From c90cdb644ca9ec165cd3c6fb65f609db8d61dd6b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 17 Jul 2026 17:24:52 +0000 Subject: [PATCH] ci(deps)(deps): bump the github-actions group across 1 directory with 5 updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.133` | `1.0.176` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.0` | `4.37.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.0` | `4.37.1` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.0` | `4.37.1` | Updates `actions/checkout` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) Updates `anthropics/claude-code-action` from 1.0.133 to 1.0.176 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251...700e7f8316990de46bed556429765647af760efc) Updates `github/codeql-action/init` from 4.36.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...7188fc363630916deb702c7fdcf4e481b751f97a) Updates `github/codeql-action/analyze` from 4.36.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...7188fc363630916deb702c7fdcf4e481b751f97a) Updates `github/codeql-action/upload-sarif` from 4.36.0 to 4.37.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...7188fc363630916deb702c7fdcf4e481b751f97a) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.158 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/local-org-policy-live-audit.yml | 2 +- .github/workflows/local-org-policy-live-probe.yml | 2 +- .github/workflows/local-org-tools-mock-tests.yml | 2 +- .github/workflows/reusable-bandit.yml | 4 ++-- .github/workflows/reusable-claude-code-review.yml | 4 ++-- .github/workflows/reusable-codeql.yml | 8 ++++---- .github/workflows/reusable-coverity.yml | 4 ++-- .github/workflows/reusable-cppcheck.yml | 4 ++-- .github/workflows/reusable-dist-ai-tests.yml | 8 ++++---- .github/workflows/reusable-pre-push-static.yml | 4 ++-- .github/workflows/reusable-scorecard.yml | 6 +++--- .github/workflows/reusable-secrets-audit.yml | 2 +- 12 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/workflows/local-org-policy-live-audit.yml b/.github/workflows/local-org-policy-live-audit.yml index c93be4e7..74e52744 100644 --- a/.github/workflows/local-org-policy-live-audit.yml +++ b/.github/workflows/local-org-policy-live-audit.yml @@ -73,7 +73,7 @@ jobs: steps: - name: Checkout developer-meta-files - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: persist-credentials: false diff --git a/.github/workflows/local-org-policy-live-probe.yml b/.github/workflows/local-org-policy-live-probe.yml index af307331..d92197dc 100644 --- a/.github/workflows/local-org-policy-live-probe.yml +++ b/.github/workflows/local-org-policy-live-probe.yml @@ -73,7 +73,7 @@ jobs: steps: - name: Checkout developer-meta-files - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 with: persist-credentials: false diff --git a/.github/workflows/local-org-tools-mock-tests.yml b/.github/workflows/local-org-tools-mock-tests.yml index f9ff3ea4..85fedfdd 100644 --- a/.github/workflows/local-org-tools-mock-tests.yml +++ b/.github/workflows/local-org-tools-mock-tests.yml @@ -65,7 +65,7 @@ jobs: image: debian:trixie steps: - name: Checkout developer-meta-files - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false diff --git a/.github/workflows/reusable-bandit.yml b/.github/workflows/reusable-bandit.yml index 8188f832..6870014f 100644 --- a/.github/workflows/reusable-bandit.yml +++ b/.github/workflows/reusable-bandit.yml @@ -101,7 +101,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -113,7 +113,7 @@ jobs: - name: Checkout developer-meta-files (discovery + step-summary helpers) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} diff --git a/.github/workflows/reusable-claude-code-review.yml b/.github/workflows/reusable-claude-code-review.yml index 985f4a53..b73393ef 100644 --- a/.github/workflows/reusable-claude-code-review.yml +++ b/.github/workflows/reusable-claude-code-review.yml @@ -192,12 +192,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: Run Claude Code Review - uses: anthropics/claude-code-action@787c5a0ce96a9a6cfb050ea0c8f4c05f2447c251 # v1 + uses: anthropics/claude-code-action@700e7f8316990de46bed556429765647af760efc # v1 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} ## Note: the action no longer accepts an 'allowed_users' diff --git