Skip to content

Commit 8f2563a

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the github-actions group with 7 updates (#14450)
Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.14.0` | `2.14.2` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.1` | `6.0.2` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.1.0` | `6.2.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.31.9` | `4.32.3` | | [oven-sh/setup-bun](https://github.com/oven-sh/setup-bun) | `2.0.2` | `2.1.2` | | [actions/cache](https://github.com/actions/cache) | `5.0.1` | `5.0.3` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `8.0.0` | `8.1.0` | Updates `step-security/harden-runner` from 2.14.0 to 2.14.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@20cf305...5ef0c07) Updates `actions/checkout` from 6.0.1 to 6.0.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@8e8c483...de0fac2) Updates `actions/setup-node` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@395ad32...6044e13) Updates `github/codeql-action` from 4.31.9 to 4.32.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@5d4e8d1...9e907b5) Updates `oven-sh/setup-bun` from 2.0.2 to 2.1.2 - [Release notes](https://github.com/oven-sh/setup-bun/releases) - [Commits](oven-sh/setup-bun@735343b...3d26778) Updates `actions/cache` from 5.0.1 to 5.0.3 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@9255dc7...cdf6c1f) Updates `peter-evans/create-pull-request` from 8.0.0 to 8.1.0 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@98357b1...c0f553f) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.14.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.32.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: oven-sh/setup-bun dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/cache dependency-version: 5.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 4a39bd2 commit 8f2563a

19 files changed

+84
-84
lines changed

‎.github/workflows/build-and-deploy.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,7 @@ jobs:
8383
github.event.pull_request.user.login != 'dependabot[bot]'
8484
steps:
8585
- name: Harden Runner
86-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
86+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
8787
with:
8888
disable-file-monitoring: true
8989
egress-policy: block
@@ -101,10 +101,10 @@ jobs:
101101
54.185.253.63:443
102102
103103
- name: Checkout
104-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
104+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
105105

106106
- name: Setup Node
107-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
107+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
108108
with:
109109
node-version-file: '.nvmrc'
110110
cache: npm

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -41,12 +41,12 @@ jobs:
4141
timeout-minutes: 30
4242
steps:
4343
- name: Checkout
44-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
44+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
4545

4646
- name: Initialize CodeQL
47-
uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7
47+
uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6
4848
with:
4949
languages: javascript
5050

5151
- name: Perform CodeQL Analysis
52-
uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7
52+
uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6

‎.github/workflows/deploy-storybook.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,10 +33,10 @@ jobs:
3333
timeout-minutes: 10
3434
steps:
3535
- name: Checkout
36-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
36+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
3737

3838
- name: Setup Node
39-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
39+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
4040
with:
4141
node-version-file: '.nvmrc'
4242
cache: npm
@@ -50,7 +50,7 @@ jobs:
5050
run: npm run storybook:build
5151

5252
- name: Checkout gh-pages
53-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
53+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
5454
with:
5555
ref: gh-pages
5656
token: ${{ secrets.GOOGLEFORCREATORS_BOT_TOKEN }}

‎.github/workflows/lint-css-js-md.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -61,7 +61,7 @@ jobs:
6161
timeout-minutes: 20
6262
steps:
6363
- name: Harden Runner
64-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
64+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
6565
with:
6666
disable-sudo: true
6767
disable-file-monitoring: true
@@ -74,10 +74,10 @@ jobs:
7474
54.185.253.63:443
7575
7676
- name: Checkout
77-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
77+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
7878

7979
- name: Setup Node
80-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
80+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
8181
with:
8282
node-version-file: '.nvmrc'
8383
cache: npm
@@ -88,7 +88,7 @@ jobs:
8888
PUPPETEER_SKIP_DOWNLOAD: true
8989

9090
- name: Setup Bun
91-
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76
91+
uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
9292
with:
9393
bun-version: latest
9494

‎.github/workflows/lint-i18n.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -42,12 +42,12 @@ jobs:
4242
timeout-minutes: 10
4343
steps:
4444
- name: Harden Runner
45-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
45+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
4646
with:
4747
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
4848

4949
- name: Checkout
50-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
50+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
5151

5252
- name: Setup PHP
5353
uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1
@@ -60,7 +60,7 @@ jobs:
6060
run: wp package install wp-cli/i18n-command:@stable
6161

6262
- name: Setup Node
63-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
63+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
6464
with:
6565
node-version-file: '.nvmrc'
6666
cache: npm
@@ -84,7 +84,7 @@ jobs:
8484
composer-options: '--prefer-dist --no-progress --no-interaction'
8585

8686
- name: Setup Bun
87-
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76
87+
uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
8888
with:
8989
bun-version: latest
9090

‎.github/workflows/lint-php.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
timeout-minutes: 5
4242
steps:
4343
- name: Harden Runner
44-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
44+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
4545
with:
4646
disable-file-monitoring: true
4747
egress-policy: block
@@ -56,7 +56,7 @@ jobs:
5656
54.185.253.63:443
5757
5858
- name: Checkout
59-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
59+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
6060

6161
- name: Setup PHP
6262
uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1

‎.github/workflows/lint-plugin-check.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -42,15 +42,15 @@ jobs:
4242
timeout-minutes: 10
4343
steps:
4444
- name: Harden Runner
45-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
45+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
4646
with:
4747
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
4848

4949
- name: Checkout
50-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
50+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
5151

5252
- name: Setup Node
53-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
53+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
5454
with:
5555
node-version-file: '.nvmrc'
5656
cache: npm
@@ -74,7 +74,7 @@ jobs:
7474
composer-options: '--prefer-dist --no-progress --no-interaction'
7575

