></li> <li>Bump <code>@​aws-sdk/client-ecr</code> to 3.766.0 in <a href="https://redirect.github.com/docker/login-action/pull/789">docker/login-action#789</a> <a href="https://redirect.github.com/docker/login-action/pull/856">docker/login-action#856</a></li> <li>Bump <code>@​aws-sdk/client-ecr-public</code> to 3.758.0 in <a href="https://redirect.github.com/docker/login-action/pull/789">docker/login-action#789</a> <a href="https://redirect.github.com/docker/login-action/pull/856">docker/login-action#856</a></li> <li>Bump <code>@​docker/actions-toolkit</code> from 0.35.0 to 0.57.0 in <a href="https://redirect.github.com/docker/login-action/pull/801">docker/login-action#801</a> <a href="https://redirect.github.com/docker/login-action/pull/806">docker/login-action#806</a> <a href="https://redirect.github.com/docker/login-action/pull/858">docker/login-action#858</a></li> <li>Bump cross-spawn from 7.0.3 to 7.0.6 in <a href="https://redirect.github.com/docker/login-action/pull/814">docker/login-action#814</a></li> <li>Bump https-proxy-agent from 7.0.5 to 7.0.6 in <a href="https://redirect.github.com/docker/login-action/pull/823">docker/login-action#823</a></li> <li>Bump path-to-regexp from 6.2.2 to 6.3.0 in <a href="https://redirect.github.com/docker/login-action/pull/777">docker/login-action#777</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/login-action/compare/v3.3.0...v3.4.0">https://github.com/docker/login-action/compare/v3.3.0...v3.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/74a5d142397b4f367a81961eba4e8cd7edddf772"><code>74a5d14</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/856">#856</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li> <li><a href="https://github.com/docker/login-action/commit/2f4f00e4c6fe8a50cdd1fd618421be2e92b2f201"><code>2f4f00e</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/67c184546cf989af16f02a1b5359e4bde3cdc524"><code>67c1845</code></a> build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...</li> <li><a href="https://github.com/docker/login-action/commit/3d4cc89e85e0cac73870ab81d3b72c0b700870d1"><code>3d4cc89</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/844">#844</a> from graysonpike/master</li> <li><a href="https://github.com/docker/login-action/commit/6cc823a6c4738f797f031790fa7f982b7a8dcfdc"><code>6cc823a</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/823">#823</a> from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li> <li><a href="https://github.com/docker/login-action/commit/d94e792124647378e94c07359922f0f821a9fab2"><code>d94e792</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/033db0da3047b4d01e249d66f56ae16a2ed6af87"><code>033db0d</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/812">#812</a> from docker/dependabot/github_actions/codecov/codecov...</li> <li><a href="https://github.com/docker/login-action/commit/09c2ae9716c0bacef3c03e120a61c28adfb8595b"><code>09c2ae9</code></a> build(deps): bump https-proxy-agent</li> <li><a href="https://github.com/docker/login-action/commit/ba56f006fc7190f752d4e6e1312f85697984a229"><code>ba56f00</code></a> ci: update deprecated input for codecov-action</li> <li><a href="https://github.com/docker/login-action/commit/75bf9a79af089e9aa009972a6ecb22190a520679"><code>75bf9a7</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/858">#858</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/9780b0c442fbb1117ed29e0efdff1e18412f7567...74a5d142397b4f367a81961eba4e8cd7edddf772">compare view</a></li> </ul> </details> <br /> Updates `aminya/setup-cpp` from 1.1.1 to 1.5.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aminya/setup-cpp/releases">aminya/setup-cpp's releases</a>.