Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit0a26eee

Browse files
ci: bump the github-actions group with 7 updates (#17581)
Bumps the github-actions group with 7 updates:| Package | From | To || --- | --- | --- ||[step-security/harden-runner](https://github.com/step-security/harden-runner)| `2.11.1` | `2.12.0` ||[google-github-actions/auth](https://github.com/google-github-actions/auth)| `2.1.8` | `2.1.10` ||[actions/download-artifact](https://github.com/actions/download-artifact)| `4.2.1` | `4.3.0` || [actions/attest](https://github.com/actions/attest) | `2.2.1` |`2.3.0` ||[tj-actions/changed-files](https://github.com/tj-actions/changed-files)| `9934ab3fdf63239da75d9e0fbd339c48620c72c4` |`5426ecc3f5c2b10effaefbd374f0abdc6a571b2f` ||[nix-community/cache-nix-action](https://github.com/nix-community/cache-nix-action)| `6.1.2` | `6.1.3` || [github/codeql-action](https://github.com/github/codeql-action) |`3.28.15` | `3.28.16` |Updates `step-security/harden-runner` from 2.11.1 to 2.12.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/step-security/harden-runner/releases">step-security/harden-runner'sreleases</a>.</em></p><blockquote><h2>v2.12.0</h2><h2>What's Changed</h2><ol><li><p>A new option, <code>disable-sudo-and-containers</code>, is nowavailable to replace the <code>disable-sudo policy</code>, addressingDocker-based privilege escalation (<ahref="https://github.com/step-security/harden-runner/security/advisories/GHSA-mxr3-8whj-j74r">CVE-2025-32955</a>).More details can be found in this <ahref="https://www.stepsecurity.io/blog/evolving-harden-runners-disable-sudo-policy-for-improved-runner-security">blogpost</a>.</p></li><li><p>New detections have been added based on insights from the tj-actionsand reviewdog actions incidents.</p></li></ol><p><strong>Full Changelog</strong>: <ahref="https://github.com/step-security/harden-runner/compare/v2...v2.12.0">https://github.com/step-security/harden-runner/compare/v2...v2.12.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/step-security/harden-runner/commit/0634a2670c59f64b4a01f0f96f84700a4088b9f0"><code>0634a26</code></a>Merge pull request <ahref="https://redirect.github.com/step-security/harden-runner/issues/541">#541</a>from step-security/rc-20</li><li><ahref="https://github.com/step-security/harden-runner/commit/2e3c5113419044c10e6826351ff7cf7d56cbebe4"><code>2e3c511</code></a>Update action.yml</li><li><ahref="https://github.com/step-security/harden-runner/commit/40873e6a41e9ae4f46268f8ee038b3561bb88504"><code>40873e6</code></a>Update README.md</li><li><ahref="https://github.com/step-security/harden-runner/commit/484c2799ec63f20b4acc41bcf649dd4003718616"><code>484c279</code></a>Update README.md</li><li><ahref="https://github.com/step-security/harden-runner/commit/4c8582f45544ce2dafb2cfae82cfbebf0f41bde2"><code>4c8582f</code></a>Update agent versions</li><li><ahref="https://github.com/step-security/harden-runner/commit/e8d595cd66544d43aca8ac7e42a212a5a83b41f8"><code>e8d595c</code></a>fix disable_sudo_and_containers bug</li><li><ahref="https://github.com/step-security/harden-runner/commit/5d277fc8734baba8746d0c18cb0a2594d4692c66"><code>5d277fc</code></a>fix journalctl related bug</li><li><ahref="https://github.com/step-security/harden-runner/commit/ff2ab228bdb9f0c9129169d47dbb2bdf4b8f9b0e"><code>ff2ab22</code></a>Merge pull request <ahref="https://redirect.github.com/step-security/harden-runner/issues/536">#536</a>from rohan-stepsecurity/feat/flag/disable-sudo-and-co...</li><li><ahref="https://github.com/step-security/harden-runner/commit/b81d650d0e627a80d0d73d192b33d729507e0ef5"><code>b81d650</code></a>fix: run sudo command only when both disable-sudo anddisable-sudo-and-docker...</li><li><ahref="https://github.com/step-security/harden-runner/commit/769df4ef5d6336b33b11e5b0d43934309cf439f6"><code>769df4e</code></a>Update agent</li><li>Additional commits viewable in <ahref="https://github.com/step-security/harden-runner/compare/c6295a65d1254861815972266d5933fd6e532bdf...0634a2670c59f64b4a01f0f96f84700a4088b9f0">compareview</a></li></ul></details><br />Updates `google-github-actions/auth` from 2.1.8 to 2.1.10<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/google-github-actions/auth/releases">google-github-actions/auth'sreleases</a>.</em></p><blockquote><h2>v2.1.10</h2><h2>What's Changed</h2><ul><li>Declare workflow permissions by <ahref="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <ahref="https://redirect.github.com/google-github-actions/auth/pull/482">google-github-actions/auth#482</a></li><li>Document that the OIDC token expires in 5min by <ahref="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <ahref="https://redirect.github.com/google-github-actions/auth/pull/483">google-github-actions/auth#483</a></li><li>Release: v2.1.10 by <ahref="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a>in <ahref="https://redirect.github.com/google-github-actions/auth/pull/484">google-github-actions/auth#484</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/google-github-actions/auth/compare/v2.1.9...v2.1.10">https://github.com/google-github-actions/auth/compare/v2.1.9...v2.1.10</a></p><h2>v2.1.9</h2><h2>What's