chore(deps): update all non-major dependencies

anolilab · May 31, 2024 · b515fd5 · b515fd5
1 parent eb512d4
commit b515fd5
Show file tree

Hide file tree

Showing 15 changed files with 68 additions and 68 deletions.
diff --git a/.github/workflows/bundle-analysis.yml b/.github/workflows/bundle-analysis.yml
@@ -32,19 +32,19 @@ jobs:
 
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               env:
                   GIT_COMMITTER_NAME: "GitHub Actions Shell"
                   GIT_AUTHOR_NAME: "GitHub Actions Shell"
                   EMAIL: "github-actions[bot]@users.noreply.github.com"
 
             - name: "Check for file changes"
-              uses: "dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50" # v2.11.1
+              uses: "dorny/paths-filter@7267a8516b6f92bdb098633497bad573efdbf271" # v2.12.0
               id: "changes"
               with:
                   token: "${{ github.token }}"
@@ -57,12 +57,12 @@ jobs:
         runs-on: "ubuntu-latest"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               env:
                   GIT_COMMITTER_NAME: "GitHub Actions Shell"
                   GIT_AUTHOR_NAME: "GitHub Actions Shell"
@@ -71,7 +71,7 @@ jobs:
             - uses: "pnpm/action-setup@a3252b78c470c02df07e9d59298aecedc3ccdd6d" # v3.0.0
 
             - name: "Set node version to 18"
-              uses: "actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65" # v4.0.0
+              uses: "actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8" # v4.0.2
               with:
                   node-version: "18"
                   cache: "pnpm"
@@ -82,7 +82,7 @@ jobs:
                   SKIP_CHECK: "true"
 
             - name: "Restore Next.js Build"
-              uses: "actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2" # v4.0.0
+              uses: "actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9" # v4.0.2
               id: "restore-build-cache"
               env:
                   cache-name: "cache-next-build"
@@ -106,13 +106,13 @@ jobs:
               run: "cd examples/nextra && npx -p nextjs-bundle-analysis@0.5.0 report"
 
             - name: "Upload Bundle"
-              uses: "actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392" # v4.0.0
+              uses: "actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808" # v4.3.3
               with:
                   name: "bundle"
                   path: "examples/nextra/.next/analyze/__bundle_analysis.json"
 
             - name: "Download Base Branch Bundle Stats"
-              uses: "dawidd6/action-download-artifact@e7466d1a7587ed14867642c2ca74b5bcc1e19a2d" # v3.0.0
+              uses: "dawidd6/action-download-artifact@09f2f74827fd3a8607589e5ad7f9398816f540fe" # v3.1.4
               if: "success() && github.event.number"
               with:
                   workflow: "nextjs-bundle-analysis.yml"
@@ -153,7 +153,7 @@ jobs:
                   echo 'EOF' >> $GITHUB_OUTPUT
 
             - name: "Comment"
-              uses: "marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd" # v2.8.0
+              uses: "marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31" # v2.9.0
               if: "success() && github.event.number"
               with:
                   header: "next-bundle-analysis"
@@ -175,7 +175,7 @@ jobs:
             # If any jobs we depend on fail, we will fail since this is a required check
             # NOTE: A timeout is considered a failure
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 

diff --git a/.github/workflows/cache-clear.yml b/.github/workflows/cache-clear.yml
@@ -10,12 +10,12 @@ jobs:
         runs-on: "ubuntu-latest"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Check out code"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
 
             - name: "Cleanup"
               run: |

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -43,16 +43,16 @@ jobs:
 
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Checkout repository"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
 
             # Initializes the CodeQL tools for scanning.
             - name: "Initialize CodeQL"
-              uses: "github/codeql-action/init@012739e5082ff0c22ca6d6ab32e07c36df03c4a4" # v3.22.12
+              uses: "github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f" # v3.25.7
               with:
                   languages: "${{ matrix.language }}"
                   # If you wish to specify custom queries, you can do so here or in a config file.
@@ -62,7 +62,7 @@ jobs:
             # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
             # If this step fails, then you should remove it and run the build manually (see below)
             - name: "Autobuild"
-              uses: "github/codeql-action/autobuild@012739e5082ff0c22ca6d6ab32e07c36df03c4a4" # v3.22.12
+              uses: "github/codeql-action/autobuild@f079b8493333aace61c81488f8bd40919487bd9f" # v3.25.7
 
             # ℹ️ Command-line programs to run using the OS shell.
             # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -75,6 +75,6 @@ jobs:
             #   ./location_of_script_within_repo/buildscript.sh
 
             - name: "Perform CodeQL Analysis"
-              uses: "github/codeql-action/analyze@012739e5082ff0c22ca6d6ab32e07c36df03c4a4" # v3.22.12
+              uses: "github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f" # v3.25.7
               with:
                   category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/comment-issue.yml b/.github/workflows/comment-issue.yml
@@ -16,7 +16,7 @@ jobs:
             issues: "write"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 

diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -20,16 +20,16 @@ jobs:
         runs-on: "ubuntu-latest"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               env:
                   GIT_COMMITTER_NAME: "GitHub Actions Shell"
                   GIT_AUTHOR_NAME: "GitHub Actions Shell"
                   EMAIL: "github-actions[bot]@users.noreply.github.com"
 
             - name: "Dependency Review"
-              uses: "actions/dependency-review-action@4901385134134e04cec5fbe5ddfe3b2c5bd5d976" # v4.0.0
+              uses: "actions/dependency-review-action@0c155c5e8556a497adf53f2c18edabf945ed8e70" # v4.3.2
diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml
@@ -16,11 +16,11 @@ jobs:
 
