From ed2d99100c839d67e163bf1f65c9cac1363d27d9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 21 Jul 2026 08:11:26 +0000 Subject: [PATCH] chore(ci): bump the github-actions group with 6 updates Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.0` | `4.37.1` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.0` | `4.37.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.0` | `4.37.1` | | [NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml](https://github.com/nvidia-nemo/fw-ci-templates) | `1.8.1` | `1.8.4` | | [actions/labeler](https://github.com/actions/labeler) | `6` | `7` | | [NVIDIA-NeMo/FW-CI-templates/.github/workflows/_secrets-detector.yml](https://github.com/nvidia-nemo/fw-ci-templates) | `1.8.1` | `1.8.4` | Updates `github/codeql-action/init` from 4.37.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a) Updates `github/codeql-action/autobuild` from 4.37.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a) Updates `github/codeql-action/analyze` from 4.37.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/99df26d4f13ea111d4ec1a7dddef6063f76b97e9...7188fc363630916deb702c7fdcf4e481b751f97a) Updates `NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml` from 1.8.1 to 1.8.4 - [Release notes](https://github.com/nvidia-nemo/fw-ci-templates/releases) - [Changelog](https://github.com/NVIDIA-NeMo/FW-CI-templates/blob/main/CHANGELOG.md) - [Commits](https://github.com/nvidia-nemo/fw-ci-templates/compare/b0e114b285e9d54bacb5f3ee568f92a95f046a18...209ac7913b0419a5ccbac47b02d00fbea4939243) Updates `actions/labeler` from 6 to 7 - [Release notes](https://github.com/actions/labeler/releases) - [Commits](https://github.com/actions/labeler/compare/v6...v7) Updates `NVIDIA-NeMo/FW-CI-templates/.github/workflows/_secrets-detector.yml` from 1.8.1 to 1.8.4 - [Release notes](https://github.com/nvidia-nemo/fw-ci-templates/releases) - [Changelog](https://github.com/NVIDIA-NeMo/FW-CI-templates/blob/main/CHANGELOG.md) - [Commits](https://github.com/nvidia-nemo/fw-ci-templates/compare/b0e114b285e9d54bacb5f3ee568f92a95f046a18...209ac7913b0419a5ccbac47b02d00fbea4939243) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml dependency-version: 1.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/labeler dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_secrets-detector.yml dependency-version: 1.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 6 +++--- .github/workflows/conventional-commit.yml | 2 +- .github/workflows/labeler.yml | 2 +- .github/workflows/secrets-detector.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ee41c74f7..bdfb4d178 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -47,15 +47,15 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4 with: languages: python queries: security-extended - name: Autobuild - uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/autobuild@7188fc363630916deb702c7fdcf4e481b751f97a # v4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 + uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4 with: category: "/language:python" diff --git a/.github/workflows/conventional-commit.yml b/.github/workflows/conventional-commit.yml index fa7b84bec..917b6dcb8 100644 --- a/.github/workflows/conventional-commit.yml +++ b/.github/workflows/conventional-commit.yml @@ -35,4 +35,4 @@ concurrency: jobs: conventional-commit: - uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml@b0e114b285e9d54bacb5f3ee568f92a95f046a18 # v1.8.1 + uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_semantic_pull_request.yml@209ac7913b0419a5ccbac47b02d00fbea4939243 # v1.8.4 diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 5279085e2..f99fc2792 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -42,7 +42,7 @@ jobs: name: Apply area labels runs-on: ubuntu-latest steps: - - uses: actions/labeler@v6 + - uses: actions/labeler@v7 with: configuration-path: .github/labeler.yml sync-labels: false diff --git a/.github/workflows/secrets-detector.yml b/.github/workflows/secrets-detector.yml index 08d1c65d1..299d66483 100644 --- a/.github/workflows/secrets-detector.yml +++ b/.github/workflows/secrets-detector.yml @@ -30,4 +30,4 @@ concurrency: jobs: secrets-detector: - uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_secrets-detector.yml@b0e114b285e9d54bacb5f3ee568f92a95f046a18 # v1.8.1 + uses: NVIDIA-NeMo/FW-CI-templates/.github/workflows/_secrets-detector.yml@209ac7913b0419a5ccbac47b02d00fbea4939243 # v1.8.4