From 8baf794153c494cb40bc6ec1a77c140a98a1e491 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 5 Sep 2026 00:33:51 +0000 Subject: [PATCH] chore(deps): Update GitHub Actions --- .github/workflows/codacy.yml | 6 +++--- .github/workflows/docker-publish.yml | 12 ++++++------ .github/workflows/issue-triage.yml | 6 +++--- .github/workflows/pr-triage.yml | 6 +++--- .github/workflows/security-scan.yml | 10 +++++----- .github/workflows/sync-labels.yml | 2 +- .github/workflows/tests.yml | 8 ++++---- .github/workflows/triage-digest.yml | 6 +++--- 8 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/codacy.yml b/.github/workflows/codacy.yml index 29917771..52cb6dbe 100644 --- a/.github/workflows/codacy.yml +++ b/.github/workflows/codacy.yml @@ -37,7 +37,7 @@ jobs: steps: # Checkout the repository to the GitHub Actions runner - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Check Docker Hub credential availability id: dockerhub_credentials @@ -53,7 +53,7 @@ jobs: # Login to Docker Hub to avoid rate limits - name: Login to Docker Hub - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4 if: steps.dockerhub_credentials.outputs.available == 'true' with: username: ${{ secrets.DOCKERHUB_USERNAME }} @@ -92,7 +92,7 @@ jobs: # Upload the SARIF file generated in the previous step - name: Upload SARIF results file - uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 if: always() && steps.check_sarif.outputs.sarif_exists == 'true' with: sarif_file: results.sarif diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index c5e7334a..f37b0cd8 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -26,7 +26,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Set image name to lowercase run: | @@ -34,11 +34,11 @@ jobs: echo "IMAGE_NAME=${GITHUB_REPOSITORY,,}" >> "$GITHUB_ENV" - name: Setup Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Log in to GitHub Container Registry if: github.event_name != 'pull_request' - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -46,7 +46,7 @@ jobs: - name: Extract metadata id: meta - uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6.0.0 + uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0 with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} tags: | @@ -59,7 +59,7 @@ jobs: - name: Build and push Docker image id: push - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: . target: production @@ -71,7 +71,7 @@ jobs: cache-to: type=gha,mode=max - name: Generate artifact attestation - uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4 + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4 if: github.event_name != 'pull_request' with: subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} diff --git a/.github/workflows/issue-triage.yml b/.github/workflows/issue-triage.yml index b2c718ef..4f6d5cb1 100644 --- a/.github/workflows/issue-triage.yml +++ b/.github/workflows/issue-triage.yml @@ -36,12 +36,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.28" + version: "0.12.10" - name: Resolve issue target id: target diff --git a/.github/workflows/pr-triage.yml b/.github/workflows/pr-triage.yml index 413a8889..aaa370c7 100644 --- a/.github/workflows/pr-triage.yml +++ b/.github/workflows/pr-triage.yml @@ -33,14 +33,14 @@ jobs: steps: - name: Checkout base repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 with: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.28" + version: "0.12.10" - name: Resolve PR context id: pr diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index 09b62ef9..8069c3f1 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -20,15 +20,15 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.28" + version: "0.12.10" - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version-file: ".python-version" @@ -51,7 +51,7 @@ jobs: uv run bandit -r mcp_zammad/ -f sarif -o bandit-sarif.json - name: Upload Bandit results to GitHub Security - uses: github/codeql-action/upload-sarif@9e0d7b8d25671d64c341c19c0152d693099fb5ba # v4 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4 if: always() with: sarif_file: bandit-sarif.json diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml index c8be7f44..4ba2cdcd 100644 --- a/.github/workflows/sync-labels.yml +++ b/.github/workflows/sync-labels.yml @@ -14,6 +14,6 @@ permissions: jobs: sync-labels: if: github.repository == 'basher83/Zammad-MCP' - uses: basher83/.github/.github/workflows/sync-labels.yml@739e25762374c81b26a15fe9577196d1a88d3988 # main + uses: basher83/.github/.github/workflows/sync-labels.yml@fc1339252d074236baa7f64352c4459e1a3dd107 # main # with: # label_definitions_url: "https://raw.githubusercontent.com/basher83/docs/main/mission-control/github-configs/label-definitions.yml" # optional, can omit for default diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 4046d58f..89cef1f6 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -20,15 +20,15 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.28" + version: "0.12.10" - name: Set up Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/triage-digest.yml b/.github/workflows/triage-digest.yml index 8734a116..80a037d8 100644 --- a/.github/workflows/triage-digest.yml +++ b/.github/workflows/triage-digest.yml @@ -30,12 +30,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6 - name: Install uv - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 + uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 with: - version: "0.11.28" + version: "0.12.10" - name: Collect issue and PR digests env: