Skip to content

Commit 4d931bb

Browse files
dependabot[bot]dependabot[bot]
authored
ci(deps)(deps): bump the github-actions group across 1 directory with 6 updates
Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.183` | `1.0.210` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.0` | `4.37.9` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.0` | `4.37.9` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.3` | `2.4.4` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.0` | `4.37.9` | Updates `actions/checkout` from 6.0.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@de0fac2...3d3c42e) Updates `anthropics/claude-code-action` from 1.0.183 to 1.0.210 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](anthropics/claude-code-action@be7b93b...a874e9e) Updates `github/codeql-action/init` from 4.36.0 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@7211b7c...cdf488f) Updates `github/codeql-action/analyze` from 4.36.0 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@7211b7c...cdf488f) Updates `ossf/scorecard-action` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@4eaacf0...2d11466) Updates `github/codeql-action/upload-sarif` from 4.36.0 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@7211b7c...cdf488f) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.185 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 964648a commit 4d931bb

11 files changed

Lines changed: 35 additions & 35 deletions

‎.github/workflows/local-org-policy-live-audit.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -81,12 +81,12 @@ jobs:
8181
DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }}
8282
steps:
8383
- name: Checkout developer-meta-files
84-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
84+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
8585
with:
8686
persist-credentials: false
8787

8888
- name: Checkout dist-ai (shared CI helper binaries)
89-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
89+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
9090
with:
9191
repository: org-ai-assisted/dist-ai
9292
ref: ${{ env.DIST_AI_REF }}

‎.github/workflows/local-org-policy-live-probe.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -81,12 +81,12 @@ jobs:
8181
DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }}
8282
steps:
8383
- name: Checkout developer-meta-files
84-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
84+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
8585
with:
8686
persist-credentials: false
8787

8888
- name: Checkout dist-ai (shared CI helper binaries)
89-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
89+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
9090
with:
9191
repository: org-ai-assisted/dist-ai
9292
ref: ${{ env.DIST_AI_REF }}

‎.github/workflows/reusable-bandit.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -112,12 +112,12 @@ jobs:
112112

113113
steps:
114114
- name: Checkout repository
115-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
115+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
116116
with:
117117
persist-credentials: false
118118

119119
- name: Checkout dist-ai (shared CI helper binaries)
120-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
120+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
121121
with:
122122
repository: org-ai-assisted/dist-ai
123123
ref: ${{ env.DIST_AI_REF }}
@@ -132,7 +132,7 @@ jobs:
132132

133133
- name: Checkout developer-meta-files (discovery + step-summary helpers)
134134
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
135-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
135+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
136136
with:
137137
repository: org-ai-assisted/developer-meta-files
138138
ref: ${{ env.DMF_REF }}

‎.github/workflows/reusable-claude-code-review.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -286,13 +286,13 @@ jobs:
286286
DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }}
287287
steps:
288288
- name: Checkout repository
289-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
289+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
290290
with:
291291
persist-credentials: false
292292

293293
- name: Run Claude Code Review
294294
id: claude
295-
uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1.0.183
295+
uses: anthropics/claude-code-action@a874e9ecd7bb36efdad65429c6b35815f5a08f10 # v1.0.210
296296
with:
297297
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
298298
## No 'allowed_users' input exists on the action; the
@@ -329,7 +329,7 @@ jobs:
329329
## whose github.sha names a commit in a different repository.
330330
- name: Checkout dist-ai (usage recorder)
331331
if: always() && steps.claude.outputs.execution_file != ''
332-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
332+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
333333
with:
334334
repository: org-ai-assisted/dist-ai
335335
ref: ${{ env.DIST_AI_REF }}

‎.github/workflows/reusable-codeql.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -189,13 +189,13 @@ jobs:
189189

190190
steps:
191191
- name: Checkout repository
192-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
192+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
193193
with:
194194
persist-credentials: false
195195

196196
- name: Checkout developer-meta-files (ci/ helpers + step-summary)
197197
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
198-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
198+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
199199
with:
200200
repository: org-ai-assisted/developer-meta-files
201201
ref: ${{ env.DMF_REF }}
@@ -231,7 +231,7 @@ jobs:
231231
run: bash -c "${PREPARE_COMMAND}"
232232

233233
- name: Initialize CodeQL
234-
uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
234+
uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
235235
with:
236236
languages: ${{ inputs.language }}
237237
build-mode: ${{ inputs.build-mode }}
@@ -264,7 +264,7 @@ jobs:
264264
run: bash -c "${BUILD_COMMAND}"
265265

266266
- name: Perform CodeQL Analysis
267-
uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
267+
uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
268268
with:
269269
category: "/language:${{ inputs.language }}"
270270

@@ -276,7 +276,7 @@ jobs:
276276
## leaves the summary calling a binary that was never fetched.
277277
- name: Checkout dist-ai (shared CI helper binaries)
278278
if: always()
279-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
279+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
280280
with:
281281
repository: org-ai-assisted/dist-ai
282282
ref: ${{ env.DIST_AI_REF }}

