From 4677d39bc612712dc06a1b99ba50113edd7bf3ea Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Aug 2024 03:06:29 +0000 Subject: [PATCH] Bump the github-actions group across 1 directory with 7 updates Bumps the github-actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.4` | `4.3.6` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.42.9` | `2.42.22` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.25.15` | `3.26.0` | | [streetsidesoftware/cspell-action](https://github.com/streetsidesoftware/cspell-action) | `6.7.1` | `6.8.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.5.0` | `3.6.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.5.0` | `6.6.1` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.19.2` | `2.20.0` | Updates `actions/upload-artifact` from 4.3.4 to 4.3.6 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/0b2256b8c012f0828dc542b3febcab082c67f72b...834a144ee995460fba8ed112a2fc961b36a5ec5a) Updates `taiki-e/install-action` from 2.42.9 to 2.42.22 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/7277a40b4d8760cc11399bd3f8314c3294e270f5...8efaa9bb37d22aefc9d331dfbd45e2d230acfc33) Updates `github/codeql-action` from 3.25.15 to 3.26.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/afb54ba388a7dca6ecae48f608c4ff05ff4cc77a...eb055d739abdc2e8de2e5f4ba1a8b246daa779aa) Updates `streetsidesoftware/cspell-action` from 6.7.1 to 6.8.0 - [Release notes](https://github.com/streetsidesoftware/cspell-action/releases) - [Changelog](https://github.com/streetsidesoftware/cspell-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/streetsidesoftware/cspell-action/compare/2db9e5fb6d08776bed383767ef4e5dd84650546c...0e63b882c2ef0e24d78b8b1fbb132b42c0a0d0cb) Updates `docker/setup-buildx-action` from 3.5.0 to 3.6.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/aa33708b10e362ff993539393ff100fa93ed6a27...988b5a0280414f521da01fcc63a27aeeb4b104db) Updates `docker/build-push-action` from 6.5.0 to 6.6.1 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/5176d81f87c23d6fc96624dfdbcd9f3830bbe445...16ebe778df0e7752d2cfcbd924afdbbd89c1a755) Updates `pypa/cibuildwheel` from 2.19.2 to 2.20.0 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](https://github.com/pypa/cibuildwheel/compare/7e5a838a63ac8128d71ab2dfd99e4634dd1bca09...bd033a44476646b606efccdd5eed92d5ea1d77ad) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: streetsidesoftware/cspell-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/cibuildwheel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/_parse_version.yml | 2 +- .github/workflows/ci-rust.yml | 4 ++-- .github/workflows/ci-web.yml | 4 ++-- .github/workflows/codeql.yml | 16 ++++++++-------- .github/workflows/cspell.yml | 2 +- .github/workflows/docker-server.yml | 6 +++--- .github/workflows/docker-testbed.yml | 6 +++--- .github/workflows/package-cli.yml | 2 +- .github/workflows/package-client.yml | 14 +++++++------- .github/workflows/package-server.yml | 6 +++--- 10 files changed, 31 insertions(+), 31 deletions(-) diff --git a/.github/workflows/_parse_version.yml b/.github/workflows/_parse_version.yml index 85ddd34779d..b5863ecd1da 100644 --- a/.github/workflows/_parse_version.yml +++ b/.github/workflows/_parse_version.yml @@ -97,7 +97,7 @@ jobs: timeout-minutes: 2 - name: Upload patch - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 with: name: version.patch path: | diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml index 5c882e22ca3..711ff7649cf 100644 --- a/.github/workflows/ci-rust.yml +++ b/.github/workflows/ci-rust.yml @@ -102,7 +102,7 @@ jobs: timeout-minutes: 5 # Install cargo nextest command - - uses: taiki-e/install-action@7277a40b4d8760cc11399bd3f8314c3294e270f5 # pin v2.42.9 + - uses: taiki-e/install-action@8efaa9bb37d22aefc9d331dfbd45e2d230acfc33 # pin v2.42.22 with: tool: nextest@0.9.54, wasm-pack@0.12.1, cargo-deny@0.15.0 @@ -254,7 +254,7 @@ jobs: timeout-minutes: 5 # Install cargo nextest command - - uses: taiki-e/install-action@7277a40b4d8760cc11399bd3f8314c3294e270f5 # pin v2.42.9 + - uses: taiki-e/install-action@8efaa9bb37d22aefc9d331dfbd45e2d230acfc33 # pin v2.42.22 with: tool: nextest@0.9.54 diff --git a/.github/workflows/ci-web.yml b/.github/workflows/ci-web.yml index 93e37623ac7..dc323ef8df2 100644 --- a/.github/workflows/ci-web.yml +++ b/.github/workflows/ci-web.yml @@ -123,7 +123,7 @@ jobs: timeout-minutes: 5 # Install wasm-pack command - - uses: taiki-e/install-action@7277a40b4d8760cc11399bd3f8314c3294e270f5 # pin v2.42.9 + - uses: