From 2780c0f02365c4378969e5dd8362c42d709b8266 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 29 Oct 2024 20:54:38 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 4 updates (#3964) Bumps the actions group with 4 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/dependency-review-action](https://github.com/actions/dependency-review-action), [actions/cache](https://github.com/actions/cache) and [github/codeql-action](https://github.com/github/codeql-action). Updates `actions/checkout` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `actions/dependency-review-action` from 4.3.4 to 4.4.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/5a2ce3f5b92ee19cbb1541a4984c76d921601d7c...4081bf99e2866ebe428fc0477b69eb4fcda7220a) Updates `actions/cache` from 4.1.1 to 4.1.2 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/3624ceb22c1c5a301c8db4169662070a689d9ea8...6849a6489940f00c2f30c0fb92c6274307ccb58a) Updates `github/codeql-action` from 3.26.13 to 3.27.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f779452ac5af1c261dce0346a8f964149f49322b...662472033e021d55d94146f66f6058822b0b39fd) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/dependency-review-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/dependency-review.yml | 4 ++-- .github/workflows/nuget_update.yaml | 4 ++-- .github/workflows/ossar-scan.yml | 4 ++-- .github/workflows/reusable-build.yml | 10 +++++----- .github/workflows/reusable-test.yml | 8 ++++---- .github/workflows/scorecards-analysis.yml | 4 ++-- .github/workflows/update-docs.yml | 2 +- 7 files changed, 18 insertions(+), 18 deletions(-) diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index f411116b7f..696c17f698 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -25,6 +25,6 @@ jobs: egress-policy: audit - name: 'Checkout Repository' - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: 'Dependency Review' - uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4 + uses: actions/dependency-review-action@4081bf99e2866ebe428fc0477b69eb4fcda7220a # v4.4.0 diff --git a/.github/workflows/nuget_update.yaml b/.github/workflows/nuget_update.yaml index 003c066bbb..445f669def 100644 --- a/.github/workflows/nuget_update.yaml +++ b/.github/workflows/nuget_update.yaml @@ -37,14 +37,14 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: # Only check out main repo, not submodules. ref: ${{ github.event.workflow_run.head_branch }} - name: Cache nuget packages - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a env: cache-name: cache-nuget-modules with: diff --git a/.github/workflows/ossar-scan.yml b/.github/workflows/ossar-scan.yml index 42a964c006..ea52628e2a 100644 --- a/.github/workflows/ossar-scan.yml +++ b/.github/workflows/ossar-scan.yml @@ -47,7 +47,7 @@ jobs: paths_ignore: '["**.md", "**/docs/**"]' # Checking out the branch is needed to correctly log security alerts. - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 if: steps.skip_check.outputs.should_skip != 'true' with: # Only check out main repo, not submodules. @@ -81,6 +81,6 @@ jobs: - name: Upload results to Security tab if: steps.skip_check.outputs.should_skip != 'true' - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b + uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd with: sarif_file: ${{ steps.ossar.outputs.sarifFile }} diff --git a/.github/workflows/reusable-build.yml b/.github/workflows/reusable-build.yml index e16502e045..8c8970b0f3 100644 --- a/.github/workflows/reusable-build.yml +++ b/.github/workflows/reusable-build.yml @@ -117,7 +117,7 @@ jobs: powershell.exe "echo 'ASAN_WIN_CONTINUE_ON_INTERCEPTION_FAILURE=true' | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append" powershell.exe "echo 'VCINSTALLDIR=%VCINSTALLDIR%' | Out-File -FilePath $env:GITHUB_ENV -Encoding utf8 -Append" - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 if: steps.skip_check.outputs.should_skip != 'true' with: repository: ${{inputs.repository}} @@ -135,7 +135,7 @@ jobs: - name: Initialize CodeQL if: inputs.build_codeql == true && steps.skip_check.outputs.should_skip != 'true' - uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b + uses: github/codeql-action/init@662472033e021d55d94146f66f6058822b0b39fd with: languages: 'cpp' @@ -154,7 +154,7 @@ jobs: - name: Cache nuget packages if: steps.skip_check.outputs.should_skip != 'true' - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a env: cache-name: cache-nuget-modules with: @@ -164,7 +164,7 @@ jobs: - name: Cache verifier project # The hash is based on the HEAD of the ebpf-verifier submodule, the Directory.Build.props file, and the build variant. if: steps.skip_check.outputs.should_skip != 'true' - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a env: cache-name: cache-verifier-project with: @@ -294,4 +294,4 @@ jobs: - name: Perform CodeQL Analysis if: inputs.build_codeql == true && steps.skip_check.outputs.should_skip != 'true' - uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b + uses: github/codeql-action/analyze@662472033e021d55d94146f66f6058822b0b39fd diff --git a/.github/workflows/reusable-test.yml b/.github/workflows/reusable-test.yml index e8e70080bd..1524df1a79 100644 --- a/.github/workflows/reusable-test.yml +++ b/.github/workflows/reusable-test.yml @@ -100,7 +100,7 @@ jobs: paths_ignore: '["**.md", "**/docs/**"]' # Checking out the branch is needed to gather correct code coverage data. - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # Only check out source code if code coverage is being gathered. if: (inputs.code_coverage == true) && (steps.skip_check.outputs.should_skip != 'true') with: @@ -108,7 +108,7 @@ jobs: ref: ${{ github.event.workflow_run.head_branch }} # Perform shallow checkout for self-hosted runner. - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 if: (inputs.environment == 'ebpf_cicd_tests_ws2019' || inputs.environment == 'ebpf_cicd_tests_ws2022' || inputs.environment == 'ebpf_cicd_perf_ws2022') && (steps.skip_check.outputs.should_skip != 'true') with: ref: ${{ github.event.workflow_run.head_branch }} @@ -123,7 +123,7 @@ jobs: files: .github/workflows/reusable-test.yml # Check out just this file if code hasn't been checked out yet. - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 if: (steps.check_reusable_test_locally.outputs.files_exists != 'true') && (steps.skip_check.outputs.should_skip != 'true') with: sparse-checkout: | @@ -142,7 +142,7 @@ jobs: # Add cache entry for any choco packages that are installed. # The cache key is based on the hash of this file so if any choco packages are added or removed, the cache will be invalidated. if: (inputs.gather_dumps == true) && (steps.skip_check.outputs.should_skip != 'true') - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a env: cache-name: cache-choco-packages with: diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 55a6e38835..2036e4f1ae 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -45,7 +45,7 @@ jobs: - name: "Checkout code" if: github.ref_name == 'main' - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: persist-credentials: false @@ -76,6 +76,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" if: github.ref_name == 'main' - uses: github/codeql-action/upload-sarif@f779452ac5af1c261dce0346a8f964149f49322b + uses: github/codeql-action/upload-sarif@662472033e021d55d94146f66f6058822b0b39fd with: sarif_file: results.sarif diff --git a/.github/workflows/update-docs.yml b/.github/workflows/update-docs.yml index 8ca220eb0f..acac7c60b4 100644 --- a/.github/workflows/update-docs.yml +++ b/.github/workflows/update-docs.yml @@ -41,7 +41,7 @@ jobs: run: | sudo apt install doxygen - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Clone docs run: |