</em></p> <blockquote> <h2>v1.5.3</h2> <ul> <li>fix: remove exports map from package by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://github.com/aminya/setup-cpp/commit/6370aaa0252a93c71dcc4cf49397f46810eeda56">7f46810eeda56</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aminya/setup-cpp/compare/v1.5.2...v1.5.3">https://github.com/aminya/setup-cpp/compare/v1.5.2...v1.5.3</a></p> <h2>v1.5.2</h2> <ul> <li>fix: fix CLI shabang not working - independent lib by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://github.com/aminya/setup-cpp/commit/95a7de4f2eceb0baf03a70a1edb7c88b4364ef50">c88b4364ef50</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aminya/setup-cpp/compare/v1.5.1...v1.5.2">https://github.com/aminya/setup-cpp/compare/v1.5.1...v1.5.2</a></p> <h2>v1.5.0</h2> <h2>What's Changed</h2> <ul> <li>feat: allow using setup-cpp as a library by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://redirect.github.com/aminya/setup-cpp/pull/386">aminya/setup-cpp#386</a></li> <li>fix: pin vcpkg on Alpine Arm64 by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://redirect.github.com/aminya/setup-cpp/pull/389">aminya/setup-cpp#389</a></li> <li>fix: do not add LLVM libraries to dyld by default by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://redirect.github.com/aminya/setup-cpp/pull/388">aminya/setup-cpp#388</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/aminya/setup-cpp/compare/v1.4.0...v1.5.0">https://github.com/aminya/setup-cpp/compare/v1.4.0...v1.5.0</a></p> <h2>v1.4.0</h2> <h2>What's Changed</h2> <ul> <li>🎉 feat: support Alpine + add setup-alpine package by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://redirect.github.com/aminya/setup-cpp/pull/379">aminya/setup-cpp#379</a></li> <li>ci: add docker tags with the base platform versions by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://redirect.github.com/aminya/setup-cpp/pull/381">aminya/setup-cpp#381</a> (e.g. <code>setup-cpp-ubuntu:20.04</code>)</li> <li>fix: detect externally managed Python to avoid warnings by <a href="https://github.com/aminya"><code>@​aminya</code></a> in <a href="https://redirect.github.com/aminya/setup-cpp/pull/379">aminya/setup-cpp#379</a></li> </ul> <h4>Alpine Images (amd64 and arm64)</h4> <p>Setup-cpp now provides prebuilt images for Alpine with support for base tools, and compilers <code>llvm</code>, <code>gcc</code>, and <code>mingw</code> available for <code>amd64</code> and <code>arm64</code> architectures.</p> <p>Base image with <code>cmake, ninja, task, vcpkg, python, make, cppcheck, gcovr, doxygen, ccache, conan, meson, cmakelang</code> for Alpine:</p> <pre lang="dockerfile"><code>FROM aminya/setup-cpp-alpine:3.21 AS builder </code></pre> <p>Image with <code>llvm</code> and the base tools:</p> <pre lang="dockerfile"><code>FROM aminya/setup-cpp-alpine-llvm:3.21 AS builder </code></pre> <p>Image with <code>gcc</code> and the base tools:</p> <pre lang="dockerfile"><code>FROM aminya/setup-cpp-alpine-gcc:3.21 AS builder </code></pre> <p>Image with <code>mingw</code> and the base tools:</p> <pre lang="dockerfile"><code>&lt;/tr&gt;&lt;/table&gt; </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aminya/setup-cpp/commit/6370aaa0252a93c71dcc4cf49397f46810eeda56"><code>6370aaa</code></a> fix: remove exports map from package</li> <li><a href="https://github.com/aminya/setup-cpp/commit/95a7de4f2eceb0baf03a70a1edb7c88b4364ef50"><code>95a7de4</code></a> fix: fix CLI shabang not working - independent lib</li> <li><a href="https://github.com/aminya/setup-cpp/commit/d6447bbe915d7a5c61f9e8be56a219f357696b19"><code>d6447bb</code></a> fix: build cli independent of lib</li> <li><a href="https://github.com/aminya/setup-cpp/commit/71c0122abfe9cfa7762881b3721377507041061a"><code>71c0122</code></a> chore(release): v1.5.0 [skip test]</li> <li><a href="https://github.com/aminya/setup-cpp/commit/ad7d44b1e3a690eb6f7bf221c5855e8b4ba45b56"><code>ad7d44b</code></a> Merge pull request <a href="https://redirect.github.com/aminya/setup-cpp/issues/388">#388</a> from aminya/llvm</li> <li><a href="https://github.com/aminya/setup-cpp/commit/7e66da1495f300ce16505cc9b6da451267a09a5c"><code>7e66da1</code></a> fix: do not add LLVM libraries to dyld by default</li> <li><a