From cce6555a2268be808c818c0004698f399fc6637d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Oct 2024 10:34:20 +0000 Subject: [PATCH] build(dependencies): bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [wearefrank/ci-cd-templates](https://github.com/wearefrank/ci-cd-templates), [step-security/harden-runner](https://github.com/step-security/harden-runner), [actions/checkout](https://github.com/actions/checkout) and [actions/setup-node](https://github.com/actions/setup-node). Updates `wearefrank/ci-cd-templates` from 1.0.8 to 1.0.11 - [Release notes](https://github.com/wearefrank/ci-cd-templates/releases) - [Changelog](https://github.com/wearefrank/ci-cd-templates/blob/main/CHANGELOG.md) - [Commits](https://github.com/wearefrank/ci-cd-templates/compare/df1db1b1a73abf2e733f3a5e77b87db7693980c0...b9f96c7bb6abc6e4c1e1bece97435c71485e1aac) Updates `step-security/harden-runner` from 2.9.1 to 2.10.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde...91182cccc01eb5e619899d80e4e971d6181294a7) Updates `actions/checkout` from 4.1.7 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/692973e3d937129bcbf40652eb9f2f61becf3332...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `actions/setup-node` from 4.0.3 to 4.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/1e60f620b9541d16bece96c5465dc8ee9832be0b...39370e3970a6d050c480ffad4ff0ed4d3fdee5af) --- updated-dependencies: - dependency-name: wearefrank/ci-cd-templates dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/bump-ff-version.yml | 2 +- .github/workflows/ci.yml | 8 ++++---- .github/workflows/release.yml | 18 +++++++++--------- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/bump-ff-version.yml b/.github/workflows/bump-ff-version.yml index 341a1dc..4aeb454 100644 --- a/.github/workflows/bump-ff-version.yml +++ b/.github/workflows/bump-ff-version.yml @@ -12,7 +12,7 @@ on: jobs: bump-ff-version: - uses: wearefrank/ci-cd-templates/.github/workflows/ff-version-auto-bumper.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 # 1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/ff-version-auto-bumper.yml@b9f96c7bb6abc6e4c1e1bece97435c71485e1aac # 1.0.11 secrets: token: ${{ secrets.WEAREFRANK_BOT_PAT }} dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b4ee644..2e197f6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: version-next: ${{ steps.reference.outputs.next-reference }} version-next-strict: ${{ steps.reference.outputs.next-reference }} steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: disable-sudo: true egress-policy: block @@ -23,14 +23,14 @@ jobs: github.com:443 - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #4.1.7 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #4.2.2 - name: Next Reference id: reference - uses: wearefrank/ci-cd-templates/next-reference@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/next-reference@b9f96c7bb6abc6e4c1e1bece97435c71485e1aac #1.0.11 ci: - uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@b9f96c7bb6abc6e4c1e1bece97435c71485e1aac #1.0.11 needs: - version-next secrets: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 10bf6d1..5c2725b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ jobs: version-next-tag: ${{ steps.next-version.outputs.release-tag }} version-next-type: ${{ steps.next-version.outputs.release-type }} steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: disable-sudo: true egress-policy: audit @@ -22,10 +22,10 @@ jobs: github.com:443 - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #4.1.7 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #4.2.2 - name: "Setup Node" - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b #4.0.3 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af #4.1.0 with: node-version: 20 @@ -40,7 +40,7 @@ jobs: GH_TOKEN: ${{ secrets.WEAREFRANK_BOT_PAT }} ci: - uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@b9f96c7bb6abc6e4c1e1bece97435c71485e1aac #1.0.11 needs: analyze-commits secrets: token: ${{ secrets.GITHUB_TOKEN }} @@ -54,12 +54,12 @@ jobs: - analyze-commits - ci steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #4.1.7 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #4.2.2 with: token: ${{ secrets.WEAREFRANK_BOT_PAT }} @@ -76,7 +76,7 @@ jobs: merge-multiple: true - name: Setup Node - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b #4.0.3 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af #4.1.0 with: node-version: 20 @@ -90,7 +90,7 @@ jobs: GH_TOKEN: ${{ secrets.WEAREFRANK_BOT_PAT }} docker-release: - uses: wearefrank/ci-cd-templates/.github/workflows/docker-release-generic.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/docker-release-generic.yml@b9f96c7bb6abc6e4c1e1bece97435c71485e1aac #1.0.11 needs: - analyze-commits - release @@ -110,4 +110,4 @@ jobs: - release # Set to true to enable Docusaurus publishing to GitHub Pages if: false - uses: wearefrank/ci-cd-templates/.github/workflows/docusaurus-release.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/docusaurus-release.yml@b9f96c7bb6abc6e4c1e1bece97435c71485e1aac #1.0.11