From caa76d3c44407994c2581de958ee234044c059c4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 17:25:08 +0000 Subject: [PATCH 1/4] build(deps): bump view_component from 4.16.0 to 4.19.0 Bumps [view_component](https://github.com/viewcomponent/view_component) from 4.16.0 to 4.19.0. - [Release notes](https://github.com/viewcomponent/view_component/releases) - [Changelog](https://github.com/ViewComponent/view_component/blob/main/docs/CHANGELOG.md) - [Commits](https://github.com/viewcomponent/view_component/compare/v4.16.0...v4.19.0) --- updated-dependencies: - dependency-name: view_component dependency-version: 4.16.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] (cherry picked from commit f4b1f499f9578089cc4fd8081e9cf71f54db9f18) --- Gemfile.lock | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 909a9d2e6e..7532ddc318 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -636,10 +636,9 @@ GEM unicode-emoji (4.3.0) uri (1.1.2) useragent (0.16.11) - view_component (4.16.0) + view_component (4.19.0) actionview (>= 7.1.0) activesupport (>= 7.1.0) - concurrent-ruby (~> 1) warden (1.2.9) rack (>= 2.0.9) web-console (4.3.0) From 96770b6f960d23fc10d95eaf89fca3b439176a5d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 17:38:01 +0000 Subject: [PATCH 2/4] build(deps): bump actions/cache from 4.2.4 to 6.1.0 Bumps [actions/cache](https://github.com/actions/cache) from 4.2.4 to 6.1.0. - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/0400d5f644dc74513175e3cd8d07132dd4860809...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] (cherry picked from commit c32ff51e6b71aaa5d6e0703aa63595cd4f960a0f) --- .github/workflows/rspec.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/rspec.yml b/.github/workflows/rspec.yml index 9d15d93eac..36d2801635 100644 --- a/.github/workflows/rspec.yml +++ b/.github/workflows/rspec.yml @@ -54,7 +54,7 @@ jobs: cache: "npm" - run: npm ci - - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: tmp/parallel_runtime_rspec.log key: parallel-runtime-${{ github.head_ref || github.ref_name }}-${{ github.run_id }}-${{ github.run_attempt }} From c759c381b99085fae4a1f694cdf5545c5212883d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 17:24:44 +0000 Subject: [PATCH 3/4] build(deps): bump actions/upload-artifact from 7.0.1 to 7.0.2 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.1 to 7.0.2. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] (cherry picked from commit a8ee9e2f41ac67dc7c1c1a1dfd968ad41dea8578) --- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/docker.yml | 2 +- .github/workflows/rspec.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 406cf19bac..def8c54b95 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -86,7 +86,7 @@ jobs: # anyone who can see the workflow run. - name: Attach the SARIF to this run if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: codeql-sarif-${{ matrix.language }} path: sarif-results diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 92c03f6930..b2bfc2a5a6 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -45,7 +45,7 @@ jobs: - name: Archive selenium screenshots if: ${{ failure() }} - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: selenium-screenshots path: | diff --git a/.github/workflows/rspec.yml b/.github/workflows/rspec.yml index 36d2801635..29f6eda925 100644 --- a/.github/workflows/rspec.yml +++ b/.github/workflows/rspec.yml @@ -113,7 +113,7 @@ jobs: - name: Archive selenium screenshots if: ${{ failure() }} - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: selenium-screenshots path: | From 8d12ebd9ae1b216c19ea5d41024ee0f6e8545203 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 17:25:32 +0000 Subject: [PATCH 4/4] chore(deps): update actions/download-artifact digest to 9000827 (cherry picked from commit ab5ebfd07467918dc26519da501ea037bfec3715) --- .github/workflows/combine_and_report.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/combine_and_report.yml b/.github/workflows/combine_and_report.yml index 06ffd45dba..7fead98ca6 100644 --- a/.github/workflows/combine_and_report.yml +++ b/.github/workflows/combine_and_report.yml @@ -15,7 +15,7 @@ jobs: persist-credentials: false - name: Download artifacts if: ${{ !cancelled() }} - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: path: artifacts