From b98d0acc3d873bda58d047813f54f3de64179a91 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Aug 2026 16:35:31 +0000 Subject: [PATCH] chore(github-actions): bump the github-actions group across 1 directory with 10 updates Bumps the github-actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.18.0` | `2.21.0` | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [bazel-contrib/setup-bazel](https://github.com/bazel-contrib/setup-bazel) | `0.18.0` | `0.19.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [eclipse-score/cicd-workflows/.github/workflows/daily.yml](https://github.com/eclipse-score/cicd-workflows) | `0.0.1` | `0.0.3` | | [eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml](https://github.com/eclipse-score/cicd-workflows) | `206a795e30d45de82d541206fde17abe98d2b4bf` | `7b1b65cbb59d5f817e639a731f018db5adb3028a` | | [eclipse-score/cicd-workflows/.github/workflows/license-check.yml](https://github.com/eclipse-score/cicd-workflows) | `0.0.0` | `0.0.3` | | [eclipse-score/cicd-workflows/.github/workflows/docs.yml](https://github.com/eclipse-score/cicd-workflows) | `206a795e30d45de82d541206fde17abe98d2b4bf` | `7b1b65cbb59d5f817e639a731f018db5adb3028a` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `9` | Updates `step-security/harden-runner` from 2.18.0 to 2.21.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/v2.18.0...v2.21.0) Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `bazel-contrib/setup-bazel` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/bazel-contrib/setup-bazel/releases) - [Commits](https://github.com/bazel-contrib/setup-bazel/compare/0.18.0...0.19.0) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `eclipse-score/cicd-workflows/.github/workflows/daily.yml` from 0.0.1 to 0.0.3 - [Release notes](https://github.com/eclipse-score/cicd-workflows/releases) - [Commits](https://github.com/eclipse-score/cicd-workflows/compare/829b3e11ccbf924a5782f7bfed647cb1619fdf78...8d80e8df150cae21d53cbc8031d0f970648f7a67) Updates `eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml` from 206a795e30d45de82d541206fde17abe98d2b4bf to 7b1b65cbb59d5f817e639a731f018db5adb3028a - [Release notes](https://github.com/eclipse-score/cicd-workflows/releases) - [Commits](https://github.com/eclipse-score/cicd-workflows/compare/206a795e30d45de82d541206fde17abe98d2b4bf...7b1b65cbb59d5f817e639a731f018db5adb3028a) Updates `eclipse-score/cicd-workflows/.github/workflows/license-check.yml` from 0.0.0 to 0.0.3 - [Release notes](https://github.com/eclipse-score/cicd-workflows/releases) - [Commits](https://github.com/eclipse-score/cicd-workflows/compare/c1c90b1a82a1fab0fc202979dde6686b2162d5a8...8d80e8df150cae21d53cbc8031d0f970648f7a67) Updates `eclipse-score/cicd-workflows/.github/workflows/docs.yml` from 206a795e30d45de82d541206fde17abe98d2b4bf to 7b1b65cbb59d5f817e639a731f018db5adb3028a - [Release notes](https://github.com/eclipse-score/cicd-workflows/releases) - [Commits](https://github.com/eclipse-score/cicd-workflows/compare/206a795e30d45de82d541206fde17abe98d2b4bf...7b1b65cbb59d5f817e639a731f018db5adb3028a) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `actions/github-script` from 7 to 9 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7...v9) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: bazel-contrib/setup-bazel dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: eclipse-score/cicd-workflows/.github/workflows/daily.yml dependency-version: 0.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml dependency-version: 840a5c60b35c713ed8df13f1969dfb3721a5c529 dependency-type: direct:production dependency-group: github-actions - dependency-name: eclipse-score/cicd-workflows/.github/workflows/docs.yml dependency-version: 840a5c60b35c713ed8df13f1969dfb3721a5c529 dependency-type: direct:production dependency-group: github-actions - dependency-name: eclipse-score/cicd-workflows/.github/workflows/license-check.yml dependency-version: 0.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: step-security/harden-runner dependency-version: 2.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/_test.yml | 6 +++--- .github/workflows/daily.yml | 2 +- .github/workflows/docs-publish.yml | 2 +- .github/workflows/downstream_compatibility.yml | 4 ++-- .github/workflows/license_check.yml | 2 +- .github/workflows/link_check.yml | 4 ++-- .github/workflows/on-pr.yml | 2 +- .github/workflows/test_links.yml | 10 +++++----- 8 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml index 54a7a6e33..c60767295 100644 --- a/.github/workflows/_test.yml +++ b/.github/workflows/_test.yml @@ -20,7 +20,7 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.18.0 + uses: step-security/harden-runner@v2.21.0 with: egress-policy: audit @@ -31,13 +31,13 @@ jobs: cache: false - name: Checkout repository (Handle all events) - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v7 with: ref: ${{ github.head_ref || github.event.pull_request.head.ref || github.ref }} repository: ${{ github.event.pull_request.head.repo.full_name || github.repository }} - name: Setup Bazel with shared caching - uses: bazel-contrib/setup-bazel@0.18.0 + uses: bazel-contrib/setup-bazel@0.19.0 with: disk-cache: true repository-cache: true diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml index 045730b8f..105e97f46 100644 --- a/.github/workflows/daily.yml +++ b/.github/workflows/daily.yml @@ -37,4 +37,4 @@ on: jobs: maintenance: - uses: eclipse-score/cicd-workflows/.github/workflows/daily.yml@829b3e11ccbf924a5782f7bfed647cb1619fdf78 # v0.0.1 + uses: eclipse-score/cicd-workflows/.github/workflows/daily.yml@8d80e8df150cae21d53cbc8031d0f970648f7a67 # v0.0.3 diff --git a/.github/workflows/docs-publish.yml b/.github/workflows/docs-publish.yml index a045828cf..c96f83d02 100644 --- a/.github/workflows/docs-publish.yml +++ b/.github/workflows/docs-publish.yml @@ -21,7 +21,7 @@ on: jobs: docs-deploy: if: github.event.workflow_run.conclusion == 'success' - uses: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml@206a795e30d45de82d541206fde17abe98d2b4bf + uses: eclipse-score/cicd-workflows/.github/workflows/docs-publish.yml@7b1b65cbb59d5f817e639a731f018db5adb3028a permissions: actions: read contents: write diff --git a/.github/workflows/downstream_compatibility.yml b/.github/workflows/downstream_compatibility.yml index 103bcc453..f3671bf7f 100644 --- a/.github/workflows/downstream_compatibility.yml +++ b/.github/workflows/downstream_compatibility.yml @@ -43,7 +43,7 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.18.0 + uses: step-security/harden-runner@v2.21.0 with: egress-policy: audit @@ -54,7 +54,7 @@ jobs: cache: false - name: Checkout PR - uses: actions/checkout@v6.0.2 + uses: actions/checkout@v7 - name: Prepare Python run: bazel run //:ide_support diff --git a/.github/workflows/license_check.yml b/.github/workflows/license_check.yml index 6540bfc8c..5db0801b1 100644 --- a/.github/workflows/license_check.yml +++ b/.github/workflows/license_check.yml @@ -25,7 +25,7 @@ permissions: jobs: license-check: - uses: eclipse-score/cicd-workflows/.github/workflows/license-check.yml@c1c90b1a82a1fab0fc202979dde6686b2162d5a8 # v0.0.0 + uses: eclipse-score/cicd-workflows/.github/workflows/license-check.yml@8d80e8df150cae21d53cbc8031d0f970648f7a67 # v0.0.3 with: repo-url: "${{ github.server_url }}/${{ github.repository }}" bazel-target: "run --lockfile_mode=error //src:license-check" diff --git a/.github/workflows/link_check.yml b/.github/workflows/link_check.yml index 73502c0c2..589e62fda 100644 --- a/.github/workflows/link_check.yml +++ b/.github/workflows/link_check.yml @@ -28,11 +28,11 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.18.0 + uses: step-security/harden-runner@v2.21.0 with: egress-policy: audit - name: Checkout repo - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Run link check action uses: ./.github/actions/link-check diff --git a/.github/workflows/on-pr.yml b/.github/workflows/on-pr.yml index ed4b18632..99a5d0da9 100644 --- a/.github/workflows/on-pr.yml +++ b/.github/workflows/on-pr.yml @@ -35,7 +35,7 @@ jobs: docs-build: needs: [unit-tests] - uses: eclipse-score/cicd-workflows/.github/workflows/docs.yml@206a795e30d45de82d541206fde17abe98d2b4bf + uses: eclipse-score/cicd-workflows/.github/workflows/docs.yml@7b1b65cbb59d5f817e639a731f018db5adb3028a with: bazel-target: "//:docs" tests-report-artifact: tests-report diff --git a/.github/workflows/test_links.yml b/.github/workflows/test_links.yml index faa4a8ff2..179abe609 100644 --- a/.github/workflows/test_links.yml +++ b/.github/workflows/test_links.yml @@ -23,11 +23,11 @@ jobs: steps: - name: 🛡️ Harden Runner if: github.repository_owner == 'eclipse-score' - uses: step-security/harden-runner@v2.18.0 + uses: step-security/harden-runner@v2.21.0 with: egress-policy: audit - name: Checkout repository - uses: actions/checkout@v4.2.2 + uses: actions/checkout@v7 # Run your link checker and generate log - name: Run LinkChecker @@ -53,7 +53,7 @@ jobs: # Upload issue body artifact if present - name: Upload issue body if: steps.detect.outputs.issue_needed == 'true' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: issue-body path: issue_body.md @@ -64,12 +64,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Download issue body artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: issue-body - name: Create GitHub issue from findings - uses: actions/github-script@v7 + uses: actions/github-script@v9 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: |