Skip to content

Commit 9860b12

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions-dependencies group with 7 updates (#1564)
Bumps the actions-dependencies group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `5.1.1` | `5.2.0` | | [msys2/setup-msys2](https://github.com/msys2/setup-msys2) | `2.23.0` | `2.24.1` | | [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) | `1.0.7` | `1.0.8` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.4` | `4.4.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.25.12` | `3.26.6` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1.3.2` | `1.4.2` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.3.3` | `2.4.0` | Updates `actions/setup-python` from 5.1.1 to 5.2.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@39cd149...f677139) Updates `msys2/setup-msys2` from 2.23.0 to 2.24.1 - [Release notes](https://github.com/msys2/setup-msys2/releases) - [Changelog](https://github.com/msys2/setup-msys2/blob/main/CHANGELOG.md) - [Commits](msys2/setup-msys2@d0e80f5...ddf331a) Updates `vmactions/freebsd-vm` from 1.0.7 to 1.0.8 - [Release notes](https://github.com/vmactions/freebsd-vm/releases) - [Commits](vmactions/freebsd-vm@v1.0.7...12c207a) Updates `actions/upload-artifact` from 4.3.4 to 4.4.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@0b2256b...5076954) Updates `github/codeql-action` from 3.25.12 to 3.26.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@4fa2a79...4dd1613) Updates `actions/attest-build-provenance` from 1.3.2 to 1.4.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@bdd5137...6149ea5) Updates `ossf/scorecard-action` from 2.3.3 to 2.4.0 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@dc50aa9...62b2cac) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: msys2/setup-msys2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: vmactions/freebsd-vm dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-dependencies - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: actions/attest-build-provenance dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: ossf/scorecard-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 4f04457 commit 9860b12

File tree

6 files changed

+21
-21
lines changed

6 files changed

+21
-21
lines changed

‎.github/workflows/auto_update.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
with:
1818
ref: dev
1919
- name: Setup Python
20-
uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
20+
uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
2121
with:
2222
python-version: "3.8.x"
2323
- name: Run update
@@ -50,7 +50,7 @@ jobs:
5050
with:
5151
ref: dev
5252
- name: Setup Python
53-
uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
53+
uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
5454
with:
5555
python-version: "3.9.x"
5656
- name: Run update

‎.github/workflows/build_and_test.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -319,7 +319,7 @@ jobs:
319319
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
320320

321321
- name: Setup Python
322-
uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
322+
uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
323323
with:
324324
# support version: https://raw.githubusercontent.com/actions/python-versions/main/versions-manifest.json
325325
python-version: "3.12"
@@ -423,7 +423,7 @@ jobs:
423423
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
424424

425425
- name: Setup MSYS2
426-
uses: msys2/setup-msys2@d0e80f58dffbc64f6a3a1f43527d469b4fc7b6c8 # v2.23.0
426+
uses: msys2/setup-msys2@ddf331adaebd714795f1042345e6ca57bd66cea8 # v2.24.1
427427
with:
428428
msystem: ${{matrix.sys}}
429429
install: >-
@@ -433,7 +433,7 @@ jobs:
433433
mingw-w64-${{matrix.env}}-make
434434
435435
- name: Setup Python
436-
uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
436+
uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
437437
with:
438438
python-version: "3.12"
439439

@@ -517,7 +517,7 @@ jobs:
517517
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
518518

519519
- name: Setup Python
520-
uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
520+
uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
521521
with:
522522
python-version: "3.12"
523523

‎.github/workflows/cifuzz.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
dry-run: false
3636
sanitizer: ${{ matrix.sanitizer }}
3737
- name: Upload Crash
38-
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
38+
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
3939
if: failure() && steps.build.outcome == 'success'
4040
with:
4141
name: artifacts

‎.github/workflows/codeql.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929

3030
# Initializes the CodeQL tools for scanning.
3131
- name: Initialize CodeQL
32-
uses: github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
32+
uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
3333
with:
3434
languages: ${{ matrix.language }}
3535
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -44,4 +44,4 @@ jobs:
4444
cmake --build build -j
4545
4646
- name: Perform CodeQL Analysis
47-
uses: github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
47+
uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6

‎.github/workflows/package.yml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ jobs:
7171
run: cmake --build "$BUILD_DIR" --target package
7272

7373
- name: Generate artifact attestation
74-
uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
74+
uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
7575
with:
7676
subject-path: "${{ env.BUILD_DIR }}/*.tar.gz,${{ env.BUILD_DIR }}/*.deb,${{ env.BUILD_DIR }}/*.rpm"
7777

@@ -100,7 +100,7 @@ jobs:
100100
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
101101

102102
- name: Test in FreeBSD
103-
uses: vmactions/freebsd-vm@f8be330398166d1eb0601f01353839d4052367b2 # v1.0.7
103+
uses: vmactions/freebsd-vm@12c207ac1ba13827f25726fe93f9c2e6f685f0f3 # v1.0.8
104104
with:
105105
release: ${{ matrix.freebsd-version }}
106106
envs: 'BUILD_DIR'
@@ -113,7 +113,7 @@ jobs:
113113
cmake --build "$BUILD_DIR" --target package
114114
115115
- name: Generate artifact attestation
116-
uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
116+
uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
117117
with:
118118
subject-path: "${{ env.BUILD_DIR }}/*.tar.gz"
119119

@@ -156,7 +156,7 @@ jobs:
156156
run: cmake --build "$BUILD_DIR" --target package
157157

158158
- name: Generate artifact attestation
159-
uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
159+
uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
160160
with:
161161
subject-path: "${{ env.BUILD_DIR }}/*.tar.gz,${{ env.BUILD_DIR }}/*.pkg"
162162

@@ -188,7 +188,7 @@ jobs:
188188
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
189189

190190
- name: Setup MSYS2
191-
uses: msys2/setup-msys2@d0e80f58dffbc64f6a3a1f43527d469b4fc7b6c8 # v2.23.0
191+
uses: msys2/setup-msys2@ddf331adaebd714795f1042345e6ca57bd66cea8 # v2.24.1
192192
with:
193193
msystem: ${{matrix.sys}}
194194
update: true
@@ -226,7 +226,7 @@ jobs:
226226
run: cmake --build "$BUILD_DIR" --target package
227227

228228
- name: Generate artifact attestation
229-
uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
229+
uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
230230
with:
231231
subject-path: "${{ env.BUILD_DIR }}/*.zip"
232232

@@ -275,7 +275,7 @@ jobs:
275275
run: cmake --build "$env:BUILD_DIR" --config ${{ matrix.configuration }} --target package
276276

277277
- name: Generate artifact attestation
278-
uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
278+
uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
279279
with:
280280
subject-path: "${{ env.BUILD_DIR }}/*.zip"
281281

@@ -338,7 +338,7 @@ jobs:
338338
mkdir -p "android-package"
339339
mv "${COMBINED_PACKAGE_DIR}" "android-package"
340340
341-
- uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
341+
- uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
342342
with:
343343
path: android-package
344344
name: android-package-${{ matrix.target }}-${{ matrix.api-version }}
@@ -365,7 +365,7 @@ jobs:
365365
tar cvf "${PACKAGE_DIR}.tar.gz" "${PACKAGE_DIR}"
366366
367367
- name: Generate artifact attestation
368-
uses: actions/attest-build-provenance@bdd51370e0416ac948727f861e03c2f05d32d78e # v1.3.2
368+
uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2
369369
with:
370370
subject-path: "${{ env.PACKAGE_DIR }}.tar.gz"
371371

‎.github/workflows/scorecards.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
persist-credentials: false
3737

3838
- name: "Run analysis"
39-
uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
39+
uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
4040
with:
4141
results_file: results.sarif
4242
results_format: sarif
@@ -58,14 +58,14 @@ jobs:
5858
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
5959
# format to the repository Actions tab.
6060
- name: "Upload artifact"
61-
uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4
61+
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
6262
with:
6363
name: SARIF file
6464
path: results.sarif
6565
retention-days: 5
6666

6767
# Upload the results to GitHub's code scanning dashboard.
6868
- name: "Upload to code-scanning"
69-
uses: github/codeql-action/upload-sarif@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # v3.25.12
69+
uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
7070
with:
7171
sarif_file: results.sarif

0 commit comments

Comments
 (0)