Changed</h2><ul><li>Use our custom boolean parsing by <ahref="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <ahref="https://redirect.github.com/google-github-actions/auth/pull/478">google-github-actions/auth#478</a></li><li>Update deps by <ahref="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <ahref="https://redirect.github.com/google-github-actions/auth/pull/479">google-github-actions/auth#479</a></li><li>Release: v2.1.9 by <ahref="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a>in <ahref="https://redirect.github.com/google-github-actions/auth/pull/480">google-github-actions/auth#480</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/google-github-actions/auth/compare/v2.1.8...v2.1.9">https://github.com/google-github-actions/auth/compare/v2.1.8...v2.1.9</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/google-github-actions/auth/commit/ba79af03959ebeac9769e648f473a284504d9193"><code>ba79af0</code></a>Release: v2.1.10 (<ahref="https://redirect.github.com/google-github-actions/auth/issues/484">#484</a>)</li><li><ahref="https://github.com/google-github-actions/auth/commit/bfaa66bd663615688155de119a676d67396f6bb7"><code>bfaa66b</code></a>Document that the OIDC token expires in 5min (<ahref="https://redirect.github.com/google-github-actions/auth/issues/483">#483</a>)</li><li><ahref="https://github.com/google-github-actions/auth/commit/d0822ad9bf77d35dee590e455d9ef5b96ccb243c"><code>d0822ad</code></a>Declare workflow permissions (<ahref="https://redirect.github.com/google-github-actions/auth/issues/482">#482</a>)</li><li><ahref="https://github.com/google-github-actions/auth/commit/7b53cdc2a387814ed14eec026287aac689ae8c9b"><code>7b53cdc</code></a>Release: v2.1.9 (<ahref="https://redirect.github.com/google-github-actions/auth/issues/480">#480</a>)</li><li><ahref="https://github.com/google-github-actions/auth/commit/a9cfddf5d2f27aa426027a399f75d209953ade8e"><code>a9cfddf</code></a>Update deps (<ahref="https://redirect.github.com/google-github-actions/auth/issues/479">#479</a>)</li><li><ahref="https://github.com/google-github-actions/auth/commit/b011f3988e66cb193db0f34974b1d7cde74e4f95"><code>b011f39</code></a>Use our custom boolean parsing (<ahref="https://redirect.github.com/google-github-actions/auth/issues/478">#478</a>)</li><li>See full diff in <ahref="https://github.com/google-github-actions/auth/compare/71f986410dfbc7added4569d411d040a91dc6935...ba79af03959ebeac9769e648f473a284504d9193">compareview</a></li></ul></details><br />Updates `actions/download-artifact` from 4.2.1 to 4.3.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/actions/download-artifact/releases">actions/download-artifact'sreleases</a>.</em></p><blockquote><h2>v4.3.0</h2><h2>What's Changed</h2><ul><li>feat: implement new <code>artifact-ids</code> input by <ahref="https://github.com/GrantBirki"><code>@​GrantBirki</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/401">actions/download-artifact#401</a></li><li>Fix workflow example for downloading by artifact ID by <ahref="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/402">actions/download-artifact#402</a></li><li>Prep for v4.3.0 release by <ahref="https://github.com/robherley"><code>@​robherley</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/404">actions/download-artifact#404</a></li></ul><h2>New Contributors</h2><ul><li><ahref="https://github.com/GrantBirki"><code>@​GrantBirki</code></a> madetheir first contribution in <ahref="https://redirect.github.com/actions/download-artifact/pull/401">actions/download-artifact#401</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/download-artifact/compare/v4.2.1...v4.3.0">https://github.com/actions/download-artifact/compare/v4.2.1...v4.3.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/actions/download-artifact/commit/d3f86a106a0bac45b974a628896c90dbdf5c8093"><code>d3f86a1</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/404">#404</a>from actions/robherley/v4.3.0</li><li><ahref="https://github.com/actions/download-artifact/commit/fc02353415da80201a0da48ab47022efd7725d11"><code>fc02353</code></a>prep for v4.3.0 release</li><li><ahref="https://github.com/actions/download-artifact/commit/77454371a433f370a16d329ef7db197f700a7a8f"><code>7745437</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/402">#402</a>from actions/joshmgross/download-by-id-example</li><li><ahref="https://github.com/actions/download-artifact/commit/84fc7a0a358aabc7f97f7f590cbfc25f57e26c6a"><code>84fc7a0</code></a>Remove path filters from Check dist workflow</li><li><ahref="https://github.com/actions/download-artifact/commit/67f2bc382f6ba5ba75812a05909e8c25a366b5fb"><code>67f2bc3</code></a>Fix workflow example for downloading by artifact ID</li><li><ahref="https://github.com/actions/download-artifact/commit/8ea3c2c174f79a56792e9fdd9baad75d27c5d369"><code>8ea3c2c</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/401">#401</a>from actions/download-by-id</li><li><ahref="https://github.com/actions/download-artifact/commit/d219c630f65d8bd14366a9e2f731cbf854f62258"><code>d219c63</code></a>add supporting unit tests for artifact downloads with ids</li><li><ahref="https://github.com/actions/download-artifact/commit/54124fbd881f8ce794405a06896c93c49c17463e"><code>54124fb</code></a>revert <code>getArtifact()</code> changes - for now we have to list andfilter by artifa...