Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commita1161b7

Browse files
ci: bump the github-actions group with 7 updates (#20498)
Bumps the github-actions group with 7 updates:| Package | From | To || --- | --- | --- || [actions/upload-artifact](https://github.com/actions/upload-artifact)| `4.6.2` | `5.0.0` || [chromaui/action](https://github.com/chromaui/action) | `13.3.0` |`13.3.2` ||[actions/download-artifact](https://github.com/actions/download-artifact)| `5.0.0` | `6.0.0` ||[tj-actions/changed-files](https://github.com/tj-actions/changed-files)| `d03a93c0dbfac6d6dd6a0d8a5e7daff992b07449` |`dbf178ceecb9304128c8e0648591d71208c6e2c9` ||[nixbuild/nix-quick-install-action](https://github.com/nixbuild/nix-quick-install-action)| `33` | `34` || [github/codeql-action](https://github.com/github/codeql-action) |`4.30.9` | `4.31.0` ||[Mattraks/delete-workflow-runs](https://github.com/mattraks/delete-workflow-runs)| `2.0.6` | `2.1.0` |Updates `actions/upload-artifact` from 4.6.2 to 5.0.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/actions/upload-artifact/releases">actions/upload-artifact'sreleases</a>.</em></p><blockquote><h2>v5.0.0</h2><h2>What's Changed</h2><p><strong>BREAKING CHANGE:</strong> this update supports Node<code>v24.x</code>. This is not a breaking change per-se but we'retreating it as such.</p><ul><li>Update README.md by <ahref="https://github.com/GhadimiR"><code>@​GhadimiR</code></a> in <ahref="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li><li>Update README.md by <ahref="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <ahref="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li><li>Readme: spell out the first use of GHES by <ahref="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in<ahref="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li><li>Update GHES guidance to include reference to Node 20 version by <ahref="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>in <ahref="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li><li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li><li>Prepare <code>v5.0.0</code> by <ahref="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in<ahref="https://redirect.github.com/actions/upload-artifact/pull/734">actions/upload-artifact#734</a></li></ul><h2>New Contributors</h2><ul><li><a href="https://github.com/GhadimiR"><code>@​GhadimiR</code></a>made their first contribution in <ahref="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li><li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> madetheir first contribution in <ahref="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li><li><ahref="https://github.com/danwkennedy"><code>@​danwkennedy</code></a>made their first contribution in <ahref="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li><li><ahref="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>made their first contribution in <ahref="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/upload-artifact/compare/v4...v5.0.0">https://github.com/actions/upload-artifact/compare/v4...v5.0.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/actions/upload-artifact/commit/330a01c490aca151604b8cf639adc76d48f6c5d4"><code>330a01c</code></a>Merge pull request <ahref="https://redirect.github.com/actions/upload-artifact/issues/734">#734</a>from actions/danwkennedy/prepare-5.0.0</li><li><ahref="https://github.com/actions/upload-artifact/commit/03f282445299bbefc96171af272a984663b63a26"><code>03f2824</code></a>Update <code>github.dep.yml</code></li><li><ahref="https://github.com/actions/upload-artifact/commit/905a1ecb5915b264cbc519e4eb415b5d82916018"><code>905a1ec</code></a>Prepare <code>v5.0.0</code></li><li><ahref="https://github.com/actions/upload-artifact/commit/2d9f9cdfa99fedaddba68e9b5b5c281eca26cc63"><code>2d9f9cd</code></a>Merge pull request <ahref="https://redirect.github.com/actions/upload-artifact/issues/725">#725</a>from patrikpolyak/patch-1</li><li><ahref="https://github.com/actions/upload-artifact/commit/9687587dec67f2a8bc69104e183d311c42af6d6f"><code>9687587</code></a>Merge branch 'main' into patch-1</li><li><ahref="https://github.com/actions/upload-artifact/commit/2848b2cda0e5190984587ec6bb1f36730ca78d50"><code>2848b2c</code></a>Merge pull request <ahref="https://redirect.github.com/actions/upload-artifact/issues/727">#727</a>from danwkennedy/patch-1</li><li><ahref="https://github.com/actions/upload-artifact/commit/9b511775fd9ce8c5710b38eea671f856de0e70a7"><code>9b51177</code></a>Spell out the first use of GHES</li><li><ahref="https://github.com/actions/upload-artifact/commit/cd231ca1eda77976a84805c4194a1954f56b0727"><code>cd231ca</code></a>Update GHES guidance to include reference to Node 20 version</li><li><ahref="https://github.com/actions/upload-artifact/commit/de65e23aa2b7e23d713bb51fbfcb6d502f8667d8"><code>de65e23</code></a>Merge pull request <ahref="https://redirect.github.com/actions/upload-artifact/issues/712">#712</a>from actions/nebuk89-patch-1</li><li><ahref="https://github.com/actions/upload-artifact/commit/8747d8cd7632611ad6060b528f3e0f654c98869c"><code>8747d8c</code></a>Update README.md</li><li>Additional commits viewable in <ahref="https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...330a01c490aca151604b8cf639adc76d48f6c5d4">compareview</a></li></ul></details><br />Updates `chromaui/action` from 13.3.0 to 13.3.2<details><summary>Commits</summary><ul><li><ahref="https://github.com/chromaui/action/commit/bc2d84ad2b60813a67d995c5582d696104a19383"><code>bc2d84a</code></a>v13.3.2</li><li><ahref="https://github.com/chromaui/action/commit/1c807fb41f4db007b022d0806c09a94dce7b5ff6"><code>1c807fb</code></a>v13.3.1</li><li>See full diff in <ahref="https://github.com/chromaui/action/compare/4ffe736a2a8262ea28067ff05a13b635ba31ec05...bc2d84ad2b60813a67d995c5582d696104a19383">compareview</a></li></ul></details><br />Updates `actions/download-artifact` from 5.0.0 to 6.0.