Skip to content

Commit 70aca23

Browse files
dependabot[bot]J12934
dependabot[bot]
authored and
J12934
committed
Bump the github-actions-version-updates group across 1 directory with 2 updates
Bumps the github-actions-version-updates group with 2 updates in the /.github/workflows directory: [github/codeql-action](https://github.com/github/codeql-action) and [mikefarah/yq](https://github.com/mikefarah/yq). Updates `github/codeql-action` from 4.35.1 to 4.35.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@c10b806...95e58e9) Updates `mikefarah/yq` from 4.52.5 to 4.53.2 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@0f4fb8d...751d8ad) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-version-updates - dependency-name: mikefarah/yq dependency-version: 4.53.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent a450036 commit 70aca23

3 files changed

Lines changed: 7 additions & 7 deletions

File tree

‎.github/workflows/oss-scorecard.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,6 @@ jobs:
3333

3434
# Upload the results to GitHub's code scanning dashboard.
3535
- name: "Upload to code-scanning"
36-
uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1
36+
uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
3737
with:
3838
sarif_file: results.sarif

‎.github/workflows/release-build.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -425,15 +425,15 @@ jobs:
425425
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
426426

427427
- name: Set ENV Var with Scanner Version
428-
uses: mikefarah/yq@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 # v4.52.5
428+
uses: mikefarah/yq@751d8ad57b84f1794661bc70c0afb92a22ad7b3c # v4.53.2
429429
# Notice: The current version of the scanner is provided via the Chart.yaml to ensure
430430
# there is only one place to edit the version of a scanner
431431
with:
432432
cmd: echo scannerVersion=$(yq e .appVersion scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
433433

434434
# extract the supported cpu architectures from the Chart.yaml
435435
- name: Set ENV Var with Supported Platforms
436-
uses: mikefarah/yq@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 # v4.52.5
436+
uses: mikefarah/yq@751d8ad57b84f1794661bc70c0afb92a22ad7b3c # v4.53.2
437437
with:
438438
cmd: echo supportedPlatforms=$(yq e .annotations.supported-platforms scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
439439

@@ -555,7 +555,7 @@ jobs:
555555
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
556556

557557
- name: Set ENV Var with Demo-Target Version
558-
uses: mikefarah/yq@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 # v4.52.5
558+
uses: mikefarah/yq@751d8ad57b84f1794661bc70c0afb92a22ad7b3c # v4.53.2
559559
# Notice: The current version of the demo-target is provided via the Chart.yaml to ensure
560560
# there is only one place to edit the version of a scanner
561561
with:

‎.github/workflows/scb-bot.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -65,14 +65,14 @@ jobs:
6565
# Fetching scanner version from local chart .appVersion attribute
6666
# this would look like 1.1.1 or v1.1.1 depending on the corresponding Docker image tag
6767
- name: Fetch local scanner version
68-
uses: mikefarah/yq@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 # v4.52.5
68+
uses: mikefarah/yq@751d8ad57b84f1794661bc70c0afb92a22ad7b3c # v4.53.2
6969
with:
7070
cmd: echo local=$(yq e .appVersion scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
7171

7272
# Fetching scanner version API from local chart .annotations.versionApi attribute
7373
# This would look like https://api.github.com/repos/projectdiscovery/nuclei/releases/latest
7474
- name: Fetch scanner's version API
75-
uses: mikefarah/yq@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 # v4.52.5
75+
uses: mikefarah/yq@751d8ad57b84f1794661bc70c0afb92a22ad7b3c # v4.53.2
7676
with:
7777
cmd: echo versionApi=$(yq e .annotations.versionApi scanners/${{ matrix.scanner }}/Chart.yaml) >> $GITHUB_ENV
7878

@@ -147,7 +147,7 @@ jobs:
147147
148148
- name: Upgrade Scanner Helm Chart
149149
if: ${{ env.release != env.local && env.prExists == 0 && env.release != null}}
150-
uses: mikefarah/yq@0f4fb8d35ec1a939d78dd6862f494d19ec589f19 # v4.52.5
150+
uses: mikefarah/yq@751d8ad57b84f1794661bc70c0afb92a22ad7b3c # v4.53.2
151151
with:
152152
# appVersion value in chart is replaced with release value. Empty lines are deleted in the process
153153
cmd: yq e --inplace '.appVersion = "${{env.release}}"' ./scanners/${{ matrix.scanner }}/Chart.yaml

0 commit comments

Comments
 (0)