From 4b1e60333207dafd9f554f7bdb51125c04a75cff Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 09:09:20 +0000 Subject: [PATCH] Bump the github group across 1 directory with 6 updates Bumps the github group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.38.3` | | [actions/stale](https://github.com/actions/stale) | `10` | `11` | | [github/cleanowners](https://github.com/github/cleanowners) | `2.1.11` | `2.1.15` | | [github/contributors](https://github.com/github/contributors) | `2.0.17` | `2.0.21` | Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v7...v7.0.1) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.38.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...24c54180a607b1449ed407dd24f251e4e9147c8d) Updates `actions/stale` from 10 to 11 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/v10...v11) Updates `github/cleanowners` from 2.1.11 to 2.1.15 - [Release notes](https://github.com/github/cleanowners/releases) - [Commits](https://github.com/github/cleanowners/compare/7edc384737887977379590bb94b78ef26c5cffb1...aea8fb15baf34300ef137f29eddbf19fe704bd74) Updates `github/contributors` from 2.0.17 to 2.0.21 - [Release notes](https://github.com/github/contributors/releases) - [Commits](https://github.com/github/contributors/compare/b518e14609eadf468470392201312777172b5dec...6bab24b098e0b692d679d59f97d73b9297c96c18) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github - dependency-name: actions/stale dependency-version: '11' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github - dependency-name: github/cleanowners dependency-version: 2.1.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github - dependency-name: github/contributors dependency-version: 2.0.21 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github ... Signed-off-by: dependabot[bot] --- .github/workflows/_lint.yml | 2 +- .github/workflows/_scorecard.yml | 6 +++--- .github/workflows/_stale.yml | 2 +- .github/workflows/_sync.yml | 2 +- .github/workflows/clean-owners.yml | 2 +- .github/workflows/contributor-report.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/scorecard-monitor.yml | 2 +- .github/workflows/scorecard-test.yml | 6 +++--- 9 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/_lint.yml b/.github/workflows/_lint.yml index 461786d..56fd7a7 100644 --- a/.github/workflows/_lint.yml +++ b/.github/workflows/_lint.yml @@ -7,7 +7,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: ๐Ÿงน lint yaml uses: ibiqlik/action-yamllint@v3 with: diff --git a/.github/workflows/_scorecard.yml b/.github/workflows/_scorecard.yml index d889f34..a8cd8ff 100644 --- a/.github/workflows/_scorecard.yml +++ b/.github/workflows/_scorecard.yml @@ -20,7 +20,7 @@ jobs: id-token: write security-events: write steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: โœ… run scorecard analysis @@ -31,12 +31,12 @@ jobs: repo_token: ${{ secrets.SCORECARD_TOKEN }} publish_results: ${{ inputs.publish-results }} - name: โซ upload sarif artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: SARIF file path: results.sarif retention-days: 5 - name: ๐Ÿ“ฆ upload sarif results - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: sarif_file: results.sarif diff --git a/.github/workflows/_stale.yml b/.github/workflows/_stale.yml index 87712f8..cbcadc9 100644 --- a/.github/workflows/_stale.yml +++ b/.github/workflows/_stale.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest steps: - name: ๐Ÿ“† mark stale activity - uses: actions/stale@v10 + uses: actions/stale@v11 with: repo-token: ${{ secrets.GITHUB_TOKEN }} days-before-stale: ${{ inputs.days-until-stale }} diff --git a/.github/workflows/_sync.yml b/.github/workflows/_sync.yml index 09c6bd9..0fe66ea 100644 --- a/.github/workflows/_sync.yml +++ b/.github/workflows/_sync.yml @@ -24,7 +24,7 @@ jobs: sync: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.1 - name: ๐Ÿ”’ harden runner uses: step-security/harden-runner@v2 with: diff --git a/.github/workflows/clean-owners.yml b/.github/workflows/clean-owners.yml index 9165f4f..8e2b13c 100644 --- a/.github/workflows/clean-owners.yml +++ b/.github/workflows/clean-owners.yml @@ -18,7 +18,7 @@ jobs: issues: write steps: - name: ๐Ÿงผ clean codeowners - uses: github/cleanowners@7edc384737887977379590bb94b78ef26c5cffb1 # no semver release yet + uses: github/cleanowners@aea8fb15baf34300ef137f29eddbf19fe704bd74 # no semver release yet env: GH_TOKEN: ${{ secrets.CISCO_SERVICE_TOKEN }} ORGANIZATION: cisco-ospo diff --git a/.github/workflows/contributor-report.yml b/.github/workflows/contributor-report.yml index aa50428..8d63dca 100644 --- a/.github/workflows/contributor-report.yml +++ b/.github/workflows/contributor-report.yml @@ -40,7 +40,7 @@ jobs: echo "START_DATE=$START_DATE" >> "$GITHUB_ENV" echo "END_DATE=$END_DATE" >> "$GITHUB_ENV" - name: ๐Ÿ“ฐ run contributors action - uses: github/contributors@b518e14609eadf468470392201312777172b5dec # v2.0.17 + uses: github/contributors@6bab24b098e0b692d679d59f97d73b9297c96c18 # v2.0.21 env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} START_DATE: ${{ env.START_DATE }} diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 194b7c8..e6479a5 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -18,7 +18,7 @@ jobs: uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 with: egress-policy: audit - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: ๐Ÿ”‚ dependency review uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 with: diff --git a/.github/workflows/scorecard-monitor.yml b/.github/workflows/scorecard-monitor.yml index 041205e..5287548 100644 --- a/.github/workflows/scorecard-monitor.yml +++ b/.github/workflows/scorecard-monitor.yml @@ -29,7 +29,7 @@ jobs: # Required to create issues issues: write steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: ๐Ÿ” run scorecard monitor uses: ossf/scorecard-monitor@a3a9c4cfa0684480ec5f86fa178fc22c4394b69e # v2.0.0-beta8 id: scorecard-monitor diff --git a/.github/workflows/scorecard-test.yml b/.github/workflows/scorecard-test.yml index 156651d..67298e5 100644 --- a/.github/workflows/scorecard-test.yml +++ b/.github/workflows/scorecard-test.yml @@ -26,7 +26,7 @@ jobs: app-id: ${{ secrets.GH_APP_ID }} private-key: ${{ secrets.APP_PRIVATE_KEY }} owner: ${{ github.repository_owner }} - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: โœ… run scorecard analysis @@ -37,12 +37,12 @@ jobs: repo_token: ${{ steps.app-token.outputs.token }} publish_results: ${{ inputs.publish-results }} - name: โซ upload sarif artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: SARIF file path: results.sarif retention-days: 5 - name: ๐Ÿ“ฆ upload sarif results - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 + uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: sarif_file: results.sarif