From f72db7608d0e81db56c65c914f00095a2e82fc28 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 17 Sep 2026 05:25:54 +0000 Subject: [PATCH] chore(deps): Bump the actions group with 3 updates Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/deploy-pages](https://github.com/actions/deploy-pages) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/deploy-pages` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v5.0.0...v5.0.1) Updates `github/codeql-action` from 4.37.8 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.8...v4.38.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/boj-build.yml | 2 +- .github/workflows/cargo-audit.yml | 4 ++-- .github/workflows/casket-pages.yml | 6 +++--- .github/workflows/codeql.yml | 6 +++--- .github/workflows/dashboard-check.yml | 2 +- .github/workflows/dogfood-gate.yml | 10 +++++----- .github/workflows/e2e.yml | 12 ++++++------ .github/workflows/main-estate-audit.yml | 2 +- .github/workflows/pages.yml | 6 +++--- .github/workflows/semgrep.yml | 4 ++-- .github/workflows/workflow-linter.yml | 2 +- 11 files changed, 28 insertions(+), 28 deletions(-) mode change 100755 => 100644 .github/workflows/main-estate-audit.yml diff --git a/.github/workflows/boj-build.yml b/.github/workflows/boj-build.yml index 501fc6a..c45a8e5 100644 --- a/.github/workflows/boj-build.yml +++ b/.github/workflows/boj-build.yml @@ -11,7 +11,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Trigger BoJ Server (Casket/ssg-mcp) run: | # Send a secure trigger to boj-server to build this repository diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml index 0fe1980..eced779 100644 --- a/.github/workflows/cargo-audit.yml +++ b/.github/workflows/cargo-audit.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - name: Install cargo-audit run: cargo install cargo-audit --locked @@ -46,7 +46,7 @@ jobs: permissions: issues: write steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - name: Create vulnerability issue env: diff --git a/.github/workflows/casket-pages.yml b/.github/workflows/casket-pages.yml index f21070c..dfee94c 100644 --- a/.github/workflows/casket-pages.yml +++ b/.github/workflows/casket-pages.yml @@ -23,10 +23,10 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Checkout casket-ssg - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 with: repository: hyperpolymath/casket-ssg path: .casket-ssg @@ -117,4 +117,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index aa923b5..ebe70a1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -43,15 +43,15 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.38.0 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.38.0 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/dashboard-check.yml b/.github/workflows/dashboard-check.yml index 1e19f8d..b9a7460 100644 --- a/.github/workflows/dashboard-check.yml +++ b/.github/workflows/dashboard-check.yml @@ -24,7 +24,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout repository - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@v1 diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml index 75f9e46..60421ad 100644 --- a/.github/workflows/dogfood-gate.yml +++ b/.github/workflows/dogfood-gate.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Check for A2ML files id: detect @@ -73,7 +73,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Check for K9 files id: detect @@ -123,7 +123,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Scan for invisible characters id: lint @@ -188,7 +188,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Check for Groove manifest id: groove @@ -249,7 +249,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Generate dogfooding scorecard run: | diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index 8b07a56..3ba1395 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@v1 - uses: Swatinem/rust-cache@v2.9.2 - name: Build @@ -34,7 +34,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@v1 - uses: Swatinem/rust-cache@v2.9.2 - name: Run benchmarks @@ -45,7 +45,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@v1 - uses: Swatinem/rust-cache@v2.9.2 - name: Build release @@ -58,7 +58,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - name: Run aspect tests run: bash tests/aspect/cross_cutting_test.sh @@ -67,7 +67,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - name: Install Zig run: | wget -q https://ziglang.org/download/0.13.0/zig-linux-x86_64-0.13.0.tar.xz @@ -84,7 +84,7 @@ jobs: timeout-minutes: 15 if: github.event_name == 'push' steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@v1 - name: Install panic-attack run: cargo install --git https://github.com/hyperpolymath/panic-attacker.git 2>/dev/null || echo "panic-attack unavailable" diff --git a/.github/workflows/main-estate-audit.yml b/.github/workflows/main-estate-audit.yml old mode 100755 new mode 100644 index b602e97..a9acdab --- a/.github/workflows/main-estate-audit.yml +++ b/.github/workflows/main-estate-audit.yml @@ -10,7 +10,7 @@ jobs: estate-audit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Required Files Gate uses: hyperpolymath/cicd-suite/actions/required-files-check@main diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index c458477..ab62a00 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -21,9 +21,9 @@ jobs: image: ghcr.io/stefan-hoeck/idris2-pack@sha256:f0758996a931fb35d9ecb1de273c4d59dabe2a09b433afc7e357f65a08b7e1ff steps: - name: Checkout Site - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 - name: Checkout Ddraig SSG - uses: actions/checkout@v7.0.1 + uses: actions/checkout@v7 with: repository: hyperpolymath/ddraig-ssg path: .ddraig-ssg @@ -53,4 +53,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index 9132292..2bed04e 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -25,13 +25,13 @@ jobs: container: image: semgrep/semgrep steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - name: Run Semgrep run: semgrep scan --sarif --output=semgrep.sarif --config=auto . - name: Upload SARIF - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.38.0 with: sarif_file: semgrep.sarif if: always() diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml index 8411d99..2c82ec5 100644 --- a/.github/workflows/workflow-linter.yml +++ b/.github/workflows/workflow-linter.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v7.0.1 + - uses: actions/checkout@v7 - name: Check SPDX headers run: |