</li><li><ahref="https://github.com/actions/download-artifact/commit/b83057b90d3e218abf5c7b1906579eb6c598ae85"><code>b83057b</code></a>bundle</li><li><ahref="https://github.com/actions/download-artifact/commit/171183c7dce98c3cf8a1fc842429d0a38ed21d33"><code>171183c</code></a>use the same <code>artifactClient.getArtifact</code> structure as seenabove in `isSingl...</li><li>Additional commits viewable in <ahref="https://github.com/actions/download-artifact/compare/95815c38cf2ff2164869cbab79da8d1f422bc89e...d3f86a106a0bac45b974a628896c90dbdf5c8093">compareview</a></li></ul></details><br />Updates `actions/attest` from 2.2.1 to 2.3.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/actions/attest/releases">actions/attest'sreleases</a>.</em></p><blockquote><h2>v2.3.0</h2><h2>What's Changed</h2><ul><li>Bump <code>@​octokit/request</code> from 8.2.0 to 8.4.1 by <ahref="https://github.com/dependabot"><code>@​dependabot</code></a> in <ahref="https://redirect.github.com/actions/attest/pull/229">actions/attest#229</a></li><li>Bump <code>@​sigstore/oci</code> from 0.4.0 to 0.5.0 by <ahref="https://github.com/bdehamer"><code>@​bdehamer</code></a> in <ahref="https://redirect.github.com/actions/attest/pull/235">actions/attest#235</a><ul><li>Adds support for reading the <code>HttpHeaders</code> value from theDocker config file</li></ul></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/attest/compare/v2...v2.3.0">https://github.com/actions/attest/compare/v2...v2.3.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/actions/attest/commit/afd638254319277bb3d7f0a234478733e2e46a73"><code>afd6382</code></a>Bump <code>@​sigstore/oci</code> from 0.4.0 to 0.5.0 (<ahref="https://redirect.github.com/actions/attest/issues/235">#235</a>)</li><li><ahref="https://github.com/actions/attest/commit/d73111199c05526c91684e5e845606249f88accc"><code>d731111</code></a>Bump the npm-development group across 1 directory with 6 updates (<ahref="https://redirect.github.com/actions/attest/issues/234">#234</a>)</li><li><ahref="https://github.com/actions/attest/commit/13aa4f6a9ce09dcf318f1ac18a48388699d96a62"><code>13aa4f6</code></a>Bump <code>@​octokit/request</code> from 8.2.0 to 8.4.1 (<ahref="https://redirect.github.com/actions/attest/issues/229">#229</a>)</li><li><ahref="https://github.com/actions/attest/commit/129b656e44fad75bb154cc2953cf07ba1da8a419"><code>129b656</code></a>Bump the npm-development group with 3 updates (<ahref="https://redirect.github.com/actions/attest/issues/227">#227</a>)</li><li><ahref="https://github.com/actions/attest/commit/f3c169c8df83481993e3075060fc687e87747125"><code>f3c169c</code></a>Bump the npm-development group with 5 updates (<ahref="https://redirect.github.com/actions/attest/issues/225">#225</a>)</li><li><ahref="https://github.com/actions/attest/commit/48e991bfda5b806f66f0a2ad8ae4e17f14cdfd33"><code>48e991b</code></a>Bump the npm-development group across 1 directory with 6 updates (<ahref="https://redirect.github.com/actions/attest/issues/223">#223</a>)</li><li>See full diff in <ahref="https://github.com/actions/attest/compare/a63cfcc7d1aab266ee064c58250cfc2c7d07bc31...afd638254319277bb3d7f0a234478733e2e46a73">compareview</a></li></ul></details><br />Updates `tj-actions/changed-files` from9934ab3fdf63239da75d9e0fbd339c48620c72c4 to5426ecc3f5c2b10effaefbd374f0abdc6a571b2f<details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/tj-actions/changed-files/blob/main/HISTORY.md">tj-actions/changed-files'schangelog</a>.</em></p><blockquote><h1>Changelog</h1><h1><ahref="https://github.com/tj-actions/changed-files/compare/v46.0.4...v46.0.5">46.0.5</a>- (2025-04-09)</h1><h2><!-- raw HTML omitted -->⚙️ Miscellaneous Tasks</h2><ul><li><strong>deps:</strong> Bump yaml from 2.7.0 to 2.7.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2520">#2520</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/ed68ef82c095e0d48ec87eccea555d944a631a4c">ed68ef8</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump typescript from 5.8.2 to 5.8.3 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2516">#2516</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/a7bc14b808f23d3b467a4079c69a81f1a4500fd5">a7bc14b</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump <code>@​types/node</code> from22.13.11 to 22.14.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2517">#2517</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/3d751f6b6d84071a17e1b9cf4ed79a80a27dd0ab">3d751f6</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump eslint-plugin-prettier from 5.2.3 to5.2.6 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2519">#2519</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/e2fda4ec3cb0bc2a353843cae823430b3124db8f">e2fda4e</a>)- (dependabot[bot])</li><li><strong>deps-dev:</strong> Bump ts-jest from 29.2.6 to 29.3.