Skip to content

Commit c9086d2

Browse files
bleggettbleggett
authored
Merge pull request #135 from edera-dev/dependabot/github_actions/actions-updates-7d53a9fa35
chore(deps): bump the actions-updates group across 1 directory with 6 updates
2 parents ff4a09f + 45ca1df commit c9086d2

4 files changed

Lines changed: 24 additions & 24 deletions

File tree

‎.github/workflows/ci-actions.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
actions: read # Needed to read actions
2020
steps:
2121
- name: Harden the runner (Audit all outbound calls)
22-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
22+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2323
with:
2424
egress-policy: audit
2525

@@ -29,15 +29,15 @@ jobs:
2929
persist-credentials: false
3030

3131
- name: Install the latest version of uv
32-
uses: astral-sh/setup-uv@3259c6206f993105e3a61b142c2d97bf4b9ef83d # v7.1.0
32+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
3333

3434
- name: Run zizmor
3535
run: uvx zizmor --pedantic --format sarif . > results.sarif
3636
env:
3737
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
3838

3939
- name: Upload SARIF file
40-
uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
40+
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
4141
with:
4242
sarif_file: results.sarif
4343
category: zizmor

‎.github/workflows/ci-code.yaml‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
cache-key: ${{ steps.cache-cargo-make.outputs.cache-primary-key }}
2525
steps:
2626
- name: Harden the runner (Audit all outbound calls)
27-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
27+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2828
with:
2929
egress-policy: audit
3030

@@ -38,7 +38,7 @@ jobs:
3838
3939
- name: Cache cargo-make binary
4040
id: cache-cargo-make
41-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
41+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
4242
with:
4343
path: ~/.cargo/bin/cargo-make
4444
key: ${{ runner.os }}-cargo-make-${{ steps.get-version.outputs.cargo_make_version }}
@@ -59,7 +59,7 @@ jobs:
5959
needs: setup-cargo-make
6060
steps:
6161
- name: harden runner
62-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
62+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
6363
with:
6464
egress-policy: audit
6565

@@ -70,7 +70,7 @@ jobs:
7070
persist-credentials: false
7171

7272
- name: Restore cached cargo-make
73-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
73+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
7474
with:
7575
path: ~/.cargo/bin/cargo-make
7676
key: ${{ runner.os }}-cargo-make-${{ needs.setup-cargo-make.outputs.cargo_make_version }}
@@ -84,7 +84,7 @@ jobs:
8484
needs: setup-cargo-make
8585
steps:
8686
- name: harden runner
87-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
87+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
8888
with:
8989
egress-policy: audit
9090

@@ -95,7 +95,7 @@ jobs:
9595
persist-credentials: false
9696

9797
- name: Restore cached cargo-make
98-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
98+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
9999
with:
100100
path: ~/.cargo/bin/cargo-make
101101
key: ${{ runner.os }}-cargo-make-${{ needs.setup-cargo-make.outputs.cargo_make_version }}
@@ -115,7 +115,7 @@ jobs:
115115
needs: setup-cargo-make
116116
steps:
117117
- name: harden runner
118-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
118+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
119119
with:
120120
egress-policy: audit
121121

@@ -126,7 +126,7 @@ jobs:
126126
persist-credentials: false
127127

128128
- name: Restore cached cargo-make
129-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
129+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
130130
with:
131131
path: ~/.cargo/bin/cargo-make
132132
key: ${{ runner.os }}-cargo-make-${{ needs.setup-cargo-make.outputs.cargo_make_version }}
@@ -147,7 +147,7 @@ jobs:
147147
name: 'Full build linux-${{ matrix.arch }}'
148148
steps:
149149
- name: harden runner
150-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
150+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
151151
with:
152152
egress-policy: audit
153153

@@ -158,7 +158,7 @@ jobs:
158158
persist-credentials: false
159159

160160
- name: Restore cached cargo-make
161-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
161+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
162162
with:
163163
path: ~/.cargo/bin/cargo-make
164164
key: ${{ runner.os }}-cargo-make-${{ needs.setup-cargo-make.outputs.cargo_make_version }}
@@ -179,7 +179,7 @@ jobs:
179179
name: 'Full test linux-${{ matrix.arch }}'
180180
steps:
181181
- name: harden runner
182-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
182+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
183183
with:
184184
egress-policy: audit
185185

@@ -190,7 +190,7 @@ jobs:
190190
persist-credentials: false
191191

192192
- name: Restore cached cargo-make
193-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
193+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
194194
with:
195195
path: ~/.cargo/bin/cargo-make
196196
key: ${{ runner.os }}-cargo-make-${{ needs.setup-cargo-make.outputs.cargo_make_version }}
@@ -210,7 +210,7 @@ jobs:
210210
name: 'Full clippy linux-${{ matrix.arch }}'
211211
steps:
212212
- name: harden runner
213-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
213+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
214214
with:
215215
egress-policy: audit
216216

@@ -221,7 +221,7 @@ jobs:
221221
persist-credentials: false
222222

223223
- name: Restore cached cargo-make
224-
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
224+
uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
225225
with:
226226
path: ~/.cargo/bin/cargo-make
227227
key: ${{ runner.os }}-cargo-make-${{ needs.setup-cargo-make.outputs.cargo_make_version }}

‎.github/workflows/publish.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ jobs:
4242
runs-on: '${{ matrix.platform.on }}'
4343
steps:
4444
- name: Harden the runner (Audit all outbound calls)
45-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
45+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
4646
with:
4747
egress-policy: audit
4848

@@ -85,15 +85,15 @@ jobs:
8585
STYROLITE_PLATFORM: '${{ steps.name.outputs.platform }}'
8686

8787
- name: 'Upload styrolite to workflow run'
88-
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
88+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8989
with:
9090
name: styrolite-${{ steps.name.outputs.platform }}
9191
path: |
9292
target/assets/*
9393
9494
- name: generate cultivator token
9595
if: ${{ github.event_name == 'release' }}
96-
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
96+
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
9797
id: generate-token
9898
with:
9999
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"

‎.github/workflows/release.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
id-token: write # Needed for trusted publishing
2222
steps:
2323
- name: Harden the runner (Audit all outbound calls)
24-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
24+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
2525
with:
2626
egress-policy: audit
2727

@@ -35,7 +35,7 @@ jobs:
3535
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # zizmor: ignore[stale-action-refs] -- pinned to stable branch
3636

3737
- name: generate cultivator token
38-
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
38+
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
3939
id: generate-token
4040
with:
4141
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"
@@ -62,7 +62,7 @@ jobs:
6262
cancel-in-progress: false
6363
steps:
6464
- name: Harden the runner (Audit all outbound calls)
65-
uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
65+
uses: step-security/harden-runner@f808768d1510423e83855289c910610ca9b43176 # v2.17.0
6666
with:
6767
egress-policy: audit
6868

@@ -76,7 +76,7 @@ jobs:
7676
uses: dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # zizmor: ignore[stale-action-refs] -- pinned to stable branch
7777

7878
- name: generate cultivator token
79-
uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0
79+
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
8080
id: generate-token
8181
with:
8282
app-id: "${{ secrets.EDERA_CULTIVATION_APP_ID }}"

0 commit comments

Comments
 (0)