7676
- name: Setup Bun
77-
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76
77+
uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
7878
with:
7979
bun-version: latest
8080

‎.github/workflows/npm-release.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,10 @@ jobs:
3232
environment: Production
3333
steps:
3434
- name: Checkout
35-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
35+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
3636

3737
- name: Setup Node
38-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
38+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
3939
with:
4040
node-version-file: '.nvmrc'
4141
cache: npm
@@ -46,7 +46,7 @@ jobs:
4646
PUPPETEER_SKIP_DOWNLOAD: true
4747

4848
- name: Setup Bun
49-
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76
49+
uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
5050
with:
5151
bun-version: latest
5252

@@ -100,18 +100,18 @@ jobs:
100100
needs: [dry-run]
101101
steps:
102102
- name: Harden Runner
103-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
103+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
104104
with:
105105
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
106106

107107
- name: Checkout
108-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
108+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
109109
with:
110110
token: ${{ secrets.GOOGLEFORCREATORS_BOT_TOKEN }}
111111

112112
# See go/npm-publish
113113
- name: Setup Node
114-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
114+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
115115
with:
116116
node-version-file: '.nvmrc'
117117
cache: npm
@@ -124,7 +124,7 @@ jobs:
124124
PUPPETEER_SKIP_DOWNLOAD: true
125125

126126
- name: Setup Bun
127-
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76
127+
uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
128128
with:
129129
bun-version: latest
130130

‎.github/workflows/plugin-release.yml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -41,12 +41,12 @@ jobs:
4141
environment: Production
4242
steps:
4343
- name: Harden Runner
44-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
44+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
4545
with:
4646
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
4747

4848
- name: Checkout
49-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
49+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
5050

5151
- name: Verify semver compatibility
5252
run: |
@@ -104,7 +104,7 @@ jobs:
104104
needs: [checks]
105105
steps:
106106
- name: Harden Runner
107-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
107+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
108108
with:
109109
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
110110

@@ -127,7 +127,7 @@ jobs:
127127

128128
# Grab current assets version from `web-stories.php` and pass on to next steps.
129129
# - name: Checkout
130-
# uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
130+
# uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
131131
# with:
132132
# ref:
133133

@@ -143,7 +143,7 @@ jobs:
143143
# ASSETS_VERSION_REGEX: "https://wp.stories.google/static/([^']+)"
144144

145145
- name: Checkout wp.stories.google
146-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
146+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
147147
with:
148148
repository: GoogleForCreators/wp.stories.google
149149
lfs: true
@@ -245,12 +245,12 @@ jobs:
245245
release_name: ${{ steps.release_branch.outputs.release_name }}
246246
steps:
247247
- name: Harden Runner
248-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
248+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
249249
with:
250250
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
251251

252252
- name: Checkout
253-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
253+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
254254
with:
255255
fetch-depth: 0 # 0 indicates all history for all branches and tags.
256256
token: ${{ secrets.GOOGLEFORCREATORS_BOT_TOKEN }}
@@ -269,7 +269,7 @@ jobs:
269269
continue-on-error: true
270270

271271
- name: Setup Node
272-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
272+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
273273
with:
274274
node-version-file: '.nvmrc'
275275
cache: npm
@@ -293,7 +293,7 @@ jobs:
293293
composer-options: '--prefer-dist --no-progress --no-interaction'
294294

295295
- name: Setup Bun
296-
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76
296+
uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
297297
with:
298298
bun-version: latest
299299

@@ -408,12 +408,12 @@ jobs:
408408
needs: [build]
409409
steps:
410410
- name: Harden Runner
411-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
411+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
412412
with:
413413
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
414414

415415
- name: Checkout
416-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
416+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
417417

418418
- name: Download release artifacts
419419
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131
@@ -444,18 +444,18 @@ jobs:
444444
if: ${{ ! startsWith(github.ref, 'refs/heads/release/') && ! contains(github.event.inputs.version, 'rc') }}
445445
steps:
446446
- name: Harden Runner
447-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
447+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
448448
with:
449449
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
450450

451451
- name: Checkout
452-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
452+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
453453
with:
454454
ref: main
455455
token: ${{ secrets.GOOGLEFORCREATORS_BOT_TOKEN }}
456456

457457
- name: Setup Node
458-
uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f
458+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238
459459
with:
460460
node-version-file: '.nvmrc'
461461
cache: npm
@@ -466,7 +466,7 @@ jobs:
466466
PUPPETEER_SKIP_DOWNLOAD: true
467467

468468
- name: Setup Bun
469-
uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76
469+
uses: oven-sh/setup-bun@3d267786b128fe76c2f16a390aa2448b815359f3
470470
with:
471471
bun-version: latest
472472

@@ -500,7 +500,7 @@ jobs:
500500
SVN_PASSWORD: ${{ secrets.SVN_PASSWORD }}
501501
steps:
502502
- name: Harden Runner
503-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
503+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
504504
with:
505505
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
506506

‎.github/workflows/scorecards.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -25,12 +25,12 @@ jobs:
2525

2626
steps:
2727
- name: Harden Runner
28-
uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76
28+
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e
2929
with:
3030
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
3131

3232
- name: 'Checkout code'
33-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8
33+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
3434
with:
3535
persist-credentials: false
3636

@@ -56,6 +56,6 @@ jobs:
5656

5757
# Upload the results to GitHub's code scanning dashboard.
5858
- name: 'Upload to code-scanning'
59-
uses: github/codeql-action/upload-sarif@5d4e8d1aca955e8d8589aabd499c5cae939e33c7
59+
uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6
6060
with:
6161
sarif_file: results.sarif

0 commit comments

Comments
 (0)