Skip to content

Commit e5c4387

Browse files
renovate[bot]renovate[bot]
authored
Update github-actions
Signed-off-by: Renovate Bot <[email protected]>
1 parent e594323 commit e5c4387

File tree

9 files changed

+35
-35
lines changed

9 files changed

+35
-35
lines changed

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343

4444
steps:
4545
- name: "Harden Runner"
46-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
46+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
4747
with:
4848
egress-policy: "audit"
4949

@@ -52,7 +52,7 @@ jobs:
5252

5353
# Initializes the CodeQL tools for scanning.
5454
- name: "Initialize CodeQL"
55-
uses: "github/codeql-action/init@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c" # v3.28.1
55+
uses: "github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5" # v3.28.11
5656
with:
5757
languages: "${{ matrix.language }}"
5858
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
6262
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
6363
# If this step fails, then you should remove it and run the build manually (see below)
6464
- name: "Autobuild"
65-
uses: "github/codeql-action/autobuild@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c" # v3.28.1
65+
uses: "github/codeql-action/autobuild@6bb031afdd8eb862ea3fc1848194185e076637e5" # v3.28.11
6666

6767
# ℹ️ Command-line programs to run using the OS shell.
6868
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -75,6 +75,6 @@ jobs:
7575
# ./location_of_script_within_repo/buildscript.sh
7676

7777
- name: "Perform CodeQL Analysis"
78-
uses: "github/codeql-action/analyze@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c" # v3.28.1
78+
uses: "github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5" # v3.28.11
7979
with:
8080
category: "/language:${{matrix.language}}"

‎.github/workflows/comment-issue.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
issues: "write"
1717
steps:
1818
- name: "Harden Runner"
19-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
19+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
2020
with:
2121
egress-policy: "audit"
2222

‎.github/workflows/dependency-review.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
runs-on: "ubuntu-latest"
2222
steps:
2323
- name: "Harden Runner"
24-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
24+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
2525
with:
2626
egress-policy: "audit"
2727

‎.github/workflows/lint.yml‎

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
package_json_lintable: "${{ steps.changes.outputs.package_json_lintable }}"
3636
steps:
3737
- name: "Harden Runner"
38-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
38+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
3939
with:
4040
egress-policy: "audit"
4141

@@ -60,7 +60,7 @@ jobs:
6060
runs-on: "ubuntu-latest"
6161
steps:
6262
- name: "Harden Runner"
63-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
63+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
6464
with:
6565
egress-policy: "audit"
6666

@@ -77,7 +77,7 @@ jobs:
7777

7878
- name: "Derive appropriate SHAs for base and head for `nx affected` commands"
7979
id: "setSHAs"
80-
uses: "nrwl/nx-set-shas@e2e6dc8bce4b0387a05eb687735c39c41580b792" # v4
80+
uses: "nrwl/nx-set-shas@dbe0650947e5f2c81f59190a38512cf49126fe6b" # v4
8181

8282
- name: "Setup resources and environment"
8383
id: "setup"
@@ -88,7 +88,7 @@ jobs:
8888
# Temporary solution until Nx solve this https://github.com/nrwl/nx/issues/22259
8989
- name: "Get changed files"
9090
id: "files"
91-
uses: "tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f" # v45.0.6
91+
uses: "tj-actions/changed-files@dcc7a0cba800f454d79fff4b993e8c3555bcc0a8" # v45.0.7
9292
with:
9393
files_ignore_from_source_file: ".github/ignore-files-for-nx-affected.yml"
9494
base_sha: "${{ steps.setSHAs.outputs.base }}"
@@ -111,7 +111,7 @@ jobs:
111111
runs-on: "ubuntu-latest"
112112
steps:
113113
- name: "Harden Runner"
114-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
114+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
115115
with:
116116
egress-policy: "audit"
117117

