From 7168862ad05d184947d18de32ed65c16eecd2bde Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 03:11:16 +0000 Subject: [PATCH] ci: bump the actions-updates group across 1 directory with 5 updates Bumps the actions-updates group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.1` | `4.37.6` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.1` | `4.37.6` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.1` | `4.2.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.1` | `4.37.6` | Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `github/codeql-action/init` from 4.37.1 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...5595ccaf912efad79be6eef63a5619ff05969be3) Updates `github/codeql-action/analyze` from 4.37.1 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...5595ccaf912efad79be6eef63a5619ff05969be3) Updates `actions/attest-build-provenance` from 4.1.1 to 4.2.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/0f67c3f4856b2e3261c31976d6725780e5e4c373...4d101475d8b20a2381f78447822ac1eab6504dd8) Updates `github/codeql-action/upload-sarif` from 4.37.1 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7188fc363630916deb702c7fdcf4e481b751f97a...5595ccaf912efad79be6eef63a5619ff05969be3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: github/codeql-action/init dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: github/codeql-action/analyze dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/codecov.yml | 2 +- .github/workflows/codeql.yml | 6 +++--- .github/workflows/dependency-review.yml | 2 +- .github/workflows/license-check.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/post-merge-release.yml | 2 +- .github/workflows/race.yml | 2 +- .github/workflows/release-guard.yml | 2 +- .github/workflows/release-intake.yml | 2 +- .github/workflows/release-notes-guard.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/security-ultimate.yml | 4 ++-- 12 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index a70b10b6..856fbcd0 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -11,7 +11,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: # Coverage upload only; no later step uses the git remote, so don't keep # the GITHUB_TOKEN in .git/config. diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index cd6a4d34..3d1f7aa1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false @@ -36,7 +36,7 @@ jobs: cache: false - name: Initialize CodeQL - uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 with: languages: go @@ -45,6 +45,6 @@ jobs: run: go build ./... - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 with: category: "/language:go" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 7d5e1e79..15157ef7 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: # No later step uses the git remote, so don't leave the GITHUB_TOKEN in .git/config. persist-credentials: false diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml index 114d81fa..2148a7b9 100644 --- a/.github/workflows/license-check.yml +++ b/.github/workflows/license-check.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: # No later step uses the git remote, so don't leave the GITHUB_TOKEN in .git/config. persist-credentials: false diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index fc6b834f..431224c6 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false diff --git a/.github/workflows/post-merge-release.yml b/.github/workflows/post-merge-release.yml index 907a093d..b3ba3bb2 100644 --- a/.github/workflows/post-merge-release.yml +++ b/.github/workflows/post-merge-release.yml @@ -31,7 +31,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 token: ${{ secrets.RELEASE_BOT_TOKEN || github.token }} diff --git a/.github/workflows/race.yml b/.github/workflows/race.yml index 95afab12..d5961a8a 100644 --- a/.github/workflows/race.yml +++ b/.github/workflows/race.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false diff --git a/.github/workflows/release-guard.yml b/.github/workflows/release-guard.yml index bfcc39e3..ccc1366d 100644 --- a/.github/workflows/release-guard.yml +++ b/.github/workflows/release-guard.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout trusted base policy - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 ref: ${{ github.event.pull_request.base.sha }} diff --git a/.github/workflows/release-intake.yml b/.github/workflows/release-intake.yml index c7d83be1..deaaa7a5 100644 --- a/.github/workflows/release-intake.yml +++ b/.github/workflows/release-intake.yml @@ -33,7 +33,7 @@ jobs: steps: - name: Checkout tag - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 # Persist the token (default): this job runs `git push` to delete the diff --git a/.github/workflows/release-notes-guard.yml b/.github/workflows/release-notes-guard.yml index 4b665da5..a48943d5 100644 --- a/.github/workflows/release-notes-guard.yml +++ b/.github/workflows/release-notes-guard.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout PR head - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: ref: ${{ github.event.pull_request.head.sha }} persist-credentials: false diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d423a132..70d64657 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -27,7 +27,7 @@ jobs: on_main: ${{ steps.check.outputs.on_main }} steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 persist-credentials: false @@ -62,7 +62,7 @@ jobs: # CHECKOUT (fetch-depth 0 for changelog and GoReleaser) ######################################## - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 @@ -202,6 +202,6 @@ jobs: # BUILD PROVENANCE ATTESTATION ######################################## - name: Attest Build Provenance - uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 with: subject-path: build/proxsave_* diff --git a/.github/workflows/security-ultimate.yml b/.github/workflows/security-ultimate.yml index eaa09964..3be3a215 100644 --- a/.github/workflows/security-ultimate.yml +++ b/.github/workflows/security-ultimate.yml @@ -21,7 +21,7 @@ jobs: # CHECKOUT ######################################## - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 ######################################## # GO 1.25 - MAIN TOOLCHAIN @@ -89,7 +89,7 @@ jobs: # UPLOAD SARIF ######################################## - name: Upload GoSec SARIF - uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 with: sarif_file: gosec.sarif