Skip to content

Commit 1ea0933

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the github-actions group with 5 updates
Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.7` | `4.2.0` | | [google/osv-scanner-action](https://github.com/google/osv-scanner-action) | `1.8.4` | `1.8.5` | | [peter-evans/create-pull-request](https://github.com/peter-evans/create-pull-request) | `6.1.0` | `7.0.5` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.26.6` | `3.26.10` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.7.0` | `6.9.0` | Updates `actions/checkout` from 4.1.7 to 4.2.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@692973e...d632683) Updates `google/osv-scanner-action` from 1.8.4 to 1.8.5 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](google/osv-scanner-action@v1.8.4...v1.8.5) Updates `peter-evans/create-pull-request` from 6.1.0 to 7.0.5 - [Release notes](https://github.com/peter-evans/create-pull-request/releases) - [Commits](peter-evans/create-pull-request@c5a7806...5e91468) Updates `github/codeql-action` from 3.26.6 to 3.26.10 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@4dd1613...e2b3eaf) Updates `docker/build-push-action` from 6.7.0 to 6.9.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@5cd11c3...4f58ea7) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: google/osv-scanner-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: peter-evans/create-pull-request dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent cc3d397 commit 1ea0933

14 files changed

Lines changed: 23 additions & 23 deletions

‎.github/workflows/arm-cd.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -52,12 +52,12 @@ jobs:
5252
run: find /home/ubuntu/actions-runner/_work/tensorflow/tensorflow/. -name . -o -prune -exec sudo rm -rf -- {} + || true
5353
- name: Checkout repository for nightly (skipped for releases)
5454
if: ${{ github.event_name == 'schedule' }}
55-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
55+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
5656
with:
5757
ref: 'nightly'
5858
- name: Checkout repository for releases (skipped for nightly)
5959
if: ${{ github.event_name == 'push' }}
60-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
60+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
6161
- name: Build and test pip wheel
6262
shell: bash
6363
run: |

‎.github/workflows/arm-ci-extended-cpp.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -50,12 +50,12 @@ jobs:
5050
run: find /home/ubuntu/actions-runner/_work/tensorflow/tensorflow/. -name . -o -prune -exec sudo rm -rf -- {} + || true
5151
- name: Checkout repository for nightly (skipped for releases)
5252
if: ${{ github.event_name == 'schedule' }}
53-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
53+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
5454
with:
5555
ref: 'nightly'
5656
- name: Checkout repository
5757
if: ${{ github.event_name == 'push' }}
58-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
58+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
5959
- name: Build binary and run C++ tests
6060
shell: bash
6161
run: |

‎.github/workflows/arm-ci-extended.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,12 +51,12 @@ jobs:
5151
run: find /home/ubuntu/actions-runner/_work/tensorflow/tensorflow/. -name . -o -prune -exec sudo rm -rf -- {} + || true
5252
- name: Checkout repository for nightly (skipped for releases)
5353
if: ${{ github.event_name == 'schedule' }}
54-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
54+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
5555
with:
5656
ref: 'nightly'
5757
- name: Checkout repository
5858
if: ${{ github.event_name == 'push' }}
59-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
59+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
6060
- name: Build binary and run python tests on nightly for all python versions
6161
shell: bash
6262
run: |

‎.github/workflows/arm-ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
shell: bash
4848
run: find /home/ubuntu/actions-runner/_work/tensorflow/tensorflow/. -name . -o -prune -exec sudo rm -rf -- {} + || true
4949
- name: Checkout repository
50-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
50+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
5151
- name: Build binary and run python tests
5252
shell: bash
5353
run: |

‎.github/workflows/cffconvert.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
runs-on: ubuntu-latest
3131
steps:
3232
- name: Check out a copy of the repository
33-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
33+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
3434

3535
- name: Check whether the citation metadata from CITATION.cff is valid
3636
uses: citation-file-format/cffconvert-github-action@4cf11baa70a673bfdf9dad0acc7ee33b3f4b6084 # v2.0.0

‎.github/workflows/issue-on-pr-rollback.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
startsWith(github.event.head_commit.message, 'Rollback of PR #')
3434
steps:
3535
- name: Checkout repo
36-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
36+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
3737
- name: Create a new Github Issue
3838
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
3939
with:

‎.github/workflows/osv-scanner-scheduled.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ permissions:
2828
jobs:
2929
scan-scheduled:
3030
if: github.repository == 'tensorflow/tensorflow'
31-
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.8.4"
31+
uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v1.8.5"
3232
with:
3333
scan-args: |-
3434
--lockfile=requirements.txt:./requirements_lock_3_9.txt

‎.github/workflows/pylint-presubmit.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout code
31-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
31+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
3232
- name: Get file changes
3333
id: get_file_changes
3434
uses: trilom/file-changes-action@a6ca26c14274c33b15e6499323aac178af06ad4b # v1.2.4

‎.github/workflows/release-branch-cherrypick.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ jobs:
4545
if: github.repository == 'tensorflow/tensorflow' # Don't do this in forks
4646
steps:
4747
- name: Checkout code
48-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
48+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
4949
with:
5050
ref: ${{ github.event.inputs.release_branch }}
5151
- name: Get some helpful info for formatting
@@ -58,7 +58,7 @@ jobs:
5858
echo "SHORTSHA=$(git log -1 ${{ github.event.inputs.git_commit }} --format="%h")" >> "$GITHUB_OUTPUT"
5959
echo "TITLE=$(git log -1 ${{ github.event.inputs.git_commit }} --format="%s")" >> "$GITHUB_OUTPUT"
6060
- name: Create Pull Request with changes
61-
uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0
61+
uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5
6262
with:
6363
title: '${{ github.event.inputs.release_branch }} cherry-pick: ${{ steps.cherrypick.outputs.SHORTSHA }} "${{ steps.cherrypick.outputs.TITLE }}"'
6464
committer: TensorFlow Release Automation <jenkins@tensorflow.org>

‎.github/workflows/scorecards-analysis.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141

4242
steps:
4343
- name: "Checkout code"
44-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
44+
uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
4545
with:
4646
persist-credentials: false
4747

@@ -64,6 +64,6 @@ jobs:
6464
# Upload the results to GitHub's code scanning dashboard (optional).
6565
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
6666
- name: "Upload to code-scanning"
67-
uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
67+
uses: github/codeql-action/upload-sarif@e2b3eafc8d227b0241d48be5f425d47c2d750a13 # v3.26.10
6868
with:
6969
sarif_file: results.sarif

0 commit comments

Comments
 (0)