href="https://github.com/aminya/setup-cpp/commit/f37a612a848fd66ded04d311105a6dc110f8f3d0"><code>f37a612</code></a> Merge pull request <a href="https://redirect.github.com/aminya/setup-cpp/issues/389">#389</a> from aminya/alpine-vcpkg-arm64</li> <li><a href="https://github.com/aminya/setup-cpp/commit/d60a91780bf4240fbdb92b70cd5f19a2c598c2cf"><code>d60a917</code></a> fix: pin vcpkg on Alpine Arm64</li> <li><a href="https://github.com/aminya/setup-cpp/commit/a5ee5b0e9b0fad40a98f2d50315c3ce98293b418"><code>a5ee5b0</code></a> Merge pull request <a href="https://redirect.github.com/aminya/setup-cpp/issues/386">#386</a> from aminya/library</li> <li><a href="https://github.com/aminya/setup-cpp/commit/dc7c474237aa5c917dcbdb36995044cf93a8d42d"><code>dc7c474</code></a> fix: set the exit error code correctly</li> <li>Additional commits viewable in <a href="https://github.com/aminya/setup-cpp/compare/17c11551771948abc5752bbf3183482567c7caf0...6370aaa0252a93c71dcc4cf49397f46810eeda56">compare view</a></li> </ul> </details> <br /> Updates `actions/setup-node` from 4.2.0 to 4.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-node/releases">actions/setup-node's releases</a>.</em></p> <blockquote> <h2>v4.4.0</h2> <h2>What's Changed</h2> <h3>Bug fixes:</h3> <ul> <li>Make eslint-compact matcher compatible with Stylelint by <a href="https://github.com/FloEdelmann"><code>@​FloEdelmann</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/98">actions/setup-node#98</a></li> <li>Add support for indented eslint output by <a href="https://github.com/fregante"><code>@​fregante</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1245">actions/setup-node#1245</a></li> </ul> <h3>Enhancement:</h3> <ul> <li>Support private mirrors by <a href="https://github.com/marco-ippolito"><code>@​marco-ippolito</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1240">actions/setup-node#1240</a></li> </ul> <h3>Dependency update:</h3> <ul> <li>Upgrade <code>@​action/cache</code> from 4.0.2 to 4.0.3 by <a href="https://github.com/aparnajyothi-y"><code>@​aparnajyothi-y</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1262">actions/setup-node#1262</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/FloEdelmann"><code>@​FloEdelmann</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/98">actions/setup-node#98</a></li> <li><a href="https://github.com/fregante"><code>@​fregante</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1245">actions/setup-node#1245</a></li> <li><a href="https://github.com/marco-ippolito"><code>@​marco-ippolito</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1240">actions/setup-node#1240</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v4...v4.4.0">https://github.com/actions/setup-node/compare/v4...v4.4.0</a></p> <h2>v4.3.0</h2> <h2>What's Changed</h2> <h3>Dependency updates</h3> <ul> <li>Upgrade <code>@​actions/glob</code> from 0.4.0 to 0.5.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1200">actions/setup-node#1200</a></li> <li>Upgrade <code>@​action/cache</code> from 4.0.0 to 4.0.2 by <a href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1251">actions/setup-node#1251</a></li> <li>Upgrade <code>@​vercel/ncc</code> from 0.38.1 to 0.38.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1203">actions/setup-node#1203</a></li> <li>Upgrade <code>@​actions/tool-cache</code> from 2.0.1 to 2.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-node/pull/1220">actions/setup-node#1220</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/gowridurgad"><code>@​gowridurgad</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-node/pull/1251">actions/setup-node#1251</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-node/compare/v4...v4.3.0">https://github.com/actions/setup-node/compare/v4...v4.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-node/commit/49933ea5288caeca8642d1e84afbd3f7d6820020"><code>49933ea</code></a> Bump <code>@​action/cache</code> from 4.0.2 to 4.0.3 (<a href="https://redirect.github.com/actions/setup-node/issues/1262">#1262</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/e3ce749e201f52acbab9862647a7b9bd3e37cf76"><code>e3ce749</code></a> feat: support private mirrors (<a href="https://redirect.github.com/actions/setup-node/issues/1240">#1240</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/40337cb8f758cccdfe3475af609daa63f81c7e23"><code>40337cb</code></a> Add support for indented eslint output (<a href="https://redirect.github.com/actions/setup-node/issues/1245">#1245</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/1ccdddc9b8a87c2e16da2b1a0641137dc86b498b"><code>1ccdddc</code></a> Make eslint-compact matcher compatible with Stylelint (<a href="https://redirect.github.com/actions/setup-node/issues/98">#98</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/cdca7365b2dadb8aad0a33bc7601856ffabcc48e"><code>cdca736</code></a> Bump <code>@​actions/tool-cache</code> from 2.0.1 to 2.0.2 (<a href="https://redirect.github.com/actions/setup-node/issues/1220">#1220</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/22c0e7494f4cf8e8133097a3fefafe255caf66eb"><code>22c0e74</code></a> Bump <code>@​vercel/ncc</code> from 0.38.1 to 0.38.3 (<a href="https://redirect.github.com/actions/setup-node/issues/1203">#1203</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/a7c2d9473e135474f9c8e6d48969d1d90f950ea1"><code>a7c2d94</code></a> actions/cache upgrade (<a href="https://redirect.github.com/actions/setup-node/issues/1251">#1251</a>)</li> <li><a href="https://github.com/actions/setup-node/commit/802632921f8532d2409ae6eac3313b6f81f11122"><code>8026329</code></a> Bump <code>@​actions/glob</code> from 0.4.0 to 0.5.0 (<a href="https://redirect.github.com/actions/setup-node/issues/1200">#1200</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-node/compare/1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a...49933ea5288caeca8642d1e84afbd3f7d6820020">compare view</a></li> </ul> </details> <br /> Updates `actions/attest-build-provenance` from 2.2.3 to 2.3.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/attest-build-provenance/releases">actions/attest-build-provenance's releases</a>.</em></p> <blockquote> <h2>v2.3.0</h2> <h2>What's Changed</h2> <ul> <li>Bump <code>actions/attest</code> from 2.2.1 to 2.3.0 by <a href="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <a href="https://redirect.github.com/actions/attest-build-provenance/pull/615">actions/attest-build-provenance#615</a> <ul> <li>Updates <code>@sigstore/oci</code> from 0.4.0 to 0.5.0</li> </ul> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/attest-build-provenance/compare/v2.2.3...v2.3.0">https://github.com/actions/attest-build-provenance/compare/v2.2.3...v2.3.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/attest-build-provenance/commit/db473fddc028af60658334401dc6fa3ffd8669fd"><code>db473fd</code></a> bump actions/attest from 2.2.1 to 2.3.0 (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/615">#615</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/d3b713ade6128010830a9be91a036ed11e065550"><code>d3b713a</code></a> Bump the actions-minor group with 2 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/566">#566</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/e042adb3340da975a8e67c7633c90c38a3b731a3"><code>e042adb</code></a> Bump the npm-development group with 4 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/567">#567</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/9d3beef6515cb82652d066f999b94affc15acfac"><code>9d3beef</code></a> Bump the npm-development group with 4 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/554">#554</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/877f50d98cebe5a52282b5e1da711c99c7860b66"><code>877f50d</code></a> Bump typescript-eslint in the npm-development group (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/516">#516</a>)</li> <li><a href="https://github.com/actions/attest-build-provenance/commit/b7ab74091b8e849c9b5a937eebfd372e685467ce"><code>b7ab740</code></a> Bump the npm-development group across 1 directory with 6 updates (<a href="https://redirect.github.com/actions/attest-build-provenance/issues/506">#506</a>)</li> <li>See full diff in <a href="https://github.com/actions/attest-build-provenance/compare/c074443f1aee8d4aeeae555aebba3282517141b2...db473fddc028af60658334401dc6fa3ffd8669fd">compare view</a></li> </ul> </details> <br /> Updates `softprops/action-gh-release` from 2.2.1 to 2.2.