From cb4912c5fb0bbfc3fa2eb841ec5c72e52da94f1e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 13:14:12 +0000 Subject: [PATCH 1/6] chore(deps): bump trufflesecurity/trufflehog Bumps [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) from 93633ac70c28603931c365b6ef530cab878f4286 to 188766766fd81cde66e5500b0db0379235637134. - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/93633ac70c28603931c365b6ef530cab878f4286...188766766fd81cde66e5500b0db0379235637134) --- updated-dependencies: - dependency-name: trufflesecurity/trufflehog dependency-version: 188766766fd81cde66e5500b0db0379235637134 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/mini-baas-security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/mini-baas-security.yml b/.github/workflows/mini-baas-security.yml index 7318a5f5..9b7ecf7c 100644 --- a/.github/workflows/mini-baas-security.yml +++ b/.github/workflows/mini-baas-security.yml @@ -248,7 +248,7 @@ jobs: - name: TruffleHog OSS - uses: trufflesecurity/trufflehog@93633ac70c28603931c365b6ef530cab878f4286 # main at 2026-11-04 + uses: trufflesecurity/trufflehog@188766766fd81cde66e5500b0db0379235637134 # main at 2026-11-04 with: path: ./ From 65eac5f909c1eeab3eaea362aef95071367b76fc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 13:14:23 +0000 Subject: [PATCH 2/6] chore(deps): bump docker/login-action from 4.7.0 to 4.8.0 Bumps [docker/login-action](https://github.com/docker/login-action) from 4.7.0 to 4.8.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/81c6f93d4bc991e510b342a00b419b3bb4efc5c6...8aa5831fb8d48d8f76594c7ddde61ae58019f550) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/baas-release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/baas-release.yml b/.github/workflows/baas-release.yml index 9de21174..d54b4062 100644 --- a/.github/workflows/baas-release.yml +++ b/.github/workflows/baas-release.yml @@ -101,12 +101,12 @@ jobs: git submodule update --init apps/grobase - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 # Docker Hub — where the images go (public by default on push). - - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4 + - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4 with: username: ${{ secrets.DOCKER_HUB_USERNAME }} password: ${{ secrets.DOCKER_HUB_TOKEN }} # GHCR — layer-cache push only (cache-to refs in docker-bake.hcl). - - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4 + - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4 with: registry: ghcr.io username: ${{ github.actor }} @@ -147,7 +147,7 @@ jobs: git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "git@github.com:" git submodule update --init apps/grobase - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 - - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4 + - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4 with: username: ${{ secrets.DOCKER_HUB_USERNAME }} password: ${{ secrets.DOCKER_HUB_TOKEN }} From a0c110437a58c4b92ec28d6b77bd4b064253e797 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 13:14:27 +0000 Subject: [PATCH 3/6] chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.4.1 Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.12.0 to 4.4.1. - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/8d2750c68a42422c14e847fe6c8ac0403b4cbd6f...f87e5991a6d7451dcb8d9637bfbc97413f497069) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/baas-release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/baas-release.yml b/.github/workflows/baas-release.yml index 9de21174..68060ee5 100644 --- a/.github/workflows/baas-release.yml +++ b/.github/workflows/baas-release.yml @@ -99,7 +99,7 @@ jobs: run: | git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "git@github.com:" git submodule update --init apps/grobase - - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 # Docker Hub — where the images go (public by default on push). - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4 with: @@ -146,7 +146,7 @@ jobs: run: | git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "git@github.com:" git submodule update --init apps/grobase - - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4 with: username: ${{ secrets.DOCKER_HUB_USERNAME }} From 9ed740c2e374dd83e81f3cba3c7ec6474f3b6223 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 13:14:32 +0000 Subject: [PATCH 4/6] chore(deps): bump aquasecurity/trivy-action Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 8f28faec26515256b6d22074d1d2a8986f4cbd87 to 38b337fff0a2f984d5be173c99e3f633438167ec. