From 59f1276ce6248347086afdccceec78e803008f22 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 14 Aug 2026 17:29:00 +0000 Subject: [PATCH] ci(deps)(deps): bump the github-actions group across 1 directory with 6 updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.183` | `1.0.191` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.0` | `4.37.6` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.0` | `4.37.6` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.3` | `2.4.4` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.0` | `4.37.6` | Updates `actions/checkout` from 6.0.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `anthropics/claude-code-action` from 1.0.183 to 1.0.191 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/be7b93b1907a4abad570368f3c74b6fe3807510b...239e3a730883eeb5c53db12b0fc9573b3024b126) Updates `github/codeql-action/init` from 4.36.0 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...5595ccaf912efad79be6eef63a5619ff05969be3) Updates `github/codeql-action/analyze` from 4.36.0 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...5595ccaf912efad79be6eef63a5619ff05969be3) Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/4eaacf0543bb3f2c246792bd56e8cdeffafb205a...2d1146689b8cda280b9bc96326124645441f03bc) Updates `github/codeql-action/upload-sarif` from 4.36.0 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...5595ccaf912efad79be6eef63a5619ff05969be3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.185 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/local-org-policy-live-audit.yml | 4 ++-- .github/workflows/local-org-policy-live-probe.yml | 4 ++-- .github/workflows/reusable-bandit.yml | 6 +++--- .github/workflows/reusable-claude-code-review.yml | 6 +++--- .github/workflows/reusable-codeql.yml | 10 +++++----- .github/workflows/reusable-coverity.yml | 6 +++--- .github/workflows/reusable-cppcheck.yml | 6 +++--- .github/workflows/reusable-dist-ai-tests.yml | 8 ++++---- .github/workflows/reusable-pre-push-static.yml | 4 ++-- .github/workflows/reusable-scorecard.yml | 10 +++++----- .github/workflows/reusable-secrets-audit.yml | 4 ++-- 11 files changed, 34 insertions(+), 34 deletions(-) diff --git a/.github/workflows/local-org-policy-live-audit.yml b/.github/workflows/local-org-policy-live-audit.yml index 3d8953b8..4c049eff 100644 --- a/.github/workflows/local-org-policy-live-audit.yml +++ b/.github/workflows/local-org-policy-live-audit.yml @@ -81,12 +81,12 @@ jobs: DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }} steps: - name: Checkout developer-meta-files - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Checkout dist-ai (shared CI helper binaries) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} diff --git a/.github/workflows/local-org-policy-live-probe.yml b/.github/workflows/local-org-policy-live-probe.yml index b61bd834..ef656ffd 100644 --- a/.github/workflows/local-org-policy-live-probe.yml +++ b/.github/workflows/local-org-policy-live-probe.yml @@ -81,12 +81,12 @@ jobs: DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }} steps: - name: Checkout developer-meta-files - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Checkout dist-ai (shared CI helper binaries) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} diff --git a/.github/workflows/reusable-bandit.yml b/.github/workflows/reusable-bandit.yml index 5ee695ed..c5fde370 100644 --- a/.github/workflows/reusable-bandit.yml +++ b/.github/workflows/reusable-bandit.yml @@ -112,12 +112,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Checkout dist-ai (shared CI helper binaries) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} @@ -132,7 +132,7 @@ jobs: - name: Checkout developer-meta-files (discovery + step-summary helpers) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} diff --git a/.github/workflows/reusable-claude-code-review.yml b/.github/workflows/reusable-claude-code-review.yml index 806e98f7..2cd628f3 100644 --- a/.github/workflows/reusable-claude-code-review.yml +++ b/.github/workflows/reusable-claude-code-review.yml @@ -286,13 +286,13 @@ jobs: DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }} steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Run Claude Code Review id: claude - uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1.0.183 + uses: anthropics/claude-code-action@239e3a730883eeb5c53db12b0fc9573b3024b126 # v1.0.191 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} ## No 'allowed_users' input exists on the action; the @@ -329,7 +329,7 @@ jobs: ## whose github.sha names a commit in a different repository. - name: Checkout dist-ai (usage recorder) if: always() && steps.claude.outputs.execution_file != '' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} diff --git a/.github/workflows/reusable-codeql.yml b/.github/workflows/reusable-codeql.yml index 80f9e4e0..772aa8a4 100644 --- a/.github/workflows/reusable-codeql.yml +++ b/.github/workflows/reusable-codeql.yml @@ -189,13 +189,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Checkout developer-meta-files (ci/ helpers + step-summary) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} @@ -231,7 +231,7 @@ jobs: run: bash -c "${PREPARE_COMMAND}" - name: Initialize CodeQL - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: languages: ${{ inputs.language }} build-mode: ${{ inputs.build-mode }} @@ -264,7 +264,7 @@ jobs: run: bash -c "${BUILD_COMMAND}" - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: category: "/language:${{ inputs.language }}" @@ -276,7 +276,7 @@ jobs: ## leaves the summary calling a binary that was never fetched. - name: Checkout dist-ai (shared CI helper binaries) if: always() - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} diff --git a/.github/workflows/reusable-coverity.yml b/.github/workflows/reusable-coverity.yml index a5de3d96..a807a029 100644 --- a/.github/workflows/reusable-coverity.yml +++ b/.github/workflows/reusable-coverity.yml @@ -154,12 +154,12 @@ jobs: DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }} steps: - name: Checkout consumer repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Checkout dist-ai (shared CI helper binaries) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} @@ -167,7 +167,7 @@ jobs: persist-credentials: false - name: Checkout developer-meta-files (orchestration scripts) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/developer-meta-files ref: master diff --git a/.github/workflows/reusable-cppcheck.yml b/.github/workflows/reusable-cppcheck.yml index 53c0dd71..d812baf1 100644 --- a/.github/workflows/reusable-cppcheck.yml +++ b/.github/workflows/reusable-cppcheck.yml @@ -103,12 +103,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Checkout dist-ai (shared CI helper binaries) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} @@ -117,7 +117,7 @@ jobs: - name: Checkout developer-meta-files (ci/ helpers + step-summary) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} diff --git a/.github/workflows/reusable-dist-ai-tests.yml b/.github/workflows/reusable-dist-ai-tests.yml index 44d68d6a..8928ca1b 100644 --- a/.github/workflows/reusable-dist-ai-tests.yml +++ b/.github/workflows/reusable-dist-ai-tests.yml @@ -121,13 +121,13 @@ jobs: - name: Checkout component (code under test) ## https://github.com/actions/checkout/releases/tag/v6.0.2 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: component persist-credentials: false - name: Checkout dist-ai (test suites) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ inputs.dist-ai-ref }} @@ -167,7 +167,7 @@ jobs: - name: Checkout helper-scripts (for suites that drive its tools) if: steps.cfg.outputs.helper_scripts == 'true' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/helper-scripts ref: master @@ -189,7 +189,7 @@ jobs: ## wired when it never ran. Opt-in per repo via .github/dm-consumer.yml ## (dist-ai-tests.terminal-poc-corpus: true) so the clone is not imposed on ## every consumer. Sibling dir, matching component/ and dist-ai/ above. - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: secure-terminal/terminal-poc-corpus ref: master diff --git a/.github/workflows/reusable-pre-push-static.yml b/.github/workflows/reusable-pre-push-static.yml index 8b5e8a61..97a4701b 100644 --- a/.github/workflows/reusable-pre-push-static.yml +++ b/.github/workflows/reusable-pre-push-static.yml @@ -113,14 +113,14 @@ jobs: git config --global --add safe.directory '*' - name: Checkout caller repo (full history for git diff) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false - name: Checkout dist-ai (gate script) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} diff --git a/.github/workflows/reusable-scorecard.yml b/.github/workflows/reusable-scorecard.yml index 71a49aa0..7f957737 100644 --- a/.github/workflows/reusable-scorecard.yml +++ b/.github/workflows/reusable-scorecard.yml @@ -122,12 +122,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Checkout dist-ai (shared CI helper binaries) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} @@ -135,7 +135,7 @@ jobs: persist-credentials: false - name: Run analysis - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif @@ -149,13 +149,13 @@ jobs: retention-days: 14 - name: Upload to GitHub code scanning - uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: sarif_file: results.sarif - name: Checkout developer-meta-files (step-summary helper) if: always() && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} diff --git a/.github/workflows/reusable-secrets-audit.yml b/.github/workflows/reusable-secrets-audit.yml index f363a6bc..1ee43cdc 100644 --- a/.github/workflows/reusable-secrets-audit.yml +++ b/.github/workflows/reusable-secrets-audit.yml @@ -65,7 +65,7 @@ jobs: DMF_REF: ${{ github.repository == 'org-ai-assisted/developer-meta-files' && github.sha || 'master' }} steps: - name: Checkout dist-ai (shared CI helper binaries) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/dist-ai ref: ${{ env.DIST_AI_REF }} @@ -80,7 +80,7 @@ jobs: ## back to master. - name: Checkout developer-meta-files (audit script) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }}