From c34cbb6e337a9894e8796716835792d0bcd530bb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Sep 2026 00:11:38 +0000 Subject: [PATCH] build(deps): bump the actions-deps group across 1 directory with 6 updates Bumps the actions-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.321.0` | `1.327.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.9` | `4.38.2` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.9` | `4.38.2` | | [cloudflare/wrangler-action](https://github.com/cloudflare/wrangler-action) | `4.0.0` | `4.1.3` | | [actions/setup-java](https://github.com/actions/setup-java) | `6.0.0` | `6.0.1` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.9` | `4.38.2` | Updates `ruby/setup-ruby` from 1.321.0 to 1.327.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](https://github.com/ruby/setup-ruby/compare/95ef2b042f9d7a56d8268cba8559e2842e2ad01b...14594264cd68ce8a2345dd349bc3d138a4ef85c8) Updates `github/codeql-action/init` from 4.37.9 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.37.9 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `cloudflare/wrangler-action` from 4.0.0 to 4.1.3 - [Release notes](https://github.com/cloudflare/wrangler-action/releases) - [Changelog](https://github.com/cloudflare/wrangler-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/cloudflare/wrangler-action/compare/ebbaa1584979971c8614a24965b4405ff95890e0...953926a2e2182532811c01a25e53647d93bf07c0) Updates `actions/setup-java` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/dd06d9cba3e5552c54d9f8ea23572deb30010f7c...de7274f081f381c8f8158605e0321c36c376e2e6) Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-version: 1.327.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: cloudflare/wrangler-action dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/setup-java dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/appstore-metadata.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/deploy-landing.yml | 2 +- .github/workflows/maestro.yml | 2 +- .github/workflows/preview-landing.yml | 2 +- .github/workflows/scorecard.yml | 2 +- .github/workflows/semgrep.yml | 2 +- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/appstore-metadata.yml b/.github/workflows/appstore-metadata.yml index 300787b3..40548d9d 100644 --- a/.github/workflows/appstore-metadata.yml +++ b/.github/workflows/appstore-metadata.yml @@ -59,7 +59,7 @@ jobs: with: node-version: "22" - - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1 + - uses: ruby/setup-ruby@14594264cd68ce8a2345dd349bc3d138a4ef85c8 # v1 if: steps.gate.outputs.ok == 'true' with: ruby-version: "3.3" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 10c3cd74..e22c2816 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -34,7 +34,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: # NOTE: the init input is `languages` (plural). Passing the singular # `language` is silently ignored, which makes CodeQL AUTO-DETECT every @@ -56,6 +56,6 @@ jobs: # one-line diff that quietly stops analysing shipped code. config-file: .github/codeql/config.yml - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/deploy-landing.yml b/.github/workflows/deploy-landing.yml index b6181dcc..44022939 100644 --- a/.github/workflows/deploy-landing.yml +++ b/.github/workflows/deploy-landing.yml @@ -30,7 +30,7 @@ jobs: - name: Bundle plugin registry into the site run: cp -r registry landing/registry - name: Deploy to Cloudflare Pages - uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4 + uses: cloudflare/wrangler-action@953926a2e2182532811c01a25e53647d93bf07c0 # v4 with: apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} diff --git a/.github/workflows/maestro.yml b/.github/workflows/maestro.yml index 4ba7cc7b..eaf2dc1b 100644 --- a/.github/workflows/maestro.yml +++ b/.github/workflows/maestro.yml @@ -25,7 +25,7 @@ jobs: node-version: "22" cache: npm cache-dependency-path: phone-app/package-lock.json - - uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 + - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: distribution: temurin java-version: "17" diff --git a/.github/workflows/preview-landing.yml b/.github/workflows/preview-landing.yml index e09a297f..2f0a7206 100644 --- a/.github/workflows/preview-landing.yml +++ b/.github/workflows/preview-landing.yml @@ -34,7 +34,7 @@ jobs: - name: Bundle plugin registry into the site run: cp -r registry landing/registry - name: Deploy preview to Cloudflare Pages - uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4 + uses: cloudflare/wrangler-action@953926a2e2182532811c01a25e53647d93bf07c0 # v4 with: apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 706b1d91..819994e2 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -54,7 +54,7 @@ jobs: # contributor trust signal; the run is worthless as a private artifact. publish_results: true - name: Upload SARIF to the Security tab - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: sarif_file: results.sarif category: scorecard diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index b7106b65..7b371eea 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -99,7 +99,7 @@ jobs: # always(): publish findings even though the scan step above is marked # continue-on-error (and even once it is later made blocking). if: always() - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: sarif_file: semgrep.sarif category: semgrep