From 5f9d87250530fa261663b21d92f2b4b1fed0bc09 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 31 Jul 2026 07:56:34 +0000 Subject: [PATCH 1/4] Bump the github-actions group with 3 updates Bumps the github-actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [leafo/gh-actions-lua](https://github.com/leafo/gh-actions-lua) and [leafo/gh-actions-luarocks](https://github.com/leafo/gh-actions-luarocks). Updates `actions/checkout` from 4.4.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/11d5960a326750d5838078e36cf38b85af677262...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `leafo/gh-actions-lua` from 10.0.0 to 13.0.0 - [Release notes](https://github.com/leafo/gh-actions-lua/releases) - [Commits](https://github.com/leafo/gh-actions-lua/compare/35bcb06abec04ec87df82e08caa84d545348536e...6919171ccf181b826f44b9bca76307b577217377) Updates `leafo/gh-actions-luarocks` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/leafo/gh-actions-luarocks/releases) - [Commits](https://github.com/leafo/gh-actions-luarocks/compare/e65774a6386cb4f24e293dca7fc4ff89165b64c5...35d062def313a7699a0d513e996bcf4352f05389) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: leafo/gh-actions-lua dependency-version: 13.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: leafo/gh-actions-luarocks dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/busted.yml | 6 +++--- .github/workflows/luacheck.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/busted.yml b/.github/workflows/busted.yml index 8f64d06..07ba7f6 100644 --- a/.github/workflows/busted.yml +++ b/.github/workflows/busted.yml @@ -12,15 +12,15 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup ‘lua’ - uses: leafo/gh-actions-lua@35bcb06abec04ec87df82e08caa84d545348536e # v10 + uses: leafo/gh-actions-lua@6919171ccf181b826f44b9bca76307b577217377 # v13.0.0 with: luaVersion: ${{ matrix.luaVersion }} - name: Setup ‘luarocks’ - uses: leafo/gh-actions-luarocks@e65774a6386cb4f24e293dca7fc4ff89165b64c5 # v4 + uses: leafo/gh-actions-luarocks@35d062def313a7699a0d513e996bcf4352f05389 # v6.1.0 - name: Setup test dependencies run: | diff --git a/.github/workflows/luacheck.yml b/.github/workflows/luacheck.yml index 0489df1..c8c8a92 100644 --- a/.github/workflows/luacheck.yml +++ b/.github/workflows/luacheck.yml @@ -8,6 +8,6 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Luacheck uses: lunarmodules/luacheck@cc089e3f65acdd1ef8716cc73a3eca24a6b845e4 # v1 From 7441452e3979b660b6f757d87713f211f069d17e Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sat, 1 Aug 2026 20:02:23 +0000 Subject: [PATCH 2/4] ci: run workflows on ubuntu-24.04 --- .github/workflows/busted.yml | 2 +- .github/workflows/luacheck.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/busted.yml b/.github/workflows/busted.yml index 07ba7f6..c07498f 100644 --- a/.github/workflows/busted.yml +++ b/.github/workflows/busted.yml @@ -9,7 +9,7 @@ jobs: fail-fast: false matrix: luaVersion: [ "5.4", "5.3", "5.2", "5.1", "luajit" ] # , "luajit-openresty" - runs-on: ubuntu-22.04 + runs-on: ubuntu-24.04 steps: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 diff --git a/.github/workflows/luacheck.yml b/.github/workflows/luacheck.yml index c8c8a92..2ac6b2b 100644 --- a/.github/workflows/luacheck.yml +++ b/.github/workflows/luacheck.yml @@ -5,7 +5,7 @@ on: [push, pull_request] jobs: luacheck: - runs-on: ubuntu-22.04 + runs-on: ubuntu-24.04 steps: - name: Checkout uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 From 20c378a1c0b899df3fd14c140c5a3a959c797512 Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sat, 1 Aug 2026 20:02:37 +0000 Subject: [PATCH 3/4] ci: reduce workflow permissions to read-only --- .github/workflows/busted.yml | 2 ++ .github/workflows/deploy.yml | 2 ++ .github/workflows/luacheck.yml | 2 ++ 3 files changed, 6 insertions(+) diff --git a/.github/workflows/busted.yml b/.github/workflows/busted.yml index c07498f..7370ea1 100644 --- a/.github/workflows/busted.yml +++ b/.github/workflows/busted.yml @@ -2,6 +2,8 @@ name: Busted on: [ push, pull_request ] +permissions: read-all + jobs: busted: diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 6320b5f..429aa21 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -2,6 +2,8 @@ name: Deploy on: [ push, workflow_dispatch ] +permissions: read-all + jobs: affected: diff --git a/.github/workflows/luacheck.yml b/.github/workflows/luacheck.yml index 2ac6b2b..a0a3db2 100644 --- a/.github/workflows/luacheck.yml +++ b/.github/workflows/luacheck.yml @@ -2,6 +2,8 @@ name: Luacheck on: [push, pull_request] +permissions: read-all + jobs: luacheck: From 9607336f8aeae37a359996f79e7b8506947d5f2f Mon Sep 17 00:00:00 2001 From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com> Date: Sat, 1 Aug 2026 20:02:55 +0000 Subject: [PATCH 4/4] ci: switch to luarocks setup actions --- .github/workflows/busted.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/busted.yml b/.github/workflows/busted.yml index 7370ea1..1a9d4cb 100644 --- a/.github/workflows/busted.yml +++ b/.github/workflows/busted.yml @@ -17,12 +17,12 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup ‘lua’ - uses: leafo/gh-actions-lua@6919171ccf181b826f44b9bca76307b577217377 # v13.0.0 + uses: luarocks/gh-actions-lua@fc6f8de246f8c01f6e1a56a1b851143e23370ff3 # v12 with: luaVersion: ${{ matrix.luaVersion }} - name: Setup ‘luarocks’ - uses: leafo/gh-actions-luarocks@35d062def313a7699a0d513e996bcf4352f05389 # v6.1.0 + uses: luarocks/gh-actions-luarocks@95d2308a0aff36ad31ebadca493ed14853399842 # v7 - name: Setup test dependencies run: |