Skip to content

Commit 8e60b05

Browse files
mergify[bot]mergify[bot]
authored
chore(deps): bump the github-actions group across 1 directory with 8 updates [skip ci]
Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions) | `5.0.4` | `5.0.5` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.1.0` | `4.2.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` | | [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) | `1.0.159` | `1.0.165` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.36.2` | `4.36.3` | Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 5.0.4 to 5.0.5 Release notes *Sourced from [zgosalvez/github-actions-ensure-sha-pinned-actions's releases](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases).* > v5.0.5 > ------ > > What's Changed > -------------- > > * Bump undici from 6.24.1 to 6.27.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#317](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/317) > * Bump actions/checkout from 6.0.2 to 6.0.3 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#316](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/316) > * Bump jest from 30.3.0 to 30.4.2 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#315](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/315) > * Bump eslint from 10.1.0 to 10.3.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#314](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/314) > * Bump yaml from 2.8.3 to 2.8.4 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#313](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/313) > * Bump actions/setup-node from 6.2.0 to 6.4.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#312](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/312) > * Bump actions/cache from 5.0.3 to 5.0.5 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#311](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/311) > * Bump `@​actions/core` from 3.0.0 to 3.0.1 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#310](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/310) > * Bump `@​actions/glob` from 0.6.1 to 0.7.0 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#309](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/309) > * Bump zgosalvez/github-actions-get-action-runs-using-version from 2.0.25 to 3.0.1 by [`@​dependabot`](https://github.com/dependabot)[bot] in [zgosalvez/github-actions-ensure-sha-pinned-actions#305](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/305) > * Fix dependabot security alert 59 by [`@​zgosalvez`](https://github.com/zgosalvez) in [zgosalvez/github-actions-ensure-sha-pinned-actions#318](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/318) > * Hotfix/security60 by [`@​zgosalvez`](https://github.com/zgosalvez) in [zgosalvez/github-actions-ensure-sha-pinned-actions#319](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/319) > * Fix js-yaml dependency issue by [`@​zgosalvez`](https://github.com/zgosalvez) in [zgosalvez/github-actions-ensure-sha-pinned-actions#320](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/pull/320) > > **Full Changelog**: <zgosalvez/github-actions-ensure-sha-pinned-actions@v5...v5.0.5> Commits * [`3db98c0`](zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0) Fix js-yaml dependency issue ([#320](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/320)) * [`6fd9901`](zgosalvez/github-actions-ensure-sha-pinned-actions@6fd9901) Hotfix/security60 ([#319](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/319)) * [`dcb5236`](zgosalvez/github-actions-ensure-sha-pinned-actions@dcb5236) Fix dependabot security alert 59 ([#318](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/318)) * [`afa7540`](zgosalvez/github-actions-ensure-sha-pinned-actions@afa7540) Bump zgosalvez/github-actions-get-action-runs-using-version ([#305](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/305)) * [`10d4404`](zgosalvez/github-actions-ensure-sha-pinned-actions@10d4404) Bump `@​actions/glob` from 0.6.1 to 0.7.0 ([#309](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/309)) * [`28363be`](zgosalvez/github-actions-ensure-sha-pinned-actions@28363be) Bump `@​actions/core` from 3.0.0 to 3.0.1 ([#310](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/310)) * [`0085b7f`](zgosalvez/github-actions-ensure-sha-pinned-actions@0085b7f) Bump actions/cache from 5.0.3 to 5.0.5 ([#311](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/311)) * [`4083b6a`](zgosalvez/github-actions-ensure-sha-pinned-actions@4083b6a) Bump actions/setup-node from 6.2.0 to 6.4.0 ([#312](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/312)) * [`c2d39dd`](zgosalvez/github-actions-ensure-sha-pinned-actions@c2d39dd) Bump yaml from 2.8.3 to 2.8.4 ([#313](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/313)) * [`13e30ef`](zgosalvez/github-actions-ensure-sha-pinned-actions@13e30ef) Bump eslint from 10.1.0 to 10.3.0 ([#314](https://redirect.github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/issues/314)) * Additional commits viewable in [compare view](zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236...3db98c0) Updates `docker/setup-qemu-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-qemu-action's releases](https://github.com/docker/setup-qemu-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@​crazy-max`](https://github.com/crazy-max) in [docker/setup-qemu-action#311](https://redirect.github.com/docker/setup-qemu-action/pull/311) > * Bump `@​actions/core` from 3.0.0 to 3.0.1 in [docker/setup-qemu-action#295](https://redirect.github.com/docker/setup-qemu-action/pull/295) > * Bump `@​docker/actions-toolkit` from 0.91.0 to 0.92.0 in [docker/setup-qemu-action#315](https://redirect.github.com/docker/setup-qemu-action/pull/315) > * Bump `@​sigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-qemu-action#312](https://redirect.github.com/docker/setup-qemu-action/pull/312) > * Bump js-yaml from 4.1.1 to 4.2.0 in [docker/setup-qemu-action#310](https://redirect.github.com/docker/setup-qemu-action/pull/310) > * Bump tmp from 0.2.6 to 0.2.7 in [docker/setup-qemu-action#304](https://redirect.github.com/docker/setup-qemu-action/pull/304) > * Bump undici from 6.26.0 to 6.27.0 in [docker/setup-qemu-action#308](https://redirect.github.com/docker/setup-qemu-action/pull/308) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-qemu-action#307](https://redirect.github.com/docker/setup-qemu-action/pull/307) > > **Full Changelog**: <docker/setup-qemu-action@v4.1.0...v4.2.0> Commits * [`96fe6ef`](docker/setup-qemu-action@96fe6ef) Merge pull request [#315](https://redirect.github.com/docker/setup-qemu-action/issues/315) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`31f08d3`](docker/setup-qemu-action@31f08d3) [dependabot skip] chore: update generated content * [`4e7017a`](docker/setup-qemu-action@4e7017a) build(deps): bump `@​docker/actions-toolkit` from 0.91.0 to 0.92.0 * [`0eca235`](docker/setup-qemu-action@0eca235) Merge pull request [#314](https://redirect.github.com/docker/setup-qemu-action/issues/314) from crazy-max/fix-yarn-preapprove-actions-toolkit * [`ea66a41`](docker/setup-qemu-action@ea66a41) chore: allow actions-toolkit to bypass yarn age gate * [`451542b`](docker/setup-qemu-action@451542b) Merge pull request [#308](https://redirect.github.com/docker/setup-qemu-action/issues/308) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`532ae00`](docker/setup-qemu-action@532ae00) [dependabot skip] chore: update generated content * [`b6f5af6`](docker/setup-qemu-action@b6f5af6) build(deps): bump undici from 6.26.0 to 6.27.0 * [`cf96b86`](docker/setup-qemu-action@cf96b86) Merge pull request [#304](https://redirect.github.com/docker/setup-qemu-action/issues/304) from docker/dependabot/npm\_and\_yarn/tmp-0.2.7 * [`f0ba643`](docker/setup-qemu-action@f0ba643) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](docker/setup-qemu-action@0611638...96fe6ef) Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0 Release notes *Sourced from [docker/setup-buildx-action's releases](https://github.com/docker/setup-buildx-action/releases).* > v4.2.0 > ------ > > * Preserve names in esbuild bundle by [`@​crazy-max`](https://github.com/crazy-max) in [docker/setup-buildx-action#572](https://redirect.github.com/docker/setup-buildx-action/pull/572) > * Bump `@​actions/core` from 3.0.0 to 3.0.1 in [docker/setup-buildx-action#551](https://redirect.github.com/docker/setup-buildx-action/pull/551) > * Bump `@​docker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/setup-buildx-action#557](https://redirect.github.com/docker/setup-buildx-action/pull/557) [docker/setup-buildx-action#580](https://redirect.github.com/docker/setup-buildx-action/pull/580) > * Bump `@​sigstore/core` from 3.1.0 to 3.2.1 in [docker/setup-buildx-action#573](https://redirect.github.com/docker/setup-buildx-action/pull/573) > * Bump `@​sigstore/verify` from 3.1.0 to 3.1.1 in [docker/setup-buildx-action#576](https://redirect.github.com/docker/setup-buildx-action/pull/576) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/setup-buildx-action#562](https://redirect.github.com/docker/setup-buildx-action/pull/562) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/setup-buildx-action#577](https://redirect.github.com/docker/setup-buildx-action/pull/577) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/setup-buildx-action#556](https://redirect.github.com/docker/setup-buildx-action/pull/556) > * Bump undici from 6.25.0 to 6.27.0 in [docker/setup-buildx-action#570](https://redirect.github.com/docker/setup-buildx-action/pull/570) > * Bump vite from 7.3.2 to 7.3.6 in [docker/setup-buildx-action#569](https://redirect.github.com/docker/setup-buildx-action/pull/569) > > **Full Changelog**: <docker/setup-buildx-action@v4.1.0...v4.2.0> Commits * [`bb05f3f`](docker/setup-buildx-action@bb05f3f) Merge pull request [#580](https://redirect.github.com/docker/setup-buildx-action/issues/580) from docker/dependabot/npm\_and\_yarn/docker/actions-to... * [`321c814`](docker/setup-buildx-action@321c814) [dependabot skip] chore: update generated content * [`b9a36ef`](docker/setup-buildx-action@b9a36ef) build(deps): bump `@​docker/actions-toolkit` from 0.91.0 to 0.92.0 * [`ebeab24`](docker/setup-buildx-action@ebeab24) Merge pull request [#570](https://redirect.github.com/docker/setup-buildx-action/issues/570) from docker/dependabot/npm\_and\_yarn/undici-6.27.0 * [`5c7b8ae`](docker/setup-buildx-action@5c7b8ae) [dependabot skip] chore: update generated content * [`037e618`](docker/setup-buildx-action@037e618) build(deps): bump undici from 6.25.0 to 6.27.0 * [`66080e5`](docker/setup-buildx-action@66080e5) Merge pull request [#577](https://redirect.github.com/docker/setup-buildx-action/issues/577) from docker/dependabot/npm\_and\_yarn/sigstore-4.1.1 * [`409aef0`](docker/setup-buildx-action@409aef0) Merge pull request [#562](https://redirect.github.com/docker/setup-buildx-action/issues/562) from docker/dependabot/npm\_and\_yarn/js-yaml-4.2.0 * [`49c6e42`](docker/setup-buildx-action@49c6e42) build(deps): bump sigstore from 4.1.0 to 4.1.1 * [`2211273`](docker/setup-buildx-action@2211273) [dependabot skip] chore: update generated content * Additional commits viewable in [compare view](docker/setup-buildx-action@d7f5e7f...bb05f3f) Updates `anthropics/claude-code-action` from 1.0.159 to 1.0.165 Release notes *Sourced from [anthropics/claude-code-action's releases](https://github.com/anthropics/claude-code-action/releases).* > v1.0.165 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.165> > > v1.0.164 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.164> > > v1.0.163 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.163> > > v1.0.162 > -------- > > What's Changed > -------------- > > * Add agent-approval-check composite action by [`@​km-anthropic`](https://github.com/km-anthropic) in [anthropics/claude-code-action#1429](https://redirect.github.com/anthropics/claude-code-action/pull/1429) > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.162> > > v1.0.161 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.161> > > v1.0.160 > -------- > > **Full Changelog**: <anthropics/claude-code-action@v1...v1.0.160> Commits * [`558b1d6`](anthropics/claude-code-action@558b1d6) chore: bump Claude Code to 2.1.201 and Agent SDK to 0.3.201 * [`01872cc`](anthropics/claude-code-action@01872cc) chore: bump Claude Code to 2.1.200 and Agent SDK to 0.3.200 * [`769e3bd`](anthropics/claude-code-action@769e3bd) chore: bump Claude Code to 2.1.199 and Agent SDK to 0.3.199 * [`6c0083b`](anthropics/claude-code-action@6c0083b) chore: bump Claude Code to 2.1.198 and Agent SDK to 0.3.198 * [`846d5d8`](anthropics/claude-code-action@846d5d8) Add agent-approval-check composite action ([#1429](https://redirect.github.com/anthropics/claude-code-action/issues/1429)) * [`fad22eb`](anthropics/claude-code-action@fad22eb) chore: bump Claude Code to 2.1.197 and Agent SDK to 0.3.197 * [`4633baf`](anthropics/claude-code-action@4633baf) chore: bump Claude Code to 2.1.196 and Agent SDK to 0.3.196 * See full diff in [compare view](anthropics/claude-code-action@a92e7c7...558b1d6) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.36.3 Release notes *Sourced from [github/codeql-action/upload-sarif's releases](https://github.com/github/codeql-action/releases).* > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/upload-sarif's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) ... (truncated) Commits * [`54f647b`](github/codeql-action@54f647b) Merge pull request [#3984](https://redirect.github.com/github/codeql-action/issues/3984) from github/update-v4.36.3-1f34ec164 * [`e78819e`](github/codeql-action@e78819e) Trigger checks * [`2c9d3d6`](github/codeql-action@2c9d3d6) Update changelog for v4.36.3 * [`1f34ec1`](github/codeql-action@1f34ec1) Merge pull request [#3983](https://redirect.github.com/github/codeql-action/issues/3983) from github/mbg/repo-props/ff-for-config-file-prop * [`d5f0145`](github/codeql-action@d5f0145) Log when repository property has a value but is ignored * [`f27f563`](github/codeql-action@f27f563) Add test for when the FF is off * [`0025d0f`](github/codeql-action@0025d0f) Use FF * [`f7fa18f`](github/codeql-action@f7fa18f) Add FF for config file repo property * [`628fc3f`](github/codeql-action@628fc3f) Merge pull request [#3979](https://redirect.github.com/github/codeql-action/issues/3979) from github/henrymercer/overlay-db-cleanup-size-tele... * [`9cfb67b`](github/codeql-action@9cfb67b) Add clarifying comments * Additional commits viewable in [compare view](github/codeql-action@8aad20d...54f647b) Updates `docker/login-action` from 4.2.0 to 4.4.0 Release notes *Sourced from [docker/login-action's releases](https://github.com/docker/login-action/releases).* > v4.4.0 > ------ > > * Skip empty `registry-auth` secret mask by [`@​crazy-max`](https://github.com/crazy-max) in [docker/login-action#1035](https://redirect.github.com/docker/login-action/pull/1035) > * Bump `@​aws-sdk/client-ecr` and `@​aws-sdk/client-ecr-public` to 3.1077.0 [docker/login-action#1034](https://redirect.github.com/docker/login-action/pull/1034) > > **Full Changelog**: <docker/login-action@v4.3.0...v4.4.0> > > v4.3.0 > ------ > > * Preserve names in esbuild bundle by [`@​crazy-max`](https://github.com/crazy-max) in [docker/login-action#1022](https://redirect.github.com/docker/login-action/pull/1022) > * Bump `@​aws-sdk/client-ecr` and `@​aws-sdk/client-ecr-public` to 3.1076.0 [docker/login-action#999](https://redirect.github.com/docker/login-action/pull/999) [docker/login-action#1030](https://redirect.github.com/docker/login-action/pull/1030) > * Bump `@​docker/actions-toolkit` from 0.90.0 to 0.92.0 in [docker/login-action#1004](https://redirect.github.com/docker/login-action/pull/1004) [docker/login-action#1027](https://redirect.github.com/docker/login-action/pull/1027) > * Bump `@​sigstore/core` from 3.1.0 to 3.2.1 in [docker/login-action#1023](https://redirect.github.com/docker/login-action/pull/1023) > * Bump `@​sigstore/verify` from 3.1.0 to 3.1.1 in [docker/login-action#1029](https://redirect.github.com/docker/login-action/pull/1029) > * Bump http-proxy-agent and https-proxy-agent to 9.1.0 in [docker/login-action#1017](https://redirect.github.com/docker/login-action/pull/1017) > * Bump js-yaml from 4.1.1 to 5.2.0 in [docker/login-action#1028](https://redirect.github.com/docker/login-action/pull/1028) > * Bump sigstore from 4.1.0 to 4.1.1 in [docker/login-action#1031](https://redirect.github.com/docker/login-action/pull/1031) > * Bump tmp from 0.2.5 to 0.2.7 in [docker/login-action#1002](https://redirect.github.com/docker/login-action/pull/1002) > * Bump undici from 6.24.1 to 6.27.0 in [docker/login-action#1020](https://redirect.github.com/docker/login-action/pull/1020) > * Bump vite from 7.3.3 to 7.3.6 in [docker/login-action#1019](https://redirect.github.com/docker/login-action/pull/1019) > > **Full Changelog**: <docker/login-action@v4.2.0...v4.3.0> Commits * [`af1e73f`](docker/login-action@af1e73f) Merge pull request [#1034](https://redirect.github.com/docker/login-action/issues/1034) from docker/dependabot/npm\_and\_yarn/aws-sdk-dependen... * [`da722bd`](docker/login-action@da722bd) [dependabot skip] chore: update generated content * [`2916ad6`](docker/login-action@2916ad6) build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up... * [`ca0a662`](docker/login-action@ca0a662) Merge pull request [#1035](https://redirect.github.com/docker/login-action/issues/1035) from crazy-max/fix-registry-auth-empty-mask * [`c455755`](docker/login-action@c455755) chore: update generated content * [`4835190`](docker/login-action@4835190) skip empty registry-auth secret mask * [`992421c`](docker/login-action@992421c) Merge pull request [#1033](https://redirect.github.com/docker/login-action/issues/1033) from docker/dependabot/github\_actions/docker/bake-ac... * [`b249b43`](docker/login-action@b249b43) Merge pull request [#1032](https://redirect.github.com/docker/login-action/issues/1032) from docker/dependabot/github\_actions/docker/bake-ac... * [`1b67977`](docker/login-action@1b67977) build(deps): bump docker/bake-action from 7.2.0 to 7.3.0 * [`9d49d6a`](docker/login-action@9d49d6a) build(deps): bump docker/bake-action/subaction/matrix * Additional commits viewable in [compare view](docker/login-action@650006c...af1e73f) Updates `github/codeql-action/init` from 4.36.2 to 4.36.3 Release notes *Sourced from [github/codeql-action/init's releases](https://github.com/github/codeql-action/releases).* > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/init's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) ... (truncated) Commits * [`54f647b`](github/codeql-action@54f647b) Merge pull request [#3984](https://redirect.github.com/github/codeql-action/issues/3984) from github/update-v4.36.3-1f34ec164 * [`e78819e`](github/codeql-action@e78819e) Trigger checks * [`2c9d3d6`](github/codeql-action@2c9d3d6) Update changelog for v4.36.3 * [`1f34ec1`](github/codeql-action@1f34ec1) Merge pull request [#3983](https://redirect.github.com/github/codeql-action/issues/3983) from github/mbg/repo-props/ff-for-config-file-prop * [`d5f0145`](github/codeql-action@d5f0145) Log when repository property has a value but is ignored * [`f27f563`](github/codeql-action@f27f563) Add test for when the FF is off * [`0025d0f`](github/codeql-action@0025d0f) Use FF * [`f7fa18f`](github/codeql-action@f7fa18f) Add FF for config file repo property * [`628fc3f`](github/codeql-action@628fc3f) Merge pull request [#3979](https://redirect.github.com/github/codeql-action/issues/3979) from github/henrymercer/overlay-db-cleanup-size-tele... * [`9cfb67b`](github/codeql-action@9cfb67b) Add clarifying comments * Additional commits viewable in [compare view](github/codeql-action@8aad20d...54f647b) Updates `github/codeql-action/analyze` from 4.36.2 to 4.36.3 Release notes *Sourced from [github/codeql-action/analyze's releases](https://github.com/github/codeql-action/releases).* > v4.36.3 > ------- > > No user facing changes. Changelog *Sourced from [github/codeql-action/analyze's changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md).* > CodeQL Action Changelog > ======================= > > See the [releases page](https://github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. > > [UNRELEASED] > ------------ > > No user facing changes. > > 4.36.3 - 01 Jul 2026 > -------------------- > > No user facing changes. > > 4.36.2 - 04 Jun 2026 > -------------------- > > * Cache CodeQL CLI version information across Actions steps. [#3943](https://redirect.github.com/github/codeql-action/pull/3943) > * Reduce requests while waiting for analysis processing by using exponential backoff when polling SARIF processing status. [#3937](https://redirect.github.com/github/codeql-action/pull/3937) > * Update default CodeQL bundle version to [2.25.6](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.6). [#3948](https://redirect.github.com/github/codeql-action/pull/3948) > > 4.36.1 - 02 Jun 2026 > -------------------- > > No user facing changes. > > 4.36.0 - 22 May 2026 > -------------------- > > * *Breaking change*: Bump the minimum required CodeQL bundle version to 2.19.4. [#3894](https://redirect.github.com/github/codeql-action/pull/3894) > * Add support for SHA-256 Git object IDs. [#3893](https://redirect.github.com/github/codeql-action/pull/3893) > * Update default CodeQL bundle version to [2.25.5](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.5). [#3926](https://redirect.github.com/github/codeql-action/pull/3926) > > 4.35.5 - 15 May 2026 > -------------------- > > * We have improved how the JavaScript bundles for the CodeQL Action are generated to avoid duplication across bundles and reduce the size of the repository by around 70%. This should have no effect on the runtime behaviour of the CodeQL Action. [#3899](https://redirect.github.com/github/codeql-action/pull/3899) > * For