From 4062bb2c4ee46054660e33a2a15d8c18731aa833 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 12:17:52 +0000 Subject: [PATCH] ci: bump the github-actions group with 6 updates Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [lukka/get-cmake](https://github.com/lukka/get-cmake) | `4.4.0` | `4.4.1` | | [docker/login-action](https://github.com/docker/login-action) | `4.5.1` | `4.6.0` | | [actions/stale](https://github.com/actions/stale) | `10.4.0` | `11.0.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.3` | `4.37.4` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.3` | `4.37.4` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.3` | `4.37.4` | Updates `lukka/get-cmake` from 4.4.0 to 4.4.1 - [Release notes](https://github.com/lukka/get-cmake/releases) - [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md) - [Commits](https://github.com/lukka/get-cmake/compare/e6906078ebd1ccb8ce51ab4626ac46a1b5a517e3...4a7d025fc60f00db0c7b44ebf783d19b52444830) Updates `docker/login-action` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/abd2ef45e78c5afb21d64d4ca52ee8550d9572c7...dbcb813823bdd20940b903addbd779551569679f) Updates `actions/stale` from 10.4.0 to 11.0.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/1e223db275d687790206a7acac4d1a11bd6fe629...4391f3da665fdf50b6810c1a66712fb9ba21aa93) Updates `github/codeql-action/init` from 4.37.3 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38) Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38) Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38) --- updated-dependencies: - dependency-name: lukka/get-cmake dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/stale dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/_build-core.yml | 4 ++-- .github/workflows/_build-deps.yml | 4 ++-- .github/workflows/cd-packages.yml | 2 +- .github/workflows/ci-arch-container.yml | 2 +- .github/workflows/ci-debian-container.yml | 2 +- .github/workflows/ci-fedora-container.yml | 2 +- .github/workflows/maintenance-stale.yml | 2 +- .github/workflows/security-codeql.yml | 4 ++-- .github/workflows/security-scorecard.yml | 2 +- 9 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/_build-core.yml b/.github/workflows/_build-core.yml index 650a03102e..fff23a8f95 100644 --- a/.github/workflows/_build-core.yml +++ b/.github/workflows/_build-core.yml @@ -98,7 +98,7 @@ jobs: # ── macOS ─────────────────────────────────────────────────────────────────── - name: Install cmake 3.31.x (macOS) if: runner.os == 'macOS' - uses: lukka/get-cmake@e6906078ebd1ccb8ce51ab4626ac46a1b5a517e3 # v4.4.0 + uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # v4.4.1 with: cmakeVersion: "~3.31.0" useLocalCache: true @@ -223,7 +223,7 @@ jobs: # ── Windows ───────────────────────────────────────────────────────────────── - name: Install cmake 3.31.x (Windows) if: runner.os == 'Windows' - uses: lukka/get-cmake@e6906078ebd1ccb8ce51ab4626ac46a1b5a517e3 # v4.4.0 + uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # v4.4.1 with: cmakeVersion: "~3.31.0" useLocalCache: true diff --git a/.github/workflows/_build-deps.yml b/.github/workflows/_build-deps.yml index 589712d222..ee63bf6ad0 100644 --- a/.github/workflows/_build-deps.yml +++ b/.github/workflows/_build-deps.yml @@ -54,7 +54,7 @@ jobs: - name: Install cmake 3.31.x (Windows) if: startsWith(inputs.os, 'windows-') - uses: lukka/get-cmake@e6906078ebd1ccb8ce51ab4626ac46a1b5a517e3 # v4.4.0 + uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # v4.4.1 with: cmakeVersion: "~3.31.0" useLocalCache: true @@ -140,7 +140,7 @@ jobs: - name: Install cmake 3.31.x (macOS) if: startsWith(inputs.os, 'macos-') - uses: lukka/get-cmake@e6906078ebd1ccb8ce51ab4626ac46a1b5a517e3 # v4.4.0 + uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # v4.4.1 with: cmakeVersion: "~3.31.0" useLocalCache: true diff --git a/.github/workflows/cd-packages.yml b/.github/workflows/cd-packages.yml index 9215976fda..74ceb46eaa 100644 --- a/.github/workflows/cd-packages.yml +++ b/.github/workflows/cd-packages.yml @@ -282,7 +282,7 @@ jobs: key: pkg-deps-arch-${{ hashFiles('deps/CMakeLists.txt', 'deps/**/*.cmake') }} - name: Install cmake 3.31.x (Arch) - uses: lukka/get-cmake@e6906078ebd1ccb8ce51ab4626ac46a1b5a517e3 # v4.4.0 + uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # v4.4.1 with: cmakeVersion: "~3.31.0" useLocalCache: true diff --git a/.github/workflows/ci-arch-container.yml b/.github/workflows/ci-arch-container.yml index 01784c294a..1a51bdc0c9 100644 --- a/.github/workflows/ci-arch-container.yml +++ b/.github/workflows/ci-arch-container.yml @@ -40,7 +40,7 @@ jobs: uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Log in to ghcr.io - uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/ci-debian-container.yml b/.github/workflows/ci-debian-container.yml index 3814ade883..09634add82 100644 --- a/.github/workflows/ci-debian-container.yml +++ b/.github/workflows/ci-debian-container.yml @@ -40,7 +40,7 @@ jobs: uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Log in to ghcr.io - uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/ci-fedora-container.yml b/.github/workflows/ci-fedora-container.yml index c235416298..658fef537d 100644 --- a/.github/workflows/ci-fedora-container.yml +++ b/.github/workflows/ci-fedora-container.yml @@ -40,7 +40,7 @@ jobs: uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Log in to ghcr.io - uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/maintenance-stale.yml b/.github/workflows/maintenance-stale.yml index aea7b98511..8a1792a65a 100644 --- a/.github/workflows/maintenance-stale.yml +++ b/.github/workflows/maintenance-stale.yml @@ -22,7 +22,7 @@ jobs: egress-policy: block allowed-endpoints: | api.github.com:443 - - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0 + - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} stale-issue-message: > diff --git a/.github/workflows/security-codeql.yml b/.github/workflows/security-codeql.yml index bd2adc74b8..9c4107cc20 100644 --- a/.github/workflows/security-codeql.yml +++ b/.github/workflows/security-codeql.yml @@ -47,7 +47,7 @@ jobs: submodules: false - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: languages: ${{ matrix.language }} build-mode: manual @@ -80,6 +80,6 @@ jobs: --parallel 4 2>&1 | head -5000 || true - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/security-scorecard.yml b/.github/workflows/security-scorecard.yml index eb9b30371d..a629c8c6c2 100644 --- a/.github/workflows/security-scorecard.yml +++ b/.github/workflows/security-scorecard.yml @@ -42,6 +42,6 @@ jobs: publish_results: true - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: sarif_file: results.sarif