Skip to content

Commit 04bd26e

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions group in /.github/workflows with 7 updates (#84)
1 parent 18ea55a commit 04bd26e

File tree

8 files changed

+22
-22
lines changed

8 files changed

+22
-22
lines changed

‎.github/workflows/cache-cleaner.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
actions: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
19+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
2020
with:
2121
disable-sudo: true
2222
egress-policy: block

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
5454
steps:
5555
- name: Harden Runner
56-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
56+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
5757
with:
5858
disable-sudo: true
5959
egress-policy: audit
@@ -65,7 +65,7 @@ jobs:
6565

6666
# Initializes the CodeQL tools for scanning.
6767
- name: Initialize CodeQL
68-
uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
68+
uses: github/codeql-action/init@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
6969
with:
7070
languages: ${{ matrix.language }}
7171
build-mode: ${{ matrix.build-mode }}
@@ -94,6 +94,6 @@ jobs:
9494
exit 1
9595
9696
- name: Perform CodeQL Analysis
97-
uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0
97+
uses: github/codeql-action/analyze@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
9898
with:
9999
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
runs-on: ubuntu-latest
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
20+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
2121
with:
2222
disable-sudo: true
2323
egress-policy: block
@@ -32,4 +32,4 @@ jobs:
3232
persist-credentials: false
3333

3434
- name: Dependency Review
35-
uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
35+
uses: actions/dependency-review-action@ce3cf9537a52e8119d91fd484ab5b8a807627bf8 # v4.6.0

‎.github/workflows/first-pull-request.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
pull-requests: write
1717
steps:
1818
- name: Harden Runner
19-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
19+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
2020
with:
2121
disable-sudo: true
2222
egress-policy: block

‎.github/workflows/main.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- "3.x"
2929
steps:
3030
- name: Harden Runner
31-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
31+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
3232
with:
3333
disable-sudo: true
3434
egress-policy: audit
@@ -37,15 +37,15 @@ jobs:
3737
with:
3838
persist-credentials: false
3939
- name: Set up Python${{ matrix.python-version }}
40-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
40+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
4141
with:
4242
python-version: ${{ matrix.python-version }}
4343
cache: pip
4444
- name: Install CI libraries
4545
run: |
4646
python -m pip install --require-hashes -r CI/requirements_ci.txt
4747
- name: Environment Caching
48-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
48+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
4949
with:
5050
path: |
5151
.tox
@@ -68,7 +68,7 @@ jobs:
6868
- "3.13"
6969
steps:
7070
- name: Harden Runner
71-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
71+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
7272
with:
7373
disable-sudo: true
7474
egress-policy: audit
@@ -77,15 +77,15 @@ jobs:
7777
with:
7878
persist-credentials: false
7979
- name: Set up Python${{ matrix.python-version }}
80-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
80+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
8181
with:
8282
python-version: ${{ matrix.python-version }}
8383
cache: pip
8484
- name: Install CI libraries
8585
run: |
8686
python -m pip install --require-hashes -r CI/requirements_ci.txt
8787
- name: Environment Caching
88-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
88+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
8989
with:
9090
path: .tox
9191
key: ${{ matrix.os }}-Python${{ matrix.python-version }}-${{ hashFiles('pyproject.toml', 'tox.ini') }}
@@ -104,11 +104,11 @@ jobs:
104104
runs-on: ubuntu-latest
105105
steps:
106106
- name: Harden Runner
107-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
107+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
108108
with:
109109
disable-sudo: true
110110
egress-policy: audit
111111
- name: Coveralls Finished
112-
uses: coverallsapp/github-action@cfd0633edbd2411b532b808ba7a8b5e04f76d2c8 # v2.3.4
112+
uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
113113
with:
114114
parallel-finished: true

‎.github/workflows/publish-pypi.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
id-token: write
1919
steps:
2020
- name: Harden Runner
21-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
21+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
2222
with:
2323
disable-sudo: true
2424
egress-policy: block
@@ -33,7 +33,7 @@ jobs:
3333
with:
3434
persist-credentials: false
3535
- name: Set up Python3
36-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
36+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
3737
with:
3838
python-version: "3.x"
3939
- name: Install CI libraries

‎.github/workflows/tag-testpypi.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,15 +17,15 @@ jobs:
1717
contents: write
1818
steps:
1919
- name: Harden Runner
20-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
20+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
2121
with:
2222
egress-policy: audit
2323
- name: Checkout Repository
2424
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2525
with:
2626
persist-credentials: false
2727
- name: Create Release
28-
uses: softprops/action-gh-release@01570a1f39cb168c169c802c3bceb9e93fb10974 # 2.1.0
28+
uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # 2.2.2
2929
env:
3030
# This token is provided by Actions, you do not need to create your own token
3131
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -44,7 +44,7 @@ jobs:
4444
id-token: write
4545
steps:
4646
- name: Harden Runner
47-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
47+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
4848
with:
4949
disable-sudo: true
5050
egress-policy: block
@@ -59,7 +59,7 @@ jobs:
5959
with:
6060
persist-credentials: false
6161
- name: Set up Python3
62-
uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
62+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
6363
with:
6464
python-version: "3.x"
6565
- name: Install CI libraries

‎.github/workflows/workflow-warning.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
pull-requests: write
2626
steps:
2727
- name: Harden Runner
28-
uses: step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
28+
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
2929
with:
3030
disable-sudo: true
3131
egress-policy: block

0 commit comments

Comments
 (0)