Skip to content

chore(deps): bump the actions group with 6 updates #280

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
hyperpolymath merged 2 commits into from
Nov 9, 2026
+23 −48
Merged

chore(deps): bump the actions group with 6 updates #280

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
733ce18
chore(deps): bump the actions group with 6 updates
dependabot[bot] Nov 9, 2026
c6b4161
Merge branch 'main' into dependabot/github_actions/actions-d5e47fe865
hyperpolymath Nov 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
59 changes: 17 additions & 42 deletions .github/workflows/actions.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ workflows:
- 'haskell-actions/setup@v2.12.1'
'.github/workflows/codeql.yml':
- 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
- 'github/codeql-action@1fc58d04a4d4374f921bdac573c3811c240f9c26'
- 'github/codeql-action@33d7b85da1a04171e211befe2c739303b9a4c066'
'.github/workflows/conformance.yml':
- 'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333'
'.github/workflows/dependency-audit.yml':
Expand All @@ -33,7 +33,7 @@ workflows:
- 'actions/checkout@v7.0.1'
- 'erlef/setup-beam@v1.24.1'
- 'mlugg/setup-zig@v2.2.1'
- 'taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2'
- 'taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2'
'.github/workflows/governance.yml': []
'.github/workflows/hypatia-scan.yml':
- 'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333'
Expand All @@ -58,13 +58,13 @@ workflows:
- 'actions/checkout@v7.0.1'
'.github/workflows/oikosbot.yml':
- 'actions/checkout@v7.0.1'
- 'github/codeql-action@1fc58d04a4d4374f921bdac573c3811c240f9c26'
- 'github/codeql-action@33d7b85da1a04171e211befe2c739303b9a4c066'
- 'hyperpolymath/oikosbot@3fdad0c2b027f328e784ecf08caf62bf80a784c1'
'.github/workflows/publish-verisimdb.yml':
- 'actions/attest-build-provenance@v4.2.2'
- 'actions/checkout@v7.0.1'
- 'docker/build-push-action@v7.4.0'
- 'docker/login-action@v4.7.0'
- 'docker/login-action@v4.8.0'
- 'docker/metadata-action@v6.2.0'
- 'docker/setup-buildx-action@v4.4.1'
'.github/workflows/push-email-notify.yml':
Expand All @@ -75,8 +75,7 @@ workflows:
- 'actions/download-artifact@v8.0.2'
- 'actions/upload-artifact@v7.0.2'
- 'erlef/setup-beam@v1.24.1'
- 'slsa-framework/slsa-github-generator@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
- 'softprops/action-gh-release@v3.0.3'
- 'softprops/action-gh-release@v3.0.4'
'.github/workflows/rhodibot.yml':
- 'actions/checkout@v7.0.1'
'.github/workflows/scorecard.yml': []
Expand Down Expand Up @@ -140,11 +139,6 @@ dependencies:
commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
owner_id: 44036562
repo_id: 192626254
'actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08':
ref: 'v4.6.0'
commit: 'sha1-65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08'
owner_id: 44036562
repo_id: 192625955
'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f':
ref: 'v7.0.0'
commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f'
Expand All @@ -167,9 +161,9 @@ dependencies:
commit: 'sha1-c3c9e263c25d99ce0380d002d59b67737d91b0dc'
owner_id: 5429470
repo_id: 241092383
'docker/login-action@v4.7.0':
ref: 'v4.7.0'
commit: 'sha1-81c6f93d4bc991e510b342a00b419b3bb4efc5c6'
'docker/login-action@v4.8.0':
ref: 'v4.8.0'
commit: 'sha1-8aa5831fb8d48d8f76594c7ddde61ae58019f550'
owner_id: 5429470
repo_id: 287743349
'docker/metadata-action@v6.2.0':
Expand All @@ -192,9 +186,9 @@ dependencies:
commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
owner_id: 47606891
repo_id: 331103973
'github/codeql-action@1fc58d04a4d4374f921bdac573c3811c240f9c26':
ref: 'v4.39.2'
commit: 'sha1-1fc58d04a4d4374f921bdac573c3811c240f9c26'
'github/codeql-action@33d7b85da1a04171e211befe2c739303b9a4c066':
ref: 'v4.39.3'
commit: 'sha1-33d7b85da1a04171e211befe2c739303b9a4c066'
owner_id: 9919
repo_id: 259445878
'haskell-actions/setup@v2.12.1':
Expand Down Expand Up @@ -242,32 +236,13 @@ dependencies:
commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697'
owner_id: 18365890
repo_id: 220359305
'slsa-framework/slsa-github-generator@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a':
ref: 'f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
commit: 'sha1-f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
owner_id: 80431187
repo_id: 475074978
uses:
- 'actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08'
- 'slsa-framework/slsa-github-generator@v2.1.0'
- 'softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda'
'slsa-framework/slsa-github-generator@v2.1.0':
ref: 'v2.1.0'
commit: 'sha1-f7dd8c54c2067bafc12ca7a55595d5ee9b75204a'
owner_id: 80431187
repo_id: 475074978
'softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda':
ref: 'v2.2.1'
commit: 'sha1-c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda'
owner_id: 2242
repo_id: 204253808
'softprops/action-gh-release@v3.0.3':
ref: 'v3.0.3'
commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64'
'softprops/action-gh-release@v3.0.4':
ref: 'v3.0.4'
commit: 'sha1-8a0cd651e5b2365bd640854a3fa5dfc70e4875f3'
owner_id: 2242
repo_id: 204253808
'taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2':
ref: 'v2.90.0'
commit: 'sha1-b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2'
'taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2':
ref: 'v2.90.2'
commit: 'sha1-3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2'
owner_id: 43724913
repo_id: 442947557
4 changes: 2 additions & 2 deletions .github/workflows/codeql.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,11 +52,11 @@ jobs:
with:
persist-credentials: false
- name: Initialize CodeQL
uses: github/codeql-action/init@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.38.2 (4.38.1 blocked estate-wide; nexia-list#100)
uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.38.2 (4.38.1 blocked estate-wide; nexia-list#100)
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.38.2 (4.38.1 blocked estate-wide; nexia-list#100)
uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.38.2 (4.38.1 blocked estate-wide; nexia-list#100)
with:
category: "/language:${{ matrix.language }}"
2 changes: 1 addition & 1 deletion .github/workflows/elixir-ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,7 +45,7 @@ jobs:
# tracks ffi/zig/build.zig's declared "Zig 0.15".
version: '0.15.2'
- name: Install just
uses: taiki-e/install-action@b80e2bb2635f28eb98b9fce1e2f0887e1535c6b2
uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2
with:
# Pin an explicit modern just: the Justfile uses `import?`
# (optional import, just >= 1.19.0). Unversioned `tool: just`
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/oikosbot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,7 +34,7 @@ jobs:

- name: Upload SARIF to GitHub Security
if: always()
uses: github/codeql-action/upload-sarif@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.38.2 (4.38.1 blocked estate-wide; nexia-list#100)
uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.38.2 (4.38.1 blocked estate-wide; nexia-list#100)
with:
sarif_file: results.sarif
category: oikosbot
2 changes: 1 addition & 1 deletion .github/workflows/publish-verisimdb.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -46,11 +46,11 @@
with:
repository: hyperpolymath/nextgen-databases
path: nextgen-databases
token: ${{ secrets.NEXTGEN_DATABASES_TOKEN || secrets.GITHUB_TOKEN }}

Check warning on line 49 in .github/workflows/publish-verisimdb.yml

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan 

[hypatia] job `publish` in .github/workflows/publish-verisimdb.yml references `secrets.*` but does not install `step-security/harden-runner` or declare its egress — review outbound-egress monitoring
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v4.4.1
- name: Log in to GHCR
uses: docker/login-action@v4.7.0
uses: docker/login-action@v4.8.0
with:
registry: ghcr.io
username: ${{ github.actor }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,7 @@
name: release-artifacts
path: artifacts/
- name: Create GitHub Release
uses: softprops/action-gh-release@v3.0.3
uses: softprops/action-gh-release@v3.0.4
with:
body: ${{ needs.changelog.outputs.changelog }}
draft: false
Expand Down
Loading