Skip to content

Commit b1e4662

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions group in /.github/workflows with 6 updates (#482)
2 parents e1ef25c + 58c548e commit b1e4662

File tree

11 files changed

+26
-26
lines changed

11 files changed

+26
-26
lines changed

‎.github/workflows/bump-version.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
contents: write
4848
steps:
4949
- name: Harden Runner
50-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
50+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
5151
with:
5252
disable-sudo: true
5353
egress-policy: block
@@ -61,7 +61,7 @@ jobs:
6161
persist-credentials: false
6262
fetch-depth: 0
6363
- name: Set up Python3
64-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
64+
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
6565
with:
6666
python-version: "3.x"
6767
- name: Config Commit Bot

‎.github/workflows/cache-cleaner.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
actions: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
19+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2020
with:
2121
disable-sudo: true
2222
egress-policy: block

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
5454
steps:
5555
- name: Harden Runner
56-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
56+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
5757
with:
5858
disable-sudo: true
5959
egress-policy: audit
@@ -65,7 +65,7 @@ jobs:
6565

6666
# Initializes the CodeQL tools for scanning.
6767
- name: Initialize CodeQL
68-
uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
68+
uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
6969
with:
7070
languages: ${{ matrix.language }}
7171
build-mode: ${{ matrix.build-mode }}
@@ -94,6 +94,6 @@ jobs:
9494
exit 1
9595
9696
- name: Perform CodeQL Analysis
97-
uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
97+
uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
9898
with:
9999
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
20+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2121
with:
2222
disable-sudo: true
2323
egress-policy: block
@@ -33,4 +33,4 @@ jobs:
3333
persist-credentials: false
3434

3535
- name: Dependency Review
36-
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
36+
uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0

‎.github/workflows/first-pull-request.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
pull-requests: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
19+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2020
with:
2121
disable-sudo: true
2222
egress-policy: block

‎.github/workflows/label.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
pull-requests: write
2424
steps:
2525
- name: Harden Runner
26-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
26+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2727
with:
2828
disable-sudo: true
2929
egress-policy: block

‎.github/workflows/main.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Harden Runner
25-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
25+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2626
with:
2727
disable-sudo: true
2828
egress-policy: block
@@ -35,15 +35,15 @@ jobs:
3535
with:
3636
persist-credentials: false
3737
- name: Set up Python${{ matrix.python-version }}
38-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
38+
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
3939
with:
4040
python-version: "3.x"
4141
cache: pip
4242
- name: Install CI libraries
4343
run: |
4444
python -m pip install --require-hashes -r CI/requirements_ci.txt
4545
- name: Environment Caching
46-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
46+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
4747
with:
4848
path: |
4949
.tox
@@ -68,7 +68,7 @@ jobs:
6868
tox-env: 'py3.10-coverage-upstream'
6969
steps:
7070
- name: Harden Runner
71-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
71+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
7272
with:
7373
egress-policy: block
7474
allowed-endpoints: >
@@ -92,7 +92,7 @@ jobs:
9292
persist-credentials: false
9393

9494
- name: Set up Python${{ matrix.python-version }}
95-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
95+
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
9696
with:
9797
python-version: ${{ matrix.python-version }}
9898
cache: pip
@@ -148,7 +148,7 @@ jobs:
148148
shell: bash -l {0}
149149
steps:
150150
- name: Harden Runner
151-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
151+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
152152
with:
153153
disable-sudo: true
154154
egress-policy: block
@@ -204,7 +204,7 @@ jobs:
204204
runs-on: ubuntu-latest
205205
steps:
206206
- name: Harden Runner
207-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
207+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
208208
with:
209209
disable-sudo: true
210210
egress-policy: block

‎.github/workflows/publish-pypi.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Harden Runner
21-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
21+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2222
with:
2323
disable-sudo: true
2424
egress-policy: block
@@ -34,7 +34,7 @@ jobs:
3434
with:
3535
persist-credentials: false
3636
- name: Set up Python3
37-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
37+
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
3838
with:
3939
python-version: "3.12" # Python 3.13 is not available yet
4040
- name: Install CI libraries

‎.github/workflows/scorecard.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
id-token: write
3131
steps:
3232
- name: Harden Runner
33-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
33+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
3434
with:
3535
disable-sudo: true
3636
egress-policy: block
@@ -73,14 +73,14 @@ jobs:
7373
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
7474
# format to the repository Actions tab.
7575
- name: Upload Artifact
76-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
76+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
7777
with:
7878
name: SARIF file
7979
path: results.sarif
8080
retention-days: 5
8181

8282
# Upload the results to GitHub's code scanning dashboard.
8383
- name: Upload to code-scanning
84-
uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # 3.28.10
84+
uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # 3.28.13
8585
with:
8686
sarif_file: results.sarif

‎.github/workflows/tag-testpypi.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
contents: write
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
20+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
2121
with:
2222
egress-policy: audit
2323
- name: Checkout Repository
@@ -44,7 +44,7 @@ jobs:
4444
runs-on: ubuntu-latest
4545
steps:
4646
- name: Harden Runner
47-
uses: step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
47+
uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1
4848
with:
4949
disable-sudo: true
5050
egress-policy: block
@@ -60,7 +60,7 @@ jobs:
6060
with:
6161
persist-credentials: false
6262
- name: Set up Python3
63-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
63+
uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
6464
with:
6565
python-version: "3.12" # Python 3.13 is not available yet
6666
- name: Install CI libraries

0 commit comments

Comments
 (0)