From c6a2d5989f015037d0aded06705e31e946ab2b23 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 31 Jul 2026 06:34:14 +0000 Subject: [PATCH] Bump the github-actions group across 1 directory with 5 updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `7` | | [actions/setup-python](https://github.com/actions/setup-python) | `6` | `7` | | [actions/cache](https://github.com/actions/cache) | `5` | `6` | | [github/codeql-action](https://github.com/github/codeql-action) | `4` | `4.37.3` | | [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) | `7` | `8` | Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/setup-python` from 6 to 7 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v6...v7) Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) Updates `github/codeql-action` from 4 to 4.37.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.3) Updates `SonarSource/sonarqube-scan-action` from 7 to 8 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v7...v8) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.37.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/branch-cicd.yaml | 6 +++--- .github/workflows/codeql-analysis.yml | 10 +++++----- .github/workflows/stable-cicd.yaml | 4 ++-- .github/workflows/unstable-cicd.yaml | 6 +++--- 4 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/branch-cicd.yaml b/.github/workflows/branch-cicd.yaml index 50bc42d..f40d238 100644 --- a/.github/workflows/branch-cicd.yaml +++ b/.github/workflows/branch-cicd.yaml @@ -37,19 +37,19 @@ jobs: steps: - name: đŸ’ŗ Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: lfs: true fetch-depth: 0 token: ${{secrets.ADMIN_GITHUB_TOKEN}} - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: ${{ matrix.python-version }} - name: đŸ’ĩ Python Cache - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ~/.cache/pip # The "key" used to indicate a set of cached files is the operating system runner diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index d910903..a99d5ef 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -39,16 +39,16 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Setup python 3.13 - uses: actions/setup-python@v6 + uses: actions/setup-python@v7 with: python-version: 3.13 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@v4.37.3 with: languages: ${{ matrix.language }} queries: security-and-quality, security-extended @@ -60,7 +60,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v4 + uses: github/codeql-action/autobuild@v4.37.3 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -74,7 +74,7 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@v4.37.3 - run: | pip3 install nasa-scrub diff --git a/.github/workflows/stable-cicd.yaml b/.github/workflows/stable-cicd.yaml index b8cd365..d4f0358 100644 --- a/.github/workflows/stable-cicd.yaml +++ b/.github/workflows/stable-cicd.yaml @@ -48,14 +48,14 @@ jobs: steps: - name: đŸ’ŗ Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: lfs: true token: ${{secrets.ADMIN_GITHUB_TOKEN}} fetch-depth: 0 - name: đŸ’ĩ Python Cache - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ~/.cache/pip # The "key" used to indicate a set of cached files is the operating system runner diff --git a/.github/workflows/unstable-cicd.yaml b/.github/workflows/unstable-cicd.yaml index 9f324e3..9d8fe7d 100644 --- a/.github/workflows/unstable-cicd.yaml +++ b/.github/workflows/unstable-cicd.yaml @@ -51,14 +51,14 @@ jobs: steps: - name: đŸ’ŗ Checkout - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: lfs: true fetch-depth: 0 token: ${{secrets.ADMIN_GITHUB_TOKEN}} - name: đŸ’ĩ Python Cache - uses: actions/cache@v5 + uses: actions/cache@v6 with: path: ~/.cache/pip # The "key" used to indicate a set of cached files is the operating system runner @@ -81,7 +81,7 @@ jobs: DATACITE_PASSWORD: ${{secrets.DATACITE_PASSWORD}} - name: 🛏ī¸ Upload Coverage - uses: SonarSource/sonarqube-scan-action@v7 + uses: SonarSource/sonarqube-scan-action@v8 env: SONAR_TOKEN: ${{secrets.SONAR_TOKEN}}