performance and accuracy reasons, [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) will now only be enabled on a pull request when diff-informed analysis is also enabled for that run. If diff-informed analysis is unavailable (for example, because the PR diff ranges could not be computed), the action will fall back to a full analysis. [#3791](https://redirect.github.com/github/codeql-action/pull/3791) > * If multiple inputs are provided for the GitHub-internal `analysis-kinds` input, only `code-scanning` will be enabled. The `analysis-kinds` input is experimental, for GitHub-internal use only, and may change without notice at any time. [#3892](https://redirect.github.com/github/codeql-action/pull/3892) > * Added an experimental change which, when running a Code Scanning analysis for a PR with [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) enabled, prefers CodeQL CLI versions that have a cached overlay-base database for the configured languages. This speeds up analysis for a repository when there is not yet a cached overlay-base database for the latest CLI version. We expect to roll this change out to everyone in May. [#3880](https://redirect.github.com/github/codeql-action/pull/3880) > > 4.35.4 - 07 May 2026 > -------------------- > > * Update default CodeQL bundle version to [2.25.4](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.4). [#3881](https://redirect.github.com/github/codeql-action/pull/3881) > > 4.35.3 - 01 May 2026 > -------------------- > > * *Upcoming breaking change*: Add a deprecation warning for customers using CodeQL version 2.19.3 and earlier. These versions of CodeQL were discontinued on 9 April 2026 alongside GitHub Enterprise Server 3.15, and will be unsupported by the next minor release of the CodeQL Action. [#3837](https://redirect.github.com/github/codeql-action/pull/3837) > * Configurations for private registries that use Cloudsmith or GCP OIDC are now accepted. [#3850](https://redirect.github.com/github/codeql-action/pull/3850) > * Best-effort connection tests for private registries now use `GET` requests instead of `HEAD` for better compatibility with various registry implementations. For NuGet feeds, the test is now always performed against the service index. [#3853](https://redirect.github.com/github/codeql-action/pull/3853) > * Fixed a bug where two diagnostics produced within the same millisecond could overwrite each other on disk, causing one of them to be lost. [#3852](https://redirect.github.com/github/codeql-action/pull/3852) > * Update default CodeQL bundle version to [2.25.3](https://github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.3). [#3865](https://redirect.github.com/github/codeql-action/pull/3865) > > 4.35.2 - 15 Apr 2026 > -------------------- > > * The undocumented TRAP cache cleanup feature that could be enabled using the `CODEQL_ACTION_CLEANUP_TRAP_CACHES` environment variable is deprecated and will be removed in May 2026. If you are affected by this, we recommend disabling TRAP caching by passing the `trap-caching: false` input to the `init` Action. [#3795](https://redirect.github.com/github/codeql-action/pull/3795) ... (truncated) Commits * [`54f647b`](github/codeql-action@54f647b) Merge pull request [#3984](https://redirect.github.com/github/codeql-action/issues/3984) from github/update-v4.36.3-1f34ec164 * [`e78819e`](github/codeql-action@e78819e) Trigger checks * [`2c9d3d6`](github/codeql-action@2c9d3d6) Update changelog for v4.36.3 * [`1f34ec1`](github/codeql-action@1f34ec1) Merge pull request [#3983](https://redirect.github.com/github/codeql-action/issues/3983) from github/mbg/repo-props/ff-for-config-file-prop * [`d5f0145`](github/codeql-action@d5f0145) Log when repository property has a value but is ignored * [`f27f563`](github/codeql-action@f27f563) Add test for when the FF is off * [`0025d0f`](github/codeql-action@0025d0f) Use FF * [`f7fa18f`](github/codeql-action@f7fa18f) Add FF for config file repo property * [`628fc3f`](github/codeql-action@628fc3f) Merge pull request [#3979](https://redirect.github.com/github/codeql-action/issues/3979) from github/henrymercer/overlay-db-cleanup-size-tele... * [`9cfb67b`](github/codeql-action@9cfb67b) Add clarifying comments * Additional commits viewable in [compare view](github/codeql-action@8aad20d...54f647b)
2 parents 3273526 + 1b638ec commit 8e60b05

