From 6b392f14268a67e96ab6cc894e6f75dd58814880 Mon Sep 17 00:00:00 2001 From: "renovate-coveo[bot]" <115253437+renovate-coveo[bot]@users.noreply.github.com> Date: Tue, 24 Dec 2024 22:08:37 +0000 Subject: [PATCH] chore(deps): update all non-major dependencies --- .github/workflows/dependency-review-v2.yml | 2 +- .github/workflows/dependency-review.yml | 2 +- .github/workflows/scorecard.yml | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/dependency-review-v2.yml b/.github/workflows/dependency-review-v2.yml index 4cabaa3..4ba80e6 100644 --- a/.github/workflows/dependency-review-v2.yml +++ b/.github/workflows/dependency-review-v2.yml @@ -115,7 +115,7 @@ jobs: core.setFailure(`Could not determine configuration for inputs: ${inputs}`) - name: Scan - uses: actions/dependency-review-action@v4.3.3 + uses: actions/dependency-review-action@v4.5.0 with: comment-summary-in-pr: ${{ inputs.comment-summary-in-pr }} fail-on-severity: ${{ inputs.fail-on-severity }} diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index da521c7..fab3aad 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -88,7 +88,7 @@ jobs: core.setFailure(`Could not determine configuration for inputs: ${inputs}`) - name: Scan - uses: actions/dependency-review-action@v4.3.3 + uses: actions/dependency-review-action@v4.5.0 with: comment-summary-in-pr: ${{ inputs.comment-summary-in-pr }} fail-on-severity: ${{ inputs.fail-on-severity }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 6fc28f2..a94709b 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,12 +32,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 + uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0 with: results_file: results.sarif results_format: sarif @@ -59,7 +59,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 with: name: SARIF file path: results.sarif