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
-            - uses: "actions/first-interaction@1d8459ca65b335265f1285568221e229d45a995e" # v1.1.1
+            - uses: "actions/first-interaction@34f15e814fe48ac9312ccf29db4e74fa767cbab7" # v1.3.0
               with:
                   repo-token: "${{ secrets.GITHUB_TOKEN }}"
                   issue-message: "Awesome! Thank you for taking the time to create your first issue! Please review the [guidelines](https://narrowspark.com/docs/current/contributing)"

diff --git a/.github/workflows/introspect.yml b/.github/workflows/introspect.yml
@@ -21,12 +21,12 @@ jobs:
         runs-on: "ubuntu-latest"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               env:
                   GIT_COMMITTER_NAME: "GitHub Actions Shell"
                   GIT_AUTHOR_NAME: "GitHub Actions Shell"

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
@@ -28,19 +28,19 @@ jobs:
             yaml_lintable: "${{ steps.changes.outputs.yaml_lintable }}"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               env:
                   GIT_COMMITTER_NAME: "GitHub Actions Shell"
                   GIT_AUTHOR_NAME: "GitHub Actions Shell"
                   EMAIL: "github-actions[bot]@users.noreply.github.com"
 
             - name: "Check for file changes"
-              uses: "dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50" # v2.11.1
+              uses: "dorny/paths-filter@7267a8516b6f92bdb098633497bad573efdbf271" # v2.12.0
               id: "changes"
               with:
                   token: "${{ github.token }}"
@@ -53,12 +53,12 @@ jobs:
         runs-on: "ubuntu-latest"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               with:
                   fetch-depth: 2
               env:
@@ -71,7 +71,7 @@ jobs:
                   run_install: false
 
             - name: "Use Node.js 20.6.1"
-              uses: "actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65" # v4.0.0
+              uses: "actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8" # v4.0.2
               with:
                   node-version: "20.6.1"
                   cache: "pnpm"
@@ -92,12 +92,12 @@ jobs:
         runs-on: "ubuntu-latest"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               with:
                   fetch-depth: 2
               env:
@@ -119,12 +119,12 @@ jobs:
         runs-on: "ubuntu-latest"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Git checkout"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               with:
                   fetch-depth: 2
               env:
@@ -137,7 +137,7 @@ jobs:
                   run_install: false
 
             - name: "Use Node.js 20.6.1"
-              uses: "actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65" # v4.0.0
+              uses: "actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8" # v4.0.2
               with:
                   node-version: "20.6.1"
                   cache: "pnpm"
@@ -170,7 +170,7 @@ jobs:
             # If any jobs we depend on fail, we will fail since this is a required check
             # NOTE: A timeout is considered a failure
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 

diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -33,17 +33,17 @@ jobs:
 
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Checkout code"
-              uses: "actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11" # v4.1.1
+              uses: "actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29" # v4.1.6
               with:
                   persist-credentials: false
 
             - name: "Run analysis"
-              uses: "ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031" # v2.2.0
+              uses: "ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534" # v2.3.3
               with:
                   results_file: "results.sarif"
                   results_format: "sarif"
@@ -65,14 +65,14 @@ jobs:
             # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
             # format to the repository Actions tab.
             - name: "Upload artifact"
-              uses: "actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392" # v4.0.0
+              uses: "actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808" # v4.3.3
               with:
                   name: "SARIF file"
                   path: "results.sarif"
                   retention-days: 5
 
             # Upload the results to GitHub's code scanning dashboard.
             - name: "Upload to code-scanning"
-              uses: "github/codeql-action/upload-sarif@012739e5082ff0c22ca6d6ab32e07c36df03c4a4" # v3.22.12
+              uses: "github/codeql-action/upload-sarif@f079b8493333aace61c81488f8bd40919487bd9f" # v3.25.7
               with:
                   sarif_file: "results.sarif"
diff --git a/.github/workflows/semantic-pull-request.yml b/.github/workflows/semantic-pull-request.yml
@@ -21,13 +21,13 @@ jobs:
         name: "Semantic Pull Request"
         steps:
             - name: "Harden Runner"
-              uses: "step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09" # v2.5.1
+              uses: "step-security/harden-runner@f086349bfa2bd1361f7909c78558e816508cdc10" # v2.8.0
               with:
                   egress-policy: "audit"
 
             - name: "Validate PR title"
               id: "lint_pr_title"
-              uses: "amannn/action-semantic-pull-request@c3cd5d1ea3580753008872425915e343e351ab54" # v5.2.0
+              uses: "amannn/action-semantic-pull-request@cfb60706e18bc85e8aec535e3c577abe8f70378e" # v5.5.2
               env:
                   GITHUB_TOKEN: "${{ secrets.GITHUB_TOKEN }}"
               with:
@@ -43,7 +43,7 @@ jobs:
                       infra
                       revert
 
-            - uses: "marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd" # v2.8.0
+            - uses: "marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31" # v2.9.0
               # When the previous steps fails, the workflow would stop. By adding this
               # condition you can continue the execution with the populated error message.
               if: "always() && (steps.lint_pr_title.outputs.error_message != null)"
@@ -62,7 +62,7 @@ jobs:
 
               # Delete a previous comment when the issue has been resolved
             - if: "${{ steps.lint_pr_title.outputs.error_message == null }}"
-              uses: "marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd" # v2.8.0
+              uses: "marocchino/sticky-pull-request-comment@331f8f5b4215f0445d3c07b4967662a32a2d3e31" # v2.9.0
               with:
                   header: "pr-title-lint-error"
                   message: |