From ff6becd2c7edb4c4a14131bdfc2856fa2b36bc0d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 17 Sep 2026 16:14:53 +0000 Subject: [PATCH] Bump the github-owned-actions group with 2 updates Bumps the github-owned-actions group with 2 updates: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) and [github/cleanowners](https://github.com/github/cleanowners). Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...b96794f015dfd88f77b49b1c93e0fa7110f94c63) Updates `github/cleanowners` from 2.1.13 to 2.1.14 - [Release notes](https://github.com/github/cleanowners/releases) - [Commits](https://github.com/github/cleanowners/compare/45f292ce59392482f81f03e5ef3c27daaf06183e...d0b71ba37fa78aced6b88a447496b36ba8811dac) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-owned-actions - dependency-name: github/cleanowners dependency-version: 2.1.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-owned-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/_scorecard.yml | 2 +- .github/workflows/clean-owners.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/_scorecard.yml b/.github/workflows/_scorecard.yml index 984e566..d7bdfbc 100644 --- a/.github/workflows/_scorecard.yml +++ b/.github/workflows/_scorecard.yml @@ -40,6 +40,6 @@ jobs: path: results.sarif retention-days: 5 - name: 📦 upload sarif results - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 + uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: sarif_file: results.sarif diff --git a/.github/workflows/clean-owners.yml b/.github/workflows/clean-owners.yml index effa462..eb3d506 100644 --- a/.github/workflows/clean-owners.yml +++ b/.github/workflows/clean-owners.yml @@ -18,7 +18,7 @@ jobs: issues: write steps: - name: 🧼 clean codeowners - uses: github/cleanowners@45f292ce59392482f81f03e5ef3c27daaf06183e # v2.1.13 + uses: github/cleanowners@d0b71ba37fa78aced6b88a447496b36ba8811dac # v2.1.14 env: GH_TOKEN: ${{ secrets.BLOOMBERG_OSS_USER_TOKEN_READ }} ORGANIZATION: bloomberg