From 0b47e18879fe54e6a8fc4694e86cb0f055fa5f1a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 1 Jan 2024 12:27:32 +0000 Subject: [PATCH] Bump the github-actions group with 4 updates Bumps the github-actions group with 4 updates: [GrantBirki/json-yaml-validate](https://github.com/grantbirki/json-yaml-validate), [github/codeql-action](https://github.com/github/codeql-action), [actions/setup-node](https://github.com/actions/setup-node) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `GrantBirki/json-yaml-validate` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/grantbirki/json-yaml-validate/releases) - [Commits](https://github.com/grantbirki/json-yaml-validate/compare/ce9d0c1ff859732d3839a5e1cdc22ff203aa464a...0be3fe3a8d49e23012a6008ccd21e0cef1e9f5b5) Updates `github/codeql-action` from 2 to 3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v2...v3) Updates `actions/setup-node` from 4.0.0 to 4.0.1 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4.0.0...v4.0.1) Updates `actions/upload-artifact` from 3.1.3 to 4.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/a8a3f3ad30e3422c9c7b888a15615d19a852ae32...c7d193f32edcb7bfad88892161225aeda64e9392) --- updated-dependencies: - dependency-name: GrantBirki/json-yaml-validate dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions-config-validation.yml | 2 +- .github/workflows/codeql-analysis.yml | 6 +++--- .github/workflows/lint.yml | 2 +- .github/workflows/package-check.yml | 4 ++-- .github/workflows/test.yml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/actions-config-validation.yml b/.github/workflows/actions-config-validation.yml index 28f745f7..8bd50130 100644 --- a/.github/workflows/actions-config-validation.yml +++ b/.github/workflows/actions-config-validation.yml @@ -17,7 +17,7 @@ jobs: - uses: actions/checkout@v4 - name: actions-config-validation - uses: GrantBirki/json-yaml-validate@ce9d0c1ff859732d3839a5e1cdc22ff203aa464a # pin@v2.4.0 + uses: GrantBirki/json-yaml-validate@0be3fe3a8d49e23012a6008ccd21e0cef1e9f5b5 # pin@v2.5.0 with: comment: "true" # enable comment mode yaml_schema: "__tests__/schemas/action.schema.yml" diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index f6c3a110..6f192813 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -30,12 +30,12 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index c7a01973..1cd0bb07 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,7 +16,7 @@ jobs: - uses: actions/checkout@v4 - name: setup node - uses: actions/setup-node@v4.0.0 + uses: actions/setup-node@v4.0.1 with: node-version-file: .node-version cache: 'npm' diff --git a/.github/workflows/package-check.yml b/.github/workflows/package-check.yml index 0a1c8579..3987d988 100644 --- a/.github/workflows/package-check.yml +++ b/.github/workflows/package-check.yml @@ -18,7 +18,7 @@ jobs: - uses: actions/checkout@v4 - name: setup node - uses: actions/setup-node@v4.0.0 + uses: actions/setup-node@v4.0.1 with: node-version-file: .node-version cache: 'npm' @@ -39,7 +39,7 @@ jobs: id: diff # If index.js was different than expected, upload the expected version as an artifact - - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # pin@v3.1.3 + - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # pin@v4.0.0 if: ${{ failure() && steps.diff.conclusion == 'failure' }} with: name: dist diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 9c52c7ea..1978d6be 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -16,7 +16,7 @@ jobs: - uses: actions/checkout@v4 - name: setup node - uses: actions/setup-node@v4.0.0 + uses: actions/setup-node@v4.0.1 with: node-version-file: .node-version cache: 'npm'