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/actions/download-artifact/releases">actions/download-artifact'sreleases</a>.</em></p><blockquote><h2>v6.0.0</h2><h2>What's Changed</h2><p><strong>BREAKING CHANGE:</strong> this update supports Node<code>v24.x</code>. This is not a breaking change per-se but we'retreating it as such.</p><ul><li>Update README for download-artifact v5 changes by <ahref="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/417">actions/download-artifact#417</a></li><li>Update README with artifact extraction details by <ahref="https://github.com/yacaovsnc"><code>@​yacaovsnc</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/424">actions/download-artifact#424</a></li><li>Readme: spell out the first use of GHES by <ahref="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in<ahref="https://redirect.github.com/actions/download-artifact/pull/431">actions/download-artifact#431</a></li><li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li><li>Prepare <code>v6.0.0</code> by <ahref="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in<ahref="https://redirect.github.com/actions/download-artifact/pull/438">actions/download-artifact#438</a></li></ul><h2>New Contributors</h2><ul><li><ahref="https://github.com/danwkennedy"><code>@​danwkennedy</code></a>made their first contribution in <ahref="https://redirect.github.com/actions/download-artifact/pull/431">actions/download-artifact#431</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/download-artifact/compare/v5...v6.0.0">https://github.com/actions/download-artifact/compare/v5...v6.0.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/actions/download-artifact/commit/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53"><code>018cc2c</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/438">#438</a>from actions/danwkennedy/prepare-6.0.0</li><li><ahref="https://github.com/actions/download-artifact/commit/815651c680ffe1c95719d0ed08aba1a2f9d5c177"><code>815651c</code></a>Revert &quot;Remove <code>github.dep.yml</code>&quot;</li><li><ahref="https://github.com/actions/download-artifact/commit/bb3a066a8babc8ed7b3e4218896c548fe34e7115"><code>bb3a066</code></a>Remove <code>github.dep.yml</code></li><li><ahref="https://github.com/actions/download-artifact/commit/fa1ce46bbd11b8387539af12741055a76dfdf804"><code>fa1ce46</code></a>Prepare <code>v6.0.0</code></li><li><ahref="https://github.com/actions/download-artifact/commit/4a24838f3d5601fd639834081e118c2995d51e1c"><code>4a24838</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/431">#431</a>from danwkennedy/patch-1</li><li><ahref="https://github.com/actions/download-artifact/commit/5e3251c4ff5a32e4cf8dd4adaee0e692365237ae"><code>5e3251c</code></a>Readme: spell out the first use of GHES</li><li><ahref="https://github.com/actions/download-artifact/commit/abefc31eafcfbdf6c5336127c1346fdae79ff41c"><code>abefc31</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/424">#424</a>from actions/yacaovsnc/update_readme</li><li><ahref="https://github.com/actions/download-artifact/commit/ac43a6070aa7db8a41e756e7a2846221edca7027"><code>ac43a60</code></a>Update README with artifact extraction details</li><li><ahref="https://github.com/actions/download-artifact/commit/de96f4613b77ec03b5cf633e7c350c32bd3c5660"><code>de96f46</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/417">#417</a>from actions/yacaovsnc/update_readme</li><li><ahref="https://github.com/actions/download-artifact/commit/7993cb44e9052f2f08f9b828ae5ef3ecca7d2ac7"><code>7993cb4</code></a>Remove migration guide for artifact download changes</li><li>Additional commits viewable in <ahref="https://github.com/actions/download-artifact/compare/634f93cb2916e3fdff6788551b99b062d0335ce0...018cc2cf5baa6db3ef3c5f8a56943fffe632ef53">compareview</a></li></ul></details><br />Updates `tj-actions/changed-files` fromd03a93c0dbfac6d6dd6a0d8a5e7daff992b07449 todbf178ceecb9304128c8e0648591d71208c6e2c9<details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/tj-actions/changed-files/blob/main/HISTORY.md">tj-actions/changed-files'schangelog</a>.</em></p><blockquote><h1>Changelog</h1><h1><ahref="https://github.com/tj-actions/changed-files/compare/v46.0.5...v47.0.0">47.0.0</a>- (2025-09-13)</h1><h2><!-- raw HTML omitted -->🚀 Features</h2><ul><li>Add any_added to outputs (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2567">#2567</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/c260d49a827b5eb266673bed7871c5d3ee9b5aef">c260d49</a>)- (Jellyfrog)</li></ul><h2><!-- raw HTML omitted -->➖ Remove</h2><ul><li>Commit and push step from build job (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2538">#2538</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/be393a90381e27c9fec2c8c2e02b00f005710145">be393a9</a>)- (Tonye Jack)</li></ul><h2><!-- raw HTML omitted -->🔄 Update</h2><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2592">#2592</a>)</li></ul><p>Co-authored-by: github-actions[bot]&lt;41898282+github-actions[bot]<ahref="https://github.com/users"><code>@​users</code></a>.noreply.github.com&gt;(<ahref="https://github.com/tj-actions/changed-files/commit/3dbc1e181273d808ccff822a6e00cf18b6628ef0">3dbc1e1</a>)- (github-actions[bot])</p><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2591">#2591</a>)</li></ul><p>Co-authored-by: github-actions[bot]&lt;41898282+github-actions[bot]<ahref="https://github.com/users"><code>@​users</code></a>.noreply.github.com&gt;(<ahref="https://github.com/tj-actions/changed-files/commit/b1ccff8c0892ad141d7d2de6f31e526a9dad931f">b1ccff8</a>)- (github-actions[bot])</p><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2574">#2574</a>)</li></ul><p>Co-authored-by: github-actions[bot]&lt;41898282+github-actions[bot]<ahref="https://github.com/users"><code>@​users</code></a>.noreply.github.com&gt;(<ahref="https://github.com/tj-actions/changed-files/commit/050a3d3360d29711ee9d8210fc639d902d23ad07">050a3d3</a>)- (github-actions[bot])</p><h2><!