From 899b314c4ace4def69a949fe4357075bf2973bc3 Mon Sep 17 00:00:00 2001 From: Samuel Nnaeto Date: Sat, 18 Jul 2026 21:38:48 +0100 Subject: [PATCH] Update pinned GitHub Actions Signed-off-by: Samuel Nnaeto --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 6 +++--- .github/workflows/release-candidate.yml | 2 +- .github/workflows/security.yml | 2 +- .github/workflows/unsigned-stable-release.yml | 2 +- AirType.Tests/Packaging/GitHubAutomationSourceTests.cs | 4 ++-- 6 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 63b9c70..b1e36b1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,7 +27,7 @@ jobs: fetch-depth: 0 - name: Set up .NET - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 + uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 with: global-json-file: global.json diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b1f499b..11e53c0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -29,12 +29,12 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up .NET - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 + uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 with: global-json-file: global.json - name: Initialize CodeQL - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 with: languages: csharp build-mode: manual @@ -53,6 +53,6 @@ jobs: run: dotnet build .\AirType\AirType.csproj --no-restore --verbosity minimal - name: Analyze - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 + uses: github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a # v4.37.1 with: category: /language:csharp diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml index d881d1b..91368a4 100644 --- a/.github/workflows/release-candidate.yml +++ b/.github/workflows/release-candidate.yml @@ -34,7 +34,7 @@ jobs: fetch-depth: 0 - name: Set up .NET - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 + uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 with: global-json-file: global.json diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 2cd76c3..97852fe 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up .NET - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 + uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 with: global-json-file: global.json diff --git a/.github/workflows/unsigned-stable-release.yml b/.github/workflows/unsigned-stable-release.yml index 429c3ff..531ce43 100644 --- a/.github/workflows/unsigned-stable-release.yml +++ b/.github/workflows/unsigned-stable-release.yml @@ -34,7 +34,7 @@ jobs: fetch-depth: 0 - name: Set up .NET - uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 + uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 with: global-json-file: global.json diff --git a/AirType.Tests/Packaging/GitHubAutomationSourceTests.cs b/AirType.Tests/Packaging/GitHubAutomationSourceTests.cs index b1b8774..0edf7c3 100644 --- a/AirType.Tests/Packaging/GitHubAutomationSourceTests.cs +++ b/AirType.Tests/Packaging/GitHubAutomationSourceTests.cs @@ -47,8 +47,8 @@ public void CodeQlWorkflow_IsPinnedManualAndActivatesOnlyWhenPublic() Assert.Contains("queries: security-extended", workflow); Assert.Contains("dotnet clean .\\AirType\\AirType.csproj", workflow); Assert.Contains("dotnet build .\\AirType\\AirType.csproj", workflow); - Assert.Contains("github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9", workflow); - Assert.Contains("github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9", workflow); + Assert.Contains("github/codeql-action/init@7188fc363630916deb702c7fdcf4e481b751f97a", workflow); + Assert.Contains("github/codeql-action/analyze@7188fc363630916deb702c7fdcf4e481b751f97a", workflow); Assert.DoesNotContain("github/codeql-action/autobuild", workflow); }