@@ -128,7 +128,7 @@ jobs:
128128

129129
- name: "Derive appropriate SHAs for base and head for `nx affected` commands"
130130
id: "setSHAs"
131-
uses: "nrwl/nx-set-shas@e2e6dc8bce4b0387a05eb687735c39c41580b792" # v4
131+
uses: "nrwl/nx-set-shas@dbe0650947e5f2c81f59190a38512cf49126fe6b" # v4
132132

133133
- name: "Setup resources and environment"
134134
id: "setup"
@@ -139,7 +139,7 @@ jobs:
139139
# Temporary solution until Nx solve this https://github.com/nrwl/nx/issues/22259
140140
- name: "Get changed files"
141141
id: "files"
142-
uses: "tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f" # v45.0.6
142+
uses: "tj-actions/changed-files@dcc7a0cba800f454d79fff4b993e8c3555bcc0a8" # v45.0.7
143143
with:
144144
files_ignore_from_source_file: ".github/ignore-files-for-nx-affected.yml"
145145
base_sha: "${{ steps.setSHAs.outputs.base }}"
@@ -162,7 +162,7 @@ jobs:
162162
runs-on: "ubuntu-latest"
163163
steps:
164164
- name: "Harden Runner"
165-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
165+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
166166
with:
167167
egress-policy: "audit"
168168

@@ -179,7 +179,7 @@ jobs:
179179

180180
- name: "Derive appropriate SHAs for base and head for `nx affected` commands"
181181
id: "setSHAs"
182-
uses: "nrwl/nx-set-shas@e2e6dc8bce4b0387a05eb687735c39c41580b792" # v4
182+
uses: "nrwl/nx-set-shas@dbe0650947e5f2c81f59190a38512cf49126fe6b" # v4
183183

184184
- name: "Setup resources and environment"
185185
id: "setup"
@@ -190,7 +190,7 @@ jobs:
190190
# Temporary solution until Nx solve this https://github.com/nrwl/nx/issues/22259
191191
- name: "Get changed files"
192192
id: "files"
193-
uses: "tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f" # v45.0.6
193+
uses: "tj-actions/changed-files@dcc7a0cba800f454d79fff4b993e8c3555bcc0a8" # v45.0.7
194194
with:
195195
files_ignore_from_source_file: ".github/ignore-files-for-nx-affected.yml"
196196
base_sha: "${{ steps.setSHAs.outputs.base }}"
@@ -213,7 +213,7 @@ jobs:
213213
runs-on: "ubuntu-latest"
214214
steps:
215215
- name: "Harden Runner"
216-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
216+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
217217
with:
218218
egress-policy: "audit"
219219

@@ -237,7 +237,7 @@ jobs:
237237
runs-on: "ubuntu-latest"
238238
steps:
239239
- name: "Harden Runner"
240-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
240+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
241241
with:
242242
egress-policy: "audit"
243243

@@ -262,7 +262,7 @@ jobs:
262262
runs-on: "ubuntu-latest"
263263
steps:
264264
- name: "Harden Runner"
265-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
265+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
266266
with:
267267
egress-policy: "audit"
268268

@@ -273,14 +273,14 @@ jobs:
273273
GIT_AUTHOR_NAME: "GitHub Actions Shell"
274274
EMAIL: "github-actions[bot]@users.noreply.github.com"
275275

276-
- uses: "pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2" # v4.0.0
276+
- uses: "pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda" # v4.1.0
277277
with:
278278
run_install: false
279279

280280
- name: "Use Node.js 18.x"
281-
uses: "actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af" # v4.1.0
281+
uses: "actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a" # v4.2.0
282282
with:
283-
node-version: "18.x"
283+
node-version: "18.20.7"
284284
cache: "pnpm"
285285

286286
- name: "Verify the integrity of provenance attestations and registry signatures for installed dependencies"
@@ -312,7 +312,7 @@ jobs:
312312
# If any jobs we depend on fail, we will fail since this is a required check
313313
# NOTE: A timeout is considered a failure
314314
- name: "Harden Runner"
315-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
315+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
316316
with:
317317
egress-policy: "audit"
318318

