From c1a23de1eaf6b4fd93138afdbe462ce59635eb92 Mon Sep 17 00:00:00 2001 From: Pyronewbic Date: Fri, 15 May 2026 01:13:33 +0530 Subject: [PATCH 1/7] ci: make smoke tests non-blocking (continue-on-error) --- .github/workflows/test.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 0043b9c..0993b88 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -21,6 +21,7 @@ jobs: - run: node test/unit-test.js smoke: + continue-on-error: true runs-on: ubuntu-latest steps: - uses: actions/checkout@v5 From 2ea23bad293476b5c66df0576c2a673893612f51 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 19:06:37 +0000 Subject: [PATCH 2/7] ci: bump anchore/scan-action from 6 to 7 Bumps [anchore/scan-action](https://github.com/anchore/scan-action) from 6 to 7. - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/scan-action/compare/v6...v7) --- updated-dependencies: - dependency-name: anchore/scan-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 0993b88..c5c6bae 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -82,7 +82,7 @@ jobs: output-file: sbom.spdx.json - name: Vulnerability scan (Grype) - uses: anchore/scan-action@v6 + uses: anchore/scan-action@v7 id: grype with: sbom: sbom.spdx.json From 101b994a17cb99423332ad62d2e855cc0bfd89a1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 19:06:44 +0000 Subject: [PATCH 3/7] ci: bump actions/checkout from 5 to 6 Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/base-image.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/deploy.yml | 2 +- .github/workflows/terraform.yml | 4 ++-- .github/workflows/test.yml | 10 +++++----- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/base-image.yml b/.github/workflows/base-image.yml index 7af12fa..066a8d2 100644 --- a/.github/workflows/base-image.yml +++ b/.github/workflows/base-image.yml @@ -14,7 +14,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: google-github-actions/auth@v3 with: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 60bd798..66fec10 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -13,7 +13,7 @@ jobs: analyze: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: github/codeql-action/init@v4 with: diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 515ef4f..ab1b358 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -18,7 +18,7 @@ jobs: outputs: digest: ${{ steps.digest.outputs.digest }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: google-github-actions/auth@v3 with: diff --git a/.github/workflows/terraform.yml b/.github/workflows/terraform.yml index 9c56e2e..1c1d3d1 100644 --- a/.github/workflows/terraform.yml +++ b/.github/workflows/terraform.yml @@ -21,7 +21,7 @@ jobs: if: github.event_name == 'pull_request' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: google-github-actions/auth@v3 with: @@ -85,7 +85,7 @@ jobs: if: (github.event_name == 'push' && github.ref == 'refs/heads/main') || github.event_name == 'workflow_dispatch' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: google-github-actions/auth@v3 with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index c5c6bae..6b3189e 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -13,7 +13,7 @@ jobs: unit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: actions/setup-node@v5 with: node-version: 24 @@ -24,7 +24,7 @@ jobs: continue-on-error: true runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: actions/setup-node@v5 with: node-version: 24 @@ -49,7 +49,7 @@ jobs: audit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - uses: actions/setup-node@v5 with: node-version: 24 @@ -62,7 +62,7 @@ jobs: secrets: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 with: fetch-depth: 0 - uses: gitleaks/gitleaks-action@v2 @@ -72,7 +72,7 @@ jobs: scan: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@v6 - name: Generate SBOM (Syft) uses: anchore/sbom-action@v0 From a09a3f401b4ed67984b718501598f9dbd880e7ac Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 19:06:43 +0000 Subject: [PATCH 4/7] ci: bump actions/upload-artifact from 5 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 5 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v5...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 6b3189e..da3c42a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -91,7 +91,7 @@ jobs: add-cpes-if-none: true - name: Upload SBOM - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@v7 with: name: sbom-${{ github.sha }} path: sbom.spdx.json @@ -99,7 +99,7 @@ jobs: - name: Upload Grype report if: always() && steps.grype.outputs.sarif != '' - uses: actions/upload-artifact@v5 + uses: actions/upload-artifact@v7 with: name: grype-sarif-${{ github.sha }} path: ${{ steps.grype.outputs.sarif }} From 6fe8bbcf771bc85368922d8ceb6f35400c02a9f4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 19:06:38 +0000 Subject: [PATCH 5/7] ci: bump hashicorp/setup-terraform from 3 to 4 Bumps [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform) from 3 to 4. - [Release notes](https://github.com/hashicorp/setup-terraform/releases) - [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/setup-terraform/compare/v3...v4) --- updated-dependencies: - dependency-name: hashicorp/setup-terraform dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/terraform.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/terraform.yml b/.github/workflows/terraform.yml index 1c1d3d1..7e8fd91 100644 --- a/.github/workflows/terraform.yml +++ b/.github/workflows/terraform.yml @@ -28,7 +28,7 @@ jobs: workload_identity_provider: projects/129850122606/locations/global/workloadIdentityPools/github-pool/providers/github-provider service_account: casecomp-deploy@casecomp-495718.iam.gserviceaccount.com - - uses: hashicorp/setup-terraform@v3 + - uses: hashicorp/setup-terraform@v4 with: terraform_version: ${{ env.TF_VERSION }} @@ -92,7 +92,7 @@ jobs: workload_identity_provider: projects/129850122606/locations/global/workloadIdentityPools/github-pool/providers/github-provider service_account: casecomp-deploy@casecomp-495718.iam.gserviceaccount.com - - uses: hashicorp/setup-terraform@v3 + - uses: hashicorp/setup-terraform@v4 with: terraform_version: ${{ env.TF_VERSION }} From 8e5992c296dcba2862161326a038446dd2cb9c5f Mon Sep 17 00:00:00 2001 From: Pyronewbic Date: Fri, 15 May 2026 01:59:39 +0530 Subject: [PATCH 6/7] chore: trigger auto-PR From 4702ab6938674373384502fd7ebfd86901405386 Mon Sep 17 00:00:00 2001 From: Pyronewbic Date: Fri, 15 May 2026 02:33:06 +0530 Subject: [PATCH 7/7] chore: trigger auto-PR workflow