taiki-e/install-action@8efaa9bb37d22aefc9d331dfbd45e2d230acfc33 # pin v2.42.22 with: tool: wasm-pack@${{ env.wasm-pack-version }} @@ -179,7 +179,7 @@ jobs: - name: Archive test results if: failure() - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 with: name: playwright-artifacts path: client/test-results/ diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c35822fb3bb..df924d7271b 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -58,7 +58,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL if: steps.should-run-python-analysis.outputs.run == 'true' - uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 with: languages: python setup-python-dependencies: false @@ -87,7 +87,7 @@ jobs: - name: Perform CodeQL Analysis if: steps.should-run-python-analysis.outputs.run == 'true' - uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 with: category: /language:python @@ -142,7 +142,7 @@ jobs: # # Initializes the CodeQL tools for scanning. # - name: Initialize CodeQL # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + # uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 # with: # languages: java # # If you wish to specify custom queries, you can do so here or in a config file. @@ -154,7 +154,7 @@ jobs: # - name: Autobuild android # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/autobuild@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + # uses: github/codeql-action/autobuild@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 # with: # working-directory: client/android # env: @@ -162,7 +162,7 @@ jobs: # - name: Perform CodeQL Analysis # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + # uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 # with: # category: /language:java @@ -191,7 +191,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + uses: github/codeql-action/init@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 with: languages: typescript @@ -202,12 +202,12 @@ jobs: - name: Autobuild for typescript if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/autobuild@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + uses: github/codeql-action/autobuild@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 with: working-directory: client - name: Perform CodeQL Analysis if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin v3.25.15 + uses: github/codeql-action/analyze@eb055d739abdc2e8de2e5f4ba1a8b246daa779aa # pin v3.26.0 with: category: /language:typescript diff --git a/.github/workflows/cspell.yml b/.github/workflows/cspell.yml index 0654cab1ac9..3da6ee4cf8f 100644 --- a/.github/workflows/cspell.yml +++ b/.github/workflows/cspell.yml @@ -74,7 +74,7 @@ jobs: - name: Check spelling in the repository id: cspell - uses: streetsidesoftware/cspell-action@2db9e5fb6d08776bed383767ef4e5dd84650546c # pin v6.7.1 + uses: streetsidesoftware/cspell-action@0e63b882c2ef0e24d78b8b1fbb132b42c0a0d0cb # pin v6.8.0 with: config: .cspell/cspell.config.yml # Only check for changed files on a PR diff --git a/.github/workflows/docker-server.yml b/.github/workflows/docker-server.yml index 7602ece3638..9968adb515a 100644 --- a/.github/workflows/docker-server.yml +++ b/.github/workflows/docker-server.yml @@ -35,7 +35,7 @@ jobs: # multi-platform images and export cache # https://github.com/docker/setup-buildx-action - name: Set up Docker Buildx - uses: docker/setup-buildx-action@aa33708b10e362ff993539393ff100fa93ed6a27 # v3.5.0 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1 - name: Log in to the Github Container registry uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 @@ -64,7 +64,7 @@ jobs: latest=${{ github.event_name == 'push' && github.ref_type == 'tag' }} - name: Build and export to Docker - uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6.5.0 + uses: docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1 id: build with: context: . @@ -96,7 +96,7 @@ jobs: run: echo "${{ steps.metadata.outputs.tags }}" - name: Build and publish - uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6.5.0 + uses: docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1 id: publish with: context: . diff --git a/.github/workflows/docker-testbed.yml b/.github/workflows/docker-testbed.yml index c289428b467..d5fa53f1fb3 100644 --- a/.github/workflows/docker-testbed.yml +++ b/.github/workflows/docker-testbed.yml @@ -44,7 +44,7 @@ jobs: # multi-platform images and export cache # https://github.com/docker/setup-buildx-action - name: Set up Docker Buildx - uses: docker/setup-buildx-action@aa33708b10e362ff993539393ff100fa93ed6a27 # v3.5.0 + uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1 - name: Log in to the Github Container registry uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 @@ -70,7 +70,7 @@ jobs: latest=${{ github.event_name == 'workflow_dispatch' }} - name: Build and export to Docker - uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6.5.0 + uses: docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1 id: build with: context: . @@ -103,7 +103,7 @@ jobs: - name: Build and publish if: github.event_name == 'workflow_dispatch' - uses: docker/build-push-action@5176d81f87c23d6fc96624dfdbcd9f3830bbe445 # v6.5.0 + uses: docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1 with: context: . file: server/packaging/testbed-server/testbed-server.dockerfile diff --git a/.github/workflows/package-cli.yml b/.github/workflows/package-cli.yml index 77e965114f7..96bbf25bbaa 100644 --- a/.github/workflows/package-cli.yml +++ b/.github/workflows/package-cli.yml @@ -104,7 +104,7 @@ jobs: echo "artifact_name=$FINAL_ARTIFACT_NAME" >> $GITHUB_OUTPUT timeout-minutes: 1 - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 with: name: ${{ runner.os }}-${{ runner.arch }}-cli path: | diff --git a/.github/workflows/package-client.yml b/.github/workflows/package-client.yml index f83b634f79f..ae6a0837e89 100644 --- a/.github/workflows/package-client.yml +++ b/.github/workflows/package-client.yml @@ -91,7 +91,7 @@ jobs: working-directory: client # Install syft - - uses: taiki-e/install-action@7277a40b4d8760cc11399bd3f8314c3294e270f5 # pin v2.42.9 + - uses: taiki-e/install-action@8efaa9bb37d22aefc9d331dfbd45e2d230acfc33 # pin v2.42.22 with: tool: syft@0.84.0, wasm-pack@${{ env.wasm-pack-version }} @@ -108,7 +108,7 @@ jobs: - name: Generate SBOM run: syft packages --config=.syft.yaml --output=spdx-json=client/dist/Parsec-SBOM-Web.spdx.json . - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 with: name: webapp path: client/dist/ @@ -191,14 +191,14 @@ jobs: mv -v parsec_*_*.snap Parsec_${{ steps.version.outputs.full }}_linux_$ARCH.snap # Install syft - - uses: taiki-e/install-action@7277a40b4d8760cc11399bd3f8314c3294e270f5 # pin v2.42.9 + - uses: taiki-e/install-action@8efaa9bb37d22aefc9d331dfbd45e2d230acfc33 # pin v2.42.22 with: tool: syft@0.84.0 - name: Generate SBOM run: syft packages --config=.syft.yaml --output=spdx-json=Parsec-SBOM-Electron-linux-snap.spdx.json . - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 with: name: ${{ runner.os }}-${{ runner.arch }}-electron-app-snap path: | @@ -332,7 +332,7 @@ jobs: timeout-minutes: 1 # Install syft - - uses: taiki-e/install-action@7277a40b4d8760cc11399bd3f8314c3294e270f5 # pin v2.42.9 + - uses: taiki-e/install-action@8efaa9bb37d22aefc9d331dfbd45e2d230acfc33 # pin v2.42.22 with: tool: syft@0.84.0 @@ -368,7 +368,7 @@ jobs: grep -e "${{ steps.build-info.outputs.app_file }}" "${{ steps.build-info.outputs.latest_file }}" working-directory: client/electron/dist - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 with: name: ${{ runner.os }}-${{ runner.arch }}-electron-app-${{ matrix.extension }} path: | @@ -379,7 +379,7 @@ jobs: if-no-files-found: error timeout-minutes: 10 - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 if: matrix.platform == 'windows' with: name: ${{ runner.os }}-${{ runner.arch }}-electron-app-${{ matrix.extension }}-pre-built diff --git a/.github/workflows/package-server.yml b/.github/workflows/package-server.yml index 817694cf0f5..eba12e1bb89 100644 --- a/.github/workflows/package-server.yml +++ b/.github/workflows/package-server.yml @@ -98,7 +98,7 @@ jobs: run: git apply --allow-empty ${{ runner.temp }}/version.patch/version.patch - name: Build wheel - uses: pypa/cibuildwheel@7e5a838a63ac8128d71ab2dfd99e4634dd1bca09 # pin v2.19.2 + uses: pypa/cibuildwheel@bd033a44476646b606efccdd5eed92d5ea1d77ad # pin v2.20.0 with: package-dir: server output-dir: dist @@ -136,14 +136,14 @@ jobs: run: python server/packaging/wheel/wheel_it.py ./server --output dist --skip-wheel # Install syft - - uses: taiki-e/install-action@7277a40b4d8760cc11399bd3f8314c3294e270f5 # pin v2.42.9 + - uses: taiki-e/install-action@8efaa9bb37d22aefc9d331dfbd45e2d230acfc33 # pin v2.42.22 with: tool: syft@0.84.0 - name: Generate SBOM run: syft packages --config=.syft.yaml --output=spdx-json=dist/Parsec-SBOM-Wheel-${{ matrix.platform }}.spdx.json . - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # pin v4.3.4 + - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # pin v4.3.6 with: name: ${{ runner.os }}-${{ runner.arch }}-wheel path: |