mirrors/zizmor
1
0
Fork 0
mirror of https://github.com/zizmorcore/zizmor.git synced 2025-12-23 08:47:33 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

chore(deps): bump the github-actions group with 4 updates (#1464)

Browse source
This commit is contained in:
dependabot[bot] 2025-12-22 08:43:38 -05:00 • committed by GitHub
parent c3913e7eff
commit 27041c58c9
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
6 changed files with 18 additions and 18 deletions
Download patch file Download diff file Expand all files Collapse all files

4
.github/workflows/ci.yml vendored
View file

@ -44,7 +44,7 @@ jobs:
- uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2 - uses: Swatinem/rust-cache@779680da715d629ac1d338a641029a2f4372abb5 # v2.8.2
- uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2 - uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
- name: Test dependencies - name: Test dependencies
run: | run: |
@ -71,7 +71,7 @@ jobs:
with: with:
persist-credentials: false persist-credentials: false
- uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2 - uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
- name: Test site - name: Test site
run: make site run: make site

10
.github/workflows/codegen.yml vendored
View file

@ -31,7 +31,7 @@ jobs:
make refresh-schemas make refresh-schemas
- name: create PR - name: create PR
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8 uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
with: with:
draft: true draft: true
commit-message: "[BOT] update JSON schemas from SchemaStore" commit-message: "[BOT] update JSON schemas from SchemaStore"
@ -63,14 +63,14 @@ jobs:
with: with:
persist-credentials: false persist-credentials: false
- uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2 - uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
- name: try to refresh context capabilities - name: try to refresh context capabilities
run: | run: |
make webhooks-to-contexts make webhooks-to-contexts
- name: create PR - name: create PR
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8 uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
with: with:
draft: true draft: true
commit-message: "[BOT] update context capabilities" commit-message: "[BOT] update context capabilities"
@ -101,14 +101,14 @@ jobs:
with: with:
persist-credentials: false persist-credentials: false
- uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2 - uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
- name: try to refresh CodeQL injection sinks - name: try to refresh CodeQL injection sinks
run: | run: |
make codeql-injection-sinks make codeql-injection-sinks
- name: create PR - name: create PR
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # v7.0.8 uses: peter-evans/create-pull-request@98357b18bf14b5342f975ff684046ec3b2a07725 # v8.0.0
with: with:
draft: true draft: true
commit-message: "[BOT] update CodeQL injection sinks" commit-message: "[BOT] update CodeQL injection sinks"

4
.github/workflows/release-binaries.yml vendored
View file

@ -60,7 +60,7 @@ jobs:
shell: bash shell: bash
- name: Upload artifact - name: Upload artifact
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
with: with:
name: artifacts-${{ matrix.target }} name: artifacts-${{ matrix.target }}
path: ${{ steps.archive-release.outputs.filename }} path: ${{ steps.archive-release.outputs.filename }}
@ -78,7 +78,7 @@ jobs:
steps: steps:
- name: Download artifacts - name: Download artifacts
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
with: with:
pattern: artifacts-* pattern: artifacts-*
path: distrib/ path: distrib/

4
.github/workflows/release-docker.yml vendored
View file

@ -86,7 +86,7 @@ jobs:
shell: bash shell: bash
- name: Upload digest - name: Upload digest
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
with: with:
name: digests-${{ matrix.image.platform-pair }} name: digests-${{ matrix.image.platform-pair }}
path: ${{ runner.temp }}/digests/* path: ${{ runner.temp }}/digests/*
@ -107,7 +107,7 @@ jobs:
steps: steps:
- name: Download digests - name: Download digests
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
with: with:
path: ${{ runner.temp }}/digests path: ${{ runner.temp }}/digests
pattern: digests-* pattern: digests-*

12
.github/workflows/release-pypi.yml vendored
View file

@ -47,7 +47,7 @@ jobs:
args: --release --out dist --manifest-path crates/zizmor/Cargo.toml args: --release --out dist --manifest-path crates/zizmor/Cargo.toml
manylinux: ${{ matrix.platform.manylinux }} manylinux: ${{ matrix.platform.manylinux }}
- name: Upload wheels - name: Upload wheels
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
with: with:
name: wheels-linux-${{ matrix.platform.target }} name: wheels-linux-${{ matrix.platform.target }}
path: dist path: dist
@ -77,7 +77,7 @@ jobs:
args: --release --out dist --manifest-path crates/zizmor/Cargo.toml args: --release --out dist --manifest-path crates/zizmor/Cargo.toml
manylinux: musllinux_1_2 manylinux: musllinux_1_2
- name: Upload wheels - name: Upload wheels
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
with: with:
name: wheels-musllinux-${{ matrix.platform.target }} name: wheels-musllinux-${{ matrix.platform.target }}
path: dist path: dist
@ -102,7 +102,7 @@ jobs:
target: ${{ matrix.platform.target }} target: ${{ matrix.platform.target }}
args: --release --out dist --manifest-path crates/zizmor/Cargo.toml args: --release --out dist --manifest-path crates/zizmor/Cargo.toml
- name: Upload wheels - name: Upload wheels
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
with: with:
name: wheels-windows-${{ matrix.platform.target }} name: wheels-windows-${{ matrix.platform.target }}
path: dist path: dist
@ -127,7 +127,7 @@ jobs:
target: ${{ matrix.platform.target }} target: ${{ matrix.platform.target }}
args: --release --out dist --manifest-path crates/zizmor/Cargo.toml args: --release --out dist --manifest-path crates/zizmor/Cargo.toml
- name: Upload wheels - name: Upload wheels
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
with: with:
name: wheels-macos-${{ matrix.platform.target }} name: wheels-macos-${{ matrix.platform.target }}
path: dist path: dist
@ -145,7 +145,7 @@ jobs:
command: sdist command: sdist
args: --out dist --manifest-path crates/zizmor/Cargo.toml args: --out dist --manifest-path crates/zizmor/Cargo.toml
- name: Upload sdist - name: Upload sdist
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
with: with:
name: wheels-sdist name: wheels-sdist
path: dist path: dist
@ -161,7 +161,7 @@ jobs:
permissions: permissions:
id-token: write # Trusted Publishing + PEP 740 attestations id-token: write # Trusted Publishing + PEP 740 attestations
steps: steps:
- uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
- name: Attest - name: Attest
uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4 uses: astral-sh/attest-action@2c727738cea36d6c97dd85eb133ea0e0e8fe754b # v0.0.4
with: with:

2
.github/workflows/site.yml vendored
View file

@ -31,7 +31,7 @@ jobs:
persist-credentials: false persist-credentials: false
- name: Install the latest version of uv - name: Install the latest version of uv
uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2 uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6
- name: build site - name: build site
run: make site run: make site