-- raw HTML omitted -->📚 Documentation</h2><ul><li>Update link to glob patterns (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2590">#2590</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/a892f50f7a7187bc288633c09230b09ce7ad8fd0">a892f50</a>)- (Tonye Jack)</li><li>Add Jellyfrog as a contributor for code, and doc (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2573">#2573</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/f000a9b97f254f9590ff26f651cccde827ad36da">f000a9b</a>)- (allcontributors[bot])</li></ul><h2><!-- raw HTML omitted -->🧪 Testing</h2><ul><li>Manual triggered workflows (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2637">#2637</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/c2ca2493190021783138cb8aac49bcee14b4bb89">c2ca249</a>)- (Tonye Jack)</li></ul><h2><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h2><ul><li><strong>deps-dev:</strong> Bump jest from 30.0.5 to 30.1.3 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2655">#2655</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/9a6755550a331fdcc8ec45443738933f8fa22eea">9a67555</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump tj-actions/git-cliff from 2.1.0 to 2.2.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2660">#2660</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/b67e30df88f43e244f4e83775e5ad8335114fb95">b67e30d</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.30.2 to3.30.3 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2661">#2661</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/62aef422ffa195474d80d73387535cf4622b2824">62aef42</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.11 to3.30.2 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2659">#2659</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/e874f3cddd0f54ae776e6995ae6dae4cf40fd3d3">e874f3c</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump actions/setup-node from 4.4.0 to 5.0.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2656">#2656</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/8c14441336bb3d84fd6b7fa83b6d7201c740baf5">8c14441</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.3.0 to 24.3.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2657">#2657</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/e995ac4be5be2bcb6e29556edc51fb63aca6b49b">e995ac4</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.2.1 to 24.3.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2649">#2649</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/3b04099b21072562f07469c10deb182b24236ca9">3b04099</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.9 to3.29.11 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2651">#2651</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/e7b6c977e51984988e3cc1d6b18abe2a3ba8daaa">e7b6c97</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump tj-actions/git-cliff from 2.0.2 to 2.1.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2648">#2648</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/765d62bc041415a5b494ef13d02d566128b25973">765d62b</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.8 to3.29.9 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2647">#2647</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/2036da178f85576f1940fedb74bb93a36cd89ab7">2036da1</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.29.7 to3.29.8 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2644">#2644</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/239aef84a5502c79a1cea96e495d17588c66c659">239aef8</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.2.0 to 24.2.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2645">#2645</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/a7d5f5f4919b6dbc6d3a3689887964361e8dd88f">a7d5f5f</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump actions/checkout from 4.2.2 to 5.0.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2646">#2646</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/5107f3abcc0c3737db51e2949f181e2c197d4d5b">5107f3a</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from24.1.0 to 24.2.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2640">#2640</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/f963b3f3562b00b6d2dd25efc390eb04e51ef6c6">f963b3f</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump actions/download-artifact from 4.3.0 to5.0.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2641">#2641</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/f956744105e18d78bba3844a1199ce43d6503017">f956744</a>)- (dependabot[bot])</li></ul><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/tj-actions/changed-files/commit/dbf178ceecb9304128c8e0648591d71208c6e2c9"><code>dbf178c</code></a>chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2690">#2690</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/19002623031eba72900680c5deed5ee6333dbc12"><code>1900262</code></a>chore(deps): bump github/codeql-action from 3.30.6 to 4.30.9 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2693">#2693</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/27e5d78f9b6a61e3160a2fe263cca91675c08fa0"><code>27e5d78</code></a>chore(deps-dev): bump <code>@​types/node</code> from 24.6.2 to 24.9.1(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2695">#2695</a>)</li><li>See full diff in <ahref="https://github.com/tj-actions/changed-files/compare/d03a93c0dbfac6d6dd6a0d8a5e7daff992b07449...dbf178ceecb9304128c8e0648591d71208c6e2c9">compareview</a></li></ul></details><br />Updates `nixbuild/nix-quick-install-action` from 33 to 34<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/nixbuild/nix-quick-install-action/releases">nixbuild/nix-quick-install-action'sreleases</a>.