From a7204790437e99e00963da04ee5a960c3d125a3a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 6 Aug 2026 00:28:39 +0000 Subject: [PATCH] chore(deps): bump the dependencies group with 6 updates Bumps the dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `1.2.2` | `1.2.3` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.3` | `4.37.4` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.3` | `4.37.4` | | [github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `1.2.2` | `1.2.3` | | [github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml](https://github.com/github-community-projects/ospo-reusable-workflows) | `1.2.2` | `1.2.3` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.3` | `4.37.4` | Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release.md) - [Commits](https://github.com/github-community-projects/ospo-reusable-workflows/compare/5193129233b450e9174d4d92fcc467919a989882...13d124b245cf85ba41d9dd58d6888979043f1a29) Updates `github/codeql-action/init` from 4.37.3 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38) Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38) Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release.md) - [Commits](https://github.com/github-community-projects/ospo-reusable-workflows/compare/5193129233b450e9174d4d92fcc467919a989882...13d124b245cf85ba41d9dd58d6888979043f1a29) Updates `github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/github-community-projects/ospo-reusable-workflows/releases) - [Changelog](https://github.com/github-community-projects/ospo-reusable-workflows/blob/main/docs/release.md) - [Commits](https://github.com/github-community-projects/ospo-reusable-workflows/compare/5193129233b450e9174d4d92fcc467919a989882...13d124b245cf85ba41d9dd58d6888979043f1a29) Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...f205ea1c3313d32999d8d6a48b4f6530d4437b38) --- updated-dependencies: - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/init dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/analyze dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-labeler.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/pr-title.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 5 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/auto-labeler.yml b/.github/workflows/auto-labeler.yml index 5573ffe..5a11d90 100644 --- a/.github/workflows/auto-labeler.yml +++ b/.github/workflows/auto-labeler.yml @@ -11,7 +11,7 @@ jobs: permissions: contents: read pull-requests: write - uses: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@5193129233b450e9174d4d92fcc467919a989882 + uses: github-community-projects/ospo-reusable-workflows/.github/workflows/auto-labeler.yaml@13d124b245cf85ba41d9dd58d6888979043f1a29 with: config-name: release-drafter.yml secrets: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 7b7e94c..383d7e1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -52,7 +52,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/init@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -70,6 +70,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/analyze@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/pr-title.yml b/.github/workflows/pr-title.yml index ed71e7e..7063a4e 100644 --- a/.github/workflows/pr-title.yml +++ b/.github/workflows/pr-title.yml @@ -12,6 +12,6 @@ jobs: contents: read pull-requests: read statuses: write - uses: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml@5193129233b450e9174d4d92fcc467919a989882 + uses: github-community-projects/ospo-reusable-workflows/.github/workflows/pr-title.yaml@13d124b245cf85ba41d9dd58d6888979043f1a29 secrets: github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 558de9f..c45a792 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: id-token: write # Federate for artifact attestation attestations: write # Generate build provenance attestations discussions: write # Create release announcement discussion - uses: github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml@5193129233b450e9174d4d92fcc467919a989882 # v1.2.2 + uses: github-community-projects/ospo-reusable-workflows/.github/workflows/release.yaml@13d124b245cf85ba41d9dd58d6888979043f1a29 # v1.2.3 with: publish: true release-config-name: release-drafter.yml diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index feb38bb..3e9e265 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -49,6 +49,6 @@ jobs: path: results.sarif retention-days: 5 - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 + uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 with: sarif_file: results.sarif