From 519398775a5ef840a580e3ea90e861ee01c31fad Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 12 Nov 2026 10:19:42 +0000 Subject: [PATCH] chore(deps): bump the version-updates group with 8 updates Bumps the version-updates group with 8 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `4.4.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.11.1` | `3.12.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.6.0` | `3.7.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.7.0` | `5.10.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.18.0` | `6.19.2` | | [actions/cache/restore](https://github.com/actions/cache) | `4.2.3` | `4.3.0` | | [actions/cache/save](https://github.com/actions/cache) | `4.2.3` | `4.3.0` | | [actions/setup-java](https://github.com/actions/setup-java) | `4.7.1` | `4.9.1` | Updates `actions/checkout` from 4.2.2 to 4.4.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...11d5960a326750d5838078e36cf38b85af677262) Updates `docker/setup-buildx-action` from 3.11.1 to 3.12.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/e468171a9de216ec08956ac3ada2f0791b6bd435...8d2750c68a42422c14e847fe6c8ac0403b4cbd6f) Updates `docker/login-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/5e57cd118135c172c3672efd75eb46360885c0ef...c94ce9fb468520275223c153574b00df6fe4bcc9) Updates `docker/metadata-action` from 5.7.0 to 5.10.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/902fa8ec7d6ecbf8d84d538b9b233a880e428804...c299e40c65443455700f0fdfc63efafe5b349051) Updates `docker/build-push-action` from 6.18.0 to 6.19.2 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/263435318d21b8e681c14492fe198d362a7d2c83...10e90e3645eae34f1e60eeb005ba3a3d33f178e8) Updates `actions/cache/restore` from 4.2.3 to 4.3.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/5a3ec84eff668545956fd18022155c47e93e2684...0057852bfaa89a56745cba8c7296529d2fc39830) Updates `actions/cache/save` from 4.2.3 to 4.3.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/5a3ec84eff668545956fd18022155c47e93e2684...0057852bfaa89a56745cba8c7296529d2fc39830) Updates `actions/setup-java` from 4.7.1 to 4.9.1 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/c5195efecf7bdfc987ee8bae7a71cb8b11521c00...cf277c60eb25467037889841efdb72551f06f6c3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: docker/setup-buildx-action dependency-version: 3.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: docker/login-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: docker/metadata-action dependency-version: 5.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: docker/build-push-action dependency-version: 6.19.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: actions/cache/restore dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: actions/cache/save dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates - dependency-name: actions/setup-java dependency-version: 4.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: version-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/billing-image.yml | 10 +++++----- .github/workflows/billing-watchdog.yml | 6 +++--- .github/workflows/ci.yml | 10 +++++----- .github/workflows/codeql.yml | 4 ++-- .github/workflows/desktop.yml | 10 +++++----- .github/workflows/pages.yml | 4 ++-- .github/workflows/player2160-update.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/telegram-fix.yml | 2 +- .github/workflows/telegram-post.yml | 2 +- .github/workflows/torrserver-update.yml | 2 +- .github/workflows/vps-deploy.yml | 2 +- 12 files changed, 29 insertions(+), 29 deletions(-) diff --git a/.github/workflows/billing-image.yml b/.github/workflows/billing-image.yml index fe8b1eec6..4cbaa3b6a 100644 --- a/.github/workflows/billing-image.yml +++ b/.github/workflows/billing-image.yml @@ -21,11 +21,11 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 + - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 + - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -33,7 +33,7 @@ jobs: - name: Image tags id: meta - uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.10.0 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0 with: images: ghcr.io/${{ github.repository_owner }}/omp-billing tags: | @@ -41,7 +41,7 @@ jobs: type=sha,prefix= type=ref,event=branch - - uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 + - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 with: context: ops/billing file: ops/vps/Dockerfile diff --git a/.github/workflows/billing-watchdog.yml b/.github/workflows/billing-watchdog.yml index 343c253fa..1276f1519 100644 --- a/.github/workflows/billing-watchdog.yml +++ b/.github/workflows/billing-watchdog.yml @@ -23,12 +23,12 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: sparse-checkout: scripts # the last state ({ ok, since, reason }), so only a change is told; a fresh cache key per run, restored by prefix - name: Restore the last state - uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: watchdog-state.json key: billing-watchdog-${{ github.run_id }}-${{ github.run_attempt }} @@ -40,7 +40,7 @@ jobs: run: node scripts/billing-watchdog.mjs watchdog-state.json - name: Save the state if: always() - uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: watchdog-state.json key: billing-watchdog-${{ github.run_id }}-${{ github.run_attempt }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1cf6d41f3..d9ad7fb86 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 @@ -92,7 +92,7 @@ jobs: overflow: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 @@ -109,7 +109,7 @@ jobs: android: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: fetch-depth: 1 - name: Detect Android paths @@ -178,7 +178,7 @@ jobs: - name: Verify lockfiles if: steps.filter.outputs.android == 'true' run: git diff --exit-code -- package-lock.json desktop/package-lock.json - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 if: steps.filter.outputs.android == 'true' with: distribution: temurin @@ -284,7 +284,7 @@ jobs: --health-timeout 5s --health-retries 10 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index d8214f41e..5dacb23c7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -50,7 +50,7 @@ jobs: build-mode: none timeout: 20 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Checkout 2160 Player submodule if: matrix.language == 'java-kotlin' @@ -74,7 +74,7 @@ jobs: npx cap sync android node scripts/strip-flatdir.mjs - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 if: matrix.language == 'java-kotlin' with: distribution: temurin diff --git a/.github/workflows/desktop.yml b/.github/workflows/desktop.yml index c21999af5..2ef02188a 100644 --- a/.github/workflows/desktop.yml +++ b/.github/workflows/desktop.yml @@ -39,7 +39,7 @@ jobs: desktop: ${{ steps.filter.outputs.desktop }} rust: ${{ steps.filter.outputs.rust }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 if: github.event_name == 'pull_request' with: fetch-depth: 1 @@ -79,7 +79,7 @@ jobs: - name: Skip unchanged Rust paths if: needs.changes.outputs.desktop == 'true' && needs.changes.outputs.rust != 'true' run: echo "Pull request does not change Rust inputs. Apt, Python and cargo test are skipped." - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 if: needs.changes.outputs.desktop == 'true' || needs.changes.outputs.rust == 'true' with: submodules: recursive @@ -188,7 +188,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: recursive - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 @@ -337,7 +337,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: recursive - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 @@ -463,7 +463,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: recursive - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index bfc4be3d8..a68bf246f 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -18,9 +18,9 @@ jobs: publish: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Check out gh-pages - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: gh-pages path: build/pages diff --git a/.github/workflows/player2160-update.yml b/.github/workflows/player2160-update.yml index 13ac4f886..cdb8a256e 100644 --- a/.github/workflows/player2160-update.yml +++ b/.github/workflows/player2160-update.yml @@ -21,7 +21,7 @@ jobs: # to start ci.yml on the PR branch: pushes and PRs made with GITHUB_TOKEN do not trigger other workflows actions: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 31c7d6702..ae2df80c2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -54,7 +54,7 @@ jobs: env: TAG: ${{ inputs.tag || github.ref_name }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: ${{ inputs.tag || github.ref }} # android/vendor/2160player (2160 Player's player-core, included build in android/settings.gradle) @@ -87,7 +87,7 @@ jobs: run: npm run build - run: node scripts/package.mjs - run: npm run check:boot - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 with: distribution: temurin # 17 for the player-core toolchain (jvmToolchain(17) in the submodule), 21 (last = default) for Gradle diff --git a/.github/workflows/telegram-fix.yml b/.github/workflows/telegram-fix.yml index 7d6e91d12..9fe22c115 100644 --- a/.github/workflows/telegram-fix.yml +++ b/.github/workflows/telegram-fix.yml @@ -27,7 +27,7 @@ jobs: fix: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 diff --git a/.github/workflows/telegram-post.yml b/.github/workflows/telegram-post.yml index daffeb451..8e95931af 100644 --- a/.github/workflows/telegram-post.yml +++ b/.github/workflows/telegram-post.yml @@ -39,7 +39,7 @@ jobs: exit 1 fi # the workflow ref (main), not the tag: scripts/telegram-post.mjs and CHANGELOG.md as they are now - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: CHANGELOG has this version run: | VERSION="${TAG#v}" diff --git a/.github/workflows/torrserver-update.yml b/.github/workflows/torrserver-update.yml index 2a9167bf6..e3dc768e4 100644 --- a/.github/workflows/torrserver-update.yml +++ b/.github/workflows/torrserver-update.yml @@ -22,7 +22,7 @@ jobs: # to start ci.yml on the PR branch: pushes and PRs made with GITHUB_TOKEN do not trigger other workflows actions: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/vps-deploy.yml b/.github/workflows/vps-deploy.yml index e32dffe0a..fce21b3b2 100644 --- a/.github/workflows/vps-deploy.yml +++ b/.github/workflows/vps-deploy.yml @@ -33,7 +33,7 @@ jobs: steps: # Checkout this workflow's revision. inputs.ref is only the release # the VPS downloads; an older tag does not have these scripts. - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: ${{ github.sha }}