From e2c51bf547291210eeadc860e93ce6a7e3a2adb6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 18 Nov 2024 03:54:59 +0000 Subject: [PATCH] Bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [taiki-e/install-action](https://github.com/taiki-e/install-action), [github/codeql-action](https://github.com/github/codeql-action), [samuelmeuli/action-snapcraft](https://github.com/samuelmeuli/action-snapcraft) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `taiki-e/install-action` from 2.44.67 to 2.44.71 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/c6dc131d2c4291552cafb840290190a53b2cd937...5d427d86f088a6cedcddb92b3ad038d30721b52f) Updates `github/codeql-action` from 3.27.1 to 3.27.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/4f3212b61783c3c68e8309a0f18a699764811cda...ea9e4e37992a54ee68a9622e985e60c8e8f12d9f) Updates `samuelmeuli/action-snapcraft` from 2.1.1 to 3.0.1 - [Release notes](https://github.com/samuelmeuli/action-snapcraft/releases) - [Commits](https://github.com/samuelmeuli/action-snapcraft/compare/d33c176a9b784876d966f80fb1b461808edc0641...fceeb3c308e76f3487e72ef608618de625fb7fe8) Updates `softprops/action-gh-release` from 2.0.9 to 2.1.0 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8...01570a1f39cb168c169c802c3bceb9e93fb10974) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: samuelmeuli/action-snapcraft dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci-rust.yml | 4 ++-- .github/workflows/ci-web.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 16 ++++++++-------- .github/workflows/package-client.yml | 8 ++++---- .github/workflows/package-server.yml | 2 +- .github/workflows/publish.yml | 2 +- .github/workflows/releaser.yml | 2 +- 8 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml index 9eff59f0e15..907798bcf26 100644 --- a/.github/workflows/ci-rust.yml +++ b/.github/workflows/ci-rust.yml @@ -102,7 +102,7 @@ jobs: timeout-minutes: 5 # Install cargo nextest command - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: nextest@0.9.54, wasm-pack@0.12.1, cargo-deny@0.15.0 @@ -263,7 +263,7 @@ jobs: timeout-minutes: 5 # Install cargo nextest command - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: nextest@0.9.54 diff --git a/.github/workflows/ci-web.yml b/.github/workflows/ci-web.yml index 1e9fed1b3e8..429cc95d9f0 100644 --- a/.github/workflows/ci-web.yml +++ b/.github/workflows/ci-web.yml @@ -123,7 +123,7 @@ jobs: timeout-minutes: 5 # Install wasm-pack command - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: wasm-pack@${{ env.wasm-pack-version }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ed270d4206b..cccc2c4baa3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -191,7 +191,7 @@ jobs: diff --unified .pre-commit-config.yaml $TEMP_FILE || true echo "path=$TEMP_FILE" >> $GITHUB_OUTPUT - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: taplo-cli@0.9.3 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 60cd6880f31..a1d0bda500e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -58,7 +58,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL if: steps.should-run-python-analysis.outputs.run == 'true' - uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 with: languages: python setup-python-dependencies: false @@ -87,7 +87,7 @@ jobs: - name: Perform CodeQL Analysis if: steps.should-run-python-analysis.outputs.run == 'true' - uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 with: category: /language:python @@ -142,7 +142,7 @@ jobs: # # Initializes the CodeQL tools for scanning. # - name: Initialize CodeQL # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + # uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 # with: # languages: java # # If you wish to specify custom queries, you can do so here or in a config file. @@ -154,7 +154,7 @@ jobs: # - name: Autobuild android # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + # uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 # with: # working-directory: client/android # env: @@ -162,7 +162,7 @@ jobs: # - name: Perform CodeQL Analysis # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + # uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 # with: # category: /language:java @@ -191,7 +191,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/init@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + uses: github/codeql-action/init@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 with: languages: typescript @@ -202,12 +202,12 @@ jobs: - name: Autobuild for typescript if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/autobuild@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + uses: github/codeql-action/autobuild@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 with: working-directory: client - name: Perform CodeQL Analysis if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/analyze@4f3212b61783c3c68e8309a0f18a699764811cda # pin v3.27.1 + uses: github/codeql-action/analyze@ea9e4e37992a54ee68a9622e985e60c8e8f12d9f # pin v3.27.4 with: category: /language:typescript diff --git a/.github/workflows/package-client.yml b/.github/workflows/package-client.yml index 93e4a6e3abc..f8cc73c7e9d 100644 --- a/.github/workflows/package-client.yml +++ b/.github/workflows/package-client.yml @@ -108,7 +108,7 @@ jobs: working-directory: client # Install syft - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: syft@0.84.0, wasm-pack@${{ env.wasm-pack-version }} @@ -162,7 +162,7 @@ jobs: # In case this step timeout, check the status of snapcraft.io at https://status.snapcraft.io/ - name: Install snapcraft - uses: samuelmeuli/action-snapcraft@d33c176a9b784876d966f80fb1b461808edc0641 # pin v2.1.1 + uses: samuelmeuli/action-snapcraft@fceeb3c308e76f3487e72ef608618de625fb7fe8 # pin v3.0.1 timeout-minutes: 15 - name: Setup LXD @@ -205,7 +205,7 @@ jobs: mv -v parsec_*_*.snap Parsec_${{ steps.version.outputs.full }}_linux_$ARCH.snap # Install syft - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: syft@0.84.0 @@ -395,7 +395,7 @@ jobs: timeout-minutes: 1 # Install syft - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: syft@0.84.0 diff --git a/.github/workflows/package-server.yml b/.github/workflows/package-server.yml index e26916948f0..c1c2e4295bd 100644 --- a/.github/workflows/package-server.yml +++ b/.github/workflows/package-server.yml @@ -111,7 +111,7 @@ jobs: run: python server/packaging/wheel/wheel_it.py ./server --output dist --skip-wheel # Install syft - - uses: taiki-e/install-action@c6dc131d2c4291552cafb840290190a53b2cd937 # pin v2.44.67 + - uses: taiki-e/install-action@5d427d86f088a6cedcddb92b3ad038d30721b52f # pin v2.44.71 with: tool: syft@0.84.0 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index df0c22300ec..d3c4b4c2cf8 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -104,7 +104,7 @@ jobs: run: tree dist snap - name: Install Snapcraft - uses: samuelmeuli/action-snapcraft@d33c176a9b784876d966f80fb1b461808edc0641 # pin v2.1.1 + uses: samuelmeuli/action-snapcraft@fceeb3c308e76f3487e72ef608618de625fb7fe8 # pin v3.0.1 timeout-minutes: 2 - name: Get releases for snapcraft diff --git a/.github/workflows/releaser.yml b/.github/workflows/releaser.yml index cf8bb7df477..873baf59b33 100644 --- a/.github/workflows/releaser.yml +++ b/.github/workflows/releaser.yml @@ -220,7 +220,7 @@ jobs: - name: Create release if: github.event_name == 'schedule' || (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) - uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # pin v2.0.9 + uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # pin v2.1.0 with: draft: ${{ env.NIGHTLY_RELEASE != 'true' }} tag_name: ${{ github.event_name == 'schedule' && 'nightly' || github.ref }}