diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 1978208..afaea6a 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -5,7 +5,7 @@ version: 'v0.0.3' workflows: '.github/workflows/codeql.yml': - 'actions/checkout@v7.0.1' - - 'github/codeql-action@v4.38.3' + - 'github/codeql-action@v4.39.0' '.github/workflows/distro-matrix.yml': - 'actions/checkout@v7.0.1' '.github/workflows/guix-nix-policy.yml': @@ -25,7 +25,7 @@ workflows: '.github/workflows/quality.yml': - 'actions/checkout@v7.0.1' - 'editorconfig-checker/action-editorconfig-checker@v3.0.0' - - 'trufflesecurity/trufflehog@v3.99.2' + - 'trufflesecurity/trufflehog@v3.99.3' '.github/workflows/release.yml': - 'actions/checkout@v7.0.1' - 'softprops/action-gh-release@v3.0.3' @@ -72,9 +72,9 @@ dependencies: commit: 'sha1-51f63319f592f97930c73d9c46184d20bd206393' owner_id: 26415196 repo_id: 297874902 - 'github/codeql-action@v4.38.3': - ref: 'v4.38.3' - commit: 'sha1-24c54180a607b1449ed407dd24f251e4e9147c8d' + 'github/codeql-action@v4.39.0': + ref: 'v4.39.0' + commit: 'sha1-6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee' owner_id: 9919 repo_id: 259445878 'hyperpolymath/smtp-notify-action@v0.5.0': @@ -97,8 +97,8 @@ dependencies: commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' owner_id: 2242 repo_id: 204253808 - 'trufflesecurity/trufflehog@v3.99.2': - ref: 'v3.99.2' - commit: 'sha1-e76dff8a7e57d6df0c60ad8cbf5d5cba505a8fc9' + 'trufflesecurity/trufflehog@v3.99.3': + ref: 'v3.99.3' + commit: 'sha1-e63326d6545de8f425d93ce24078c6e68d83f70e' owner_id: 79229934 repo_id: 77726177 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index efc4f64..1f62887 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -42,12 +42,12 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.38.3 + uses: github/codeql-action/init@v4.39.0 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.38.3 + uses: github/codeql-action/analyze@v4.39.0 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 31a1b0d..3741df4 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -29,7 +29,7 @@ jobs: find . -type f -perm /111 -name "*.sh" | head -10 || true - name: Check for secrets - uses: trufflesecurity/trufflehog@v3.99.2 + uses: trufflesecurity/trufflehog@v3.99.3 with: path: ./ base: ${{ github.event.pull_request.base.sha || github.event.before }}