From 29bbdba56c6ad0056f2a2c47fa9b86fc5c404e22 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 19:43:48 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 7 updates Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.7` | `2.87.4` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.37.8` | `4.37.9` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `5.0.0` | `5.0.1` | | [editorconfig-checker/action-editorconfig-checker](https://github.com/editorconfig-checker/action-editorconfig-checker) | `2.2.0` | `3.0.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.2.0` | `4.3.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.97.1` | `3.97.4` | Updates `taiki-e/install-action` from 2.86.7 to 2.87.4 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/v2.86.7...v2.87.4) Updates `github/codeql-action` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.8...v4.37.9) Updates `actions/deploy-pages` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v5.0.0...v5.0.1) Updates `editorconfig-checker/action-editorconfig-checker` from 2.2.0 to 3.0.0 - [Release notes](https://github.com/editorconfig-checker/action-editorconfig-checker/releases) - [Commits](https://github.com/editorconfig-checker/action-editorconfig-checker/compare/v2.2.0...v3.0.0) Updates `docker/setup-qemu-action` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/v4.2.0...v4.3.0) Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v3.0.2...v3.0.3) Updates `trufflesecurity/trufflehog` from 3.97.1 to 3.97.4 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/v3.97.1...v3.97.4) --- updated-dependencies: - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: docker/setup-qemu-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: editorconfig-checker/action-editorconfig-checker dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.97.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-gossamer-gui.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/pages.yml | 2 +- .github/workflows/quality.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- .github/workflows/security-policy.yml | 20 ++++++++++---------- .github/workflows/tests.yml | 2 +- 8 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml index 10f75d2b..15445fe3 100644 --- a/.github/workflows/build-gossamer-gui.yml +++ b/.github/workflows/build-gossamer-gui.yml @@ -142,7 +142,7 @@ jobs: targets: wasm32-unknown-unknown - name: Install just - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.4 with: # Pin an explicit modern just: the Justfile uses `import?` # (optional import, just >= 1.19.0). Unversioned `tool: just` diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 635b0aca..bb9650f4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -112,7 +112,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.4 with: tool: cargo-llvm-cov diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5c4e581b..2336e5a8 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,12 +44,12 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.37.9 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.37.9 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 3be681d6..b6001fdf 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -52,4 +52,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index c5349a6e..2698c3aa 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -284,7 +284,7 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 # ============================================================================ # Documentation Status @@ -336,7 +336,7 @@ jobs: find . -type f -size +1M -not -path "./.git/*" | head -10 - name: EditorConfig check - uses: editorconfig-checker/action-editorconfig-checker@v2.2.0 + uses: editorconfig-checker/action-editorconfig-checker@v3.0.0 docs: runs-on: ubuntu-latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 56d6946d..b007c51c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -208,7 +208,7 @@ jobs: path: artifacts - name: Set up QEMU - uses: docker/setup-qemu-action@v4.2.0 + uses: docker/setup-qemu-action@v4.3.0 - name: Set up Docker Buildx uses: docker/setup-buildx-action@v4.3.0 @@ -324,7 +324,7 @@ jobs: cat checksums.txt - name: Create GitHub Release - uses: softprops/action-gh-release@v3.0.2 + uses: softprops/action-gh-release@v3.0.3 with: name: Hypatia v${{ needs.prepare.outputs.version }} body_path: release-notes.md diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml index 239c5ad8..c1d5d468 100644 --- a/.github/workflows/security-policy.yml +++ b/.github/workflows/security-policy.yml @@ -69,7 +69,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.4 with: tool: cargo-deny @@ -91,7 +91,7 @@ jobs: fetch-depth: 0 - name: TruffleHog Secret Scan - uses: trufflesecurity/trufflehog@v3.97.1 + uses: trufflesecurity/trufflehog@v3.97.4 with: path: ./ base: ${{ github.event.repository.default_branch }} @@ -119,13 +119,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.37.9 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.37.9 with: category: "/language:${{matrix.language}}" @@ -189,7 +189,7 @@ jobs: severity: 'CRITICAL,HIGH' - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.37.9 if: always() with: sarif_file: 'trivy-results.sarif' @@ -298,7 +298,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.4 with: tool: cargo-deny @@ -411,7 +411,7 @@ jobs: ignore-unfixed: true - name: Upload Trivy SARIF results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.37.9 if: always() with: sarif_file: 'trivy-${{ steps.image.outputs.name }}.sarif' @@ -494,7 +494,7 @@ jobs: fetch-depth: 0 - name: TruffleHog Secret Scan - uses: trufflesecurity/trufflehog@v3.97.1 + uses: trufflesecurity/trufflehog@v3.97.4 with: path: ./ base: ${{ github.event.repository.default_branch }} @@ -521,13 +521,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.37.9 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.37.9 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index ca53e18e..a55cb696 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -519,7 +519,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.4 with: tool: cargo-llvm-cov