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2518">#2518</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/0bed1b1132ec4879a39a2d624cf82a00d0bcfa48">0bed1b1</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump github/codeql-action from 3.28.12 to3.28.15 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2530">#2530</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/68024587dc36f49685c96d59d3f1081830f968bb">6802458</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump tj-actions/branch-names from 8.0.1 to8.1.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2521">#2521</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/cf2e39e86bf842d1f9bc5bca56c0a6b207cca792">cf2e39e</a>)- (dependabot[bot])</li><li><strong>deps:</strong> Bump tj-actions/verify-changed-files from20.0.1 to 20.0.4 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2523">#2523</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/6abeaa506a419f85fa9e681260b443adbeebb3d4">6abeaa5</a>)- (dependabot[bot])</li></ul><h2><!-- raw HTML omitted -->⬆️ Upgrades</h2><ul><li>Upgraded to v46.0.4 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2511">#2511</a>)</li></ul><p>Co-authored-by: github-actions[bot] <!-- raw HTML omitted --> (<ahref="https://github.com/tj-actions/changed-files/commit/6f67ee9ac810f0192ea7b3d2086406f97847bcf9">6f67ee9</a>)- (github-actions[bot])</p><h1><ahref="https://github.com/tj-actions/changed-files/compare/v46.0.3...v46.0.4">46.0.4</a>- (2025-04-03)</h1><h2><!-- raw HTML omitted -->🐛 Bug Fixes</h2><ul><li>Bug modified_keys and changed_key outputs not set when no changesdetected (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2509">#2509</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/6cb76d07bee4c9772c6882c06c37837bf82a04d3">6cb76d0</a>)- (Tonye Jack)</li></ul><h2><!-- raw HTML omitted -->📚 Documentation</h2><ul><li>Update readme (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2508">#2508</a>)(<ahref="https://github.com/tj-actions/changed-files/commit/b74df86ccb65173a8e33ba5492ac1a2ca6b216fd">b74df86</a>)- (Tonye Jack)</li></ul><h2><!-- raw HTML omitted -->⬆️ Upgrades</h2><ul><li>Upgraded to v46.0.3 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2506">#2506</a>)</li></ul><p>Co-authored-by: github-actions[bot] <!-- raw HTML omitted -->Co-authored-by: Tonye Jack <ahref="mailto:jtonye@ymail.com">jtonye@ymail.com</a> (<ahref="https://github.com/tj-actions/changed-files/commit/27ae6b33eaed7bf87272fdeb9f1c54f9facc9d99">27ae6b3</a>)- (github-actions[bot])</p><h1><ahref="https://github.com/tj-actions/changed-files/compare/v46.0.2...v46.0.3">46.0.3</a>- (2025-03-23)</h1><h2><!-- raw HTML omitted -->🔄 Update</h2><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2501">#2501</a>)</li></ul><p>Co-authored-by: github-actions[bot] <!-- raw HTML omitted --> (<ahref="https://github.com/tj-actions/changed-files/commit/41e0de576a0f2b64d9f06f2773f539109e55a70a">41e0de5</a>)- (github-actions[bot])</p><ul><li>Updated README.md (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2499">#2499</a>)</li></ul><p>Co-authored-by: github-actions[bot] <!-- raw HTML omitted --> (<ahref="https://github.com/tj-actions/changed-files/commit/945787811a795cd840a1157ac590dd7827a05c8e">9457878</a>)- (github-actions[bot])</p><h2><!-- raw HTML omitted -->📚 Documentation</h2><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/tj-actions/changed-files/commit/5426ecc3f5c2b10effaefbd374f0abdc6a571b2f"><code>5426ecc</code></a>chore(deps): bump actions/download-artifact from 4.2.1 to 4.3.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2545">#2545</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/513a44e6095ccea82c33927169db11eb75f72791"><code>513a44e</code></a>chore(deps-dev): bump <code>@​types/node</code> from 22.14.1 to 22.15.0(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2544">#2544</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/46e217dc3e3b2601594036314ca9212588075592"><code>46e217d</code></a>chore(deps): bump github/codeql-action from 3.28.15 to 3.28.16 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2542">#2542</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/c34c1c13a740b06851baff92ab9a653d93ad6ce7"><code>c34c1c1</code></a>chore(deps): bump actions/setup-node from 4.3.0 to 4.4.0 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2539">#2539</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/52c3beb9971d42006b24e86bf3ea3fff18dde67f"><code>52c3beb</code></a>chore(deps-dev): bump ts-jest from 29.3.1 to 29.3.2 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2536">#2536</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/ea3010bc88ae93076e154efd9eb64d1f5e6993f9"><code>ea3010b</code></a>chore(deps-dev): bump <code>@​types/node</code> from 22.14.0 to 22.14.1(<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2537">#2537</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/be393a90381e27c9fec2c8c2e02b00f005710145"><code>be393a9</code></a>remove: commit and push step from build job (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2538">#2538</a>)</li><li><ahref="https://github.com/tj-actions/changed-files/commit/9b4bb2bedb217d3ede225b6b07ebde713177cd8f"><code>9b4bb2b</code></a>chore(deps): bump tj-actions/branch-names from 8.1.0 to 8.2.1 (<ahref="https://redirect.github.com/tj-actions/changed-files/issues/2535">#2535</a>)</li><li>See full diff in <ahref="https://github.com/tj-actions/changed-files/compare/9934ab3fdf63239da75d9e0fbd339c48620c72c4...5426ecc3f5c2b10effaefbd374f0abdc6a571b2f">compareview</a></li></ul></details><br />Updates `nix-community/cache-nix-action` from 6.1.2 to 6.1.3<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/nix-community/cache-nix-action/releases">nix-community/cache-nix-action'sreleases</a>.