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/softprops/action-gh-release/releases">softprops/action-gh-release's releases</a>.</em></p> <blockquote> <h2>v2.2.2</h2>  <h2>What's Changed</h2> <h3>Bug fixes 🐛</h3> <ul> <li>fix: updating release draft status from true to false by <a href="https://github.com/galargh"><code>@​galargh</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/316">softprops/action-gh-release#316</a></li> </ul> <h3>Other Changes 🔄</h3> <ul> <li>chore: simplify ref_type test by <a href="https://github.com/steinybot"><code>@​steinybot</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/598">softprops/action-gh-release#598</a></li> <li>fix(docs): clarify the default for tag_name by <a href="https://github.com/muzimuzhi"><code>@​muzimuzhi</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/599">softprops/action-gh-release#599</a></li> <li>test(release): add unit tests when searching for a release by <a href="https://github.com/rwaskiewicz"><code>@​rwaskiewicz</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/603">softprops/action-gh-release#603</a></li> <li>dependency updates</li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/steinybot"><code>@​steinybot</code></a> made their first contribution in <a href="https://redirect.github.com/softprops/action-gh-release/pull/598">softprops/action-gh-release#598</a></li> <li><a href="https://github.com/muzimuzhi"><code>@​muzimuzhi</code></a> made their first contribution in <a href="https://redirect.github.com/softprops/action-gh-release/pull/599">softprops/action-gh-release#599</a></li> <li><a href="https://github.com/galargh"><code>@​galargh</code></a> made their first contribution in <a href="https://redirect.github.com/softprops/action-gh-release/pull/316">softprops/action-gh-release#316</a></li> <li><a href="https://github.com/rwaskiewicz"><code>@​rwaskiewicz</code></a> made their first contribution in <a href="https://redirect.github.com/softprops/action-gh-release/pull/603">softprops/action-gh-release#603</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/softprops/action-gh-release/compare/v2...v2.2.2">https://github.com/softprops/action-gh-release/compare/v2...v2.2.2</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md">softprops/action-gh-release's changelog</a>.</em></p> <blockquote> <h2>2.2.2</h2> <h2>What's Changed</h2> <h3>Bug fixes 🐛</h3> <ul> <li>fix: updating release draft status from true to false by <a href="https://github.com/galargh"><code>@​galargh</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/316">softprops/action-gh-release#316</a></li> </ul> <h3>Other Changes 🔄</h3> <ul> <li>chore: simplify ref_type test by <a href="https://github.com/steinybot"><code>@​steinybot</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/598">softprops/action-gh-release#598</a></li> <li>fix(docs): clarify the default for tag_name by <a href="https://github.com/muzimuzhi"><code>@​muzimuzhi</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/599">softprops/action-gh-release#599</a></li> <li>test(release): add unit tests when searching for a release by <a href="https://github.com/rwaskiewicz"><code>@​rwaskiewicz</code></a> in <a href="https://redirect.github.com/softprops/action-gh-release/pull/603">softprops/action-gh-release#603</a></li> <li>dependency updates</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/softprops/action-gh-release/commit/da05d552573ad5aba039eaac05058a918a7bf631"><code>da05d55</code></a> release 