From c8fe2504bc6bfad0d12b9c80e0336bf74d6c9b52 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 19 Dec 2025 04:04:55 +0000 Subject: [PATCH] chore(deps): bump the github-actions-dependencies group across 3 directories with 6 updates Bumps the github-actions-dependencies group with 4 updates in the / directory: [hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml](https://github.com/hoverkraft-tech/ci-github-publish), [actions/download-artifact](https://github.com/actions/download-artifact), [hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml](https://github.com/hoverkraft-tech/ci-github-container) and [github/codeql-action](https://github.com/github/codeql-action). Bumps the github-actions-dependencies group with 1 update in the /actions/build directory: [actions/upload-artifact](https://github.com/actions/upload-artifact). Bumps the github-actions-dependencies group with 1 update in the /actions/dependencies-cache directory: [actions/cache](https://github.com/actions/cache). Updates `hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml` from 0.18.0 to 0.18.2 - [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases) - [Commits](https://github.com/hoverkraft-tech/ci-github-publish/compare/44e0f1bacebf3711bf90895fc45d815e9fe582e8...642cdb54493d05debdc1394f4bfd7365f82e7bf1) Updates `actions/download-artifact` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...37930b1c2abaa49bbe596cd826c3c89aef350131) Updates `hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml` from 0.30.3 to 0.30.4 - [Release notes](https://github.com/hoverkraft-tech/ci-github-container/releases) - [Commits](https://github.com/hoverkraft-tech/ci-github-container/compare/3256ec78f48fdaa4c9691c87dc7136fa561c456e...18c35d287eb2f66e00741c88954106b44b812ae0) Updates `github/codeql-action` from 4.31.7 to 4.31.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cf1bb45a277cb3c205638b2cd5c984db1c46a412...5d4e8d1aca955e8d8589aabd499c5cae939e33c7) Updates `actions/upload-artifact` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f) Updates `actions/cache` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/a7833574556fa59680c1b7cb190c1735db73ebf0...9255dc7a253b0ccc959486e2bca901246202afeb) --- updated-dependencies: - dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml dependency-version: 0.18.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/download-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml dependency-version: 0.30.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: github/codeql-action dependency-version: 4.31.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-dependencies - dependency-name: actions/cache dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/__main-ci.yml | 2 +- .../__test-workflow-continuous-integration.yml | 8 ++++---- .github/workflows/continuous-integration.yml | 6 +++--- actions/build/action.yml | 2 +- actions/dependencies-cache/action.yml | 16 ++++++++-------- 5 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml index 2789543..0c4d709 100644 --- a/.github/workflows/__main-ci.yml +++ b/.github/workflows/__main-ci.yml @@ -35,7 +35,7 @@ jobs: release: needs: ci if: github.event_name != 'schedule' - uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@44e0f1bacebf3711bf90895fc45d815e9fe582e8 # 0.18.0 + uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@642cdb54493d05debdc1394f4bfd7365f82e7bf1 # 0.18.2 permissions: contents: read with: diff --git a/.github/workflows/__test-workflow-continuous-integration.yml b/.github/workflows/__test-workflow-continuous-integration.yml index 08f582d..cdaa472 100644 --- a/.github/workflows/__test-workflow-continuous-integration.yml +++ b/.github/workflows/__test-workflow-continuous-integration.yml @@ -29,7 +29,7 @@ jobs: needs: act-without-container steps: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 + - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: artifact-ids: ${{ needs.act-without-container.outputs.build-artifact-id }} path: "/" @@ -63,7 +63,7 @@ jobs: packages: write issues: read pull-requests: read - uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@3256ec78f48fdaa4c9691c87dc7136fa561c456e # 0.30.3 + uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@18c35d287eb2f66e00741c88954106b44b812ae0 # 0.30.4 with: sign: false images: | @@ -105,7 +105,7 @@ jobs: needs: act-with-container steps: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 + - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: artifact-ids: ${{ needs.act-with-container.outputs.build-artifact-id }} path: ${{ runner.temp }} @@ -153,7 +153,7 @@ jobs: needs: act-with-container-advanced steps: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 + - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: artifact-ids: ${{ needs.act-with-container-advanced.outputs.build-artifact-id }} path: ${{ runner.temp }} diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml index a3615ca..c304695 100644 --- a/.github/workflows/continuous-integration.yml +++ b/.github/workflows/continuous-integration.yml @@ -294,10 +294,10 @@ jobs: runs-on: *ci-runner steps: - uses: hoverkraft-tech/ci-github-common/actions/checkout@666b7b6eb000db3e8614647871fa60c9f1eb7179 # 0.31.4 - - uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + - uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 with: languages: ${{ inputs.code-ql }} - - uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + - uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 dependency-review: name: 🛡️ Dependency Review @@ -570,7 +570,7 @@ jobs: if: inputs.container == '' - if: needs.build.outputs.artifact-id && inputs.container == '' - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: artifact-ids: ${{ needs.build.outputs.artifact-id }} path: "/" diff --git a/actions/build/action.yml b/actions/build/action.yml index 6d06473..3bb9a4c 100644 --- a/actions/build/action.yml +++ b/actions/build/action.yml @@ -162,7 +162,7 @@ runs: - id: build-artifact-id if: inputs.build-artifact != '' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: ${{ fromJSON(inputs.build-artifact).name }} path: ${{ fromJSON(inputs.build-artifact).paths }} diff --git a/actions/dependencies-cache/action.yml b/actions/dependencies-cache/action.yml index fe014d0..c614a48 100644 --- a/actions/dependencies-cache/action.yml +++ b/actions/dependencies-cache/action.yml @@ -51,7 +51,7 @@ runs: - name: ♻️ NX cache if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).nx == true - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ inputs.working-directory }}/node_modules/.cache/nx key: ${{ runner.os }}-cache-nx-${{ github.sha }} @@ -60,7 +60,7 @@ runs: - name: ♻️ Prettier cache if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).prettier == true - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ inputs.working-directory }}/node_modules/.cache/prettier key: ${{ runner.os }}-cache-prettier-${{ github.sha }} @@ -69,7 +69,7 @@ runs: - name: ♻️ Docusaurus cache if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).docusaurus == true - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: | ${{ inputs.working-directory }}/.docusaurus @@ -80,7 +80,7 @@ runs: - name: ♻️ Vitest cache if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).vitest == true - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ inputs.working-directory }}/node_modules/.vite/vitest key: ${{ runner.os }}-cache-vitest-${{ github.sha }} @@ -89,7 +89,7 @@ runs: - name: ♻️ Astro cache if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).astro == true - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ inputs.working-directory }}/node_modules/.astro key: ${{ runner.os }}-cache-astro-${{ github.sha }} @@ -98,7 +98,7 @@ runs: - name: ♻️ Gatsby cache if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).gatsby == true - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: | ${{ inputs.working-directory }}/.cache @@ -109,7 +109,7 @@ runs: - name: ♻️ Storybook cache if: fromJson(steps.has-installed-dependencies.outputs.installed-dependencies).storybook == true - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ inputs.working-directory }}/node_modules/.cache/storybook key: ${{ runner.os }}-cache-storybook-${{ github.sha }} @@ -196,7 +196,7 @@ runs: - name: ♻️ Test cache if: steps.jest-cache-dir-path.outputs.dir - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ steps.jest-cache-dir-path.outputs.dir }} key: ${{ runner.os }}-test-${{ github.sha }}