From 8b08a13692ab62760e6bf004c660dba431a6fad6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 15 Sep 2026 14:43:15 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 9 updates Bumps the github-actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.4.0` | `7.0.1` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `7.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/setup-java](https://github.com/actions/setup-java) | `4.9.1` | `6.0.1` | | [gradle/actions/setup-gradle](https://github.com/gradle/actions) | `4.4.3` | `6.3.0` | | [android-actions/setup-android](https://github.com/android-actions/setup-android) | `3.2.2` | `4.0.1` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.6.2` | `3.0.3` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `7.0.0` | | [actions/github-script](https://github.com/actions/github-script) | `7.1.0` | `9.0.0` | Updates `actions/checkout` from 4.4.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/11d5960a326750d5838078e36cf38b85af677262...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `actions/setup-python` from 5.6.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/a26af69be951a213d495a4c3e4e4022e16d87065...5fda3b95a4ea91299a34e894583c3862153e4b97) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) Updates `actions/setup-java` from 4.9.1 to 6.0.1 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/cf277c60eb25467037889841efdb72551f06f6c3...de7274f081f381c8f8158605e0321c36c376e2e6) Updates `gradle/actions/setup-gradle` from 4.4.3 to 6.3.0 - [Release notes](https://github.com/gradle/actions/releases) - [Commits](https://github.com/gradle/actions/compare/ed408507eac070d1f99cc633dbcf757c94c7933a...9c971963bec38e04b3d30dcc455b5382be2fdbfb) Updates `android-actions/setup-android` from 3.2.2 to 4.0.1 - [Release notes](https://github.com/android-actions/setup-android/releases) - [Commits](https://github.com/android-actions/setup-android/compare/9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407...40fd30fb8d7440372e1316f5d1809ec01dcd3699) Updates `softprops/action-gh-release` from 2.6.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/3bb12739c298aeb8a4eeaf626c5b8d85266b0e65...efb35369e0ad2afab669f228072c1b0d510eae64) Updates `actions/setup-node` from 4.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...820762786026740c76f36085b0efc47a31fe5020) Updates `actions/github-script` from 7.1.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/f28e40c7f34bde8b3046d885e986cb6290c5673b...3a2844b7e9c422d3c10d287c895573f7108da1b3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: android-actions/setup-android dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: gradle/actions/setup-gradle dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/autoscript.yml | 6 +++--- .github/workflows/build-apk.yml | 16 ++++++++-------- .github/workflows/check-app-updates.yml | 4 ++-- .github/workflows/daily_report.yml | 4 ++-- .github/workflows/dedupe-catalog.yml | 4 ++-- .github/workflows/deploy.yml | 6 +++--- .github/workflows/enrich-app-logos.yml | 4 ++-- .github/workflows/generate-cert-pin.yml | 4 ++-- .github/workflows/keystore-generate.yml | 6 +++--- .github/workflows/preview.yml | 2 +- .github/workflows/quality.yml | 20 ++++++++++---------- .github/workflows/seed-foss-catalog.yml | 4 ++-- .github/workflows/vapid-keys.yml | 4 ++-- 13 files changed, 42 insertions(+), 42 deletions(-) diff --git a/.github/workflows/autoscript.yml b/.github/workflows/autoscript.yml index bc82995..13d61b0 100644 --- a/.github/workflows/autoscript.yml +++ b/.github/workflows/autoscript.yml @@ -18,8 +18,8 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.11' - name: Ejecutar @@ -29,7 +29,7 @@ jobs: TELEGRAM_CHAT_ID: ${{ secrets.TELEGRAM_CHAT_ID }} BACKEND_URL: ${{ secrets.BACKEND_URL }} run: python python/codehub.py ${{ github.event.inputs.command || 'all' }} - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: backups-${{ github.run_number }} diff --git a/.github/workflows/build-apk.yml b/.github/workflows/build-apk.yml index f49f588..de58b8f 100644 --- a/.github/workflows/build-apk.yml +++ b/.github/workflows/build-apk.yml @@ -25,16 +25,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Java JDK 17 - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4 + uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: java-version: '17' distribution: 'temurin' - name: Setup Gradle - uses: gradle/actions/setup-gradle@ed408507eac070d1f99cc633dbcf757c94c7933a # v4 + uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 with: gradle-version: '8.5' @@ -43,7 +43,7 @@ jobs: # trae el SDK pre-instalado (compileSdk 34) en $ANDROID_HOME. - name: Setup Android SDK id: setup-android - uses: android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3 + uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 continue-on-error: true - name: Accept SDK licenses @@ -111,7 +111,7 @@ jobs: - name: Upload compile log (debug) if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: compile-debug-log path: ${{ runner.temp }}/compile-debug.log @@ -221,7 +221,7 @@ jobs: - name: Upload release build log if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: release-build-log path: ${{ runner.temp }}/release-build.log @@ -328,7 +328,7 @@ jobs: - name: Upload APK artifact if: always() && hashFiles('apk/android/**/*.apk') != '' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: codehub-apk-build path: apk/android/**/*.apk @@ -351,7 +351,7 @@ jobs: - name: Create Release if: env.HAS_RELEASE_SECRETS == 'true' - uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 with: tag_name: apk-${{ steps.version.outputs.version }} name: "📱 CodeHub APK ${{ steps.version.outputs.version }}" diff --git a/.github/workflows/check-app-updates.yml b/.github/workflows/check-app-updates.yml index ed35f24..72c42b4 100644 --- a/.github/workflows/check-app-updates.yml +++ b/.github/workflows/check-app-updates.yml @@ -15,10 +15,10 @@ jobs: steps: - name: 📥 Checkout repositorio - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: ⚙️ Setup Node.js 20 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '20' diff --git a/.github/workflows/daily_report.yml b/.github/workflows/daily_report.yml index e452e7f..03eab39 100644 --- a/.github/workflows/daily_report.yml +++ b/.github/workflows/daily_report.yml @@ -11,8 +11,8 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.11' cache: 'pip' diff --git a/.github/workflows/dedupe-catalog.yml b/.github/workflows/dedupe-catalog.yml index cda4b63..faca30b 100644 --- a/.github/workflows/dedupe-catalog.yml +++ b/.github/workflows/dedupe-catalog.yml @@ -21,10 +21,10 @@ jobs: steps: - name: 📥 Checkout repositorio - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: ⚙️ Setup Node.js 20 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '20' diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 6cda9c9..14efa3a 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -11,7 +11,7 @@ jobs: name: Frontend runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Verificar archivos criticos run: | @@ -36,8 +36,8 @@ jobs: name: Backend runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '18' - name: Instalar dependencias diff --git a/.github/workflows/enrich-app-logos.yml b/.github/workflows/enrich-app-logos.yml index 6cfa371..387a599 100644 --- a/.github/workflows/enrich-app-logos.yml +++ b/.github/workflows/enrich-app-logos.yml @@ -28,10 +28,10 @@ jobs: steps: - name: 📥 Checkout repositorio - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: ⚙️ Setup Node.js 20 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '20' diff --git a/.github/workflows/generate-cert-pin.yml b/.github/workflows/generate-cert-pin.yml index 8da1727..e37b072 100644 --- a/.github/workflows/generate-cert-pin.yml +++ b/.github/workflows/generate-cert-pin.yml @@ -24,12 +24,12 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Setup Android SDK - uses: android-actions/setup-android@9fc6c4e9069bf8d3d10b2204b1fb8f6ef7065407 # v3 + uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 - name: Descargar APK del release env: diff --git a/.github/workflows/keystore-generate.yml b/.github/workflows/keystore-generate.yml index cbd5b52..02226fb 100644 --- a/.github/workflows/keystore-generate.yml +++ b/.github/workflows/keystore-generate.yml @@ -16,12 +16,12 @@ jobs: KEY_PASSWORD: ${{ secrets.KEY_PASSWORD }} steps: - name: Checkout code - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Setup Java JDK 17 - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4 + uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: java-version: '17' distribution: 'temurin' @@ -69,7 +69,7 @@ jobs: fi - name: Subir keystore como artefacto (descargar y guardar fuera) - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: codehub-release-keystore path: | diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml index 6f2b9f0..8aac673 100644 --- a/.github/workflows/preview.yml +++ b/.github/workflows/preview.yml @@ -73,7 +73,7 @@ jobs: - name: Comentar URL de preview en la PR if: env.VERCEL_TOKEN != '' && steps.deploy.outputs.ready == 'true' - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | const url = "${{ steps.deploy.outputs.url }}"; diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 89c157b..47ceb57 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -12,10 +12,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: npm @@ -37,10 +37,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: npm @@ -65,10 +65,10 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: npm @@ -87,7 +87,7 @@ jobs: - name: Subir reporte si falla if: failure() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: playwright-report path: playwright-report/ @@ -100,10 +100,10 @@ jobs: continue-on-error: true steps: - name: Checkout - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: npm @@ -122,7 +122,7 @@ jobs: - name: Subir reporte Lighthouse if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: lighthouse-report path: lighthouse-out/ diff --git a/.github/workflows/seed-foss-catalog.yml b/.github/workflows/seed-foss-catalog.yml index 747b768..361ff44 100644 --- a/.github/workflows/seed-foss-catalog.yml +++ b/.github/workflows/seed-foss-catalog.yml @@ -16,10 +16,10 @@ jobs: steps: - name: 📥 Checkout repositorio - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: ⚙️ Setup Node.js 20 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '20' diff --git a/.github/workflows/vapid-keys.yml b/.github/workflows/vapid-keys.yml index cb238d8..8a016a6 100644 --- a/.github/workflows/vapid-keys.yml +++ b/.github/workflows/vapid-keys.yml @@ -28,9 +28,9 @@ jobs: name: Generar y configurar VAPID en Render runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '20'