2.2.2</li> <li><a href="https://github.com/softprops/action-gh-release/commit/6b18c2f26056668eff666e1188b7e8207f4e6b1b"><code>6b18c2f</code></a> test(release): add unit tests when searching for a release (<a href="https://redirect.github.com/softprops/action-gh-release/issues/603">#603</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/e2b105c98ead3e864120aa5e91359bd0c2339f4e"><code>e2b105c</code></a> chore(deps): bump actions/setup-node in the github-actions group (<a href="https://redirect.github.com/softprops/action-gh-release/issues/607">#607</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/e7074704928efe5d32aaff2271cf7d0bae602364"><code>e707470</code></a> chore(deps): bump the npm group with 4 updates (<a href="https://redirect.github.com/softprops/action-gh-release/issues/608">#608</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/36833a1c712e139c96b443e3af070e95d9c0f193"><code>36833a1</code></a> fix: updating release draft status (<a href="https://redirect.github.com/softprops/action-gh-release/issues/316">#316</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/8bb72078753d3b560d25d418f586567620b568ef"><code>8bb7207</code></a> chore(deps): bump actions/setup-node in the github-actions group (<a href="https://redirect.github.com/softprops/action-gh-release/issues/597">#597</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/93bb5ff43edec8d102a3f9611ca154b86eae5585"><code>93bb5ff</code></a> fix(docs): clarify the default for tag_name (<a href="https://redirect.github.com/softprops/action-gh-release/issues/599">#599</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/581b12c87f428b9bedb02d4e551af24f90f174af"><code>581b12c</code></a> chore: simplify ref_type test (<a href="https://redirect.github.com/softprops/action-gh-release/issues/598">#598</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/b540ad23541e35622e1bd001ffd740c78014a7e0"><code>b540ad2</code></a> chore(deps): bump <code>@​octokit/request</code> (<a href="https://redirect.github.com/softprops/action-gh-release/issues/605">#605</a>)</li> <li><a href="https://github.com/softprops/action-gh-release/commit/ac224e9440a1354ace6a3feb84328ed4b76ee5a3"><code>ac224e9</code></a> chore(deps): bump the npm group across 1 directory with 5 updates (<a href="https://redirect.github.com/softprops/action-gh-release/issues/604">#604</a>)</li> <li>Additional commits viewable in <a href="https://github.com/softprops/action-gh-release/compare/v2.2.1...v2.2.2">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/ci-post-commit-analyzer.yml b/.github/workflows/ci-post-commit-analyzer.yml
@@ -44,7 +44,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+        uses: hendrikmuhs/ccache-action@63069e3931dedbf3b63792097479563182fe70d1 # v1.2.18
         with:
           # A full build of llvm, clang, lld, and lldb takes about 250MB
           # of ccache space. There's not much reason to have more than this,
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
@@ -95,7 +95,7 @@ jobs:
             workflow:
               - '.github/workflows/docs.yml'
       - name: Setup Python env
-        uses: actions/setup-python@v5.5.0
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: '3.11'
           cache: 'pip'
diff --git a/.github/workflows/hlsl-test-all.yaml b/.github/workflows/hlsl-test-all.yaml
@@ -80,7 +80,7 @@ jobs:
             ninja check-hlsl-unit
             ninja ${{ inputs.TestTarget }}
       - name: Publish Test Results
-        uses: EnricoMi/publish-unit-test-result-action/macos@170bf24d20d201b842d7a52403b73ed297e6645b # v2
+        uses: EnricoMi/publish-unit-test-result-action/macos@afb2984f4d89672b2f9d9c13ae23d53779671984 # v2
         if: always() && runner.os == 'macOS'
         with:
           comment_mode: off
diff --git a/.github/workflows/libc-fullbuild-tests.yml b/.github/workflows/libc-fullbuild-tests.yml
@@ -39,7 +39,7 @@ jobs:
