From a9dcafcbd4409b17bc98b86cff1b638acff7c647 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Oct 2026 21:33:33 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 6 updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` | | [devcontainers/action](https://github.com/devcontainers/action) | `1.4.3` | `1.4.4` | Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `devcontainers/action` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/devcontainers/action/releases) - [Commits](https://github.com/devcontainers/action/compare/1082abd5d2bf3a11abccba70eef98df068277772...bef2cf2d1a019b00b45e184f83035e01bd1972f3) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: devcontainers/action dependency-version: 1.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-release.yml | 24 +++++++++---------- .github/workflows/ci-integration.yml | 16 ++++++------- .github/workflows/ci-runtime.yml | 2 +- .github/workflows/ci.yml | 12 +++++----- .github/workflows/codeql.yml | 4 ++-- .github/workflows/crlf-invariance.yml | 4 ++-- .../devcontainer-feature-publish.yml | 2 +- .../workflows/devcontainer-feature-test.yml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/mutation-pilot.yml | 2 +- 10 files changed, 35 insertions(+), 35 deletions(-) diff --git a/.github/workflows/build-release.yml b/.github/workflows/build-release.yml index 0aea34ad95..f9c0cfb1da 100644 --- a/.github/workflows/build-release.yml +++ b/.github/workflows/build-release.yml @@ -142,7 +142,7 @@ jobs: uv run pwsh scripts/windows/sign-binary.ps1 - name: Upload binary as workflow artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.binary_name }} path: | @@ -174,7 +174,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -225,7 +225,7 @@ jobs: -vv -ra --tb=short - name: Upload binary as workflow artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: apm-darwin-x86_64 path: | @@ -301,7 +301,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -347,7 +347,7 @@ jobs: -vv -ra --tb=short - name: Upload binary as workflow artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: apm-darwin-arm64 path: | @@ -441,7 +441,7 @@ jobs: - name: Download APM binary from build artifacts continue-on-error: ${{ github.event_name == 'schedule' }} - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: ${{ matrix.binary_name }} path: ./ @@ -460,7 +460,7 @@ jobs: - name: Set up Node.js if: github.event_name != 'schedule' || steps.artifact.outputs.available == 'true' - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -545,7 +545,7 @@ jobs: steps: - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -556,7 +556,7 @@ jobs: - name: Download APM binary from build artifacts continue-on-error: ${{ github.event_name == 'schedule' }} - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: ${{ matrix.binary_name }} path: ${{ matrix.platform == 'windows' && 'D:\apm-isolated-test' || '/tmp/apm-isolated-test/' }} @@ -685,7 +685,7 @@ jobs: steps: - name: Download all build artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: ./dist @@ -867,7 +867,7 @@ jobs: run: uv build --no-build-isolation --no-sources - name: Upload Python distributions - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: pypi-distributions path: | @@ -889,7 +889,7 @@ jobs: steps: - name: Download Python distributions - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: pypi-distributions path: dist diff --git a/.github/workflows/ci-integration.yml b/.github/workflows/ci-integration.yml index 1083a98a52..45b60b862f 100644 --- a/.github/workflows/ci-integration.yml +++ b/.github/workflows/ci-integration.yml @@ -73,7 +73,7 @@ jobs: uv run ./scripts/build-binary.sh - name: Upload binary - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: apm-mq-linux-x86_64 path: | @@ -94,7 +94,7 @@ jobs: # in the build job), so download to ./dist/ to preserve the # dist/apm-linux-x86_64/apm layout the conftest expects. - name: Download binary - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: apm-mq-linux-x86_64 path: ./dist/ @@ -173,7 +173,7 @@ jobs: # Artifact root is ./dist/ (least common ancestor of the uploaded paths in # the build job), so download to ./dist/ to preserve dist/apm-linux-x86_64/apm. - name: Download binary - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: apm-mq-linux-x86_64 path: ./dist/ @@ -182,7 +182,7 @@ jobs: run: chmod +x ./dist/apm-linux-x86_64/apm - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -250,7 +250,7 @@ jobs: - name: Upload coverage