12 files changed

Lines changed: 27 additions & 27 deletions

‎.github/workflows/benchmark-tests.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
steps:
1818
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
1919
- name: Ensure SHA pinned actions
20-
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5.0.4
20+
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0363e2fa5df3e1c4c471777a7c10b24cc9 # v5.0.5
2121
- name: Run pre-commit
2222
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
2323
with:
@@ -40,10 +40,10 @@ jobs:
4040
${{ runner.os }}-maven-
4141
4242
- name: Set up QEMU
43-
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
43+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
4444

4545
- name: Set up Docker Buildx
46-
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
46+
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
4747

4848
- name: Build and package with Maven Docker profile
4949
run: ./mvnw clean install -Pdocker -DskipTests --batch-mode --errors --show-version

‎.github/workflows/claude-code-review.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333

3434
- name: Run Claude Code Review
3535
id: claude-review
36-
uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # v1.0.159
36+
uses: anthropics/claude-code-action@558b1d6cab4085c7753fe402c10bef0fbb92ac7a # v1.0.165
3737
with:
3838
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
3939
prompt: |

‎.github/workflows/claude.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232

3333
- name: Run Claude Code
3434
id: claude
35-
uses: anthropics/claude-code-action@a92e7c70a4da9793dc164451d829089dc057a464 # v1.0.159
35+
uses: anthropics/claude-code-action@558b1d6cab4085c7753fe402c10bef0fbb92ac7a # v1.0.165
3636
with:
3737
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
3838

