Skip to content

Commit a5e9309

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the github-actions group across 1 directory with 6 updates
Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `7.0.0` | `7.1.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.2` | `4.39.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.2` | `4.39.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@8207627...949feb2) Updates `actions/setup-python` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@5fda3b9...6d4fd22) Updates `github/codeql-action/init` from 4.38.2 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...9b32540) Updates `github/codeql-action/analyze` from 4.38.2 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2892aa5...9b32540) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@043fb46...cf430e0) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@3e5f45b...9000827) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent c34d1b2 commit a5e9309

7 files changed

Lines changed: 21 additions & 21 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -185,7 +185,7 @@ jobs:
185185
run: |
186186
scripts/ci-ffi-helper-discovery-smoke.sh
187187
188-
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
188+
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
189189
with:
190190
node-version: '24'
191191

@@ -278,7 +278,7 @@ jobs:
278278
- name: glibc floor gate self-test
279279
run: scripts/check-elf-glibc-floor-selftest.sh
280280

281-
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
281+
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
282282
with:
283283
node-version: '24'
284284

@@ -759,7 +759,7 @@ jobs:
759759
fi
760760
echo "path=$DYLIB" >> "$GITHUB_OUTPUT"
761761
762-
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
762+
- uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0
763763
if: matrix.target == 'aarch64-apple-darwin'
764764
with:
765765
python-version: '3.12'

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -31,12 +31,12 @@ jobs:
3131
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3232

3333
- name: Initialize CodeQL
34-
uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
34+
uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
3535
with:
3636
languages: ${{ matrix.language }}
3737

3838
- name: Perform CodeQL Analysis
39-
uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
39+
uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
4040

4141
analyze-rust:
4242
name: Analyze (rust)
@@ -50,10 +50,10 @@ jobs:
5050
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5151

5252
- name: Initialize CodeQL
53-
uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
53+
uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1
5454
with:
5555
languages: rust
5656
build-mode: none
5757

5858
- name: Perform CodeQL Analysis
59-
uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
59+
uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1

‎.github/workflows/release-dry-run.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -194,7 +194,7 @@ jobs:
194194
"$hash $tarball" | Out-File -Encoding ascii "${tarball}.sha256"
195195
196196
- name: Upload artifact
197-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
197+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
198198
with:
199199
name: dry-run-binary-${{ matrix.target }}
200200
path: |
@@ -329,7 +329,7 @@ jobs:
329329
Compress-Archive -Path $stage -DestinationPath "$stage.zip"
330330
331331
- name: Upload artifact
332-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
332+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
333333
with:
334334
name: dry-run-ffi-${{ matrix.target }}
335335
path: |
@@ -360,7 +360,7 @@ jobs:
360360
persist-credentials: false
361361

362362
- name: Download this target's CLI and FFI archives
363-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
363+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
364364
with:
365365
pattern: "dry-run-{binary,ffi}-${{ matrix.target }}"
366366
merge-multiple: true
@@ -397,12 +397,12 @@ jobs:
397397
with:
398398
persist-credentials: false
399399

400-
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
400+
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
401401
with:
402402
node-version: '24'
403403

404404
- name: Download this architecture's CLI and FFI archives
405-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
405+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
406406
with:
407407
pattern: "dry-run-{binary,ffi}-${{ matrix.target }}"
408408
merge-multiple: true

‎.github/workflows/release-packages.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
with:
2525
ref: main
2626
persist-credentials: false
27-
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020
27+
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1
2828
with:
2929
node-version: '24'
3030
package-manager-cache: false

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -271,7 +271,7 @@ jobs:
271271
"$hash $tarball" | Out-File -Encoding ascii "$tarball.sha256"
272272
273273
- name: Upload artifact
274-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
274+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
275275
with:
276276
name: binary-${{ matrix.target }}
277277
path: |
@@ -513,7 +513,7 @@ jobs:
513513
"$hash ${env:STAGE}.zip" | Out-File -Encoding ascii "${env:STAGE}.zip.sha256"
514514
515515
- name: Upload artifact
516-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
516+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
517517
with:
518518
name: ffi-${{ matrix.target }}
519519
path: |
@@ -687,7 +687,7 @@ jobs:
687687
run: bash scripts/checkout-release-source.sh
688688

689689
- name: Download this target's CLI and FFI archives
690-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
690+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
691691
with:
692692
pattern: "{binary,ffi}-${{ matrix.target }}"
693693
merge-multiple: true
@@ -720,7 +720,7 @@ jobs:
720720
attestations: write # write provenance bundle back to GitHub
721721
steps:
722722
- name: Download all artifacts
723-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
723+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
724724
with:
725725
pattern: "{binary,ffi}-*"
726726
merge-multiple: true
@@ -794,7 +794,7 @@ jobs:
794794
RELEASE_WORKFLOW_SHA: ${{ github.sha }}
795795
run: bash scripts/checkout-release-source.sh
796796

797-
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
797+
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
798798
with:
799799
node-version: '24'
800800
registry-url: https://registry.npmjs.org
@@ -816,7 +816,7 @@ jobs:
816816
cp ../CHANGELOG.md CHANGELOG.md 2>/dev/null || true
817817
818818
- name: Download built release archives
819-
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
819+
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
820820
with:
821821
pattern: "{binary,ffi}-*"
822822
merge-multiple: true

‎.github/workflows/supply-chain.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
- name: Check release metadata consistency
3333
run: scripts/check-release-consistency.sh
3434

35-
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
35+
- uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
3636
with:
3737
node-version: '24'
3838

‎.github/workflows/windows-capability-probe.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -195,7 +195,7 @@ jobs:
195195

196196
- name: Upload the measured captures
197197
if: ${{ !cancelled() && steps.redaction-gate.outcome == 'success' }}
198-
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
198+
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
199199
with:
200200
name: windows-capability-probe-captures
201201
path: |

0 commit comments

Comments
 (0)