From 576a5b518742c67ecbb84694cea02bec561dacd2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2026 22:45:23 +0000 Subject: [PATCH 1/2] chore(deps): bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github/codeql-action](https://github.com/github/codeql-action) | `4.37.6` | `4.37.9` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.96.0` | `3.97.2` | | [editorconfig-checker/action-editorconfig-checker](https://github.com/editorconfig-checker/action-editorconfig-checker) | `2.2.0` | `3.0.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` | Updates `github/codeql-action` from 4.37.6 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.6...v4.37.9) Updates `actions/deploy-pages` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v5.0.0...v5.0.1) Updates `trufflesecurity/trufflehog` from 3.96.0 to 3.97.2 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.96.0...v3.97.2) Updates `editorconfig-checker/action-editorconfig-checker` from 2.2.0 to 3.0.0 - [Release notes](https://github.com/editorconfig-checker/action-editorconfig-checker/releases) - [Commits](https://github.com/editorconfig-checker/action-editorconfig-checker/compare/v2.2.0...v3.0.0) Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v3.0.2...v3.0.3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.97.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: editorconfig-checker/action-editorconfig-checker dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/pages.yml | 2 +- .github/workflows/quality.yml | 4 ++-- .github/workflows/release.yml | 2 +- .github/workflows/scorecard-enforcer.yml | 2 +- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 83656b9..5843c1f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -41,12 +41,12 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.6 + uses: github/codeql-action/init@v4.37.9 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.6 + uses: github/codeql-action/analyze@v4.37.9 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index c458477..436702e 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -53,4 +53,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 7304e35..e7023b4 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -28,7 +28,7 @@ jobs: find . -type f -perm /111 -name "*.sh" | head -10 || true - name: Check for secrets - uses: trufflesecurity/trufflehog@v3.96.0 + uses: trufflesecurity/trufflehog@v3.97.2 with: path: ./ base: ${{ github.event.pull_request.base.sha || github.event.before }} @@ -45,7 +45,7 @@ jobs: find . -type f -size +1M -not -path "./.git/*" | head -10 || echo "No large files" - name: EditorConfig check - uses: editorconfig-checker/action-editorconfig-checker@v2.2.0 + uses: editorconfig-checker/action-editorconfig-checker@v3.0.0 continue-on-error: true docs: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7ae7a4d..31e87a2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -39,7 +39,7 @@ jobs: sha256sum network-repair-${{ steps.get_version.outputs.VERSION }}.tar.gz > checksums.txt - name: Create Release - uses: softprops/action-gh-release@v3.0.2 + uses: softprops/action-gh-release@v3.0.3 with: files: | release/network-repair-${{ steps.get_version.outputs.VERSION }}.tar.gz diff --git a/.github/workflows/scorecard-enforcer.yml b/.github/workflows/scorecard-enforcer.yml index 2cde862..9157786 100644 --- a/.github/workflows/scorecard-enforcer.yml +++ b/.github/workflows/scorecard-enforcer.yml @@ -51,7 +51,7 @@ jobs: publish_results: true - name: Upload SARIF - uses: github/codeql-action/upload-sarif@v4.37.6 + uses: github/codeql-action/upload-sarif@v4.37.9 with: sarif_file: results.sarif From 385c671ea1e9f0ad77ac8a1e5a39404955aa989d Mon Sep 17 00:00:00 2001 From: "Jonathan D.A. Jewell" <6759885+hyperpolymath@users.noreply.github.com> Date: