From b33b8ff576e69a6351cb39458aca306af4766725 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 24 Apr 2026 04:19:00 +0000 Subject: [PATCH] chore(deps): bump the github-actions-dependencies group across 2 directories with 5 updates Bumps the github-actions-dependencies group with 3 updates in the / directory: [hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml](https://github.com/hoverkraft-tech/ci-github-publish), [hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml](https://github.com/hoverkraft-tech/public-docs) and [github/codeql-action](https://github.com/github/codeql-action). Bumps the github-actions-dependencies group with 2 updates in the /actions/setup-node directory: [pnpm/action-setup](https://github.com/pnpm/action-setup) and [actions/setup-node](https://github.com/actions/setup-node). Updates `hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml` from 0.22.0 to 0.23.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases) - [Commits](https://github.com/hoverkraft-tech/ci-github-publish/compare/b56be562f38e0e3e712f09691a8fe930aae9db1b...48e0c54489152b98d9e18f0454ccce120e9d0fd1) Updates `hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml` from 0.3.0 to 0.4.0 - [Release notes](https://github.com/hoverkraft-tech/public-docs/releases) - [Commits](https://github.com/hoverkraft-tech/public-docs/compare/c40c17f7d6a8090950b3ef4bfc70502707a6bb9f...f3c9291760d927e6214e8d5f0a376af2d537c369) Updates `github/codeql-action` from 4.35.1 to 4.35.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/c10b8064de6f491fea524254123dbe5e09572f13...95e58e9a2cdfd71adc6e0353d5c52f41a045d225) Updates `pnpm/action-setup` from 6.0.0 to 6.0.3 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/08c4be7e2e672a47d11bd04269e27e5f3e8529cb...903f9c1a6ebcba6cf41d87230be49611ac97822e) Updates `actions/setup-node` from 6.3.0 to 6.4.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e) --- updated-dependencies: - dependency-name: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: github/codeql-action dependency-version: 4.35.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: pnpm/action-setup dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-dependencies - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/__main-ci.yml | 4 ++-- .github/workflows/continuous-integration.yml | 4 ++-- actions/setup-node/action.yml | 4 ++-- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml index e84bc78c..a7ce7a91 100644 --- a/.github/workflows/__main-ci.yml +++ b/.github/workflows/__main-ci.yml @@ -35,7 +35,7 @@ jobs: release: needs: ci if: github.event_name != 'schedule' - uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@b56be562f38e0e3e712f09691a8fe930aae9db1b # 0.22.0 + uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@48e0c54489152b98d9e18f0454ccce120e9d0fd1 # 0.23.0 permissions: contents: read with: @@ -47,7 +47,7 @@ jobs: sync-docs: needs: release if: github.event_name != 'schedule' && github.ref_name == github.event.repository.default_branch && needs.release.outputs.artifact-id - uses: hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml@c40c17f7d6a8090950b3ef4bfc70502707a6bb9f # 0.3.0 + uses: hoverkraft-tech/public-docs/.github/workflows/sync-docs-dispatcher.yml@f3c9291760d927e6214e8d5f0a376af2d537c369 # 0.4.0 permissions: contents: read with: diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml index f05d6764..2b1292d7 100644 --- a/.github/workflows/continuous-integration.yml +++ b/.github/workflows/continuous-integration.yml @@ -294,10 +294,10 @@ jobs: runs-on: *ci-runner steps: - uses: hoverkraft-tech/ci-github-common/actions/checkout@71b85947453f32b5d147ff3ab37351439a92d840 # 0.34.2 - - uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + - uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 with: languages: ${{ inputs.code-ql }} - - uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + - uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2 dependency-review: name: 🛡️ Dependency Review diff --git a/actions/setup-node/action.yml b/actions/setup-node/action.yml index 3d39ab17..26509211 100644 --- a/actions/setup-node/action.yml +++ b/actions/setup-node/action.yml @@ -120,14 +120,14 @@ runs: core.debug('packageManager field missing; defaulting pnpm version to latest'); core.setOutput('pnpm-version', 'latest'); - - uses: pnpm/action-setup@08c4be7e2e672a47d11bd04269e27e5f3e8529cb # v6.0.0 + - uses: pnpm/action-setup@903f9c1a6ebcba6cf41d87230be49611ac97822e # v6.0.3 if: steps.get-package-manager.outputs.package-manager == 'pnpm' with: version: ${{ steps.get-pnpm-version.outputs.pnpm-version }} package_json_file: ${{ steps.working-directory.outputs.workspace-relative-path }}/package.json run_install: false - - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version-file: ${{ steps.get-node-version-file.outputs.node-version-file }} cache: ${{ steps.get-package-manager.outputs.cache-dependency-path != '' && steps.get-package-manager.outputs.package-manager || '' }}