Skip to content

Commit 2f0bdc7

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the github-owned-actions group across 1 directory with 8 updates
Bumps the github-owned-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `6.0.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.30.9` | `4.31.7` | | [actions/stale](https://github.com/actions/stale) | `10.1.0` | `10.1.1` | | [github/cleanowners](https://github.com/github/cleanowners) | `1.2.9` | `1.2.12` | | [github/contributors](https://github.com/github/contributors) | `1.7.4` | `1.7.7` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.8.1` | `4.8.2` | | [github/evergreen](https://github.com/github/evergreen) | `1.24.5` | `1.24.9` | Updates `actions/checkout` from 5.0.0 to 6.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@08c6903...8e8c483) Updates `actions/upload-artifact` from 4.6.2 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...330a01c) Updates `github/codeql-action` from 4.30.9 to 4.31.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@16140ae...cf1bb45) Updates `actions/stale` from 10.1.0 to 10.1.1 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@5f858e3...9971854) Updates `github/cleanowners` from 1.2.9 to 1.2.12 - [Release notes](https://github.com/github/cleanowners/releases) - [Commits](github-community-projects/cleanowners@5128e46...012102f) Updates `github/contributors` from 1.7.4 to 1.7.7 - [Release notes](https://github.com/github/contributors/releases) - [Commits](github-community-projects/contributors@2685bb0...e345de7) Updates `actions/dependency-review-action` from 4.8.1 to 4.8.2 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](actions/dependency-review-action@40c09b7...3c4e3dc) Updates `github/evergreen` from 1.24.5 to 1.24.9 - [Release notes](https://github.com/github/evergreen/releases) - [Commits](github-community-projects/evergreen@de85d31...f20e4cc) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-owned-actions - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-owned-actions - dependency-name: github/codeql-action dependency-version: 4.31.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-owned-actions - dependency-name: actions/stale dependency-version: 10.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-owned-actions - dependency-name: github/cleanowners dependency-version: 1.2.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-owned-actions - dependency-name: github/contributors dependency-version: 1.7.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-owned-actions - dependency-name: actions/dependency-review-action dependency-version: 4.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-owned-actions - dependency-name: github/evergreen dependency-version: 1.24.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-owned-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 0fb9c38 commit 2f0bdc7

8 files changed

Lines changed: 11 additions & 11 deletions

File tree

‎.github/workflows/_lint.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
1919
with:
2020
egress-policy: audit
21-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222
with:
2323
fetch-depth: 0
2424
persist-credentials: false

‎.github/workflows/_scorecard.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
id-token: write
2121
security-events: write
2222
steps:
23-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424
with:
2525
persist-credentials: false
2626
- name: ✅ run scorecard analysis
@@ -31,12 +31,12 @@ jobs:
3131
repo_token: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
3232
publish_results: ${{ inputs.publish-results }}
3333
- name: ⏫ upload sarif artifact
34-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
34+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
3535
with:
3636
name: SARIF file
3737
path: results.sarif
3838
retention-days: 5
3939
- name: 📦 upload sarif results
40-
uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
40+
uses: github/codeql-action/upload-sarif@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
4141
with:
4242
sarif_file: results.sarif

‎.github/workflows/_stale.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: 📆 mark stale activity
31-
uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
31+
uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0
3232
with:
3333
repo-token: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
3434
days-before-stale: ${{ inputs.days-until-stale }}

‎.github/workflows/clean-owners.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
issues: write
1919
steps:
2020
- name: 🧼 clean codeowners
21-
uses: github/cleanowners@5128e4614bd2f1820cdc670392eb5d6a365b3b64 # v1.2.9
21+
uses: github/cleanowners@884a0ebb00d66e20774bd1868f42aee014f8e6c3 # v1.3.0
2222
env:
2323
GH_TOKEN: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
2424
ORGANIZATION: bloomberg

‎.github/workflows/contributor-report.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
echo "START_DATE=$START_DATE" >> "$GITHUB_ENV"
3737
echo "END_DATE=$END_DATE" >> "$GITHUB_ENV"
3838
- name: 📰 run contributors action
39-
uses: github/contributors@2685bb003d6b9eecde35e82bb1bd1df4dfb7be08 # v1.7.4
39+
uses: github/contributors@0d5adc3833e89ee1f4145744f5d69313cf5ea238 # v1.7.8
4040
env:
4141
GH_TOKEN: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
4242
START_DATE: ${{ env.START_DATE }}

‎.github/workflows/dependency-review.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,11 +18,11 @@ jobs:
1818
uses: step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2 # v2.13.2
1919
with:
2020
egress-policy: audit
21-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2222
with:
2323
persist-credentials: false
2424
- name: 🔂 dependency review
25-
uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1
25+
uses: actions/dependency-review-action@05fe4576374b728f0c523d6a13d64c25081e0803 # v4.8.3
2626
with:
2727
deny-licenses: AGPL-3.0
2828
fail-on-severity: moderate

‎.github/workflows/evergreen-check.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
# # Create env variable for next step
3333
# echo "ONE_WEEK_AGO=$PREVIOUS_DATE" >> "$GITHUB_ENV"
3434
- name: 🌲 evergreen check
35-
uses: github/evergreen@de85d31b3656847d97c180ac572307b401ec0776 # v1.24.5
35+
uses: github/evergreen@f20e4ccfb95ff18c8668834d930cfcbb799668e3 # v1.24.9
3636
env:
3737
GH_TOKEN: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }}
3838
ORGANIZATION: bloomberg

‎.github/workflows/scorecard-monitor.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
# Required to create issues
3030
issues: write
3131
steps:
32-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
32+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3333
with:
3434
persist-credentials: false
3535
- name: 🔍 run scorecard monitor

0 commit comments

Comments
 (0)