</em></p><blockquote><h2>nixbuild/nix-quick-install-action@v34</h2><h2>Changes</h2><ul><li><p>Update Nix versions: 2.31.0 -&gt; 2.31.2, 2.30.0 -&gt; 2.30.3, 2.29.1-&gt; 2.29.2, 2.28.4 -&gt; 2.28.5.</p></li><li><p>Bump default Nix version: 2.29.1 -&gt; 2.29.2</p></li></ul><h2>Supported Nix Versions on x86_64-linux runners</h2><ul><li>2.31.2</li><li>2.30.3</li><li>2.29.2</li><li>2.28.5</li><li>2.26.4</li><li>2.24.15</li><li>2.3.18</li></ul><h2>Supported Nix Versions on aarch64-linux runners</h2><ul><li>2.31.2</li><li>2.30.3</li><li>2.29.2</li><li>2.28.5</li><li>2.26.4</li><li>2.24.15</li></ul><h2>Supported Nix Versions on x86_64-darwin runners</h2><ul><li>2.31.2</li><li>2.30.3</li><li>2.29.2</li><li>2.28.5</li><li>2.26.4</li><li>2.24.15</li><li>2.3.18</li></ul></blockquote></details><details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/nixbuild/nix-quick-install-action/blob/master/RELEASE">nixbuild/nix-quick-install-action'schangelog</a>.</em></p><blockquote><p>v34</p><h2>Changes</h2><ul><li><p>Update Nix versions: 2.31.0 -&gt; 2.31.2, 2.30.0 -&gt; 2.30.3, 2.29.1-&gt; 2.29.2, 2.28.4 -&gt; 2.28.5.</p></li><li><p>Bump default Nix version: 2.29.1 -&gt; 2.29.2</p></li></ul></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/nixbuild/nix-quick-install-action/commit/2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035"><code>2c9db80</code></a>Release v34</li><li><ahref="https://github.com/nixbuild/nix-quick-install-action/commit/6dd8039259767bef94d598f79b506a92ee991ff8"><code>6dd8039</code></a>ci: Fix versions</li><li><ahref="https://github.com/nixbuild/nix-quick-install-action/commit/a7214c23df4e59da80e6e71503e1f766444fb1e2"><code>a7214c2</code></a>Fix default version</li><li><ahref="https://github.com/nixbuild/nix-quick-install-action/commit/efda085bcade238a03bdbd41f224f08d4ef362e9"><code>efda085</code></a>Bump Nix versions</li><li><ahref="https://github.com/nixbuild/nix-quick-install-action/commit/b644e5e09df2afc194ad86b2a8467b701d15c606"><code>b644e5e</code></a>Update README and workflows for v33</li><li>See full diff in <ahref="https://github.com/nixbuild/nix-quick-install-action/compare/1f095fee853b33114486cfdeae62fa099cda35a9...2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035">compareview</a></li></ul></details><br />Updates `github/codeql-action` from 4.30.9 to 4.31.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/github/codeql-action/releases">github/codeql-action'sreleases</a>.</em></p><blockquote><h2>v4.31.0</h2><h1>CodeQL Action Changelog</h1><p>See the <ahref="https://github.com/github/codeql-action/releases">releasespage</a> for the relevant changes to the CodeQL CLI and languagepacks.</p><h2>4.31.0 - 24 Oct 2025</h2><ul><li>Bump minimum CodeQL bundle version to 2.17.6. <ahref="https://redirect.github.com/github/codeql-action/pull/3223">#3223</a></li><li>When SARIF files are uploaded by the <code>analyze</code> or<code>upload-sarif</code> actions, the CodeQL Action automaticallyperforms post-processing steps to prepare the data for the upload.Previously, these post-processing steps were only performed before anupload took place. We are now changing this so that the post-processingsteps will always be performed, even when the SARIF files are notuploaded. This does not change anything for the<code>upload-sarif</code> action. For <code>analyze</code>, this mayaffect Advanced Setup for CodeQL users who specify a value other than<code>always</code> for the <code>upload</code> input. <ahref="https://redirect.github.com/github/codeql-action/pull/3222">#3222</a></li></ul><p>See the full <ahref="https://github.com/github/codeql-action/blob/v4.31.0/CHANGELOG.md">CHANGELOG.md</a>for more information.</p></blockquote></details><details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action'schangelog</a>.</em></p><blockquote><h1>CodeQL Action Changelog</h1><p>See the <ahref="https://github.com/github/codeql-action/releases">releasespage</a> for the relevant changes to the CodeQL CLI and languagepacks.</p><h2>[UNRELEASED]</h2><p>No user facing changes.</p><h2>4.31.0 - 24 Oct 2025</h2><ul><li>Bump minimum CodeQL bundle version to 2.17.6. <ahref="https://redirect.github.com/github/codeql-action/pull/3223">#3223</a></li><li>When SARIF files are uploaded by the <code>analyze</code> or<code>upload-sarif</code> actions, the CodeQL Action automaticallyperforms post-processing steps to prepare the data for the upload.Previously, these post-processing steps were only performed before anupload took place. We are now changing this so that the post-processingsteps will always be performed, even when the SARIF files are notuploaded. This does not change anything for the<code>upload-sarif</code> action. For <code>analyze</code>, this mayaffect Advanced Setup for CodeQL users who specify a value other than<code>always</code> for the <code>upload</code> input. <ahref="https://redirect.github.com/github/codeql-action/pull/3222">#3222</a></li></ul><h2>4.30.9 - 17 Oct 2025</h2><ul><li>Update default CodeQL bundle version to 2.23.3. <ahref="https://redirect.github.com/github/codeql-action/pull/3205">#3205</a></li><li>Experimental: A new <code>setup-codeql</code> action has been addedwhich is similar to <code>init</code>, except it only installs theCodeQL CLI and does not initialize a database. Do not use this inproduction as it is part of an internal experiment and subject to changeat any time. <ahref="https://redirect.github.com/github/codeql-action/pull/3204">#3204</a></li></ul><h2>4.30.8 - 10 Oct 2025</h2><p>No user facing changes.