From 237a58a4a58398f1509b1b36f8ce44f498da7c43 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Sep 2026 09:38:57 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 4 updates Bumps the actions group with 4 updates in the / directory: [haskell-actions/setup](https://github.com/haskell-actions/setup), [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `haskell-actions/setup` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](https://github.com/haskell-actions/setup/compare/v2.12.0...v2.12.1) Updates `github/codeql-action/init` from 4.38.0 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action` from 4.38.0 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.38.0...v4.38.2) Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: haskell-actions/setup dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/casket-ci.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 6 +++--- .github/workflows/sbom.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/casket-ci.yml b/.github/workflows/casket-ci.yml index 3b0876d..c4a6659 100644 --- a/.github/workflows/casket-ci.yml +++ b/.github/workflows/casket-ci.yml @@ -27,7 +27,7 @@ jobs: - name: Checkout code uses: actions/checkout@v7.0.1 - name: Setup Haskell - uses: haskell-actions/setup@v2.12.0 + uses: haskell-actions/setup@v2.12.1 with: ghc-version: ${{ matrix.ghc }} enable-stack: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ad3b759..4626626 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,7 +18,7 @@ jobs: - name: Set up GHC # The visible release tag is resolved to an immutable commit by # actions.lock, and repository policy requires that locked SHA. - uses: haskell-actions/setup@v2.12.0 + uses: haskell-actions/setup@v2.12.1 with: ghc-version: '9.4' cabal-version: '3.10' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 7f144c8..c7b4ebb 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -36,13 +36,13 @@ jobs: with: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v3 with: languages: ${{ matrix.language }} queries: +security-extended,security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@v4.38.0 + uses: github/codeql-action/autobuild@v4.38.2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index a8b271d..79a268e 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -19,7 +19,7 @@ jobs: - name: Checkout code uses: actions/checkout@v7.0.1 - name: Setup Haskell - uses: haskell-actions/setup@v2.12.0 + uses: haskell-actions/setup@v2.12.1 with: ghc-version: '9.6.6' enable-stack: true