data if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: integration-coverage-shard-${{ matrix.shard }} path: .coverage.shard-${{ matrix.shard }} @@ -282,7 +282,7 @@ jobs: - name: Download shard coverage if: always() - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: pattern: integration-coverage-shard-* path: coverage-shards/ @@ -341,7 +341,7 @@ jobs: path: repo - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -352,7 +352,7 @@ jobs: # See note in integration-tests: download to dist/ to preserve layout. - name: Download binary - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: apm-mq-linux-x86_64 path: /tmp/apm-isolated-test/dist/ diff --git a/.github/workflows/ci-runtime.yml b/.github/workflows/ci-runtime.yml index 8a1e16c895..4af3da0eaa 100644 --- a/.github/workflows/ci-runtime.yml +++ b/.github/workflows/ci-runtime.yml @@ -36,7 +36,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7355102a0d..db6179573b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -121,7 +121,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -215,7 +215,7 @@ jobs: - name: Retain native proof and restoration evidence if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: windows-native-symlink-${{ github.run_attempt }} path: ${{ runner.temp }}/apm-native-symlink-evidence/ @@ -377,7 +377,7 @@ jobs: - name: Set up Node.js if: matrix.shard == 1 - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' @@ -431,7 +431,7 @@ jobs: - name: Upload coverage data if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: unit-coverage-shard-${{ matrix.shard }} path: .coverage.unit-shard-${{ matrix.shard }} @@ -470,7 +470,7 @@ jobs: - name: Download shard coverage if: always() - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: pattern: unit-coverage-shard-* path: coverage-shards/ @@ -668,7 +668,7 @@ jobs: python-version: ${{ env.PYTHON_VERSION }} - name: Set up Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '24' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index dfafd8d011..f00c5fb0a2 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -30,9 +30,9 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: ${{ matrix.language }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 diff --git a/.github/workflows/crlf-invariance.yml b/.github/workflows/crlf-invariance.yml index 5807a4e4f2..2283def175 100644 --- a/.github/workflows/crlf-invariance.yml +++ b/.github/workflows/crlf-invariance.yml @@ -67,7 +67,7 @@ jobs: run: uv run --frozen --python ${{ env.PYTHON_VERSION }} python scripts/crlf_invariance_probe.py --out hash.txt - name: Upload hash artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: crlf-hash-${{ matrix.os }} path: hash.txt @@ -78,7 +78,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Download all hash artifacts - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: pattern: crlf-hash-* path: hashes diff --git a/.github/workflows/devcontainer-feature-publish.yml b/.github/workflows/devcontainer-feature-publish.yml index 7fa0cfbe60..4e2a031388 100644 --- a/.github/workflows/devcontainer-feature-publish.yml +++ b/.github/workflows/devcontainer-feature-publish.yml @@ -60,7 +60,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Publish features - uses: devcontainers/action@1082abd5d2bf3a11abccba70eef98df068277772 # v1.4.3 + uses: devcontainers/action@bef2cf2d1a019b00b45e184f83035e01bd1972f3 # v1.4.4 with: publish-features: 'true' base-path-to-features: './devcontainer/src' diff --git a/.github/workflows/devcontainer-feature-test.yml b/.github/workflows/devcontainer-feature-test.yml index 25bfc9db5b..800ebeb0e5 100644 --- a/.github/workflows/devcontainer-feature-test.yml +++ b/.github/workflows/devcontainer-feature-test.yml @@ -97,7 +97,7 @@ jobs: - name: Set up Node if: steps.gate.outputs.skip == 'false' - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '20' diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index f07ab03b1f..9d115aabdc 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -44,7 +44,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '22' cache: 'npm' diff --git a/.github/workflows/mutation-pilot.yml b/.github/workflows/mutation-pilot.yml index ab359e9706..7a903c0c0a 100644 --- a/.github/workflows/mutation-pilot.yml +++ b/.github/workflows/mutation-pilot.yml @@ -83,7 +83,7 @@ jobs: - name: Upload deterministic mutation report if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: mutation-pilot-report path: mutation-pilot-report.json