Repository navigation
ci(deps): bump the github-actions group with 11 updates - #162
Closed
dependabot[bot] wants to merge 1 commit into
Closed
dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the github-actions group with 11 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.22.1` | `2.22.2` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.6.4` | `0.7.1` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.3` | `4.39.0` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.99.2` | `3.99.3` | | [actions/setup-java](https://github.com/actions/setup-java) | `6.0.1` | `6.1.0` | | [reviewdog/action-actionlint](https://github.com/reviewdog/action-actionlint) | `1.80.0` | `1.80.4` | | [reviewdog/action-suggester](https://github.com/reviewdog/action-suggester) | `1.26.2` | `1.26.3` | | [reviewdog/action-markdownlint](https://github.com/reviewdog/action-markdownlint) | `0.31.4` | `0.31.5` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.3` | `4.39.0` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `4.38.3` | `4.39.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.3` | `4.39.0` | Updates `step-security/harden-runner` from 2.22.1 to 2.22.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@ccd8616...dc2769a) Updates `zizmorcore/zizmor-action` from 0.6.4 to 0.7.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@cc914d7...85b2b9f) Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...6f2ac81) Updates `trufflesecurity/trufflehog` from 3.99.2 to 3.99.3 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](trufflesecurity/trufflehog@e76dff8...e63326d) Updates `actions/setup-java` from 6.0.1 to 6.1.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@de7274f...b843ebf) Updates `reviewdog/action-actionlint` from 1.80.0 to 1.80.4 - [Release notes](https://github.com/reviewdog/action-actionlint/releases) - [Commits](reviewdog/action-actionlint@a8ac3ee...419a493) Updates `reviewdog/action-suggester` from 1.26.2 to 1.26.3 - [Release notes](https://github.com/reviewdog/action-suggester/releases) - [Commits](reviewdog/action-suggester@8219e3d...ac5ce6d) Updates `reviewdog/action-markdownlint` from 0.31.4 to 0.31.5 - [Release notes](https://github.com/reviewdog/action-markdownlint/releases) - [Commits](reviewdog/action-markdownlint@34762a7...b85a623) Updates `github/codeql-action/init` from 4.38.3 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...6f2ac81) Updates `github/codeql-action/autobuild` from 4.38.3 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...6f2ac81) Updates `github/codeql-action/analyze` from 4.38.3 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@24c5418...6f2ac81) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.7.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: trufflesecurity/trufflehog dependency-version: 3.99.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: reviewdog/action-actionlint dependency-version: 1.80.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: reviewdog/action-suggester dependency-version: 1.26.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: reviewdog/action-markdownlint dependency-version: 0.31.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/autobuild dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
the
dependencies
|
Contributor
Dependency ReviewThe following issues were found:
Snapshot WarningsConsider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice. License Issuesmaven-plugin/pom.xml
cli/pom.xml
OpenSSF ScorecardScorecard details
Scanned Files
|
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
Bot
deleted the
dependabot/github_actions/github-actions-52314d372b
branch
November 2, 2026 10:41
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the github-actions group with 11 updates:
2.22.12.22.20.6.40.7.14.38.34.39.03.99.23.99.36.0.16.1.01.80.01.80.41.26.21.26.30.31.40.31.54.38.34.39.04.38.34.39.04.38.34.39.0Updates
step-security/harden-runnerfrom 2.22.1 to 2.22.2Release notes
Sourced from step-security/harden-runner's releases.
Commits
dc2769aMerge pull request #707 from step-security/rc-45ab0b273Merge pull request #706 from h0x0er/rc-4503ccff8Remove agent-preinstalled skip for third-party runners815e48dSkip agent install and post-step cleanup when agent is already installedUpdates
zizmorcore/zizmor-actionfrom 0.6.4 to 0.7.1Release notes
Sourced from zizmorcore/zizmor-action's releases.
... (truncated)
Commits
85b2b9fSync zizmor versions (#178)38c745aREADME: bump pins (#177)f9597c8Sync zizmor versions (#175)2181e51Bump sync-zizmor-versions.py to Python 3.11 for locking (#174)27d989bchore(deps): bump the github-actions group with 2 updates (#173)a91218cBootstrap zizmor without Docker (#169)ee3f1bfchore(deps): bump the github-actions group with 2 updates (#170)8eacaa5README: bump pins (#167)Updates
github/codeql-action/upload-sariffrom 4.38.3 to 4.39.0Release notes
Sourced from github/codeql-action/upload-sarif's releases.
Changelog
Sourced from github/codeql-action/upload-sarif's changelog.
... (truncated)
Commits
6f2ac81Merge pull request #4239 from github/update-v4.39.0-d63383a73eb1c428Trigger workflows4443333Update changelog for v4.39.0d63383aMerge pull request #4233 from github/mbg/start-proxy/report-version8dec0b9Renamepathtoresultin tests4eabea6Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version57938b8Merge pull request #4201 from github/mario-campos/automate-changenotes-assembleee07b50Merge pull request #4236 from github/mbg/add-missing-changenotesa897ed5Add change note for #4206c8bd019Add change note for #4198Updates
trufflesecurity/trufflehogfrom 3.99.2 to 3.99.3Release notes
Sourced from trufflesecurity/trufflehog's releases.
Commits
e63326dgithub: name the missing permission when a comment listing is refused (#5438)048de9fUpdate module google.golang.org/grpc to v1.83.2 [SECURITY] (#5431)31d7303Add per-logger debug level override for source logging (#5432)feea7f9Add SonarQube Server token detector (#5419)27d8ea2fix(github): use a single "app client registry" to make sure we reuse client ...b40e7fe[INT-1051] Fix GitHub comment scans stopping early on large repositories (#5405)9e93a20Update module google.golang.org/grpc to v1.83.1 [SECURITY] (#5426)4b56723Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace to v1.45.0 [S...37a6f6eReplace deprecated google.CredentialsFromJSON with CredentialsFromJSONWithTyp...6404b63Update module filippo.io/edwards25519 to v1.1.1 [SECURITY] (#5421)Updates
actions/setup-javafrom 6.0.1 to 6.1.0Release notes
Sourced from actions/setup-java's releases.
Commits
b843ebfSupport Maven plugin repositories in generated settings.xml (#1286)2a69be2feat: support Maven server credential origins (#1282)d0e6e4dchore(deps): bump the monthly-npm-updates group with 13 updates (#1276)b24925bchore(deps): bump undici from 6.28.0 to 6.29.0 (#1274)47b3648Support Temurin JEP 322 patch versions like 26.0.2.1+1 (#1270) (#1279)74920aaPrefer Zulu 4-segment hotfix builds when resolving version ranges (#1278)a78ec39Stop GPG agent before removing signature-verification home (#1273)97c5a5eSupport Temurin on Linux RISC-V (#1269)1aa87b6Preserve compound Liberica build versions from .sdkmanrc (#1268)Updates
reviewdog/action-actionlintfrom 1.80.0 to 1.80.4Release notes
Sourced from reviewdog/action-actionlint's releases.
Commits
419a493bump v1.80.44ddb975Merge branch 'main' into releases/v1e7661f1Merge pull request #254 from reviewdog/renovate/python-3.15.0-alpine3.244fada31chore(deps): update python:3.15.0-alpine3.24 docker digest to 2699b90b76d06fbump v1.80.328d8443Merge branch 'main' into releases/v1bc97db8Merge pull request #253 from reviewdog/renovate/python-3.15.0-alpine3.24a2a7e67chore(deps): update python:3.15.0-alpine3.24 docker digest to e7044cc3cbf14ebump v1.80.27e23c49Merge branch 'main' into releases/v1Updates
reviewdog/action-suggesterfrom 1.26.2 to 1.26.3Release notes
Sourced from reviewdog/action-suggester's releases.
Commits
ac5ce6dMerge pull request #152 from reviewdog/renovate/reviewdog-action-actionlint-1.x3b65975chore(deps): update reviewdog/action-actionlint action to v1.80.2ee817b4Merge pull request #151 from reviewdog/renovate/reviewdog-action-actionlint-1.xff52a03chore(deps): update reviewdog/action-actionlint action to v1.80.1Updates
reviewdog/action-markdownlintfrom 0.31.4 to 0.31.5Release notes
Sourced from reviewdog/action-markdownlint's releases.
Commits
b85a623bump v0.31.5d90efaeMerge branch 'master' into releases/v00ca488eMerge pull request #103 from reviewdog/renovate/node-24-bookworm-slim72f618bchore(deps): update node.js to a5f4366Updates
github/codeql-action/initfrom 4.38.3 to 4.39.0Release notes
Sourced from github/codeql-action/init's releases.
Changelog
Sourced from github/codeql-action/init's changelog.
... (truncated)
Commits
6f2ac81Merge pull request #4239 from github/update-v4.39.0-d63383a73eb1c428Trigger workflows4443333Update changelog for v4.39.0d63383aMerge pull request #4233 from github/mbg/start-proxy/report-version8dec0b9Renamepathtoresultin tests4eabea6Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version57938b8Merge pull request #4201 from github/mario-campos/automate-changenotes-assembleee07b50Merge pull request #4236 from github/mbg/add-missing-changenotesa897ed5Add change note for #4206c8bd019Add change note for #4198Updates
github/codeql-action/autobuildfrom 4.38.3 to 4.39.0Release notes
Sourced from github/codeql-action/autobuild's releases.
Changelog
Sourced from github/codeql-action/autobuild's changelog.
... (truncated)
Commits
6f2ac81Merge pull request #4239 from github/update-v4.39.0-d63383a73eb1c428Trigger workflows4443333Update changelog for v4.39.0d63383aMerge pull request #4233 from github/mbg/start-proxy/report-version8dec0b9Renamepathtoresultin tests4eabea6Merge remote-tracking branch 'origin/main' into mbg/start-proxy/report-version57938b8Merge pull request #4201 from github/mario-campos/automate-changenotes-assembleee07b50Merge pull request #4236 from github/mbg/add-missing-changenotesa897ed5Add change note for #4206c8bd019Add change note for #4198Updates
github/codeql-action/analyzefrom 4.38.3 to 4.39.0Release notes
Sourced from github/codeql-action/analyze's releases.
Changelog
Sou...
Description has been truncated