From 6e84321cb25237ed784c97c32b659daf712f4168 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Sep 2026 05:18:30 +0000 Subject: [PATCH] ci: bump the actions group with 4 updates Bumps the actions group with 4 updates: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action), [taiki-e/install-action](https://github.com/taiki-e/install-action), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) Updates `taiki-e/install-action` from 2.87.4 to 2.87.10 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/e67fa11c4b9316fa714ddf0abed07a0c3143b95b...fa23953489c080190314742a9b907f8e97c6767c) Updates `github/codeql-action/init` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 10 +++++----- .github/workflows/codeql.yml | 4 ++-- .github/workflows/fuzz.yml | 2 +- .github/workflows/mutation-test.yml | 2 +- .github/workflows/pages.yml | 2 +- .github/workflows/python-cli-wheels.yml | 2 +- .github/workflows/release.yml | 10 +++++----- .github/workflows/scorecard.yml | 2 +- 8 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index cd6ec1a04..d14a0d9bf 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -159,7 +159,7 @@ jobs: # the build on warnings regardless of this step. - name: Upload SARIF to code scanning if: always() && hashFiles('rust-clippy-results.sarif') != '' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: sarif_file: rust-clippy-results.sarif category: clippy @@ -240,7 +240,7 @@ jobs: with: toolchain: stable - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 - - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + - uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-nextest # nextest runs the lib / bins / integration tests and writes the JUnit @@ -332,7 +332,7 @@ jobs: - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 with: key: coverage - - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + - uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-nextest,cargo-llvm-cov # nextest is the same runner the `test` job uses, so instrumenting it @@ -477,7 +477,7 @@ jobs: with: toolchain: stable - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 - - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + - uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-about@0.8.4 # Fails if any dep in either binary crate's transitive closure @@ -544,7 +544,7 @@ jobs: tar -xzf /tmp/rumdl.tgz -C /tmp rumdl install -m 0755 /tmp/rumdl /usr/local/bin/rumdl rumdl --version - - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + - uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: taplo-cli@0.10.0,shellcheck@0.10.0,shfmt@3.12.0 # actionlint 1.7.12's prebuilt binary is not yet in diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6660c6200..998b05909 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -38,12 +38,12 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: category: /language:${{ matrix.language }} diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index 6fa8b8a5a..9940dcc4e 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -93,7 +93,7 @@ jobs: fuzz - name: Install cargo-fuzz - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-fuzz diff --git a/.github/workflows/mutation-test.yml b/.github/workflows/mutation-test.yml index 764cd943e..5dcb456c5 100644 --- a/.github/workflows/mutation-test.yml +++ b/.github/workflows/mutation-test.yml @@ -43,7 +43,7 @@ jobs: uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2 - name: Install cargo-mutants - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-mutants diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 459b8b9be..d36920227 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -379,7 +379,7 @@ jobs: # distinct analysis from ci.yml's `category: clippy` upload. - name: Upload self-scan SARIF to code scanning if: always() && hashFiles('bca.sarif') != '' && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: sarif_file: bca.sarif category: bca diff --git a/.github/workflows/python-cli-wheels.yml b/.github/workflows/python-cli-wheels.yml index f7fe59045..b40c43cc1 100644 --- a/.github/workflows/python-cli-wheels.yml +++ b/.github/workflows/python-cli-wheels.yml @@ -152,7 +152,7 @@ jobs: targets: ${{ matrix.target }} - name: Install cargo-about - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-about@${{ env.CARGO_ABOUT_VERSION }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index daaf14d65..e8d04ffef 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -247,12 +247,12 @@ jobs: - name: Install cross (Linux cross-compile) if: matrix.cross - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cross@${{ env.CROSS_VERSION }} - name: Install cargo-about - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-about@${{ env.CARGO_ABOUT_VERSION }} @@ -485,7 +485,7 @@ jobs: toolchain: ${{ env.RUST_TOOLCHAIN }} targets: ${{ matrix.target }} - - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + - uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-deb@${{ env.CARGO_DEB_VERSION }} @@ -569,7 +569,7 @@ jobs: toolchain: ${{ env.RUST_TOOLCHAIN }} targets: ${{ matrix.target }} - - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + - uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-generate-rpm@${{ env.CARGO_GENERATE_RPM_VERSION }} @@ -1107,7 +1107,7 @@ jobs: - uses: dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # stable tip with: toolchain: ${{ env.RUST_TOOLCHAIN }} - - uses: taiki-e/install-action@e67fa11c4b9316fa714ddf0abed07a0c3143b95b # v2.87.4 + - uses: taiki-e/install-action@fa23953489c080190314742a9b907f8e97c6767c # v2.87.10 with: tool: cargo-cyclonedx@${{ env.CARGO_CYCLONEDX_VERSION }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 1c71554af..aec2bcb25 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -52,6 +52,6 @@ jobs: retention-days: 5 - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: sarif_file: results.sarif