From 77faa72fa13a8278198993b082cc40d30528e7a9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 7 Nov 2026 20:33:23 +0000 Subject: [PATCH] chore(deps): bump the actions group with 5 updates Bumps the actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.39.1` | `4.39.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.39.1` | `4.39.3` | | [hyperpolymath/gitbot-fleet/.github/workflows/fleet-report-back-reusable.yml](https://github.com/hyperpolymath/gitbot-fleet) | `34908580b98cd354caa3bfc5a000bc7935957fce` | `46d26a4b084c40847d9a2f2ef98305502b7320bc` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.39.1` | `4.39.3` | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.14.2` | `2.22.3` | Updates `github/codeql-action/init` from 4.39.1 to 4.39.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066) Updates `github/codeql-action/analyze` from 4.39.1 to 4.39.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066) Updates `hyperpolymath/gitbot-fleet/.github/workflows/fleet-report-back-reusable.yml` from 34908580b98cd354caa3bfc5a000bc7935957fce to 46d26a4b084c40847d9a2f2ef98305502b7320bc - [Changelog](https://github.com/hyperpolymath/gitbot-fleet/blob/main/CHANGELOG.md) - [Commits](https://github.com/hyperpolymath/gitbot-fleet/compare/34908580b98cd354caa3bfc5a000bc7935957fce...46d26a4b084c40847d9a2f2ef98305502b7320bc) Updates `github/codeql-action/upload-sarif` from 4.39.1 to 4.39.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...33d7b85da1a04171e211befe2c739303b9a4c066) Updates `step-security/harden-runner` from 2.14.2 to 2.22.3 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/5ef0c079ce82195b2a36a210272d6b661572d83e...46b06cea07f9e64621fdf066ba77ac6915163d43) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.39.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: hyperpolymath/gitbot-fleet/.github/workflows/fleet-report-back-reusable.yml dependency-version: 46d26a4b084c40847d9a2f2ef98305502b7320bc dependency-type: direct:production dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: step-security/harden-runner dependency-version: 2.22.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 24 +++++++++--------------- .github/workflows/codeql.yml | 4 ++-- .github/workflows/hypatia-scan.yml | 4 ++-- .github/workflows/push-email-notify.yml | 2 +- 4 files changed, 14 insertions(+), 20 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 90dd67f..62e0200 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -11,8 +11,7 @@ workflows: '.github/workflows/codeql.yml': - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - 'actions/checkout@v7.0.1' - - 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370' - - 'github/codeql-action@v4.39.1' + - 'github/codeql-action@33d7b85da1a04171e211befe2c739303b9a4c066' '.github/workflows/governance.yml': [] '.github/workflows/hypatia-scan.yml': - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' @@ -20,7 +19,7 @@ workflows: - 'actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333' - 'actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9' - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' - - 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370' + - 'github/codeql-action@33d7b85da1a04171e211befe2c739303b9a4c066' '.github/workflows/label-triage.yml': [] '.github/workflows/labels.yml': [] '.github/workflows/metadata.yml': @@ -36,7 +35,7 @@ workflows: '.github/workflows/push-email-notify.yml': - 'hyperpolymath/smtp-notify-action@e384daf6167a7a7567642d6a62060106244d2413' - 'hyperpolymath/smtp-notify-action@v0.5.1' - - 'step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e' + - 'step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43' '.github/workflows/scorecard.yml': [] '.github/workflows/secret-scanner.yml': [] dependencies: @@ -104,14 +103,9 @@ dependencies: commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' owner_id: 47606891 repo_id: 331103973 - 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370': - ref: 'v4.39.1' - commit: 'sha1-9b3254085494b55a0f7c4c2b3d2d52cc712ce370' - owner_id: 9919 - repo_id: 259445878 - 'github/codeql-action@v4.39.1': - ref: 'v4.39.1' - commit: 'sha1-9b3254085494b55a0f7c4c2b3d2d52cc712ce370' + 'github/codeql-action@33d7b85da1a04171e211befe2c739303b9a4c066': + ref: 'v4.39.3' + commit: 'sha1-33d7b85da1a04171e211befe2c739303b9a4c066' owner_id: 9919 repo_id: 259445878 'hyperpolymath/smtp-notify-action@e384daf6167a7a7567642d6a62060106244d2413': @@ -124,8 +118,8 @@ dependencies: commit: 'sha1-e384daf6167a7a7567642d6a62060106244d2413' owner_id: 6759885 repo_id: 1352485172 - 'step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e': - ref: 'v2.14.2' - commit: 'sha1-5ef0c079ce82195b2a36a210272d6b661572d83e' + 'step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43': + ref: 'v2.22.3' + commit: 'sha1-46b06cea07f9e64621fdf066ba77ac6915163d43' owner_id: 88700172 repo_id: 422287306 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f000bee..e68b74d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -50,12 +50,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/hypatia-scan.yml b/.github/workflows/hypatia-scan.yml index 3250ce3..9a61646 100644 --- a/.github/workflows/hypatia-scan.yml +++ b/.github/workflows/hypatia-scan.yml @@ -26,7 +26,7 @@ jobs: fleet: permissions: contents: read - uses: hyperpolymath/gitbot-fleet/.github/workflows/fleet-report-back-reusable.yml@34908580b98cd354caa3bfc5a000bc7935957fce + uses: hyperpolymath/gitbot-fleet/.github/workflows/fleet-report-back-reusable.yml@46d26a4b084c40847d9a2f2ef98305502b7320bc with: enrolment: .gitbot-fleet/enrolment.json artifact-name: fleet-report-backs @@ -118,7 +118,7 @@ jobs: - name: Upload Hypatia SARIF to GitHub Code Scanning if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository - uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: sarif_file: hypatia.sarif category: hypatia diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index 6fd5373..93d57c9 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -41,7 +41,7 @@ jobs: timeout-minutes: 5 steps: - name: Restrict outbound requests before supplying SMTP credentials - uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: block # The pinned action downloads its checksum-verified release binary,