Tue, 8 Sep 2026 08:40:11 +0100 Subject: [PATCH 2/2] chore(ci): regenerate actions.lock for the bumped action refs Dependabot cannot sign-push, so the lockfile that pins the bumped `uses:` refs is regenerated here (gh actions-lock, verify clean). Only actions.lock changes. Co-Authored-By: Claude Fable 5.1 --- .github/workflows/actions.lock | 42 +++++++++++++++++----------------- 1 file changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 2ae4cf9..acc36a9 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -5,7 +5,7 @@ version: 'v0.0.2' workflows: '.github/workflows/codeql.yml': - 'actions/checkout@v7.0.1' - - 'github/codeql-action@v4.37.6' + - 'github/codeql-action@v4.37.9' '.github/workflows/distro-matrix.yml': - 'actions/checkout@v7.0.1' '.github/workflows/guix-nix-policy.yml': @@ -18,17 +18,17 @@ workflows: '.github/workflows/mirror.yml': [] '.github/workflows/pages.yml': - 'actions/checkout@v7.0.1' - - 'actions/deploy-pages@v5.0.0' + - 'actions/deploy-pages@v5.0.1' - 'actions/upload-pages-artifact@v5.0.0' '.github/workflows/push-email-notify.yml': - 'hyperpolymath/smtp-notify-action@v0.2.0' '.github/workflows/quality.yml': - 'actions/checkout@v7.0.1' - - 'editorconfig-checker/action-editorconfig-checker@v2.2.0' - - 'trufflesecurity/trufflehog@v3.96.0' + - 'editorconfig-checker/action-editorconfig-checker@v3.0.0' + - 'trufflesecurity/trufflehog@v3.97.2' '.github/workflows/release.yml': - 'actions/checkout@v7.0.1' - - 'softprops/action-gh-release@v3.0.2' + - 'softprops/action-gh-release@v3.0.3' '.github/workflows/rsr-antipattern.yml': - 'actions/checkout@v7.0.1' '.github/workflows/runtime-policy.yml': @@ -37,7 +37,7 @@ workflows: - 'actions/checkout@v7.0.1' - 'actions/download-artifact@v8.0.1' - 'actions/upload-artifact@v7.0.1' - - 'github/codeql-action@v4.37.6' + - 'github/codeql-action@v4.37.9' - 'ossf/scorecard-action@v2.4.4' '.github/workflows/scorecard.yml': [] '.github/workflows/secret-scanner.yml': [] @@ -56,9 +56,9 @@ dependencies: commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' owner_id: 44036562 repo_id: 197814629 - 'actions/deploy-pages@v5.0.0': - ref: 'v5.0.0' - commit: 'sha1-cd2ce8fcbc39b97be8ca5fce6e763baed58fa128' + 'actions/deploy-pages@v5.0.1': + ref: 'v5.0.1' + commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' owner_id: 44036562 repo_id: 438112499 'actions/download-artifact@v8.0.1': @@ -83,14 +83,14 @@ dependencies: repo_id: 496012378 uses: - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' - 'editorconfig-checker/action-editorconfig-checker@v2.2.0': - ref: 'v2.2.0' - commit: 'sha1-840e866d93b8e032123c23bac69dece044d4d84c' + 'editorconfig-checker/action-editorconfig-checker@v3.0.0': + ref: 'v3.0.0' + commit: 'sha1-51f63319f592f97930c73d9c46184d20bd206393' owner_id: 26415196 repo_id: 297874902 - 'github/codeql-action@v4.37.6': - ref: 'v4.37.6' - commit: 'sha1-5595ccaf912efad79be6eef63a5619ff05969be3' + 'github/codeql-action@v4.37.9': + ref: 'v4.37.9' + commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938' owner_id: 9919 repo_id: 259445878 'hyperpolymath/smtp-notify-action@v0.2.0': @@ -113,13 +113,13 @@ dependencies: commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697' owner_id: 18365890 repo_id: 220359305 - 'softprops/action-gh-release@v3.0.2': - ref: 'v3.0.2' - commit: 'sha1-3d0d9888cb7fd7b750713d6e236d1fcb99157228' + 'softprops/action-gh-release@v3.0.3': + ref: 'v3.0.3' + commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' owner_id: 2242 repo_id: 204253808 - 'trufflesecurity/trufflehog@v3.96.0': - ref: 'v3.96.0' - commit: 'sha1-6f3c981e7b77f235fd2702dd74af25fc4b72bf11' + 'trufflesecurity/trufflehog@v3.97.2': + ref: 'v3.97.2' + commit: 'sha1-cc1fe982afc515d2991365ce8d4d0dd07170fcad' owner_id: 79229934 repo_id: 77726177