From 39bab18e2f672e73b38face50ed955e0b68d5ca5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 21 Aug 2026 00:08:29 +0000 Subject: [PATCH] build(deps): bump the dependencies group across 1 directory with 7 updates Bumps the dependencies group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.3.0` | | [envoyproxy/toolshed/actions/github/pr](https://github.com/envoyproxy/toolshed) | `98b13b6d4f551c27b406cb090d9ff7bf6877d1f6` | `17672072fd9e10db809638f8874a4926ab1663f1` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `448e3f862ab3ef47aa50ff917776823c9946035b` | `484a0b528fb4d7bd804637ccb632e47a0e638317` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.6` | `4.37.7` | Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e) Updates `envoyproxy/toolshed/actions/github/pr` from 98b13b6d4f551c27b406cb090d9ff7bf6877d1f6 to 17672072fd9e10db809638f8874a4926ab1663f1 - [Release notes](https://github.com/envoyproxy/toolshed/releases) - [Commits](https://github.com/envoyproxy/toolshed/compare/98b13b6d4f551c27b406cb090d9ff7bf6877d1f6...17672072fd9e10db809638f8874a4926ab1663f1) Updates `actions/download-artifact` from 448e3f862ab3ef47aa50ff917776823c9946035b to 484a0b528fb4d7bd804637ccb632e47a0e638317 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/448e3f862ab3ef47aa50ff917776823c9946035b...484a0b528fb4d7bd804637ccb632e47a0e638317) Updates `github/codeql-action/init` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `github/codeql-action/autobuild` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `github/codeql-action/analyze` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `github/codeql-action/upload-sarif` from 4.37.6 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/5595ccaf912efad79be6eef63a5619ff05969be3...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: envoyproxy/toolshed/actions/github/pr dependency-version: 17672072fd9e10db809638f8874a4926ab1663f1 dependency-type: direct:production dependency-group: dependencies - dependency-name: actions/download-artifact dependency-version: 484a0b528fb4d7bd804637ccb632e47a0e638317 dependency-type: direct:production dependency-group: dependencies - dependency-name: github/codeql-action/init dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/analyze dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/_docker.yml | 4 ++-- .github/workflows/_release.yml | 2 +- .github/workflows/bazel.yml | 2 +- .github/workflows/codeql.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/_docker.yml b/.github/workflows/_docker.yml index ad5f2e071b..ff2bc2ce92 100644 --- a/.github/workflows/_docker.yml +++ b/.github/workflows/_docker.yml @@ -21,7 +21,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Get docker version id: docker-version shell: bash @@ -82,7 +82,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Get versions run: | TAG_VERSION=$(cat ./docker/build/VERSION.txt) diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml index 2dd3122ae0..f23a71b95a 100644 --- a/.github/workflows/_release.yml +++ b/.github/workflows/_release.yml @@ -496,7 +496,7 @@ jobs: echo "message=${COMMIT_MESSAGE}" >> "$GITHUB_OUTPUT" echo "changes=true" >> "$GITHUB_OUTPUT" - name: Create Pull Request - uses: envoyproxy/toolshed/actions/github/pr@98b13b6d4f551c27b406cb090d9ff7bf6877d1f6 # actions-v0.4.20 + fix + uses: envoyproxy/toolshed/actions/github/pr@17672072fd9e10db809638f8874a4926ab1663f1 # actions-v0.4.20 + fix if: fromJSON(steps.commit.outputs.changes) with: base: main diff --git a/.github/workflows/bazel.yml b/.github/workflows/bazel.yml index 02f050d72e..797a6d461f 100644 --- a/.github/workflows/bazel.yml +++ b/.github/workflows/bazel.yml @@ -193,7 +193,7 @@ jobs: - name: Checkout Repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download artifacts - uses: actions/download-artifact@448e3f862ab3ef47aa50ff917776823c9946035b # v5.0.0 + uses: actions/download-artifact@484a0b528fb4d7bd804637ccb632e47a0e638317 # v5.0.0 with: name: bazel-artifacts path: artifacts diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index c1d3535877..ccff9de061 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -52,15 +52,15 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: languages: ${{ matrix.language }} config-file: ./.github/codeql/codeql-config.yml - name: Autobuild - uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/autobuild@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 0aed96ef3f..84b5bb430b 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -44,6 +44,6 @@ jobs: retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: results.sarif