From 085de895bc5942834da68f550e82cae974d9f74d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 10 Nov 2026 02:09:14 +0000 Subject: [PATCH] build(deps): bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.90.1` | `2.90.2` | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.22.3` | `2.22.4` | | [ruby/setup-ruby](https://github.com/ruby/setup-ruby) | `1.336.0` | `1.338.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.7.0` | `4.8.0` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.3` | `3.0.4` | Updates `taiki-e/install-action` from 2.90.1 to 2.90.2 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/v2.90.1...v2.90.2) Updates `step-security/harden-runner` from 2.22.3 to 2.22.4 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/v2.22.3...v2.22.4) Updates `ruby/setup-ruby` from 1.336.0 to 1.338.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](https://github.com/ruby/setup-ruby/compare/v1.336.0...v1.338.0) Updates `docker/login-action` from 4.7.0 to 4.8.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.7.0...v4.8.0) Updates `softprops/action-gh-release` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v3.0.3...v3.0.4) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: ruby/setup-ruby dependency-version: 1.338.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: step-security/harden-runner dependency-version: 2.22.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.90.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 64 +++++++++---------- .github/workflows/build-gossamer-gui.yml | 2 +- .github/workflows/ci-health-sweep.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/credential-read-check.yml | 4 +- .github/workflows/estate-rescan.yml | 4 +- .../workflows/hypatia-remediation-sweep.yml | 2 +- .github/workflows/inbox-steward-intake.yml | 8 +-- .github/workflows/push-email-notify.yml | 2 +- .github/workflows/quality.yml | 4 +- .github/workflows/release.yml | 4 +- .github/workflows/roadmap-sync.yml | 2 +- .github/workflows/security-policy.yml | 2 +- .github/workflows/tests.yml | 2 +- 14 files changed, 52 insertions(+), 52 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index a5fcdd5c..e6a15430 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -14,10 +14,10 @@ workflows: - 'actions/setup-node@v7.1.0' - 'actions/upload-artifact@v7.0.2' - 'dtolnay/rust-toolchain@v1' - - 'taiki-e/install-action@v2.90.1' + - 'taiki-e/install-action@v2.90.2' '.github/workflows/ci-health-sweep.yml': - 'actions/checkout@v7.0.1' - - 'step-security/harden-runner@v2.22.3' + - 'step-security/harden-runner@v2.22.4' '.github/workflows/ci.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' @@ -29,7 +29,7 @@ workflows: - 'haskell-actions/setup@v2.12.1' - 'oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6' - 'swatinem/rust-cache@v2.9.3' - - 'taiki-e/install-action@v2.90.1' + - 'taiki-e/install-action@v2.90.2' '.github/workflows/cicd-squabbler.yml': [] '.github/workflows/clusterfuzzlite.yml': - 'actions/checkout@v7.0.1' @@ -38,7 +38,7 @@ workflows: - 'actions/checkout@v7.0.1' - 'github/codeql-action@v4.38.2' '.github/workflows/credential-read-check.yml': - - 'step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43' + - 'step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a' '.github/workflows/dependabot-automerge.yml': - 'dependabot/fetch-metadata@v3.1.0' '.github/workflows/dogfood-gate.yml': @@ -50,17 +50,17 @@ workflows: - 'actions/cache@v6.1.0' - 'actions/download-artifact@v8.0.2' - 'actions/upload-artifact@v7.0.2' - - 'step-security/harden-runner@v2.22.3' + - 'step-security/harden-runner@v2.22.4' '.github/workflows/governance.yml': - 'metadatastician/standards@7641c7fdb01420696b5420ab85d88f599f32f609' '.github/workflows/hypatia-remediation-sweep.yml': - 'actions/upload-artifact@v7.0.2' - - 'step-security/harden-runner@v2.22.3' + - 'step-security/harden-runner@v2.22.4' '.github/workflows/hypatia-scan.yml': - 'metadatastician/standards@7641c7fdb01420696b5420ab85d88f599f32f609' '.github/workflows/inbox-steward-intake.yml': - 'actions/checkout@v7.0.1' - - 'step-security/harden-runner@v2.22.3' + - 'step-security/harden-runner@v2.22.4' '.github/workflows/label-triage.yml': [] '.github/workflows/labels.yml': [] '.github/workflows/language-blockers.yml': @@ -78,7 +78,7 @@ workflows: - 'actions/upload-pages-artifact@v5.0.0' '.github/workflows/push-email-notify.yml': - 'hyperpolymath/smtp-notify-action@v0.5.1' - - 'step-security/harden-runner@v2.22.3' + - 'step-security/harden-runner@v2.22.4' '.github/workflows/quality.yml': - 'actions/checkout@v7.0.1' - 'actions/deploy-pages@v5.0.1' @@ -86,23 +86,23 @@ workflows: - 'actions/upload-pages-artifact@v5.0.0' - 