‎.github/workflows/ha-resilience-tests.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
steps:
1818
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
1919
- name: Ensure SHA pinned actions
20-
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5.0.4
20+
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0363e2fa5df3e1c4c471777a7c10b24cc9 # v5.0.5
2121
- name: Run pre-commit
2222
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
2323
with:
@@ -40,10 +40,10 @@ jobs:
4040
${{ runner.os }}-maven-
4141
4242
- name: Set up QEMU
43-
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
43+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
4444

4545
- name: Set up Docker Buildx
46-
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
46+
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
4747

4848
- name: Build and package with Maven Docker profile
4949
run: ./mvnw clean install -Pdocker -DskipTests --batch-mode --errors --show-version

‎.github/workflows/load-tests.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
steps:
1818
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
1919
- name: Ensure SHA pinned actions
20-
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5.0.4
20+
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0363e2fa5df3e1c4c471777a7c10b24cc9 # v5.0.5
2121
- name: Run pre-commit
2222
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
2323
with:
@@ -40,10 +40,10 @@ jobs:
4040
${{ runner.os }}-maven-
4141
4242
- name: Set up QEMU
43-
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
43+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
4444

4545
- name: Set up Docker Buildx
46-
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
46+
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
4747

4848
- name: Build and package with Maven Docker profile
4949
run: ./mvnw clean install -Pdocker -DskipTests --batch-mode --errors --show-version

‎.github/workflows/meterian.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
with:
3333
cli_args: "--report-sarif=report.sarif"
3434
oss: true
35-
- uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.29.5
35+
- uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3.29.5
3636
if: success() || failure()
3737
with:
3838
sarif_file: report.sarif

‎.github/workflows/mvn-deploy.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,16 +24,16 @@ jobs:
2424
- uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
2525

2626
- name: Login to Docker Hub
27-
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
27+
uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
2828
with:
2929
username: ${{ secrets.DOCKER_USERNAME }}
3030
password: ${{ secrets.DOCKER_PASSWORD }}
3131

3232
- name: Set up QEMU
33-
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
33+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
3434

3535
- name: Set up Docker Buildx
36-
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
36+
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
3737

3838
- name: Set up JDK 21
3939
uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0

‎.github/workflows/mvn-release.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,16 +23,16 @@ jobs:
2323
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2424

2525
- name: Login to Docker Hub
26-
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
26+
uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0
2727
with:
2828
username: ${{ secrets.DOCKER_USERNAME }}
2929
password: ${{ secrets.DOCKER_PASSWORD }}
3030

3131
- name: Set up QEMU
32-
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
32+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
3333

3434
- name: Set up Docker Buildx
35-
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
35+
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
3636

3737
- name: Set up JDK 21
3838
uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0

‎.github/workflows/mvn-test.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
steps:
2525
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
2626
- name: Ensure SHA pinned actions
27-
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5.0.4
27+
uses: zgosalvez/github-actions-ensure-sha-pinned-actions@3db98c0363e2fa5df3e1c4c471777a7c10b24cc9 # v5.0.5
2828
- name: Run pre-commit
2929
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
3030
with:
@@ -53,10 +53,10 @@ jobs:
5353
${{ runner.os }}-maven-
5454
5555
- name: Set up QEMU
56-
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
56+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
5757

5858
- name: Set up Docker Buildx
59-
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
59+
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
6060

6161
- name: Get project version
6262
id: get-version

‎.github/workflows/studio-security-audit.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -166,10 +166,10 @@ jobs:
166166
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
167167

168168
- name: "Initialize CodeQL"
169-
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.29.5
169+
uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3.29.5
170170
with:
171171
languages: javascript
172172
queries: security-and-quality
173173

174174
- name: "Perform CodeQL Analysis"
175-
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.29.5
175+
uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v3.29.5

0 commit comments

Comments
 (0)