From 85367d85eddd4ee24dd7b4327172e8833749f711 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 21:13:49 +0000 Subject: [PATCH] chore(deps): bump the actions group with 2 updates Bumps the actions group with 2 updates: [taiki-e/install-action](https://github.com/taiki-e/install-action) and [github/codeql-action](https://github.com/github/codeql-action). Updates `taiki-e/install-action` from 2.86.7 to 2.87.0 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/v2.86.7...v2.87.0) Updates `github/codeql-action` from 4.37.8 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.8...v4.37.9) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.87.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-gossamer-gui.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/security-policy.yml | 20 ++++++++++---------- .github/workflows/tests.yml | 2 +- 5 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml index 10f75d2b..ddb7b9a6 100644 --- a/.github/workflows/build-gossamer-gui.yml +++ b/.github/workflows/build-gossamer-gui.yml @@ -142,7 +142,7 @@ jobs: targets: wasm32-unknown-unknown - name: Install just - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.0 with: # Pin an explicit modern just: the Justfile uses `import?` # (optional import, just >= 1.19.0). Unversioned `tool: just` diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 635b0aca..18d72b1c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -112,7 +112,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.0 with: tool: cargo-llvm-cov diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 5c4e581b..2336e5a8 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,12 +44,12 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.37.9 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.37.9 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml index d331acbd..bd93901a 100644 --- a/.github/workflows/security-policy.yml +++ b/.github/workflows/security-policy.yml @@ -69,7 +69,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.0 with: tool: cargo-deny @@ -129,7 +129,7 @@ jobs: args: --sarif --output=semgrep.sarif - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.37.9 if: always() with: sarif_file: semgrep.sarif @@ -150,13 +150,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.37.9 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.37.9 with: category: "/language:${{matrix.language}}" @@ -220,7 +220,7 @@ jobs: severity: 'CRITICAL,HIGH' - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.37.9 if: always() with: sarif_file: 'trivy-results.sarif' @@ -331,7 +331,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.0 with: tool: cargo-deny @@ -444,7 +444,7 @@ jobs: ignore-unfixed: true - name: Upload Trivy SARIF results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.37.9 if: always() with: sarif_file: 'trivy-${{ steps.image.outputs.name }}.sarif' @@ -554,13 +554,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.37.9 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.37.9 with: category: "/language:${{matrix.language}}" @@ -587,7 +587,7 @@ jobs: args: --sarif --output=semgrep.sarif - name: Upload SARIF results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.37.9 if: always() with: sarif_file: semgrep.sarif diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index ca53e18e..f16b97a1 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -519,7 +519,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.0 with: tool: cargo-llvm-cov