</em></p><blockquote><h2>v6.1.3</h2><h2>Fixes</h2><ul><li>Use <code>bigint</code> instead of <code>number</code> for the storesize (<ahref="https://redirect.github.com/nix-community/cache-nix-action/issues/117">#117</a>)</li><li>Fix saving a cache (<ahref="https://redirect.github.com/nix-community/cache-nix-action/issues/122">#122</a>)</li></ul></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/nix-community/cache-nix-action/commit/135667ec418502fa5a3598af6fb9eb733888ce6a"><code>135667e</code></a>Merge pull request <ahref="https://redirect.github.com/nix-community/cache-nix-action/issues/122">#122</a>from nix-community/118-bug-cant-save-a-cache</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/e29de90a039b410e88cd97a0029c3cbdad611ad5"><code>e29de90</code></a>chore: build the action</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/6bd39b8caa31871d2bc38356ab8b94621ca1e116"><code>6bd39b8</code></a>fix(action): use TarCommandModifiers</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/1b6f6754d3c59414aad4ab660cd611b1e35c0232"><code>1b6f675</code></a>chore(deps): update buildjet/toolkit</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/2b45b8cabe18b0f3db2eb2cf4e195238eee4a325"><code>2b45b8c</code></a>chore(deps): update actions/toolkit</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/f68581e27a06c8c9115dec37e42325d562d9664b"><code>f68581e</code></a>chore: build the action</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/b6406dc6e7f9c6ad6b399ed561f29f7e406544d5"><code>b6406dc</code></a>Merge pull request <ahref="https://redirect.github.com/nix-community/cache-nix-action/issues/117">#117</a>from nix-community/116-bug-inputsgcmaxstoresizevalue-...</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/a91821953137cbb5f2a2d45fa174d69fea427ef4"><code>a918219</code></a>chore: build the action</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/c6081efc5157c972934491630ade96e53259023c"><code>c6081ef</code></a>feat(ci): add example of large gc-max-store-size</li><li><ahref="https://github.com/nix-community/cache-nix-action/commit/cf6af9e3e9fb402a3b92286b7c8b48afa94de5a6"><code>cf6af9e</code></a>fix(action): use bigint for the store size</li><li>Additional commits viewable in <ahref="https://github.com/nix-community/cache-nix-action/compare/c448f065ba14308da81de769632ca67a3ce67cf5...135667ec418502fa5a3598af6fb9eb733888ce6a">compareview</a></li></ul></details><br />Updates `github/codeql-action` from 3.28.15 to 3.28.16<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/github/codeql-action/releases">github/codeql-action'sreleases</a>.</em></p><blockquote><h2>v3.28.16</h2><h1>CodeQL Action Changelog</h1><p>See the <ahref="https://github.com/github/codeql-action/releases">releasespage</a> for the relevant changes to the CodeQL CLI and languagepacks.</p><h2>3.28.16 - 23 Apr 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.1. <ahref="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li></ul><p>See the full <ahref="https://github.com/github/codeql-action/blob/v3.28.16/CHANGELOG.md">CHANGELOG.md</a>for more information.</p></blockquote></details><details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action'schangelog</a>.</em></p><blockquote><h1>CodeQL Action Changelog</h1><p>See the <ahref="https://github.com/github/codeql-action/releases">releasespage</a> for the relevant changes to the CodeQL CLI and languagepacks.</p><h2>[UNRELEASED]</h2><p>No user facing changes.</p><h2>3.28.16 - 23 Apr 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.1. <ahref="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li></ul><h2>3.28.15 - 07 Apr 2025</h2><ul><li>Fix bug where the action would fail if it tried to produce a debugartifact with more than 65535 files. <ahref="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li></ul><h2>3.28.14 - 07 Apr 2025</h2><ul><li>Update default CodeQL bundle version to 2.21.0. <ahref="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li></ul><h2>3.28.13 - 24 Mar 2025</h2><p>No user facing changes.</p><h2>3.28.12 - 19 Mar 2025</h2><ul><li>Dependency caching should now cache more dependencies for Java<code>build-mode: none</code> extractions. This should speed upworkflows and avoid inconsistent alerts in some cases.</li><li>Update default CodeQL bundle version to 2.20.7. <ahref="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li></ul><h2>3.28.11 - 07 Mar 2025</h2><ul><li>Update default CodeQL bundle version to 2.20.6. <ahref="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li></ul><h2>3.28.10 - 21 Feb 2025</h2><ul><li>Update default CodeQL bundle version to 2.20.5. <ahref="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li><li>Address an issue where the CodeQL Bundle would occasionally fail todecompress on macOS. <ahref="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li></ul><h2>3.28.9 - 07 Feb 2025</h2><ul><li>Update default CodeQL bundle version to 2.20.4. <ahref="https://redirect.github.com/github/codeql-action/pull/2753">#2753</a></li></ul><h2>3.28.8 - 29 Jan 2025</h2><ul><li>Enable support for Kotlin 2.1.10 when running with CodeQL CLIv2.20.3. <ahref="https://redirect.github.com/github/codeql-action/pull/2744">#2744</a></li></ul><h2>3.28.7 - 29 Jan 2025</h2><p>No user facing changes.</p><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/github/codeql-action/commit/28deaeda66b76a05916b6923827895f2b14ab387"><code>28deaed</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2865">#2865</a>from github/update-v3.28.16-2a8cbadc0</li><li><ahref="https://github.com/github/codeql-action/commit/03c5d71c11f6cb2c5ba7eef371219a862be30193"><code>03c5d71</code></a>Update changelog for v3.28.16</li><li><ahref="https://github.com/github/codeql-action/commit/2a8cbadc02bb64a7fd15d37c977acbad02496c80"><code>2a8cbad</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2863">#2863</a>from github/update-bundle/codeql-bundle-v2.21.1</li><li><ahref="https://github.com/github/codeql-action/commit/f76eaf51a636a5c1d927998267d92d6475363ace"><code>f76eaf5</code></a>Add changelog note</li><li><ahref="https://github.com/github/codeql-action/commit/e63b3f5166c15fda4eb17886f01abe9445dd13f5"><code>e63b3f5</code></a>Update default bundle to codeql-bundle-v2.21.1</li><li><ahref="https://github.com/github/codeql-action/commit/4c3e5362829f0b0bb62ff5f6c938d7f95574c306"><code>4c3e536</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2853">#2853</a>from github/dependabot/npm_and_yarn/npm-7d84c66b66</li><li><ahref="https://github.com/github/codeql-action/commit/56dd02f26d99811d607284494ff84b7d862fe837"><code>56dd02f</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2852">#2852</a>from github/dependabot/github_actions/actions-457587...</li><li><ahref="https://github.com/github/codeql-action/commit/192406dd845fb2228fcea74898b98df2a6cdcef6"><code>192406d</code></a>Merge branch 'main' intodependabot/github_actions/actions-4575878e06</li><li><ahref="https://github.com/github/codeql-action/commit/c7dbb2084ed1bb623fbbb3976cd6dbae6daaf1fe"><code>c7dbb20</code></a>Merge pull request <ahref="https://redirect.github.com/github/codeql-action/issues/2857">#2857</a>from github/nickfyson/address-vulns</li><li><ahref="https://github.com/github/codeql-action/commit/9a45cd8c5025281c30bbb652197ace083c291e49"><code>9a45cd8</code></a>move use of input variables into env vars</li><li>Additional commits viewable in <ahref="https://github.com/github/codeql-action/compare/45775bd8235c68ba998cffa5171334d58593da47...28deaeda66b76a05916b6923827895f2b14ab387">compareview</a></li></ul></details><br />Dependabot will resolve any conflicts with this PR as long as you don'talter it yourself. You can also trigger a rebase manually by commenting`@dependabot rebase`.[//]: # (dependabot-automerge-start)[//]: # (dependabot-automerge-end)---<details><summary>Dependabot commands and options</summary><br />You can trigger Dependabot actions by commenting on this PR:- `@dependabot rebase` will rebase this PR- `@dependabot recreate` will recreate this PR, overwriting any editsthat have been made to it- `@dependabot merge` will merge this PR after your CI passes on it- `@dependabot squash and merge` will squash and merge this PR afteryour CI passes on it- `@dependabot cancel merge` will cancel a previously requested mergeand block automerging- `@dependabot reopen` will reopen this PR if it is closed- `@dependabot close` will close this PR and stop Dependabot recreatingit. You can achieve the same result by closing it manually- `@dependabot show <dependency name> ignore conditions` will show allof the ignore conditions of the specified dependency- `@dependabot ignore <dependency name> major version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's major version (unless you unignore this specificdependency's major version or upgrade to it yourself)- `@dependabot ignore <dependency name> minor version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's minor version (unless you unignore this specificdependency's minor version or upgrade to it yourself)- `@dependabot ignore <dependency name>` will close this group update PRand stop Dependabot creating any more for the specific dependency(unless you unignore this specific dependency or upgrade to it yourself)- `@dependabot unignore <dependency name>` will remove all of the ignoreconditions of the specified dependency- `@dependabot unignore <dependency name> <ignore condition>` willremove the ignore condition of the specified dependency and ignoreconditions</details>Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parentb299ebe commit0a26eee

