From bb1c0f06f3d33f3df73f553c9b5a5eda63d21935 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 12 Mar 2024 04:43:32 +0000 Subject: [PATCH 1/2] Bump actions/upload-artifact from 1 to 4 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 1 to 4. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v1...v4) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3d9429ef2..166db9762 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -19,7 +19,7 @@ jobs: run: script/cibuild - name: Upload gh-ost binary artifact - uses: actions/upload-artifact@v1 + uses: actions/upload-artifact@v4 with: name: gh-ost path: bin/gh-ost From 226c5a663b847ba3a64341132f89e2a9401d5209 Mon Sep 17 00:00:00 2001 From: meiji163 Date: Mon, 11 Mar 2024 22:00:28 -0700 Subject: [PATCH 2/2] update codeQL action --- .github/workflows/codeql.yml | 14 ++++++++++---- 1 file changed, 10 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 4fa20813a..9d94d9fae 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -2,12 +2,18 @@ name: "CodeQL analysis" on: push: + branches: [ master ] pull_request: + branches: [ master ] schedule: - - cron: '0 0 * * 0' + - cron: '25 22 * * 6' jobs: codeql: + permissions: + actions: read + contents: read + security-events: write strategy: fail-fast: false @@ -16,10 +22,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v2 + uses: actions/checkout@v4 - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3