From 8b3073a2eb6958aa70deb7c8e9a166dcf6c7af8f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 19:12:56 -0500 Subject: [PATCH 1/5] chore(deps): bump docker/login-action from 3 to 4 (#372) Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/docker-images.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/docker-images.yml b/.github/workflows/docker-images.yml index 4d5cfd242..65db4d338 100644 --- a/.github/workflows/docker-images.yml +++ b/.github/workflows/docker-images.yml @@ -40,7 +40,7 @@ jobs: uses: actions/checkout@v4 - name: Log in to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ghcr.io username: ${{ github.actor }} From 09d1f23ef2160b90e31a0f078094bc27ed43497a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 19:13:02 -0500 Subject: [PATCH 2/5] chore(deps): bump github/codeql-action from 3 to 4.37.3 (#373) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.37.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4.37.3) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/sdk-cli-ci.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/sdk-cli-ci.yml b/.github/workflows/sdk-cli-ci.yml index 8356dee60..774df3d88 100644 --- a/.github/workflows/sdk-cli-ci.yml +++ b/.github/workflows/sdk-cli-ci.yml @@ -391,16 +391,16 @@ jobs: uses: actions/checkout@v7 - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4.37.3 with: languages: javascript-typescript queries: security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@v3 + uses: github/codeql-action/autobuild@v4.37.3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4.37.3 with: category: "/language:javascript-typescript" @@ -427,7 +427,7 @@ jobs: severity: 'CRITICAL,HIGH' - name: Upload Trivy SARIF Report - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4.37.3 if: always() with: sarif_file: 'trivy-results.sarif' From dc048f3a315660e79e3e6c37dbf5bb05852997a2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 19:13:09 -0500 Subject: [PATCH 3/5] chore(deps): bump actions/download-artifact from 4 to 8 (#374) Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/sdk-cli-release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/sdk-cli-release.yml b/.github/workflows/sdk-cli-release.yml index ff76ea50e..f223304f1 100644 --- a/.github/workflows/sdk-cli-release.yml +++ b/.github/workflows/sdk-cli-release.yml @@ -275,7 +275,7 @@ jobs: runs-on: ${{ matrix.os }} steps: - name: Download Binary - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: binaries-${{ matrix.target }} path: ./binaries @@ -305,7 +305,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download Binary - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: binaries-node20-linux-x64 path: ./binaries @@ -342,7 +342,7 @@ jobs: uses: actions/checkout@v7 - name: Download All Binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: pattern: binaries-* path: ./release-assets From d0ae4586048d3a27eddb5c21a4b20c39a8c1ae1a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 19:13:14 -0500 Subject: [PATCH 4/5] chore(deps): bump actions/upload-artifact from 4 to 7 (#370) Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/evolith-validate-dogfood.yml | 2 +- .github/workflows/rag-index-sync.yml | 2 +- .github/workflows/reliability.yml | 4 ++-- 3 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/evolith-validate-dogfood.yml b/.github/workflows/evolith-validate-dogfood.yml index 2b15dbdcc..46c606423 100644 --- a/.github/workflows/evolith-validate-dogfood.yml +++ b/.github/workflows/evolith-validate-dogfood.yml @@ -170,7 +170,7 @@ jobs: - name: Upload the dogfood compliance report if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: evolith-validate-dogfood-report path: ${{ steps.report.outputs.report-path }} diff --git a/.github/workflows/rag-index-sync.yml b/.github/workflows/rag-index-sync.yml index ed61decaf..051e78f40 100644 --- a/.github/workflows/rag-index-sync.yml +++ b/.github/workflows/rag-index-sync.yml @@ -48,7 +48,7 @@ jobs: - name: Upload sync receipt if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: rag-sync-receipt path: rag-sync-receipt.json diff --git a/.github/workflows/reliability.yml b/.github/workflows/reliability.yml index 04b3308b7..e169f44e6 100644 --- a/.github/workflows/reliability.yml +++ b/.github/workflows/reliability.yml @@ -173,7 +173,7 @@ jobs: - name: Upload k6 summaries and server log if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: k6-reliability-${{ github.run_id }} path: | @@ -362,7 +362,7 @@ jobs: - name: Upload chaos logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: chaos-reliability-${{ github.run_id }} path: ${{ runner.temp }}/chaos-*.log From 411e77370f7c49c338a51c6efd8ace2b7a14a88b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 19:13:20 -0500 Subject: [PATCH 5/5] chore(deps): bump actions/setup-node from 4 to 7 (#371) Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 7. - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/ci-cd.yml | 24 +++++++++---------- .github/workflows/coverage-impact.yml | 2 +- .github/workflows/docs-release.yml | 4 ++-- .github/workflows/docs.yml | 4 ++-- .../workflows/enforce-root-cleanliness.yml | 2 +- .../workflows/evolith-validate-dogfood.yml | 4 ++-- .github/workflows/knowledge-intake.yml | 4 ++-- .github/workflows/npm-release.yml | 2 +- .github/workflows/opa-parity.yml | 2 +- .github/workflows/openssf-scorecard.yml | 2 +- .github/workflows/rag-index-sync.yml | 2 +- .github/workflows/reliability.yml | 4 ++-- .github/workflows/sdk-cli-ci.yml | 18 +++++++------- .github/workflows/sdk-cli-release.yml | 8 +++---- 14 files changed, 41 insertions(+), 41 deletions(-) diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index c93804a8f..37df242bb 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -31,7 +31,7 @@ jobs: fetch-tags: true - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' @@ -86,7 +86,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -125,7 +125,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -144,7 +144,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -216,7 +216,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -252,7 +252,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -277,7 +277,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -318,7 +318,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -345,7 +345,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -365,7 +365,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -386,7 +386,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' @@ -419,7 +419,7 @@ jobs: steps: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' diff --git a/.github/workflows/coverage-impact.yml b/.github/workflows/coverage-impact.yml index da16a519a..bb69b8687 100644 --- a/.github/workflows/coverage-impact.yml +++ b/.github/workflows/coverage-impact.yml @@ -23,7 +23,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: "20" diff --git a/.github/workflows/docs-release.yml b/.github/workflows/docs-release.yml index d14f9b9af..7404f71e6 100644 --- a/.github/workflows/docs-release.yml +++ b/.github/workflows/docs-release.yml @@ -65,7 +65,7 @@ jobs: fetch-depth: 0 - name: Setup Node - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' @@ -139,7 +139,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' cache: 'npm' diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 26f1469f7..b336f536f 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -30,7 +30,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: "20" @@ -61,7 +61,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: "20" cache: 'npm' diff --git a/.github/workflows/enforce-root-cleanliness.yml b/.github/workflows/enforce-root-cleanliness.yml index 59b86efdd..6dc8a6c4b 100644 --- a/.github/workflows/enforce-root-cleanliness.yml +++ b/.github/workflows/enforce-root-cleanliness.yml @@ -20,7 +20,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' diff --git a/.github/workflows/evolith-validate-dogfood.yml b/.github/workflows/evolith-validate-dogfood.yml index 46c606423..e43b52b5f 100644 --- a/.github/workflows/evolith-validate-dogfood.yml +++ b/.github/workflows/evolith-validate-dogfood.yml @@ -61,7 +61,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' @@ -84,7 +84,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' diff --git a/.github/workflows/knowledge-intake.yml b/.github/workflows/knowledge-intake.yml index a03878606..9ac6db9e4 100644 --- a/.github/workflows/knowledge-intake.yml +++ b/.github/workflows/knowledge-intake.yml @@ -35,7 +35,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' @@ -97,7 +97,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' diff --git a/.github/workflows/npm-release.yml b/.github/workflows/npm-release.yml index de01cbdf5..c0af7abf5 100644 --- a/.github/workflows/npm-release.yml +++ b/.github/workflows/npm-release.yml @@ -60,7 +60,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} registry-url: 'https://registry.npmjs.org' diff --git a/.github/workflows/opa-parity.yml b/.github/workflows/opa-parity.yml index 41279f13a..b1cca8c7d 100644 --- a/.github/workflows/opa-parity.yml +++ b/.github/workflows/opa-parity.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@v7 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: '20' - name: Install dependencies diff --git a/.github/workflows/openssf-scorecard.yml b/.github/workflows/openssf-scorecard.yml index a95c6b9d2..de2f5d164 100644 --- a/.github/workflows/openssf-scorecard.yml +++ b/.github/workflows/openssf-scorecard.yml @@ -117,7 +117,7 @@ jobs: sarif_file: scorecard-results.sarif - name: Setup Node.js - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '20' diff --git a/.github/workflows/rag-index-sync.yml b/.github/workflows/rag-index-sync.yml index 051e78f40..03beb99ee 100644 --- a/.github/workflows/rag-index-sync.yml +++ b/.github/workflows/rag-index-sync.yml @@ -30,7 +30,7 @@ jobs: with: fetch-depth: 2 # HEAD~1..HEAD delta - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7 with: node-version: '22' diff --git a/.github/workflows/reliability.yml b/.github/workflows/reliability.yml index e169f44e6..088cb0978 100644 --- a/.github/workflows/reliability.yml +++ b/.github/workflows/reliability.yml @@ -87,7 +87,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' @@ -197,7 +197,7 @@ jobs: - uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' diff --git a/.github/workflows/sdk-cli-ci.yml b/.github/workflows/sdk-cli-ci.yml index 774df3d88..8adca1932 100644 --- a/.github/workflows/sdk-cli-ci.yml +++ b/.github/workflows/sdk-cli-ci.yml @@ -61,7 +61,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' @@ -96,7 +96,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} @@ -127,7 +127,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' @@ -170,7 +170,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' @@ -225,7 +225,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} @@ -272,7 +272,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} @@ -339,7 +339,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} @@ -468,7 +468,7 @@ jobs: - uses: actions/checkout@v7 with: fetch-depth: 2 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} - name: Install dependencies @@ -499,7 +499,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' diff --git a/.github/workflows/sdk-cli-release.yml b/.github/workflows/sdk-cli-release.yml index f223304f1..0d2716c22 100644 --- a/.github/workflows/sdk-cli-release.yml +++ b/.github/workflows/sdk-cli-release.yml @@ -41,7 +41,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' @@ -117,7 +117,7 @@ jobs: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} registry-url: 'https://registry.npmjs.org' @@ -173,7 +173,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }} registry-url: 'https://registry.npmjs.org' @@ -218,7 +218,7 @@ jobs: uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: ${{ env.NODE_VERSION }}