a/.github/workflows/reusable-codeql.yml b/.github/workflows/reusable-codeql.yml index 4e91ace8..36dccaa3 100644 --- a/.github/workflows/reusable-codeql.yml +++ b/.github/workflows/reusable-codeql.yml @@ -169,13 +169,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: Checkout developer-meta-files (ci/ helpers + step-summary) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} @@ -211,7 +211,7 @@ jobs: run: bash -c "${PREPARE_COMMAND}" - name: Initialize CodeQL - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 with: languages: ${{ inputs.language }} build-mode: ${{ inputs.build-mode }} @@ -226,7 +226,7 @@ jobs: run: bash -c "${BUILD_COMMAND}" - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 with: category: "/language:${{ inputs.language }}" diff --git a/.github/workflows/reusable-coverity.yml b/.github/workflows/reusable-coverity.yml index 71347164..1df5065d 100644 --- a/.github/workflows/reusable-coverity.yml +++ b/.github/workflows/reusable-coverity.yml @@ -143,12 +143,12 @@ jobs: steps: - name: Checkout consumer repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: Checkout developer-meta-files (orchestration scripts) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: master diff --git a/.github/workflows/reusable-cppcheck.yml b/.github/workflows/reusable-cppcheck.yml index 194fa69b..d4497af5 100644 --- a/.github/workflows/reusable-cppcheck.yml +++ b/.github/workflows/reusable-cppcheck.yml @@ -92,13 +92,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false - name: Checkout developer-meta-files (ci/ helpers + step-summary) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} diff --git a/.github/workflows/reusable-dist-ai-tests.yml b/.github/workflows/reusable-dist-ai-tests.yml index 330a9094..51e4c16e 100644 --- a/.github/workflows/reusable-dist-ai-tests.yml +++ b/.github/workflows/reusable-dist-ai-tests.yml @@ -95,13 +95,13 @@ jobs: - name: Checkout component (code under test) ## https://github.com/actions/checkout/releases/tag/v6.0.2 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: path: component persist-credentials: false - name: Checkout dist-ai (test suites) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/dist-ai ref: ${{ inputs.dist-ai-ref }} @@ -109,7 +109,7 @@ jobs: persist-credentials: false - name: Checkout developer-meta-files (summary script) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: master @@ -125,7 +125,7 @@ jobs: - name: Checkout helper-scripts (for suites that drive its tools) if: steps.cfg.outputs.helper_scripts == 'true' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/helper-scripts ref: master diff --git a/.github/workflows/reusable-pre-push-static.yml b/.github/workflows/reusable-pre-push-static.yml index 711c3e00..880ece97 100644 --- a/.github/workflows/reusable-pre-push-static.yml +++ b/.github/workflows/reusable-pre-push-static.yml @@ -101,14 +101,14 @@ jobs: git config --global --add safe.directory '*' - name: Checkout caller repo (full history for git diff) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 persist-credentials: false - name: Checkout developer-meta-files (gate script) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} diff --git a/.github/workflows/reusable-scorecard.yml b/.github/workflows/reusable-scorecard.yml index 3e7b29d4..b39fb884 100644 --- a/.github/workflows/reusable-scorecard.yml +++ b/.github/workflows/reusable-scorecard.yml @@ -110,7 +110,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -129,13 +129,13 @@ jobs: retention-days: 14 - name: Upload to GitHub code scanning - uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/upload-sarif@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 with: sarif_file: results.sarif - name: Checkout developer-meta-files (step-summary helper) if: always() && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }} diff --git a/.github/workflows/reusable-secrets-audit.yml b/.github/workflows/reusable-secrets-audit.yml index 49b39864..fa438f0f 100644 --- a/.github/workflows/reusable-secrets-audit.yml +++ b/.github/workflows/reusable-secrets-audit.yml @@ -61,7 +61,7 @@ jobs: ## back to master. - name: Checkout developer-meta-files (audit script) if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: repository: org-ai-assisted/developer-meta-files ref: ${{ env.DMF_REF }}