From b965f83c91fdf4a1b43bd31abfbfc4e3f1b8432c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 06:47:00 +0000 Subject: [PATCH] chore(deps): bump the actions group with 2 updates Bumps the actions group with 2 updates: [softprops/action-gh-release](https://github.com/softprops/action-gh-release) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action). Updates `softprops/action-gh-release` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v3.0.3...v3.0.4) Updates `SonarSource/sonarqube-scan-action` from 8.4.0 to 8.4.1 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v8.4.0...v8.4.1) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 3.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 16 ++++++++-------- .github/workflows/release.yml | 2 +- .github/workflows/sonarqube.yml | 2 +- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index e41cb477..7490daca 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -74,7 +74,7 @@ workflows: - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' - 'actions/upload-artifact@v7.0.2' - - 'softprops/action-gh-release@v3.0.3' + - 'softprops/action-gh-release@v3.0.4' '.github/workflows/rsr-compliance-canary.yml': - 'actions/checkout@v7.0.1' '.github/workflows/rust-ci.yml': @@ -89,7 +89,7 @@ workflows: - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' '.github/workflows/sonarqube.yml': - 'actions/checkout@v7.0.1' - - 'sonarsource/sonarqube-scan-action@v8.4.0' + - 'sonarsource/sonarqube-scan-action@v8.4.1' '.github/workflows/squabble.yml': [] '.github/workflows/static-analysis-gate.yml': - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9' @@ -214,13 +214,13 @@ dependencies: commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6' owner_id: 108928776 repo_id: 512644635 - 'softprops/action-gh-release@v3.0.3': - ref: 'v3.0.3' - commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' + 'softprops/action-gh-release@v3.0.4': + ref: 'v3.0.4' + commit: 'sha1-8a0cd651e5b2365bd640854a3fa5dfc70e4875f3' owner_id: 2242 repo_id: 204253808 - 'sonarsource/sonarqube-scan-action@v8.4.0': - ref: 'v8.4.0' - commit: 'sha1-4d1dc0c91ee400dcf8a6dddf2f705ac36542e304' + 'sonarsource/sonarqube-scan-action@v8.4.1': + ref: 'v8.4.1' + commit: 'sha1-e805d875275f728fac1885b413934be6d7c63f65' owner_id: 545988 repo_id: 366408409 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 75229769..8eba7487 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -129,7 +129,7 @@ jobs: # name: release-artifacts # path: artifacts/ - name: Create GitHub Release - uses: softprops/action-gh-release@v3.0.3 + uses: softprops/action-gh-release@v3.0.4 with: body: ${{ needs.changelog.outputs.changelog }} draft: false diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index 0f0b7ee2..fa8cb01d 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -64,6 +64,6 @@ jobs: - name: SonarQube Scan if: steps.cfg.outputs.configured == 'true' - uses: SonarSource/sonarqube-scan-action@v8.4.0 + uses: SonarSource/sonarqube-scan-action@v8.4.1 env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}