</p><h2>4.30.7 - 06 Oct 2025</h2><ul><li>[v4+ only] The CodeQL Action now runs on Node.js v24. <ahref="https://redirect.github.com/github/codeql-action/pull/3169">#3169</a></li></ul><h2>3.30.6 - 02 Oct 2025</h2><ul><li>Update default CodeQL bundle version to 2.23.2. <ahref="https://redirect.github.com/github/codeql-action/pull/3168">#3168</a></li></ul><h2>3.30.5 - 26 Sep 2025</h2><ul><li>We fixed a bug that was introduced in <code>3.30.4</code> with<code>upload-sarif</code> which resulted in files without a<code>.sarif</code> extension not getting uploaded. <ahref="https://redirect.github.com/github/codeql-action/pull/3160">#3160</a></li></ul><h2>3.30.4 - 25 Sep 2025</h2><ul><li>We have improved the CodeQL Action's ability to validate that theworkflow it is used in does not use different versions of the CodeQLAction for different workflow steps. Mixing different versions of theCodeQL Action in the same workflow is unsupported and can lead tounpredictable results. A warning will now be emitted from the<code>codeql-action/init</code> step if different versions of the CodeQLAction are detected in the workflow file. Additionally, an error willnow be thrown by the other CodeQL Action steps if they load aconfiguration file that was generated by a different version of the<code>codeql-action/init</code> step. <ahref="https://redirect.github.com/github/codeql-action/pull/3099">#3099</a>and <ahref="https://redirect.github.com/github/codeql-action/pull/3100">#3100</a></li><li>We added support for reducing the size of dependency caches for Javaanalyses, which will reduce cache usage and speed up workflows. Thiswill be enabled automatically at a later time. <ahref="https://redirect.github.com/github/codeql-action/pull/3107">#3107</a></li><li>You can now run the latest CodeQL nightly bundle by passing<code>tools: nightly</code> to the <code>init</code> action. In general,the nightly bundle is unstable and we only recommend running it whendirected by GitHub staff. <ahref="https://redirect.github.com/github/codeql-action/pull/3130">#3130</a></li><li>Update default CodeQL bundle version to 2.23.1. <ahref="https://redirect.github.com/github/codeql-action/pull/3118">#3118</a></li></ul><h2>3.30.3 - 10 Sep 2025</h2><p>No user facing changes.</p><h2>3.30.2 - 09 Sep 2025</h2><ul><li>Fixed a bug which could cause language autodetection to fail. <ahref="https://redirect.github.com/github/codeql-action/pull/3084">#3084</a></li><li>Experimental: The <code>quality-queries</code> input that was addedin <code>3.29.2</code> as part of an internal experiment is nowdeprecated and will be removed in an upcoming version of the CodeQLAction. It has been superseded by a new <code>analysis-kinds</code>input, which is part of the same internal experiment. Do not use this inproduction as it is subject to change at any time. <ahref="https://redirect.github.com/github/codeql-action/pull/3064">#3064</a></li></ul><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/github/codeql-action/commit/4e94bd11f71e507f7f87df81788dff88d1dacbfb"><code>4e94bd1</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/3235">#3235</a>from github/update-v4.31.0-1d36546c1</li><li><ahref="https://github.com/github/codeql-action/commit/8f11182164f2181cc5608a575e3c7ef3bc4a9cd1"><code>8f11182</code></a>Update changelog for v4.31.0</li><li><ahref="https://github.com/github/codeql-action/commit/1d36546c1419dc613cdb4b7fde46b1c81643ccbe"><code>1d36546</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/3234">#3234</a>from github/mbg/changelog/post-processing</li><li><ahref="https://github.com/github/codeql-action/commit/08ada26e6a4768939d6da6a5e23ae69052948fd7"><code>08ada26</code></a>Add changelog entry for post-processing change</li><li><ahref="https://github.com/github/codeql-action/commit/b843cbeed03550ed4937992fa96258262e955178"><code>b843cbe</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/3233">#3233</a>from github/mbg/getOptionalEnvVar</li><li><ahref="https://github.com/github/codeql-action/commit/1ecd56391940567d00fd07e34b4ca7b75dadd92a"><code>1ecd563</code></a>Use <code>getOptionalEnvVar</code> in<code>writePostProcessedFiles</code></li><li><ahref="https://github.com/github/codeql-action/commit/e57680792076a32e6f147ccf58374517ea645a31"><code>e576807</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/3223">#3223</a>from github/henrymercer/bump-minimum</li><li><ahref="https://github.com/github/codeql-action/commit/ad3567666919ea4249d02a26c230ea8e0daef410"><code>ad35676</code></a>Add <code>getOptionalEnvVar</code> function</li><li><ahref="https://github.com/github/codeql-action/commit/d75645b13f453e29a7f3c3f316babb725e644d0a"><code>d75645b</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/3222">#3222</a>from github/mbg/upload-lib/post-process</li><li><ahref="https://github.com/github/codeql-action/commit/710606cc35e2444ba84bdf7702dcb481f7380ae7"><code>710606c</code></a>Check that <code>outputPath</code> is non-empty</li><li>Additional commits viewable in <ahref="https://github.com/github/codeql-action/compare/16140ae1a102900babc80a33c44059580f687047...4e94bd11f71e507f7f87df81788dff88d1dacbfb">compareview</a></li></ul></details><br />Updates `Mattraks/delete-workflow-runs` from 2.0.6 to 2.1.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/mattraks/delete-workflow-runs/releases">Mattraks/delete-workflow-runs'sreleases</a>.</em></p><blockquote><h2>v2.1.0</h2><h2>What's Changed</h2><ul><li>Update README.md with contents: read permission by <ahref="https://github.com/jonaslindstr"><code>@​jonaslindstr</code></a>in <ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/19">Mattraks/delete-workflow-runs#19</a></li><li>Deletes workflow runs that do not have an existing workflow by <ahref="https://github.com/watercable76"><code>@​watercable76</code></a>in <ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/20">Mattraks/delete-workflow-runs#20</a></li><li>Quick note about GHE <code>baseUrl</code> config by <ahref="https://github.com/kquinsland"><code>@​kquinsland</code></a> in <ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/32">Mattraks/delete-workflow-runs#32</a></li><li>Added try/catch blocks to catch each error individually by <ahref="https://github.com/marcelovani"><code>@​marcelovani</code></a> in<ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/35">Mattraks/delete-workflow-runs#35</a></li></ul><h2>New Contributors</h2><ul><li><ahref="https://github.com/jonaslindstr"><code>@​jonaslindstr</code></a>made their first contribution in <ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/19">Mattraks/delete-workflow-runs#19</a></li><li><ahref="https://github.com/watercable76"><code>@​watercable76</code></a>made their first contribution in <ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/20">Mattraks/delete-workflow-runs#20</a></li><li><ahref="https://github.com/kquinsland"><code>@​kquinsland</code></a> madetheir first contribution in <ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/32">Mattraks/delete-workflow-runs#32</a></li><li><ahref="https://github.com/marcelovani"><code>@​marcelovani</code></a>made their first contribution in <ahref="https://redirect.github.com/Mattraks/delete-workflow-runs/pull/35">Mattraks/delete-workflow-runs#35</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/Mattraks/delete-workflow-runs/compare/v2.0.6...v2.1.0">https://github.com/Mattraks/delete-workflow-runs/compare/v2.0.6...v2.1.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/ab482449ba468316e9a8801e092d0405715c5e6d"><code>ab48244</code></a>version v2.1.0</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/feeb82053ea847a97fe4ee2aa314c94eac0eff04"><code>feeb820</code></a>Undo previous changes.</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/c61e04ec70740b989bdb168af9c948f2172856d8"><code>c61e04e</code></a>Added another try/catch block</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/f93a693640fbced9f6b9026397406572c0dddcec"><code>f93a693</code></a>Added another try/catch block</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/f40e9cd01093f8470cb92e70a971329a1c6b5ca1"><code>f40e9cd</code></a>Removed condition that is limiting deletion</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/0a28a6b9d4f62e5b211056ceead85cc6776403eb"><code>0a28a6b</code></a>Display debug messages</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/cb572387c439bdadffcac5fdba1f5fae3374309f"><code>cb57238</code></a>Display all workflows</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/8859caa93697386bdb136521cca778eb9427e800"><code>8859caa</code></a>Quick note about GHE <code>baseUrl</code> config</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/4c9f24749b7996562658e3d6e10662489e22caca"><code>4c9f247</code></a>Added better check to verify runs to be deleted, and some logging</li><li><ahref="https://github.com/Mattraks/delete-workflow-runs/commit/20682956720600a468c346b81c1965bfc2312d70"><code>2068295</code></a>Deletes workflow runs that do not have an existing workflow</li><li>Additional commits viewable in <ahref="https://github.com/mattraks/delete-workflow-runs/compare/39f0bbed25d76b34de5594dceab824811479e5de...ab482449ba468316e9a8801e092d0405715c5e6d">compareview</a></li></ul></details><br />Dependabot will resolve any conflicts with this PR as long as you don'talter it yourself. You can also trigger a rebase manually by commenting`@dependabot rebase`.[//]: # (dependabot-automerge-start)[//]: # (dependabot-automerge-end)---<details><summary>Dependabot commands and options</summary><br />You can trigger Dependabot actions by commenting on this PR:- `@dependabot rebase` will rebase this PR- `@dependabot recreate` will recreate this PR, overwriting any editsthat have been made to it- `@dependabot merge` will merge this PR after your CI passes on it- `@dependabot squash and merge` will squash and merge this PR afteryour CI passes on it- `@dependabot cancel merge` will cancel a previously requested mergeand block automerging- `@dependabot reopen` will reopen this PR if it is closed- `@dependabot close` will close this PR and stop Dependabot recreatingit. You can achieve the same result by closing it manually- `@dependabot show <dependency name> ignore conditions` will show allof the ignore conditions of the specified dependency- `@dependabot ignore <dependency name> major version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's major version (unless you unignore this specificdependency's major version or upgrade to it yourself)- `@dependabot ignore <dependency name> minor version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's minor version (unless you unignore this specificdependency's minor version or upgrade to it yourself)- `@dependabot ignore <dependency name>` will close this group update PRand stop Dependabot creating any more for the specific dependency(unless you unignore this specific dependency or upgrade to it yourself)- `@dependabot unignore <dependency name>` will remove all of the ignoreconditions of the specified dependency- `@dependabot unignore <dependency name> <ignore condition>` willremove the ignore condition of the specified dependency and ignoreconditions</details>Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parentdd92fbc commita1161b7