'dtolnay/rust-toolchain@v1' - 'editorconfig-checker/action-editorconfig-checker@v3.0.0' - - 'ruby/setup-ruby@v1.336.0' + - 'ruby/setup-ruby@v1.338.0' '.github/workflows/release.yml': - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' - 'actions/download-artifact@v8.0.2' - 'actions/upload-artifact@v7.0.2' - 'docker/build-push-action@v7.4.0' - - 'docker/login-action@v4.7.0' + - 'docker/login-action@v4.8.0' - 'docker/metadata-action@v6.2.0' - 'docker/setup-buildx-action@v4.4.1' - 'docker/setup-qemu-action@v4.4.0' - 'dtolnay/rust-toolchain@v1' - - 'softprops/action-gh-release@v3.0.3' + - 'softprops/action-gh-release@v3.0.4' - 'swatinem/rust-cache@v2.9.3' '.github/workflows/roadmap-sync.yml': - 'actions/create-github-app-token@v3.3.0' - - 'step-security/harden-runner@v2.22.3' + - 'step-security/harden-runner@v2.22.4' '.github/workflows/rsr-oracle.yml': - 'actions/checkout@v7.0.1' - 'erlef/setup-beam@v1.24.1' @@ -122,7 +122,7 @@ workflows: - 'dtolnay/rust-toolchain@v1' - 'github/codeql-action@v4.38.2' - 'gitleaks/gitleaks-action@v3.0.0' - - 'taiki-e/install-action@v2.90.1' + - 'taiki-e/install-action@v2.90.2' - 'trufflesecurity/trufflehog@v3.99.8' '.github/workflows/standards-integration.yml': [] '.github/workflows/tests.yml': @@ -135,7 +135,7 @@ workflows: - 'dtolnay/rust-toolchain@v1' - 'erlef/setup-beam@v1.24.1' - 'swatinem/rust-cache@v2.9.3' - - 'taiki-e/install-action@v2.90.1' + - 'taiki-e/install-action@v2.90.2' '.github/workflows/verify-proofs.yml': - 'actions/cache@v6.1.0' - 'actions/checkout@v7.0.1' @@ -276,9 +276,9 @@ dependencies: commit: 'sha1-c3c9e263c25d99ce0380d002d59b67737d91b0dc' owner_id: 5429470 repo_id: 241092383 - 'docker/login-action@v4.7.0': - ref: 'v4.7.0' - commit: 'sha1-81c6f93d4bc991e510b342a00b419b3bb4efc5c6' + 'docker/login-action@v4.8.0': + ref: 'v4.8.0' + commit: 'sha1-8aa5831fb8d48d8f76594c7ddde61ae58019f550' owner_id: 5429470 repo_id: 287743349 'docker/metadata-action@v6.2.0': @@ -404,24 +404,24 @@ dependencies: commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6' owner_id: 108928776 repo_id: 512644635 - 'ruby/setup-ruby@v1.336.0': - ref: 'v1.336.0' - commit: 'sha1-de492cf36cbab201753d720ce4f4e336cd688c94' + 'ruby/setup-ruby@v1.338.0': + ref: 'v1.338.0' + commit: 'sha1-b3aaceaef7e0ee231b499e7b5f49c03fc1d32199' owner_id: 210414 repo_id: 231208785 - 'softprops/action-gh-release@v3.0.3': - ref: 'v3.0.3' - commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' + 'softprops/action-gh-release@v3.0.4': + ref: 'v3.0.4' + commit: 'sha1-8a0cd651e5b2365bd640854a3fa5dfc70e4875f3' owner_id: 2242 repo_id: 204253808 - 'step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43': - ref: 'v2.22.3' - commit: 'sha1-46b06cea07f9e64621fdf066ba77ac6915163d43' + 'step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a': + ref: 'v2.22.4' + commit: 'sha1-1d88384fd173af6ecb012dfd0264a306b711241a' owner_id: 88700172 repo_id: 422287306 - 'step-security/harden-runner@v2.22.3': - ref: 'v2.22.3' - commit: 'sha1-46b06cea07f9e64621fdf066ba77ac6915163d43' + 'step-security/harden-runner@v2.22.4': + ref: 'v2.22.4' + commit: 'sha1-1d88384fd173af6ecb012dfd0264a306b711241a' owner_id: 88700172 repo_id: 422287306 'swatinem/rust-cache@v2.9.3': @@ -429,9 +429,9 @@ dependencies: commit: 'sha1-d1527c8f67ef9af357290475d4af4b0fab8f12e0' owner_id: 580492 repo_id: 298565987 - 'taiki-e/install-action@v2.90.1': - ref: 'v2.90.1' - commit: 'sha1-c509219cf42fba86913069efd0ade2458c59337b' + 'taiki-e/install-action@v2.90.2': + ref: 'v2.90.2' + commit: 'sha1-3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2' owner_id: 43724913 repo_id: 442947557 'trufflesecurity/trufflehog@v3.99.8': diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml index 878a90d6..56d00ce2 100644 --- a/.github/workflows/build-gossamer-gui.yml +++ b/.github/workflows/build-gossamer-gui.yml @@ -143,7 +143,7 @@ jobs: targets: wasm32-unknown-unknown - name: Install just - uses: taiki-e/install-action@v2.90.1 + uses: taiki-e/install-action@v2.90.2 with: # Pin an explicit modern just: the Justfile uses `import?