‎.github/workflows/reusable-coverity.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -154,20 +154,20 @@ jobs:
154154
DIST_AI_REF: ${{ github.repository == 'org-ai-assisted/dist-ai' && github.sha || 'master' }}
155155
steps:
156156
- name: Checkout consumer repository
157-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
157+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
158158
with:
159159
persist-credentials: false
160160

161161
- name: Checkout dist-ai (shared CI helper binaries)
162-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
162+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
163163
with:
164164
repository: org-ai-assisted/dist-ai
165165
ref: ${{ env.DIST_AI_REF }}
166166
path: .github/dist-ai
167167
persist-credentials: false
168168

169169
- name: Checkout developer-meta-files (orchestration scripts)
170-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
170+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
171171
with:
172172
repository: org-ai-assisted/developer-meta-files
173173
ref: master

‎.github/workflows/reusable-cppcheck.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -103,12 +103,12 @@ jobs:
103103

104104
steps:
105105
- name: Checkout repository
106-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
106+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
107107
with:
108108
persist-credentials: false
109109

110110
- name: Checkout dist-ai (shared CI helper binaries)
111-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
111+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
112112
with:
113113
repository: org-ai-assisted/dist-ai
114114
ref: ${{ env.DIST_AI_REF }}
@@ -117,7 +117,7 @@ jobs:
117117

118118
- name: Checkout developer-meta-files (ci/ helpers + step-summary)
119119
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
120-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
120+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
121121
with:
122122
repository: org-ai-assisted/developer-meta-files
123123
ref: ${{ env.DMF_REF }}

‎.github/workflows/reusable-dist-ai-tests.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -121,13 +121,13 @@ jobs:
121121
122122
- name: Checkout component (code under test)
123123
## https://github.com/actions/checkout/releases/tag/v6.0.2
124-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
124+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
125125
with:
126126
path: component
127127
persist-credentials: false
128128

129129
- name: Checkout dist-ai (test suites)
130-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
130+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
131131
with:
132132
repository: org-ai-assisted/dist-ai
133133
ref: ${{ inputs.dist-ai-ref }}
@@ -167,7 +167,7 @@ jobs:
167167
168168
- name: Checkout helper-scripts (for suites that drive its tools)
169169
if: steps.cfg.outputs.helper_scripts == 'true'
170-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
170+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
171171
with:
172172
repository: org-ai-assisted/helper-scripts
173173
ref: master
@@ -189,7 +189,7 @@ jobs:
189189
## wired when it never ran. Opt-in per repo via .github/dm-consumer.yml
190190
## (dist-ai-tests.terminal-poc-corpus: true) so the clone is not imposed on
191191
## every consumer. Sibling dir, matching component/ and dist-ai/ above.
192-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
192+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
193193
with:
194194
repository: secure-terminal/terminal-poc-corpus
195195
ref: master

‎.github/workflows/reusable-pre-push-static.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -128,14 +128,14 @@ jobs:
128128
git config --global --add safe.directory '*'
129129
130130
- name: Checkout caller repo (full history for git diff)
131-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
131+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
132132
with:
133133
fetch-depth: 0
134134
persist-credentials: false
135135

136136
- name: Checkout dist-ai (gate script)
137137
if: github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository
138-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
138+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
139139
with:
140140
repository: org-ai-assisted/dist-ai
141141
ref: ${{ env.DIST_AI_REF }}
@@ -166,7 +166,7 @@ jobs:
166166
if: >-
167167
(github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
168168
&& steps.cfg.outputs.helper_scripts == 'true'
169-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
169+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
170170
with:
171171
repository: org-ai-assisted/helper-scripts
172172
ref: master

‎.github/workflows/reusable-scorecard.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -122,20 +122,20 @@ jobs:
122122

123123
steps:
124124
- name: Checkout repository
125-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
125+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
126126
with:
127127
persist-credentials: false
128128

129129
- name: Checkout dist-ai (shared CI helper binaries)
130-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
130+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
131131
with:
132132
repository: org-ai-assisted/dist-ai
133133
ref: ${{ env.DIST_AI_REF }}
134134
path: .github/dist-ai
135135
persist-credentials: false
136136

137137
- name: Run analysis
138-
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
138+
uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
139139
with:
140140
results_file: results.sarif
141141
results_format: sarif
@@ -149,13 +149,13 @@ jobs:
149149
retention-days: 14
150150

151151
- name: Upload to GitHub code scanning
152-
uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0
152+
uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9
153153
with:
154154
sarif_file: results.sarif
155155

156156
- name: Checkout developer-meta-files (step-summary helper)
157157
if: always() && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.full_name == github.repository)
158-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
158+
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
159159
with:
160160
repository: org-ai-assisted/developer-meta-files
161161
ref: ${{ env.DMF_REF }}

0 commit comments

Comments
 (0)