File tree

7 files changed

+22
-22
lines changed

7 files changed

+22
-22
lines changed

‎.github/workflows/ci.yaml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -500,7 +500,7 @@ jobs:
500500
make test
501501
502502
-name:Upload failed test db dumps
503-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
503+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
504504
with:
505505
name:failed-test-db-dump-${{matrix.os}}
506506
path:"**/*.test.sql"
@@ -762,15 +762,15 @@ jobs:
762762

763763
-name:Upload Playwright Failed Tests
764764
if:always() && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && !github.event.pull_request.head.repo.fork
765-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
765+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
766766
with:
767767
name:failed-test-videos${{ matrix.variant.premium && '-premium' || '' }}
768768
path:./site/test-results/**/*.webm
769769
retention-days:7
770770

771771
-name:Upload pprof dumps
772772
if:always() && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && !github.event.pull_request.head.repo.fork
773-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
773+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
774774
with:
775775
name:debug-pprof-dumps${{ matrix.variant.premium && '-premium' || '' }}
776776
path:./site/test-results/**/debug-pprof-*.txt
@@ -806,7 +806,7 @@ jobs:
806806
# the check to pass. This is desired in PRs, but not in mainline.
807807
-name:Publish to Chromatic (non-mainline)
808808
if:github.ref != 'refs/heads/main' && github.repository_owner == 'coder'
809-
uses:chromaui/action@4ffe736a2a8262ea28067ff05a13b635ba31ec05# v13.3.0
809+
uses:chromaui/action@bc2d84ad2b60813a67d995c5582d696104a19383# v13.3.2
810810
env:
811811
NODE_OPTIONS:"--max_old_space_size=4096"
812812
STORYBOOK:true
@@ -838,7 +838,7 @@ jobs:
838838
# infinitely "in progress" in mainline unless we re-review each build.
839839
-name:Publish to Chromatic (mainline)
840840
if:github.ref == 'refs/heads/main' && github.repository_owner == 'coder'
841-
uses:chromaui/action@4ffe736a2a8262ea28067ff05a13b635ba31ec05# v13.3.0
841+
uses:chromaui/action@bc2d84ad2b60813a67d995c5582d696104a19383# v13.3.2
842842
env:
843843
NODE_OPTIONS:"--max_old_space_size=4096"
844844
STORYBOOK:true
@@ -1036,7 +1036,7 @@ jobs:
10361036

10371037
-name:Upload build artifacts
10381038
if:${{ github.repository_owner == 'coder' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release/')) }}
1039-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
1039+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
10401040
with:
10411041
name:dylibs
10421042
path:|
@@ -1201,7 +1201,7 @@ jobs:
12011201
uses:google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db# v3.0.1
12021202

12031203
-name:Download dylibs
1204-
uses:actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0#v5.0.0
1204+
uses:actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53#v6.0.0
12051205
with:
12061206
name:dylibs
12071207
path:./build
@@ -1468,7 +1468,7 @@ jobs:
14681468