     # Do not use direct GHAC access even though it is supported by sccache. GHAC rejects
     # frequent small object writes.
     - name: Setup ccache
-      uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+      uses: hendrikmuhs/ccache-action@63069e3931dedbf3b63792097479563182fe70d1 # v1.2.18
       with:
         max-size: 1G
         key: libc_fullbuild_${{ matrix.c_compiler }}
diff --git a/.github/workflows/libc-overlay-tests.yml b/.github/workflows/libc-overlay-tests.yml
@@ -57,7 +57,7 @@ jobs:
     # Do not use direct GHAC access even though it is supported by sccache. GHAC rejects
     # frequent small object writes.
     - name: Setup ccache
-      uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+      uses: hendrikmuhs/ccache-action@63069e3931dedbf3b63792097479563182fe70d1 # v1.2.18
       with:
         max-size: 1G
         key: libc_overlay_build_${{ matrix.os }}_${{ matrix.compiler.c_compiler }}
diff --git a/.github/workflows/libcxx-build-containers.yml b/.github/workflows/libcxx-build-containers.yml
@@ -47,7 +47,7 @@ jobs:
     #     TAG: ${{ github.sha }}
 
     - name: Log in to GitHub Container Registry
-      uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
       with:
         registry: ghcr.io
         username: ${{ github.actor }}
diff --git a/.github/workflows/libcxx-check-generated-files.yml b/.github/workflows/libcxx-check-generated-files.yml
@@ -15,7 +15,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install dependencies
-        uses: aminya/setup-cpp@17c11551771948abc5752bbf3183482567c7caf0 # v1.1.1
+        uses: aminya/setup-cpp@6370aaa0252a93c71dcc4cf49397f46810eeda56 # v1.5.3
         with:
           clangformat: 17.0.1
           ninja: true
diff --git a/.github/workflows/llvm-bugs.yml b/.github/workflows/llvm-bugs.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-24.04
     if: github.repository == 'llvm/llvm-project'
     steps:
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version: 18
           check-latest: true
diff --git a/.github/workflows/llvm-project-tests.yml b/.github/workflows/llvm-project-tests.yml
@@ -82,7 +82,7 @@ jobs:
       # lldb.  Using this setup-python action to make 3.10 the default
       # python fixes this.
       - name: Setup Python
-        uses: actions/setup-python@v5.5.0
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: ${{ inputs.python_version }}
       - name: Install Ninja
@@ -95,7 +95,7 @@ jobs:
         with:
           fetch-depth: 250
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+        uses: hendrikmuhs/ccache-action@63069e3931dedbf3b63792097479563182fe70d1 # v1.2.18
         with:
           # A full build of llvm, clang, lld, and lldb takes about 250MB
           # of ccache space. There's not much reason to have more than this,
diff --git a/.github/workflows/pr-code-format.yml b/.github/workflows/pr-code-format.yml
@@ -55,12 +55,12 @@ jobs:
           echo "$CHANGED_FILES"
 
       - name: Install clang-format
-        uses: aminya/setup-cpp@17c11551771948abc5752bbf3183482567c7caf0 # v1.1.1
+        uses: aminya/setup-cpp@6370aaa0252a93c71dcc4cf49397f46810eeda56 # v1.5.3
         with:
           clangformat: 19.1.6
 
       - name: Setup Python env
-        uses: actions/setup-python@v5.5.0
+        uses: actions/setup-python@v5.6.0
         with:
           python-version: '3.11'
           cache: 'pip'
diff --git a/.github/workflows/premerge.yaml b/.github/workflows/premerge.yaml
@@ -36,7 +36,7 @@ jobs:
         with:
           fetch-depth: 2
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+        uses: hendrikmuhs/ccache-action@63069e3931dedbf3b63792097479563182fe70d1 # v1.2.18
         with:
           max-size: "2000M"
       - name: Build and Test
@@ -81,7 +81,7 @@ jobs:
         with:
           fetch-depth: 2
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+        uses: hendrikmuhs/ccache-action@63069e3931dedbf3b63792097479563182fe70d1 # v1.2.18
         with:
           variant: "sccache"
           max-size: "2000M"
