diff --git a/.github/workflows/cache-clear.yml b/.github/workflows/cache-clear.yml index c9a652a..ceb64f8 100644 --- a/.github/workflows/cache-clear.yml +++ b/.github/workflows/cache-clear.yml @@ -15,7 +15,7 @@ jobs: egress-policy: "audit" - name: "Check out code" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 - name: "Cleanup" run: | diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 315f974..d1ab9a0 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -48,11 +48,11 @@ jobs: egress-policy: "audit" - name: "Checkout repository" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 # Initializes the CodeQL tools for scanning. - name: "Initialize CodeQL" - uses: "github/codeql-action/init@6a28655e3dcb49cb0840ea372fd6d17733edd8a4" # v2.21.8 + uses: "github/codeql-action/init@ddccb873888234080b77e9bc2d4764d5ccaaccf9" # v2.21.9 with: languages: "${{ matrix.language }}" # If you wish to specify custom queries, you can do so here or in a config file. @@ -62,7 +62,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: "Autobuild" - uses: "github/codeql-action/autobuild@6a28655e3dcb49cb0840ea372fd6d17733edd8a4" # v2.21.8 + uses: "github/codeql-action/autobuild@ddccb873888234080b77e9bc2d4764d5ccaaccf9" # v2.21.9 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -75,6 +75,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: "Perform CodeQL Analysis" - uses: "github/codeql-action/analyze@6a28655e3dcb49cb0840ea372fd6d17733edd8a4" # v2.21.8 + uses: "github/codeql-action/analyze@ddccb873888234080b77e9bc2d4764d5ccaaccf9" # v2.21.9 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index bfa0f90..aa6911c 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -25,7 +25,7 @@ jobs: egress-policy: "audit" - name: "Git checkout" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 env: GIT_COMMITTER_NAME: "GitHub Actions Shell" GIT_AUTHOR_NAME: "GitHub Actions Shell" diff --git a/.github/workflows/introspect.yml b/.github/workflows/introspect.yml index 7344e4a..77b9549 100644 --- a/.github/workflows/introspect.yml +++ b/.github/workflows/introspect.yml @@ -26,7 +26,7 @@ jobs: egress-policy: "audit" - name: "Git checkout" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 env: GIT_COMMITTER_NAME: "GitHub Actions Shell" GIT_AUTHOR_NAME: "GitHub Actions Shell" diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 3804104..82e4ecf 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -28,7 +28,7 @@ jobs: yaml_lintable: "${{ steps.changes.outputs.yaml_lintable }}" steps: - name: "Git checkout" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 env: GIT_COMMITTER_NAME: "GitHub Actions Shell" GIT_AUTHOR_NAME: "GitHub Actions Shell" @@ -53,7 +53,7 @@ jobs: egress-policy: "audit" - name: "Git checkout" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 with: fetch-depth: 2 env: @@ -93,7 +93,7 @@ jobs: egress-policy: "audit" - name: "Git checkout" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 with: fetch-depth: 2 env: @@ -120,7 +120,7 @@ jobs: egress-policy: "audit" - name: "Git checkout" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 with: fetch-depth: 2 env: diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index dfbe66e..3c1b88d 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -38,7 +38,7 @@ jobs: egress-policy: "audit" - name: "Checkout code" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 with: persist-credentials: false @@ -73,6 +73,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: "github/codeql-action/upload-sarif@6a28655e3dcb49cb0840ea372fd6d17733edd8a4" # v2.21.8 + uses: "github/codeql-action/upload-sarif@ddccb873888234080b77e9bc2d4764d5ccaaccf9" # v2.21.9 with: sarif_file: "results.sarif" diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 2484823..0a54f1c 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -36,7 +36,7 @@ jobs: egress-policy: "audit" - name: "Git checkout" - uses: "actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac" # v4.0.0 + uses: "actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608" # v4.1.0 env: GIT_COMMITTER_NAME: "GitHub Actions Shell" GIT_AUTHOR_NAME: "GitHub Actions Shell" diff --git a/package.json b/package.json index 2f1873a..36e10bc 100644 --- a/package.json +++ b/package.json @@ -101,7 +101,7 @@ "vite-plugin-static-copy": "^0.17.0", "vitest": "^0.34.4" }, - "packageManager": "pnpm@8.7.6", + "packageManager": "pnpm@8.8.0", "engines": { "node": ">=18.16.* <=20.*" },