From 4c48465cbd001b6247bb2193e5cf3628ac73e0d2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 7 Jun 2026 18:04:36 +0000 Subject: [PATCH] chore(ci): bump the gha-patch-minor group with 2 updates Bumps the gha-patch-minor group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog). Updates `actions/checkout` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...df4cb1c069e1874edd31b4311f1884172cec0e10) Updates `trufflesecurity/trufflehog` from 3.95.3 to 3.95.5 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/37b77001d0174ebec2fcca2bd83ff83a6d45a3ab...d411fff7b8879a62509f3fa98c07f247ac089a51) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha-patch-minor - dependency-name: trufflesecurity/trufflehog dependency-version: 3.95.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha-patch-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/check.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/commit.yml | 4 ++-- .github/workflows/publish.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/security.yml | 4 ++-- .github/workflows/verify.yml | 6 +++--- 7 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index 4b2495c9..538f5aa2 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Install Poetry run: pipx install "poetry==${POETRY_VERSION}" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 62bc181b..0a5801c5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Initialize CodeQL uses: github/codeql-action/init@5e316336eb4f107009e477d4bfbfff13d7250fae diff --git a/.github/workflows/commit.yml b/.github/workflows/commit.yml index 24f5e309..75326cdc 100644 --- a/.github/workflows/commit.yml +++ b/.github/workflows/commit.yml @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 with: # Full history is required to inspect the full pushed commit range. fetch-depth: 0 @@ -131,7 +131,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Install Poetry run: pipx install "poetry==${POETRY_VERSION}" diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 543b1c36..9f2a291f 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -80,7 +80,7 @@ jobs: echo "release_actor='$ACTOR' is trusted." - name: Checkout release tag - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 with: ref: refs/tags/${{ github.event.release.tag_name }} fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 4dca4eaf..66e6c60a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -36,7 +36,7 @@ jobs: private-key: ${{ secrets.APP_PRIVATE_KEY }} - name: Checkout repository metadata - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 with: fetch-depth: 0 token: ${{ steps.app-token.outputs.token }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 6bda5e97..3cd235ae 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -36,7 +36,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Install Poetry run: pipx install "poetry==${POETRY_VERSION}" @@ -60,7 +60,7 @@ jobs: - name: Secret scan # Scan only PR diff range to reduce noise and speed up checks. - uses: trufflesecurity/trufflehog@37b77001d0174ebec2fcca2bd83ff83a6d45a3ab + uses: trufflesecurity/trufflehog@d411fff7b8879a62509f3fa98c07f247ac089a51 with: path: ./ base: ${{ github.event.pull_request.base.sha }} diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml index cc94cf05..5dd45a38 100644 --- a/.github/workflows/verify.yml +++ b/.github/workflows/verify.yml @@ -39,7 +39,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Install Poetry run: pipx install "poetry==${POETRY_VERSION}" @@ -64,7 +64,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Install Poetry run: pipx install "poetry==${POETRY_VERSION}" @@ -89,7 +89,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 - name: Install Poetry run: pipx install "poetry==${POETRY_VERSION}"