14691469
-name:Upload build artifacts
14701470
if:github.ref == 'refs/heads/main'
1471-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
1471+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
14721472
with:
14731473
name:coder
14741474
path:|

‎.github/workflows/docs-ci.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
-name:Setup Node
3131
uses:./.github/actions/setup-node
3232

33-
-uses:tj-actions/changed-files@d03a93c0dbfac6d6dd6a0d8a5e7daff992b07449# v45.0.7
33+
-uses:tj-actions/changed-files@dbf178ceecb9304128c8e0648591d71208c6e2c9# v45.0.7
3434
id:changed-files
3535
with:
3636
files:|

‎.github/workflows/dogfood.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
persist-credentials:false
3737

3838
-name:Setup Nix
39-
uses:nixbuild/nix-quick-install-action@1f095fee853b33114486cfdeae62fa099cda35a9#v33
39+
uses:nixbuild/nix-quick-install-action@2c9db80fb984ceb1bcaa77cdda3fdf8cfba92035#v34
4040
with:
4141
# Pinning to 2.28 here, as Nix gets a "error: [json.exception.type_error.302] type must be array, but is string"
4242
# on version 2.29 and above.

‎.github/workflows/release.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -131,7 +131,7 @@ jobs:
131131
AC_CERTIFICATE_PASSWORD_FILE:/tmp/apple_cert_password.txt
132132

133133
-name:Upload build artifacts
134-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
134+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
135135
with:
136136
name:dylibs
137137
path:|
@@ -327,7 +327,7 @@ jobs:
327327
uses:google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db# v3.0.1
328328

329329
-name:Download dylibs
330-
uses:actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0#v5.0.0
330+
uses:actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53#v6.0.0
331331
with:
332332
name:dylibs
333333
path:./build
@@ -761,7 +761,7 @@ jobs:
761761
762762
-name:Upload artifacts to actions (if dry-run)
763763
if:${{ inputs.dry_run }}
764-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
764+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
765765
with:
766766
name:release-artifacts
767767
path:|
@@ -777,7 +777,7 @@ jobs:
777777

778778
-name:Upload latest sbom artifact to actions (if dry-run)
779779
if:inputs.dry_run && steps.build_docker.outputs.created_latest_tag == 'true'
780-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
780+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
781781
with:
782782
name:latest-sbom-artifact
783783
path:./coder_latest_sbom.spdx.json

‎.github/workflows/scorecard.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,14 +39,14 @@ jobs:
3939

4040
# Upload the results as artifacts.
4141
-name:"Upload artifact"
42-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
42+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
4343
with:
4444
name:SARIF file
4545
path:results.sarif
4646
retention-days:5
4747

4848
# Upload the results to GitHub's code scanning dashboard.
4949
-name:"Upload to code-scanning"
50-
uses:github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047# v3.29.5
50+
uses:github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb# v3.29.5
5151
with:
5252
sarif_file:results.sarif

‎.github/workflows/security.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
uses:./.github/actions/setup-go
4141

4242
-name:Initialize CodeQL
43-
uses:github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047# v3.29.5
43+
uses:github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb# v3.29.5
4444
with:
4545
languages:go, javascript
4646

@@ -50,7 +50,7 @@ jobs:
5050
rm Makefile
5151
5252
-name:Perform CodeQL Analysis
53-
uses:github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047# v3.29.5
53+
uses:github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb# v3.29.5
5454

5555
-name:Send Slack notification on failure
5656
if:${{ failure() }}
@@ -154,13 +154,13 @@ jobs:
154154
severity:"CRITICAL,HIGH"
155155

156156
-name:Upload Trivy scan results to GitHub Security tab
157-
uses:github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047# v3.29.5
157+
uses:github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb# v3.29.5
158158
with:
159159
sarif_file:trivy-results.sarif
160160
category:"Trivy"
161161

162162
-name:Upload Trivy scan results as an artifact
163-
uses:actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02#v4.6.2
163+
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
164164
with:
165165
name:trivy
166166
path:trivy-results.sarif

‎.github/workflows/stale.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -125,7 +125,7 @@ jobs:
125125
egress-policy:audit
126126

127127
-name:Delete PR Cleanup workflow runs
128-
uses:Mattraks/delete-workflow-runs@39f0bbed25d76b34de5594dceab824811479e5de# v2.0.6
128+
uses:Mattraks/delete-workflow-runs@ab482449ba468316e9a8801e092d0405715c5e6d# v2.1.0
129129
with:
130130
token:${{ github.token }}
131131
repository:${{ github.repository }}
@@ -134,7 +134,7 @@ jobs:
134134
delete_workflow_pattern:pr-cleanup.yaml
135135

136136
-name:Delete PR Deploy workflow skipped runs
137-
uses:Mattraks/delete-workflow-runs@39f0bbed25d76b34de5594dceab824811479e5de# v2.0.6
137+
uses:Mattraks/delete-workflow-runs@ab482449ba468316e9a8801e092d0405715c5e6d# v2.1.0
138138
with:
139139
token:${{ github.token }}
140140
repository:${{ github.repository }}

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp