From a16003f2d1fc203626ec38e5d030ef591c64d23a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Aug 2026 00:09:30 +0000 Subject: [PATCH] build(deps): bump the dependencies group across 1 directory with 6 updates Bumps the dependencies group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [envoyproxy/toolshed/actions/github/pr](https://github.com/envoyproxy/toolshed) | `98b13b6d4f551c27b406cb090d9ff7bf6877d1f6` | `02c884bb4d66857bb47271f5355d1c386df8e2a0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `448e3f862ab3ef47aa50ff917776823c9946035b` | `484a0b528fb4d7bd804637ccb632e47a0e638317` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | Updates `envoyproxy/toolshed/actions/github/pr` from 98b13b6d4f551c27b406cb090d9ff7bf6877d1f6 to 02c884bb4d66857bb47271f5355d1c386df8e2a0 - [Release notes](https://github.com/envoyproxy/toolshed/releases) - [Commits](https://github.com/envoyproxy/toolshed/compare/98b13b6d4f551c27b406cb090d9ff7bf6877d1f6...02c884bb4d66857bb47271f5355d1c386df8e2a0) Updates `actions/download-artifact` from 448e3f862ab3ef47aa50ff917776823c9946035b to 484a0b528fb4d7bd804637ccb632e47a0e638317 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/448e3f862ab3ef47aa50ff917776823c9946035b...484a0b528fb4d7bd804637ccb632e47a0e638317) Updates `github/codeql-action/init` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `github/codeql-action/autobuild` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `github/codeql-action/analyze` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `github/codeql-action/upload-sarif` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: envoyproxy/toolshed/actions/github/pr dependency-version: 02c884bb4d66857bb47271f5355d1c386df8e2a0 dependency-type: direct:production dependency-group: dependencies - dependency-name: actions/download-artifact dependency-version: 484a0b528fb4d7bd804637ccb632e47a0e638317 dependency-type: direct:production dependency-group: dependencies - dependency-name: github/codeql-action/init dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/analyze dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/_release.yml | 2 +- .github/workflows/bazel.yml | 2 +- .github/workflows/codeql.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml index 2dd3122ae0..6ee51553f3 100644 --- a/.github/workflows/_release.yml +++ b/.github/workflows/_release.yml @@ -496,7 +496,7 @@ jobs: echo "message=${COMMIT_MESSAGE}" >> "$GITHUB_OUTPUT" echo "changes=true" >> "$GITHUB_OUTPUT" - name: Create Pull Request - uses: envoyproxy/toolshed/actions/github/pr@98b13b6d4f551c27b406cb090d9ff7bf6877d1f6 # actions-v0.4.20 + fix + uses: envoyproxy/toolshed/actions/github/pr@02c884bb4d66857bb47271f5355d1c386df8e2a0 # actions-v0.4.20 + fix if: fromJSON(steps.commit.outputs.changes) with: base: main diff --git a/.github/workflows/bazel.yml b/.github/workflows/bazel.yml index 02f050d72e..797a6d461f 100644 --- a/.github/workflows/bazel.yml +++ b/.github/workflows/bazel.yml @@ -193,7 +193,7 @@ jobs: - name: Checkout Repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download artifacts - uses: actions/download-artifact@448e3f862ab3ef47aa50ff917776823c9946035b # v5.0.0 + uses: actions/download-artifact@484a0b528fb4d7bd804637ccb632e47a0e638317 # v5.0.0 with: name: bazel-artifacts path: artifacts diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c1d3535877..ccff9de061 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -52,15 +52,15 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: languages: ${{ matrix.language }} config-file: ./.github/codeql/codeql-config.yml - name: Autobuild - uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 0aed96ef3f..84b5bb430b 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -44,6 +44,6 @@ jobs: retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: results.sarif