From a3b9072874bad9a9d1b658c54c7e943e9eb311e4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Sep 2024 00:06:58 +0000 Subject: [PATCH] Bump the github-actions group with 3 updates Bumps the github-actions group with 3 updates: [github/branch-deploy](https://github.com/github/branch-deploy), [GrantBirki/json-yaml-validate](https://github.com/grantbirki/json-yaml-validate) and [github/codeql-action](https://github.com/github/codeql-action). Updates `github/branch-deploy` from 9.4.0 to 9.7.0 - [Release notes](https://github.com/github/branch-deploy/releases) - [Commits](https://github.com/github/branch-deploy/compare/v9.4.0...v9.7.0) Updates `GrantBirki/json-yaml-validate` from 3.0.0 to 3.2.1 - [Release notes](https://github.com/grantbirki/json-yaml-validate/releases) - [Commits](https://github.com/grantbirki/json-yaml-validate/compare/v3...v3.2.1) Updates `github/codeql-action` from 3.25.15 to 3.26.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/afb54ba388a7dca6ecae48f608c4ff05ff4cc77a...4dd16135b69a43b6c8efb853346f8437d92d3c93) --- updated-dependencies: - dependency-name: github/branch-deploy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: GrantBirki/json-yaml-validate dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/branch-deploy.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/codeql-analysis.yml | 6 +++--- .github/workflows/deploy.yml | 4 ++-- .github/workflows/unlock-on-merge.yml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/branch-deploy.yml b/.github/workflows/branch-deploy.yml index c0ebc55b..3100e016 100644 --- a/.github/workflows/branch-deploy.yml +++ b/.github/workflows/branch-deploy.yml @@ -19,7 +19,7 @@ jobs: steps: - - uses: github/branch-deploy@v9.4.0 + - uses: github/branch-deploy@v9.7.0 id: branch-deploy with: admins: the-hideout/core-contributors diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d7384d38..43865b9b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -21,7 +21,7 @@ jobs: # check to ensure all JSON files are valid in the repository - name: json-yaml-validate - uses: GrantBirki/json-yaml-validate@v3 + uses: GrantBirki/json-yaml-validate@v3.2.1 with: comment: "true" diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 84eb003b..52b0fea4 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -26,12 +26,12 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin@v2 + uses: github/codeql-action/init@4dd16135b69a43b6c8efb853346f8437d92d3c93 # pin@v2 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin@v2 + uses: github/codeql-action/autobuild@4dd16135b69a43b6c8efb853346f8437d92d3c93 # pin@v2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # pin@v2 + uses: github/codeql-action/analyze@4dd16135b69a43b6c8efb853346f8437d92d3c93 # pin@v2 diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 98203cd6..03086329 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -16,7 +16,7 @@ jobs: steps: - name: deployment check - uses: github/branch-deploy@v9.4.0 + uses: github/branch-deploy@v9.7.0 id: deployment-check with: merge_deploy_mode: "true" # tells the Action to use the merge commit workflow strategy @@ -29,7 +29,7 @@ jobs: # check to ensure all JSON files are valid in the repository - name: json-yaml-validate if: ${{ steps.deployment-check.outputs.continue == 'true' }} - uses: GrantBirki/json-yaml-validate@v3.0.0 + uses: GrantBirki/json-yaml-validate@v3.2.1 - uses: actions/setup-node@v4.0.3 if: ${{ steps.deployment-check.outputs.continue == 'true' }} diff --git a/.github/workflows/unlock-on-merge.yml b/.github/workflows/unlock-on-merge.yml index 23814a80..7a24e6b0 100644 --- a/.github/workflows/unlock-on-merge.yml +++ b/.github/workflows/unlock-on-merge.yml @@ -14,7 +14,7 @@ jobs: steps: - name: unlock on merge - uses: github/branch-deploy@v9.4.0 + uses: github/branch-deploy@v9.7.0 id: unlock-on-merge with: unlock_on_merge_mode: "true" # <-- indicates that this is the "Unlock on Merge Mode" workflow