14 files changed

+63
-63
lines changed

‎.github/workflows/ci.yaml

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
tailnet-integration:${{ steps.filter.outputs.tailnet-integration }}
3535
steps:
3636
-name:Harden Runner
37-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
37+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
3838
with:
3939
egress-policy:audit
4040

@@ -155,7 +155,7 @@ jobs:
155155
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
156156
steps:
157157
-name:Harden Runner
158-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
158+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
159159
with:
160160
egress-policy:audit
161161

@@ -227,7 +227,7 @@ jobs:
227227
if:always()
228228
steps:
229229
-name:Harden Runner
230-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
230+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
231231
with:
232232
egress-policy:audit
233233

@@ -282,7 +282,7 @@ jobs:
282282
timeout-minutes:7
283283
steps:
284284
-name:Harden Runner
285-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
285+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
286286
with:
287287
egress-policy:audit
288288

@@ -326,7 +326,7 @@ jobs:
326326
-windows-2022
327327
steps:
328328
-name:Harden Runner
329-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
329+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
330330
with:
331331
egress-policy:audit
332332

@@ -397,7 +397,7 @@ jobs:
397397
-windows-2022
398398
steps:
399399
-name:Harden Runner
400-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
400+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
401401
with:
402402
egress-policy:audit
403403

@@ -453,7 +453,7 @@ jobs:
453453
-ubuntu-latest
454454
steps:
455455
-name:Harden Runner
456-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
456+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
457457
with:
458458
egress-policy:audit
459459

@@ -521,7 +521,7 @@ jobs:
521521
timeout-minutes:25
522522
steps:
523523
-name:Harden Runner
524-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
524+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
525525
with:
526526
egress-policy:audit
527527

@@ -569,7 +569,7 @@ jobs:
569569
timeout-minutes:25
570570
steps:
571571
-name:Harden Runner
572-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
572+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
573573
with:
574574
egress-policy:audit
575575

@@ -618,7 +618,7 @@ jobs:
618618
timeout-minutes:25
619619
steps:
620620
-name:Harden Runner
621-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
621+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
622622
with:
623623
egress-policy:audit
624624

@@ -677,7 +677,7 @@ jobs:
677677
timeout-minutes:20
678678
steps:
679679
-name:Harden Runner
680-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
680+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
681681
with:
682682
egress-policy:audit
683683

@@ -703,7 +703,7 @@ jobs:
703703
timeout-minutes:20
704704
steps:
705705
-name:Harden Runner
706-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
706+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
707707
with:
708708
egress-policy:audit
709709

@@ -735,7 +735,7 @@ jobs:
735735
name:${{ matrix.variant.name }}
736736
steps:
737737
-name:Harden Runner
738-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
738+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
739739
with:
740740
egress-policy:audit
741741

@@ -804,7 +804,7 @@ jobs:
804804
if:needs.changes.outputs.ts == 'true' || needs.changes.outputs.ci == 'true'
805805
steps:
806806
-name:Harden Runner
807-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
807+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
808808
with:
809809
egress-policy:audit
810810

@@ -881,7 +881,7 @@ jobs:
881881

882882
steps:
883883
-name:Harden Runner
884-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
884+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
885885
with:
886886
egress-policy:audit
887887

@@ -950,7 +950,7 @@ jobs:
950950
if:always()
951951
steps:
952952
-name:Harden Runner
953-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
953+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
954954
with:
955955
egress-policy:audit
956956

@@ -1080,7 +1080,7 @@ jobs:
10801080
IMAGE:ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}
10811081
steps:
10821082
-name:Harden Runner
1083-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
1083+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
10841084
with:
10851085
egress-policy:audit
10861086

@@ -1137,7 +1137,7 @@ jobs:
11371137
# Setup GCloud for signing Windows binaries.
11381138
-name:Authenticate to Google Cloud
11391139
id:gcloud_auth
1140-
uses:google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935# v2.1.8
1140+
uses:google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193# v2.1.10
11411141
with:
11421142
workload_identity_provider:${{ secrets.GCP_CODE_SIGNING_WORKLOAD_ID_PROVIDER }}
11431143
service_account:${{ secrets.GCP_CODE_SIGNING_SERVICE_ACCOUNT }}
@@ -1147,7 +1147,7 @@ jobs:
11471147
uses:google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a# v2.1.4
11481148

11491149
-name:Download dylibs
1150-
uses:actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e# v4.2.1
1150+
uses:actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093# v4.3.0
11511151
with:
11521152
name:dylibs
11531153
path:./build
@@ -1264,7 +1264,7 @@ jobs:
12641264
id:attest_main
12651265
if:github.ref == 'refs/heads/main'
12661266
continue-on-error:true
1267-
uses:actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31# v2.2.1
1267+
uses:actions/attest@afd638254319277bb3d7f0a234478733e2e46a73# v2.3.0
12681268
with:
12691269
subject-name:"ghcr.io/coder/coder-preview:main"
12701270
predicate-type:"https://slsa.dev/provenance/v1"
@@ -1301,7 +1301,7 @@ jobs:
13011301
id:attest_latest
13021302
if:github.ref == 'refs/heads/main'
13031303
continue-on-error:true
1304-
uses:actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31# v2.2.1
1304+
uses:actions/attest@afd638254319277bb3d7f0a234478733e2e46a73# v2.3.0
13051305
with:
13061306
subject-name:"ghcr.io/coder/coder-preview:latest"
13071307
predicate-type:"https://slsa.dev/provenance/v1"
@@ -1338,7 +1338,7 @@ jobs:
13381338
id:attest_version
13391339
if:github.ref == 'refs/heads/main'
13401340
continue-on-error:true
1341-
uses:actions/attest@a63cfcc7d1aab266ee064c58250cfc2c7d07bc31# v2.2.1
1341+
uses:actions/attest@afd638254319277bb3d7f0a234478733e2e46a73# v2.3.0
13421342
with:
13431343
subject-name:"ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}"
13441344
predicate-type:"https://slsa.dev/provenance/v1"
@@ -1426,7 +1426,7 @@ jobs:
14261426
id-token:write
14271427
steps:
14281428
-name:Harden Runner
1429-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
1429+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
14301430
with:
14311431
egress-policy:audit
14321432

