Skip to content

Commit 8b2a4e0

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions group in /.github/workflows with 6 updates
Bumps the actions group in /.github/workflows with 6 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.13.2` | `2.14.0` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.0` | `6.0.1` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.30.6` | `4.31.9` | | [actions/cache](https://github.com/actions/cache) | `4.3.0` | `5.0.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `5.0.0` | `6.0.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.4.0` | `2.5.0` | Updates `step-security/harden-runner` from 2.13.2 to 2.14.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@95d9a5d...20cf305) Updates `actions/checkout` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@1af3b93...8e8c483) Updates `github/codeql-action` from 3.30.6 to 4.31.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@64d10c1...5d4e8d1) Updates `actions/cache` from 4.3.0 to 5.0.1 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@0057852...9255dc7) Updates `actions/upload-artifact` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@330a01c...b7c566a) Updates `softprops/action-gh-release` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@aec2ec5...a06a81a) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.31.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/cache dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 78bb691 commit 8b2a4e0

File tree

12 files changed

+38
-38
lines changed

12 files changed

+38
-38
lines changed

‎.github/workflows/bump-version.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
python-version: [ "3.13" ]
5151
steps:
5252
- name: Harden Runner
53-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
53+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
5454
with:
5555
disable-sudo: true
5656
egress-policy: block
@@ -60,7 +60,7 @@ jobs:
6060
pypi.org:443
6161
6262
- name: Checkout Repository (no persist-credentials)
63-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
63+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
6464
with:
6565
persist-credentials: false
6666
fetch-depth: 0

‎.github/workflows/cache-cleaner.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
actions: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
19+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2020
with:
2121
disable-sudo: true
2222
egress-policy: block
@@ -27,7 +27,7 @@ jobs:
2727
release-assets.githubusercontent.com:443
2828
2929
- name: Checkout Repository
30-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
30+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3131
with:
3232
persist-credentials: false
3333

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -53,19 +53,19 @@ jobs:
5353
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
5454
steps:
5555
- name: Harden Runner
56-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
56+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
5757
with:
5858
disable-sudo: true
5959
egress-policy: audit
6060

6161
- name: Checkout Repository
62-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
62+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
6363
with:
6464
persist-credentials: false
6565

6666
# Initializes the CodeQL tools for scanning.
6767
- name: Initialize CodeQL
68-
uses: github/codeql-action/init@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.29.5
68+
uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
6969
with:
7070
languages: ${{ matrix.language }}
7171
build-mode: ${{ matrix.build-mode }}
@@ -94,6 +94,6 @@ jobs:
9494
exit 1
9595
9696
- name: Perform CodeQL Analysis
97-
uses: github/codeql-action/analyze@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # v3.29.5
97+
uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v3.29.5
9898
with:
9999
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
20+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2121
with:
2222
disable-sudo: true
2323
egress-policy: block
@@ -28,7 +28,7 @@ jobs:
2828
github.com:443
2929
3030
- name: Checkout Repository
31-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
31+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3232
with:
3333
persist-credentials: false
3434

‎.github/workflows/first-pull-request.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
pull-requests: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
19+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2020
with:
2121
disable-sudo: true
2222
egress-policy: block

‎.github/workflows/label.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
pull-requests: write
2424
steps:
2525
- name: Harden Runner
26-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
26+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2727
with:
2828
disable-sudo: true
2929
egress-policy: block

