From 6c9a7373ddc116b61abadca0478c4366cbdbcdce Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 10 Sep 2026 07:25:22 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [prefix-dev/setup-pixi](https://github.com/prefix-dev/setup-pixi), [anchore/sbom-action](https://github.com/anchore/sbom-action), [anchore/scan-action](https://github.com/anchore/scan-action) and [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact). Updates `prefix-dev/setup-pixi` from 0.10.1 to 0.10.2 - [Release notes](https://github.com/prefix-dev/setup-pixi/releases) - [Commits](https://github.com/prefix-dev/setup-pixi/compare/v0.10.1...v0.10.2) Updates `anchore/sbom-action` from 0.24.0 to 0.24.2 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/v0.24.0...v0.24.2) Updates `anchore/scan-action` from 7.4.0 to 7.4.2 - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/scan-action/compare/v7.4.0...v7.4.2) Updates `dawidd6/action-download-artifact` from 23 to 24 - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](https://github.com/dawidd6/action-download-artifact/compare/v23...v24) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: anchore/scan-action dependency-version: 7.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: dawidd6/action-download-artifact dependency-version: '24' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: prefix-dev/setup-pixi dependency-version: 0.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yaml | 2 +- .github/workflows/security-scan.yaml | 10 +++++----- .github/workflows/test.yaml | 4 ++-- .github/workflows/update-lockfile.yaml | 2 +- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 20f6ac5f2..b5b4ed4c7 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -63,7 +63,7 @@ jobs: token: ${{ steps.generate-token.outputs.token }} - name: Setup Pixi - uses: prefix-dev/setup-pixi@v0.10.1 + uses: prefix-dev/setup-pixi@v0.10.2 with: pixi-version: v0.68.1 cache: true diff --git a/.github/workflows/security-scan.yaml b/.github/workflows/security-scan.yaml index 518931b8f..3e504d88c 100644 --- a/.github/workflows/security-scan.yaml +++ b/.github/workflows/security-scan.yaml @@ -41,12 +41,12 @@ jobs: shell: bash -l {0} steps: - uses: actions/checkout@v7 - - uses: prefix-dev/setup-pixi@v0.10.1 + - uses: prefix-dev/setup-pixi@v0.10.2 with: pixi-version: v0.68.1 - name: Generate SBOM - uses: anchore/sbom-action@v0.24.0 + uses: anchore/sbom-action@v0.24.2 with: path: ".pixi/envs/default" output-file: sbom.spdx.json @@ -55,7 +55,7 @@ jobs: - name: Vulnerability Scan id: scan - uses: anchore/scan-action@v7.4.0 + uses: anchore/scan-action@v7.4.2 env: SBOM: sbom.spdx.json with: &scan_settings @@ -95,7 +95,7 @@ jobs: # All PRs gate on new CVEs vs the master baseline - name: Download master baseline if: github.event_name == 'pull_request' - uses: dawidd6/action-download-artifact@v23 + uses: dawidd6/action-download-artifact@v24 with: workflow: security-scan.yaml name: master-sbom @@ -106,7 +106,7 @@ jobs: - name: Scan master baseline id: baseline if: github.event_name == 'pull_request' - uses: anchore/scan-action@v7.4.0 + uses: anchore/scan-action@v7.4.2 env: SBOM: master-baseline/sbom.spdx.json with: *scan_settings diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 349a93dcb..f93e069db 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -29,7 +29,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Pixi - uses: prefix-dev/setup-pixi@v0.10.1 + uses: prefix-dev/setup-pixi@v0.10.2 with: pixi-version: v0.68.1 cache: true @@ -86,7 +86,7 @@ jobs: - name: Setup Pixi if: steps.filter.outputs.src == 'true' || github.event_name == 'schedule' || github.event_name == 'workflow_dispatch' - uses: prefix-dev/setup-pixi@v0.10.1 + uses: prefix-dev/setup-pixi@v0.10.2 with: pixi-version: v0.68.1 cache: true diff --git a/.github/workflows/update-lockfile.yaml b/.github/workflows/update-lockfile.yaml index bbe470cc1..b24f35f95 100644 --- a/.github/workflows/update-lockfile.yaml +++ b/.github/workflows/update-lockfile.yaml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Pixi - uses: prefix-dev/setup-pixi@v0.10.1 + uses: prefix-dev/setup-pixi@v0.10.2 with: pixi-version: v0.68.1