Skip to content

Commit 2e8f54d

Browse files
Bump zgosalvez/github-actions-ensure-sha-pinned-actions from 5.0.1 to 5.0.2 (#1228)
Bumps [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) from 5.0.1 to 5.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases">zgosalvez/github-actions-ensure-sha-pinned-actions's releases</a>.</em></p> <blockquote> <h2>v5.0.2</h2> <h2>What's Changed</h2> <ul> <li>Bump jest from 30.2.0 to 30.3.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/298">zgosalvez/github-actions-ensure-sha-pinned-actions#298</a></li> <li>Bump eslint from 10.0.1 to 10.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/295">zgosalvez/github-actions-ensure-sha-pinned-actions#295</a></li> <li>Bump actions/cache from 5.0.1 to 5.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/294">zgosalvez/github-actions-ensure-sha-pinned-actions#294</a></li> <li>Bump undici from 6.23.0 to 6.24.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/297">zgosalvez/github-actions-ensure-sha-pinned-actions#297</a></li> <li>Bump actions/checkout from 6.0.1 to 6.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/293">zgosalvez/github-actions-ensure-sha-pinned-actions#293</a></li> <li>Bump actions/setup-node from 6.1.0 to 6.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/292">zgosalvez/github-actions-ensure-sha-pinned-actions#292</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/v5...v5.0.2">https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/v5...v5.0.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/cc9ffdc62fadb9f83b46dd0979d9ad50408cc6a6"><code>cc9ffdc</code></a> Bump actions/setup-node from 6.1.0 to 6.2.0 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/292">#292</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/b74bd12d189072e0de90440d636dc8a9d9696123"><code>b74bd12</code></a> Bump actions/checkout from 6.0.1 to 6.0.2 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/293">#293</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/8921d5cbf8d2637d3112adc04ffb216b2c9e2feb"><code>8921d5c</code></a> Bump undici from 6.23.0 to 6.24.1 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/297">#297</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/a88dd70414ed0584325a06eee9fe69cafb6e85af"><code>a88dd70</code></a> Bump actions/cache from 5.0.1 to 5.0.3 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/294">#294</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/743dbe8fb4632e640be41e9480f7275fd3a4cfa7"><code>743dbe8</code></a> Bump eslint from 10.0.1 to 10.0.3 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/295">#295</a>)</li> <li><a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/commit/fb78cc36902dfbcc187b0a5e02770b488244a88b"><code>fb78cc3</code></a> Bump jest from 30.2.0 to 30.3.0 (<a href="https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/298">#298</a>)</li> <li>See full diff in <a href="https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/70c4af2ed5282c51ba40566d026d6647852ffa3e...cc9ffdc62fadb9f83b46dd0979d9ad50408cc6a6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=zgosalvez/github-actions-ensure-sha-pinned-actions&package-manager=github_actions&previous-version=5.0.1&new-version=5.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michael Hucka <mhucka@google.com>
1 parent ffeae0f commit 2e8f54d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

.github/workflows/ci.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -563,7 +563,7 @@ jobs:
563563
# The next action simply fails if there are any unpinned actions.
564564
- name: Verify that all workflow actions have pinned versions
565565
# yamllint disable-line rule:line-length
566-
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@70c4af2ed5282c51ba40566d026d6647852ffa3e # v5.0.1
566+
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@cc9ffdc62fadb9f83b46dd0979d9ad50408cc6a6 # v5.0.2
567567

568568
# If we didn't fail the previous check, go on to more time-consuming ones.
569569
- name: Install actionlint

0 commit comments

Comments
 (0)