‎.github/workflows/require-allow-edits.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616

1717
steps:
1818
- name: "Harden Runner"
19-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
19+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
2020
with:
2121
egress-policy: "audit"
2222

‎.github/workflows/scorecards.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333

3434
steps:
3535
- name: "Harden Runner"
36-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
36+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
3737
with:
3838
egress-policy: "audit"
3939

@@ -43,7 +43,7 @@ jobs:
4343
persist-credentials: false
4444

4545
- name: "Run analysis"
46-
uses: "ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46" # v2.4.0
46+
uses: "ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186" # v2.4.1
4747
with:
4848
results_file: "results.sarif"
4949
results_format: "sarif"
@@ -65,14 +65,14 @@ jobs:
6565
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6666
# format to the repository Actions tab.
6767
- name: "Upload artifact"
68-
uses: "actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08" # v4.6.0
68+
uses: "actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1" # v4.6.1
6969
with:
7070
name: "SARIF file"
7171
path: "results.sarif"
7272
retention-days: 5
7373

7474
# Upload the results to GitHub's code scanning dashboard.
7575
- name: "Upload to code-scanning"
76-
uses: "github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c" # v3.28.1
76+
uses: "github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5" # v3.28.11
7777
with:
7878
sarif_file: "results.sarif"

‎.github/workflows/semantic-pull-request.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
name: "Semantic Pull Request"
2424
steps:
2525
- name: "Harden Runner"
26-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
26+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
2727
with:
2828
egress-policy: "audit"
2929

‎.github/workflows/semantic-release.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828

2929
steps:
3030
- name: "Harden Runner"
31-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
31+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
3232
with:
3333
egress-policy: "audit"
3434

‎.github/workflows/test.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
codecov: "${{ steps.changes.outputs.codecov }}"
3333
steps:
3434
- name: "Harden Runner"
35-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
35+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
3636
with:
3737
egress-policy: "audit"
3838

@@ -72,7 +72,7 @@ jobs:
7272
NODE: "${{ matrix.node_version }}"
7373
steps:
7474
- name: "Harden Runner"
75-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
75+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
7676
with:
7777
egress-policy: "audit"
7878

@@ -89,7 +89,7 @@ jobs:
8989

9090
- name: "Derive appropriate SHAs for base and head for `nx affected` commands"
9191
id: "setSHAs"
92-
uses: "nrwl/nx-set-shas@e2e6dc8bce4b0387a05eb687735c39c41580b792" # v4
92+
uses: "nrwl/nx-set-shas@dbe0650947e5f2c81f59190a38512cf49126fe6b" # v4
9393

9494
- name: "Setup resources and environment"
9595
id: "setup"
@@ -100,7 +100,7 @@ jobs:
100100
# Temporary solution until Nx solve this https://github.com/nrwl/nx/issues/22259
101101
- name: "Get changed files"
102102
id: "files"
103-
uses: "tj-actions/changed-files@d6e91a2266cdb9d62096cebf1e8546899c6aa18f" # v45.0.6
103+
uses: "tj-actions/changed-files@dcc7a0cba800f454d79fff4b993e8c3555bcc0a8" # v45.0.7
104104
with:
105105
files_ignore_from_source_file: ".github/ignore-files-for-nx-affected.yml"
106106
base_sha: "${{ steps.setSHAs.outputs.base }}"
@@ -150,7 +150,7 @@ jobs:
150150
# If any jobs we depend on fail, we will fail since this is a required check
151151
# NOTE: A timeout is considered a failure
152152
- name: "Harden Runner"
153-
uses: "step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e" # v2.10.4
153+
uses: "step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481" # v2.11.0
154154
with:
155155
egress-policy: "audit"
156156

0 commit comments

Comments
 (0)