‎.github/workflows/main.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
python-version: [ "3.13" ]
2626
steps:
2727
- name: Harden Runner
28-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
28+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2929
with:
3030
disable-sudo: true
3131
egress-policy: block
@@ -34,7 +34,7 @@ jobs:
3434
github.com:443
3535
pypi.org:443
3636
- name: Checkout Repository
37-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
37+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3838
with:
3939
persist-credentials: false
4040
- name: Set up Python${{ matrix.python-version }}
@@ -46,7 +46,7 @@ jobs:
4646
run: |
4747
python -m pip install --require-hashes -r CI/requirements_ci.txt
4848
- name: Environment Caching
49-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
49+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
5050
with:
5151
path: |
5252
.tox
@@ -69,12 +69,12 @@ jobs:
6969
python-version: '3.10'
7070
steps:
7171
- name: Harden Runner
72-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
72+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
7373
with:
7474
disable-sudo: false
7575
egress-policy: audit
7676
- name: Checkout Repository
77-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
77+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
7878
with:
7979
persist-credentials: false
8080
- name: Set up Python${{ matrix.python-version }}
@@ -106,15 +106,15 @@ jobs:
106106
107107
- name: Environment caching (macOS)
108108
if: matrix.os == 'macos-latest'
109-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
109+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
110110
with:
111111
path: |
112112
.tox
113113
~/Library/Caches/raven-testdata
114114
key: ${{ hashFiles('src/ravenpy/testing/registry.txt') }}-${{ env.RAVEN_TESTDATA_BRANCH }}-${{ matrix.os }}
115115
- name: Environment caching (Ubuntu)
116116
if: matrix.os == 'ubuntu-latest'
117-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
117+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
118118
with:
119119
path: |
120120
.tox
@@ -149,12 +149,12 @@ jobs:
149149
shell: bash -l {0}
150150
steps:
151151
- name: Harden Runner
152-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
152+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
153153
with:
154154
disable-sudo: true
155155
egress-policy: audit
156156
- name: Checkout Repository
157-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
157+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
158158
with:
159159
persist-credentials: false
160160
- name: Patch Environment File
@@ -179,14 +179,14 @@ jobs:
179179
python -m pip check || true
180180
- name: Cache test data (macOS)
181181
if: matrix.os == 'macos-latest'
182-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
182+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
183183
with:
184184
path: |
185185
~/Library/Caches/raven-testdata
186186
key: ${{ hashFiles('src/ravenpy/testing/registry.txt') }}-${{ env.RAVEN_TESTDATA_BRANCH }}-conda-${{ matrix.os }}
187187
- name: Cache test data (Ubuntu)
188188
if: matrix.os == 'ubuntu-latest'
189-
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
189+
uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1
190190
with:
191191
path: |
192192
~/.cache/raven-testdata
@@ -213,7 +213,7 @@ jobs:
213213
runs-on: ubuntu-latest
214214
steps:
215215
- name: Harden Runner
216-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
216+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
217217
with:
218218
disable-sudo: true
219219
egress-policy: audit

‎.github/workflows/publish-pypi.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
python-version: [ "3.13" ]
2222
steps:
2323
- name: Harden Runner
24-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
24+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2525
with:
2626
disable-sudo: true
2727
egress-policy: block
@@ -34,7 +34,7 @@ jobs:
3434
upload.pypi.org:443
3535
3636
- name: Checkout Repository
37-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
37+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3838
with:
3939
persist-credentials: false
4040

‎.github/workflows/scorecard.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
id-token: write
3131
steps:
3232
- name: Harden Runner
33-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
33+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
3434
with:
3535
disable-sudo: true
3636
egress-policy: block
@@ -48,7 +48,7 @@ jobs:
4848
www.bestpractices.dev:443
4949
5050
- name: Checkout Repository
51-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
51+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
5252
with:
5353
persist-credentials: false
5454

@@ -73,14 +73,14 @@ jobs:
7373
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
7474
# format to the repository Actions tab.
7575
- name: Upload Artifact
76-
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
76+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
7777
with:
7878
name: SARIF file
7979
path: results.sarif
8080
retention-days: 5
8181

8282
# Upload the results to GitHub's code scanning dashboard.
8383
- name: Upload to code-scanning
84-
uses: github/codeql-action/upload-sarif@64d10c13136e1c5bce3e5fbde8d4906eeaafc885 # 3.29.5
84+
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # 3.29.5
8585
with:
8686
sarif_file: results.sarif

‎.github/workflows/tag-testpypi.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,17 +17,17 @@ jobs:
1717
contents: write
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
20+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
2121
with:
2222
egress-policy: audit
2323

2424
- name: Checkout Repository
25-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
25+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2626
with:
2727
persist-credentials: false
2828

2929
- name: Create Release
30-
uses: softprops/action-gh-release@aec2ec56f94eb8180ceec724245f64ef008b89f5 # 2.4.0
30+
uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # 2.5.0
3131
env:
3232
# This token is provided by Actions, you do not need to create your own token
3333
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -49,7 +49,7 @@ jobs:
4949
python-version: [ "3.13" ]
5050
steps:
5151
- name: Harden Runner
52-
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
52+
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
5353
with:
5454
disable-sudo: true
5555
egress-policy: block
@@ -62,7 +62,7 @@ jobs:
6262
test.pypi.org:443
6363
6464
- name: Checkout Repository
65-
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
65+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
6666
with:
6767
persist-credentials: false
6868

0 commit comments

Comments
 (0)