From 7278747296668f7495ebc80b037e006030ebdf08 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Oct 2024 04:57:05 +0000 Subject: [PATCH] Bump the github-actions group with 6 updates (#314) Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [fastify/github-action-merge-dependabot](https://github.com/fastify/github-action-merge-dependabot) | `3.10.2` | `3.11.0` | | [actions/checkout](https://github.com/actions/checkout) | `4.2.1` | `4.2.2` | | [actions/cache](https://github.com/actions/cache) | `4.1.1` | `4.1.2` | | [coverallsapp/github-action](https://github.com/coverallsapp/github-action) | `2.3.3` | `2.3.4` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.26.13` | `3.27.0` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.3.4` | `4.3.5` | Updates `fastify/github-action-merge-dependabot` from 3.10.2 to 3.11.0 - [Release notes](https://github.com/fastify/github-action-merge-dependabot/releases) - [Commits](https://github.com/fastify/github-action-merge-dependabot/compare/3892334d1c649bb8119af3d22a3f3766bd5e593f...c3bde0759d4f24db16f7b250b2122bc2df57e817) Updates `actions/checkout` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `actions/cache` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/3624ceb22c1c5a301c8db4169662070a689d9ea8...6849a6489940f00c2f30c0fb92c6274307ccb58a) Updates `coverallsapp/github-action` from 2.3.3 to 2.3.4 - [Release notes](https://github.com/coverallsapp/github-action/releases) - [Commits](https://github.com/coverallsapp/github-action/compare/4cdef0b2dbe0c9aa26bed48edb868db738625e79...cfd0633edbd2411b532b808ba7a8b5e04f76d2c8) Updates `github/codeql-action` from 3.26.13 to 3.27.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f779452ac5af1c261dce0346a8f964149f49322b...662472033e021d55d94146f66f6058822b0b39fd) Updates `actions/dependency-review-action` from 4.3.4 to 4.3.5 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/5a2ce3f5b92ee19cbb1541a4984c76d921601d7c...a6993e2c61fd5dc440b409aa1d6904921c5e1894) --- updated-dependencies: - dependency-name: fastify/github-action-merge-dependabot dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: coverallsapp/github-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/part_dependabot.yml | 2 +- .github/workflows/part_docs.yml | 4 ++-- .github/workflows/part_release.yml | 2 +- .github/workflows/part_test.yml | 16 ++++++++-------- .github/workflows/pr.yml | 4 ++-- .github/workflows/scorecard.yml | 4 ++-- 6 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/part_dependabot.yml b/.github/workflows/part_dependabot.yml index 77e466b..27dcae0 100644 --- a/.github/workflows/part_dependabot.yml +++ b/.github/workflows/part_dependabot.yml @@ -22,7 +22,7 @@ jobs: with: egress-policy: audit - - uses: fastify/github-action-merge-dependabot@3892334d1c649bb8119af3d22a3f3766bd5e593f # v3.10.2 + - uses: fastify/github-action-merge-dependabot@c3bde0759d4f24db16f7b250b2122bc2df57e817 # v3.11.0 with: github-token: ${{ github.token }} use-github-auto-merge: true diff --git a/.github/workflows/part_docs.yml b/.github/workflows/part_docs.yml index 23da84f..d36aaf8 100644 --- a/.github/workflows/part_docs.yml +++ b/.github/workflows/part_docs.yml @@ -19,7 +19,7 @@ jobs: egress-policy: audit - name: Checkout Code - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2 @@ -27,7 +27,7 @@ jobs: php-version: "8.3" tools: phive - name: Cache Tools - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 id: cache with: path: ~/.phive diff --git a/.github/workflows/part_release.yml b/.github/workflows/part_release.yml index c0f3867..13b7c39 100644 --- a/.github/workflows/part_release.yml +++ b/.github/workflows/part_release.yml @@ -70,7 +70,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: name: docs diff --git a/.github/workflows/part_test.yml b/.github/workflows/part_test.yml index 27d8be5..251450c 100644 --- a/.github/workflows/part_test.yml +++ b/.github/workflows/part_test.yml @@ -38,7 +38,7 @@ jobs: egress-policy: audit - name: Checkout Code - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2 @@ -56,7 +56,7 @@ jobs: if: "${{ runner.os == 'Windows' }}" run: echo "dir=$(composer config cache-files-dir)" >> $env:GITHUB_OUTPUT - name: Cache Deps - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 id: cache with: path: ${{ steps.composer-cache-common.outputs.dir }}${{ steps.composer-cache-windows.outputs.dir }} @@ -96,7 +96,7 @@ jobs: egress-policy: audit - name: Coveralls Finished - uses: coverallsapp/github-action@4cdef0b2dbe0c9aa26bed48edb868db738625e79 # v2.3.3 + uses: coverallsapp/github-action@cfd0633edbd2411b532b808ba7a8b5e04f76d2c8 # v2.3.4 with: github-token: ${{ secrets.github_token }} parallel-finished: true @@ -116,7 +116,7 @@ jobs: egress-policy: audit - name: Checkout Code - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2 @@ -126,7 +126,7 @@ jobs: id: composer-cache run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT - name: Cache Deps - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 id: cache with: path: ${{ steps.composer-cache.outputs.dir }} @@ -141,7 +141,7 @@ jobs: - name: Run Psalm run: composer run test:lint -- --report=results.sarif - name: "Upload SARIF" - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3 + uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3 with: sarif_file: results.sarif @@ -157,7 +157,7 @@ jobs: egress-policy: audit - name: Checkout Code - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: SetUp PHP id: setup-php uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2 @@ -167,7 +167,7 @@ jobs: id: composer-cache run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT - name: Cache Deps - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 id: cache with: path: ${{ steps.composer-cache.outputs.dir }} diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 05259d4..1ccdce8 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -45,6 +45,6 @@ jobs: egress-policy: audit - name: 'Checkout Repository' - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: 'Dependency Review' - uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4 + uses: actions/dependency-review-action@a6993e2c61fd5dc440b409aa1d6904921c5e1894 # v4.3.5 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 3540d00..fbcb5e1 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -37,7 +37,7 @@ jobs: egress-policy: audit - name: "Checkout code" - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false @@ -73,6 +73,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 + uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd # v3.27.0 with: sarif_file: results.sarif