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/8f28faec26515256b6d22074d1d2a8986f4cbd87...38b337fff0a2f984d5be173c99e3f633438167ec) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 38b337fff0a2f984d5be173c99e3f633438167ec dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/mini-baas-security.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/mini-baas-security.yml b/.github/workflows/mini-baas-security.yml index 7318a5f5..fb2939aa 100644 --- a/.github/workflows/mini-baas-security.yml +++ b/.github/workflows/mini-baas-security.yml @@ -163,7 +163,7 @@ jobs: - name: Trivy filesystem scan - uses: aquasecurity/trivy-action@8f28faec26515256b6d22074d1d2a8986f4cbd87 # master at 2026-11-04 + uses: aquasecurity/trivy-action@38b337fff0a2f984d5be173c99e3f633438167ec # master at 2026-11-04 with: scan-type: fs @@ -210,7 +210,7 @@ jobs: - name: Trivy image scan if: steps.build_img.outcome == 'success' - uses: aquasecurity/trivy-action@8f28faec26515256b6d22074d1d2a8986f4cbd87 # master at 2026-11-04 + uses: aquasecurity/trivy-action@38b337fff0a2f984d5be173c99e3f633438167ec # master at 2026-11-04 with: image-ref: mini-baas/query-router:ci From 147658f0e4b85efd436823717fe4e9da46257ceb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Nov 2026 13:14:35 +0000 Subject: [PATCH 5/6] chore(deps): bump softprops/action-gh-release from 3.0.3 to 3.0.4 Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.3 to 3.0.4. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/efb35369e0ad2afab669f228072c1b0d510eae64...8a0cd651e5b2365bd640854a3fa5dfc70e4875f3) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 3.0.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/baas-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/baas-release.yml b/.github/workflows/baas-release.yml index 9de21174..2b62604d 100644 --- a/.github/workflows/baas-release.yml +++ b/.github/workflows/baas-release.yml @@ -219,7 +219,7 @@ jobs: sed -E 's#^VERSION="\$\{BINOCLE_VERSION:-[^}]*\}"#VERSION="${BINOCLE_VERSION:-'"$VER"'}"#' \ apps/grobase/scripts/ci/install.sh > release-assets/install.sh grep '^VERSION=' release-assets/install.sh - - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3 + - uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3 # v3 with: name: "Grobase BaaS ${{ github.ref_name }}" prerelease: ${{ needs.version.outputs.prerelease == 'true' }} From 01653f6862152772d1222c0ea0a1396ee55f5d9f Mon Sep 17 00:00:00 2001 From: Seyed Mostafa Hashemian Date: Fri, 13 Nov 2026 21:10:52 +0100 Subject: [PATCH 6/6] chore(deps): sync login action update with develop --- .github/workflows/baas-release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/baas-release.yml b/.github/workflows/baas-release.yml index d54b4062..1fd70397 100644 --- a/.github/workflows/baas-release.yml +++ b/.github/workflows/baas-release.yml @@ -99,7 +99,7 @@ jobs: run: | git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "git@github.com:" git submodule update --init apps/grobase - - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 # Docker Hub — where the images go (public by default on push). - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4 with: @@ -146,7 +146,7 @@ jobs: run: | git config --global url."https://x-access-token:${GH_TOKEN}@github.com/".insteadOf "git@github.com:" git submodule update --init apps/grobase - - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3 + - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4 with: username: ${{ secrets.DOCKER_HUB_USERNAME }} @@ -219,7 +219,7 @@ jobs: sed -E 's#^VERSION="\$\{BINOCLE_VERSION:-[^}]*\}"#VERSION="${BINOCLE_VERSION:-'"$VER"'}"#' \ apps/grobase/scripts/ci/install.sh > release-assets/install.sh grep '^VERSION=' release-assets/install.sh - - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3 + - uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3 # v3 with: name: "Grobase BaaS ${{ github.ref_name }}" prerelease: ${{ needs.version.outputs.prerelease == 'true' }}