` # (optional import, just >= 1.19.0). Unversioned `tool: just` diff --git a/.github/workflows/ci-health-sweep.yml b/.github/workflows/ci-health-sweep.yml index 938d8f25..8301bfcd 100644 --- a/.github/workflows/ci-health-sweep.yml +++ b/.github/workflows/ci-health-sweep.yml @@ -46,7 +46,7 @@ jobs: timeout-minutes: 30 steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # The checkout, and gh against the GitHub API (scripts/ci-health/). diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index e4fcdfeb..7bb28cb9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -120,7 +120,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.90.1 + uses: taiki-e/install-action@v2.90.2 with: tool: cargo-llvm-cov diff --git a/.github/workflows/credential-read-check.yml b/.github/workflows/credential-read-check.yml index 8d90af05..eefa5c50 100644 --- a/.github/workflows/credential-read-check.yml +++ b/.github/workflows/credential-read-check.yml @@ -19,7 +19,7 @@ jobs: timeout-minutes: 5 steps: - name: Harden the runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: block allowed-endpoints: api.github.com:443 @@ -38,7 +38,7 @@ jobs: timeout-minutes: 5 steps: - name: Harden the runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: block allowed-endpoints: api.github.com:443 diff --git a/.github/workflows/estate-rescan.yml b/.github/workflows/estate-rescan.yml index 90fddddd..ee87d467 100644 --- a/.github/workflows/estate-rescan.yml +++ b/.github/workflows/estate-rescan.yml @@ -92,7 +92,7 @@ jobs: timeout-minutes: 5 steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block allowed-endpoints: > @@ -259,7 +259,7 @@ jobs: timeout-minutes: 30 steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # git and gh against GitHub, plus the artifact service and its diff --git a/.github/workflows/hypatia-remediation-sweep.yml b/.github/workflows/hypatia-remediation-sweep.yml index 3f8caf56..b634be35 100644 --- a/.github/workflows/hypatia-remediation-sweep.yml +++ b/.github/workflows/hypatia-remediation-sweep.yml @@ -63,7 +63,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # gh against the GitHub API, plus the artifact service and its blob diff --git a/.github/workflows/inbox-steward-intake.yml b/.github/workflows/inbox-steward-intake.yml index 9a07989b..907d14e8 100644 --- a/.github/workflows/inbox-steward-intake.yml +++ b/.github/workflows/inbox-steward-intake.yml @@ -53,7 +53,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # git and gh against GitHub only. @@ -136,7 +136,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # git and gh against GitHub only. @@ -247,7 +247,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # git and gh against GitHub only. @@ -309,7 +309,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # One gh api call: the dispatch to .git-private-farm. diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index ad95e5fd..8ac6d013 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -41,7 +41,7 @@ jobs: timeout-minutes: 5 steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # The action downloads its pinned binary from its GitHub release, then diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index a92a7833..d88ab502 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -26,7 +26,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Setup Ruby - uses: ruby/setup-ruby@v1.336.0 + uses: ruby/setup-ruby@v1.338.0 with: ruby-version: '3.2' bundler-cache: true @@ -226,7 +226,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Setup Ruby - uses: ruby/setup-ruby@v1.336.0 + uses: ruby/setup-ruby@v1.338.0 with: ruby-version: '3.2' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3628bffa..e9bf8293 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -231,7 +231,7 @@ jobs: - name: Log in to Container Registry if: ${{ !inputs.dry_run }} - uses: docker/login-action@v4.7.0 + uses: docker/login-action@v4.8.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -340,7 +340,7 @@ jobs: cat checksums.txt - name: Create GitHub Release - uses: softprops/action-gh-release@v3.0.3 + uses: softprops/action-gh-release@v3.0.4 with: name: Hypatia v${{ needs.prepare.outputs.version }} body_path: release-notes.md diff --git a/.github/workflows/roadmap-sync.yml b/.github/workflows/roadmap-sync.yml index d9107de9..f3e0b315 100644 --- a/.github/workflows/roadmap-sync.yml +++ b/.github/workflows/roadmap-sync.yml @@ -47,7 +47,7 @@ jobs: WINDOW_MIN: ${{ inputs.window_min || '45' }} # look-back window (> cron interval for overlap) steps: - name: Harden the runner - uses: step-security/harden-runner@v2.22.3 + uses: step-security/harden-runner@v2.22.4 with: egress-policy: block # The App token mint and every gh call go to the GitHub API. diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml index 406a7cc4..dbf2d1cb 100644 --- a/.github/workflows/security-policy.yml +++ b/.github/workflows/security-policy.yml @@ -140,7 +140,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.90.1 + uses: taiki-e/install-action@v2.90.2 with: tool: cargo-deny diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 1f222dab..62c134f9 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -584,7 +584,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.90.1 + uses: taiki-e/install-action@v2.90.2 with: tool: cargo-llvm-cov