@@ -128,7 +128,7 @@ jobs:
         with:
           fetch-depth: 2
       - name: Setup ccache
-        uses: hendrikmuhs/ccache-action@a1209f81afb8c005c13b4296c32e363431bffea5 # v1.2.17
+        uses: hendrikmuhs/ccache-action@63069e3931dedbf3b63792097479563182fe70d1 # v1.2.18
         with:
           max-size: "2000M"
       - name: Install Ninja
diff --git a/.github/workflows/release-binaries.yml b/.github/workflows/release-binaries.yml
@@ -68,7 +68,7 @@ jobs:
     steps:
     # It's good practice to use setup-python, but this is also required on macos-14
     # due to https://github.com/actions/runner-images/issues/10385
-    - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55
+    - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065
       with:
         python-version: '3.12'
 
@@ -301,7 +301,7 @@ jobs:
 
     - name: Attest Build Provenance
       id: provenance
-      uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
+      uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
       with:
         subject-path: ${{ needs.prepare.outputs.release-binary-filename }}
 
diff --git a/.github/workflows/release-documentation.yml b/.github/workflows/release-documentation.yml
@@ -37,7 +37,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup Python env
-        uses: actions/setup-python@v5.5.0
+        uses: actions/setup-python@v5.6.0
         with:
           cache: 'pip'
           cache-dependency-path: './llvm/docs/requirements.txt'
diff --git a/.github/workflows/release-doxygen.yml b/.github/workflows/release-doxygen.yml
@@ -43,7 +43,7 @@ jobs:
         uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: Setup Python env
-        uses: actions/setup-python@v5.5.0
+        uses: actions/setup-python@v5.6.0
         with:
           cache: 'pip'
           cache-dependency-path: './llvm/docs/requirements.txt'
diff --git a/.github/workflows/release-lit.yml b/.github/workflows/release-lit.yml
@@ -45,7 +45,7 @@ jobs:
           ./llvm/utils/release/./github-upload-release.py --token "$GITHUB_TOKEN" --user ${{ github.actor }} --user-token "$USER_TOKEN" check-permissions
 
       - name: Setup Cpp
-        uses: aminya/setup-cpp@17c11551771948abc5752bbf3183482567c7caf0 # v1.1.1
+        uses: aminya/setup-cpp@6370aaa0252a93c71dcc4cf49397f46810eeda56 # v1.5.3
         with:
           compiler: llvm-16.0.6
           cmake: true
diff --git a/.github/workflows/release-sources.yml b/.github/workflows/release-sources.yml
@@ -92,7 +92,7 @@ jobs:
       - name: Attest Build Provenance
         if: github.event_name != 'pull_request'
         id: provenance
-        uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
+        uses: actions/attest-build-provenance@db473fddc028af60658334401dc6fa3ffd8669fd # v2.3.0
         with:
           subject-path: "*.xz"
       - if: github.event_name != 'pull_request'
diff --git a/.github/workflows/sycl-nightly.yml b/.github/workflows/sycl-nightly.yml
@@ -329,7 +329,7 @@ jobs:
           echo "TAG=$(date +'%Y-%m-%d')-${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
         fi
     - name: Upload binaries
-      uses: softprops/action-gh-release@v2.2.1
+      uses: softprops/action-gh-release@v2.2.2
       with:
         files: |
           sycl_linux.tar.gz
diff --git a/.github/workflows/ur-precommit.yml b/.github/workflows/ur-precommit.yml
@@ -114,7 +114,7 @@ jobs:
     - name: Checkout LLVM
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
-    - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.0.0
+    - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.0.0
       with:
         python-version: "3.10"
 
diff --git a/.github/workflows/ur-source-checks.yml b/.github/workflows/ur-source-checks.yml
@@ -21,7 +21,7 @@ jobs:
     - name: Checkout LLVM
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
-    - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.0.0
+    - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.0.0
       with:
         python-version: 3.9
 