@@ -1436,7 +1436,7 @@ jobs:
14361436
fetch-depth:0
14371437

14381438
-name:Authenticate to Google Cloud
1439-
uses:google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935# v2.1.8
1439+
uses:google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193# v2.1.10
14401440
with:
14411441
workload_identity_provider:projects/573722524737/locations/global/workloadIdentityPools/github/providers/github
14421442
service_account:coder-ci@coder-dogfood.iam.gserviceaccount.com
@@ -1490,7 +1490,7 @@ jobs:
14901490
if:github.ref == 'refs/heads/main' && !github.event.pull_request.head.repo.fork
14911491
steps:
14921492
-name:Harden Runner
1493-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
1493+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
14941494
with:
14951495
egress-policy:audit
14961496

@@ -1525,7 +1525,7 @@ jobs:
15251525
if:needs.changes.outputs.db == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
15261526
steps:
15271527
-name:Harden Runner
1528-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
1528+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
15291529
with:
15301530
egress-policy:audit
15311531

‎.github/workflows/docker-base.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
if:github.repository_owner == 'coder'
3939
steps:
4040
-name:Harden Runner
41-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
41+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
4242
with:
4343
egress-policy:audit
4444

‎.github/workflows/docs-ci.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
-name:Setup Node
2929
uses:./.github/actions/setup-node
3030

31-
-uses:tj-actions/changed-files@9934ab3fdf63239da75d9e0fbd339c48620c72c4# v45.0.7
31+
-uses:tj-actions/changed-files@5426ecc3f5c2b10effaefbd374f0abdc6a571b2f# v45.0.7
3232
id:changed-files
3333
with:
3434
files:|

‎.github/workflows/dogfood.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-4' || 'ubuntu-latest' }}
2828
steps:
2929
-name:Harden Runner
30-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
30+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
3131
with:
3232
egress-policy:audit
3333

@@ -37,7 +37,7 @@ jobs:
3737
-name:Setup Nix
3838
uses:nixbuild/nix-quick-install-action@5bb6a3b3abe66fd09bbf250dce8ada94f856a703# v30
3939

40-
-uses:nix-community/cache-nix-action@c448f065ba14308da81de769632ca67a3ce67cf5# v6.1.2
40+
-uses:nix-community/cache-nix-action@135667ec418502fa5a3598af6fb9eb733888ce6a# v6.1.3
4141
with:
4242
# restore and save a cache using this key
4343
primary-key:nix-${{ runner.os }}-${{ hashFiles('**/*.nix', '**/flake.lock') }}
@@ -114,7 +114,7 @@ jobs:
114114
runs-on:ubuntu-latest
115115
steps:
116116
-name:Harden Runner
117-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
117+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
118118
with:
119119
egress-policy:audit
120120

@@ -125,7 +125,7 @@ jobs:
125125
uses:./.github/actions/setup-tf
126126

127127
-name:Authenticate to Google Cloud
128-
uses:google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935# v2.1.8
128+
uses:google-github-actions/auth@ba79af03959ebeac9769e648f473a284504d9193# v2.1.10
129129
with:
130130
workload_identity_provider:projects/573722524737/locations/global/workloadIdentityPools/github/providers/github
131131
service_account:coder-ci@coder-dogfood.iam.gserviceaccount.com

‎.github/workflows/nightly-gauntlet.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
-windows-2022
2828
steps:
2929
-name:Harden Runner
30-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
30+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
3131
with:
3232
egress-policy:audit
3333

‎.github/workflows/pr-auto-assign.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
runs-on:ubuntu-latest
1515
steps:
1616
-name:Harden Runner
17-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
17+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
1818
with:
1919
egress-policy:audit
2020

‎.github/workflows/pr-cleanup.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
packages:write
2020
steps:
2121
-name:Harden Runner
22-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
22+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
2323
with:
2424
egress-policy:audit
2525

‎.github/workflows/pr-deploy.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
PR_OPEN:${{ steps.check_pr.outputs.pr_open }}
4040
steps:
4141
-name:Harden Runner
42-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
42+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
4343
with:
4444
egress-policy:audit
4545

@@ -74,7 +74,7 @@ jobs:
7474
runs-on:"ubuntu-latest"
7575
steps:
7676
-name:Harden Runner
77-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
77+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
7878
with:
7979
egress-policy:audit
8080

@@ -174,7 +174,7 @@ jobs:
174174
pull-requests:write# needed for commenting on PRs
175175
steps:
176176
-name:Harden Runner
177-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
177+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
178178
with:
179179
egress-policy:audit
180180

@@ -218,7 +218,7 @@ jobs:
218218
CODER_IMAGE_TAG:${{ needs.get_info.outputs.CODER_IMAGE_TAG }}
219219
steps:
220220
-name:Harden Runner
221-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
221+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
222222
with:
223223
egress-policy:audit
224224

@@ -276,7 +276,7 @@ jobs:
276276
PR_HOSTNAME:"pr${{ needs.get_info.outputs.PR_NUMBER }}.${{ secrets.PR_DEPLOYMENTS_DOMAIN }}"
277277
steps:
278278
-name:Harden Runner
279-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
279+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
280280
with:
281281
egress-policy:audit
282282

‎.github/workflows/release-validation.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414

1515
steps:
1616
-name:Harden Runner
17-
uses:step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf# v2.11.1
17+
uses:step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0# v2.12.0
1818
with:
1919
egress-policy:audit
2020

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp