From b036f72e83fc2d4aa7e3ca6a37dec5d67b24eec2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 1 Mar 2024 17:49:53 +0000 Subject: [PATCH] Bump the github-actions group with 3 updates Bumps the github-actions group with 3 updates: [tim-actions/get-pr-commits](https://github.com/tim-actions/get-pr-commits), [github/codeql-action](https://github.com/github/codeql-action) and [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action). Updates `tim-actions/get-pr-commits` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/tim-actions/get-pr-commits/releases) - [Commits](https://github.com/tim-actions/get-pr-commits/compare/3efc1387ead42029a0d488ab98f24b7452dc3cde...198af03565609bb4ed924d1260247b4881f09e7d) Updates `github/codeql-action` from 3.23.2 to 3.24.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b7bf0a3ed3ecfa44160715d7c442788f65f0f923...8a470fddafa5cbb6266ee11b37ef4d8aae19c571) Updates `docker/setup-buildx-action` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/f95db51fddba0c2d1ec667646a06c2ce06100226...0d103c3126aa41d772a8362f6aa67afac040f80c) --- updated-dependencies: - dependency-name: tim-actions/get-pr-commits dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/linting.yml | 4 ++-- .github/workflows/report.yml | 2 +- .github/workflows/testing.yml | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml index 3a134731f..e005e38a9 100644 --- a/.github/workflows/linting.yml +++ b/.github/workflows/linting.yml @@ -13,7 +13,7 @@ jobs: steps: - name: Get PR commits id: 'get-pr-commits' - uses: tim-actions/get-pr-commits@3efc1387ead42029a0d488ab98f24b7452dc3cde + uses: tim-actions/get-pr-commits@198af03565609bb4ed924d1260247b4881f09e7d with: token: ${{ secrets.GITHUB_TOKEN }} @@ -123,7 +123,7 @@ jobs: run: cat ${{ steps.scan.outputs.sarif }} - name: Upload Anchore scan SARIF report if: always() - uses: github/codeql-action/upload-sarif@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 + uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 with: sarif_file: ${{ steps.scan.outputs.sarif }} diff --git a/.github/workflows/report.yml b/.github/workflows/report.yml index c70dff737..117b074f3 100644 --- a/.github/workflows/report.yml +++ b/.github/workflows/report.yml @@ -28,6 +28,6 @@ jobs: - name: Show Anchore scan SARIF report run: cat ${{ steps.scan.outputs.sarif }} - name: Upload Anchore scan SARIF report - uses: github/codeql-action/upload-sarif@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 + uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 with: sarif_file: ${{ steps.scan.outputs.sarif }} diff --git a/.github/workflows/testing.yml b/.github/workflows/testing.yml index 7780f0587..670886313 100644 --- a/.github/workflows/testing.yml +++ b/.github/workflows/testing.yml @@ -21,7 +21,7 @@ jobs: uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 - name: Set up buildx - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 + uses: docker/setup-buildx-action@0d103c3126aa41d772a8362f6aa67afac040f80c - name: Restore images from the cache uses: ./gh-actions/restore-images