From 510ebabf471419f535e71e3a51d563e476e04e4a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 29 Aug 2026 16:34:17 +0000 Subject: [PATCH] chore: bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [stella/.github/.github/workflows/dependabot-bun-dedupe.yml](https://github.com/stella/.github) | `dd6e8fa51339814159486cd92b5ae3a051eb15d2` | `437d9d78c38114a15c368daed7d3d1b36fd6b8fc` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.2` | `2.86.7` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `437d9d78c38114a15c368daed7d3d1b36fd6b8fc` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `c56b0c1d1e82f5e3fffa733a32b9a503a172ee35` | `437d9d78c38114a15c368daed7d3d1b36fd6b8fc` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.7` | `4.37.8` | Updates `stella/.github/.github/workflows/dependabot-bun-dedupe.yml` from dd6e8fa51339814159486cd92b5ae3a051eb15d2 to 437d9d78c38114a15c368daed7d3d1b36fd6b8fc - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/dd6e8fa51339814159486cd92b5ae3a051eb15d2...437d9d78c38114a15c368daed7d3d1b36fd6b8fc) Updates `taiki-e/install-action` from 2.86.2 to 2.86.7 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/b6b84cf49ebfe0176417bdce007c624f0db37f20...b6ff580856c41316412a0b9b60540fbc6f8c82cc) Updates `stella/.github/.github/workflows/cla.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 437d9d78c38114a15c368daed7d3d1b36fd6b8fc - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/48aacae31829ce15216a6b766b03a92fd2e84da3...437d9d78c38114a15c368daed7d3d1b36fd6b8fc) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to 437d9d78c38114a15c368daed7d3d1b36fd6b8fc - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/c56b0c1d1e82f5e3fffa733a32b9a503a172ee35...437d9d78c38114a15c368daed7d3d1b36fd6b8fc) Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28) --- updated-dependencies: - dependency-name: stella/.github/.github/workflows/dependabot-bun-dedupe.yml dependency-version: 437d9d78c38114a15c368daed7d3d1b36fd6b8fc dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.86.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 437d9d78c38114a15c368daed7d3d1b36fd6b8fc dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 437d9d78c38114a15c368daed7d3d1b36fd6b8fc dependency-type: direct:production dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/autofix.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/cla.yml | 2 +- .github/workflows/mutants.yml | 2 +- .github/workflows/release-pr.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index c9fbcc4..673bd17 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -15,4 +15,4 @@ permissions: jobs: dependabot-bun-dedupe: - uses: stella/.github/.github/workflows/dependabot-bun-dedupe.yml@dd6e8fa51339814159486cd92b5ae3a051eb15d2 + uses: stella/.github/.github/workflows/dependabot-bun-dedupe.yml@437d9d78c38114a15c368daed7d3d1b36fd6b8fc diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1504dde..ffbcb40 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -217,7 +217,7 @@ jobs: # snapshot-hygiene gate, `cargo ci-snapshot`); avoids a from-source # compile on every CI run. taiki-e/install-action verifies release # checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2.86.2 + uses: taiki-e/install-action@b6ff580856c41316412a0b9b60540fbc6f8c82cc # v2.86.7 with: tool: nextest@0.9.140,cargo-deny@0.20.2,cargo-insta@1.48.0 diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 1daa833..630c7d5 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -27,7 +27,7 @@ jobs: || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA' ) ) - uses: stella/.github/.github/workflows/cla.yml@48aacae31829ce15216a6b766b03a92fd2e84da3 + uses: stella/.github/.github/workflows/cla.yml@437d9d78c38114a15c368daed7d3d1b36fd6b8fc with: allowlist: dependabot[bot],renovate[bot],github-actions[bot],google-labs-jules[bot],cursoragent secrets: diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml index 8b9ec1b..dfc9f6d 100644 --- a/.github/workflows/mutants.yml +++ b/.github/workflows/mutants.yml @@ -34,7 +34,7 @@ jobs: - name: Install pinned Rust tools (checksum-verified) # nextest is the test runner used by cargo-mutants. taiki-e/install-action # verifies release checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2.86.2 + uses: taiki-e/install-action@b6ff580856c41316412a0b9b60540fbc6f8c82cc # v2.86.7 with: tool: nextest@0.9.140,cargo-mutants@27.1.0 diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml index 14b64a4..73740af 100644 --- a/.github/workflows/release-pr.yml +++ b/.github/workflows/release-pr.yml @@ -15,7 +15,7 @@ jobs: name: Maintain version packages PR permissions: contents: read - uses: stella/.github/.github/workflows/changeset-release-pr.yml@c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 + uses: stella/.github/.github/workflows/changeset-release-pr.yml@437d9d78c38114a15c368daed7d3d1b36fd6b8fc with: bun-version-file: package.json sync-cargo-inherited-lock: true diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index e0dde25..0e08cec 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -30,6 +30,6 @@ jobs: publish_results: true - name: Upload SARIF to GitHub Security tab - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 with: sarif_file: results.sarif