From 8176236ec273912f9573d2649cb385e53d2707b2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 30 Aug 2026 19:41:19 +0000 Subject: [PATCH] chore: bump the actions group across 1 directory with 7 updates Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [stella/.github/.github/workflows/dependabot-bun-dedupe.yml](https://github.com/stella/.github) | `dd6e8fa51339814159486cd92b5ae3a051eb15d2` | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.86.2` | `2.86.7` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `48aacae31829ce15216a6b766b03a92fd2e84da3` | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | | [stella/.github/.github/workflows/quarantine-policy.yml](https://github.com/stella/.github) | `699affd63b2d956f71b9833fbed239245aff7e86` | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | | [stella/.github/.github/workflows/quarantine-prune.yml](https://github.com/stella/.github) | `699affd63b2d956f71b9833fbed239245aff7e86` | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `c56b0c1d1e82f5e3fffa733a32b9a503a172ee35` | `0f814e1a0c6c7401778e661209553b6e15f8d92a` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.7` | `4.37.8` | Updates `stella/.github/.github/workflows/dependabot-bun-dedupe.yml` from dd6e8fa51339814159486cd92b5ae3a051eb15d2 to 0f814e1a0c6c7401778e661209553b6e15f8d92a - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/dd6e8fa51339814159486cd92b5ae3a051eb15d2...0f814e1a0c6c7401778e661209553b6e15f8d92a) Updates `taiki-e/install-action` from 2.86.2 to 2.86.7 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/b6b84cf49ebfe0176417bdce007c624f0db37f20...b6ff580856c41316412a0b9b60540fbc6f8c82cc) Updates `stella/.github/.github/workflows/cla.yml` from 48aacae31829ce15216a6b766b03a92fd2e84da3 to 0f814e1a0c6c7401778e661209553b6e15f8d92a - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/48aacae31829ce15216a6b766b03a92fd2e84da3...0f814e1a0c6c7401778e661209553b6e15f8d92a) Updates `stella/.github/.github/workflows/quarantine-policy.yml` from 699affd63b2d956f71b9833fbed239245aff7e86 to 0f814e1a0c6c7401778e661209553b6e15f8d92a - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/699affd63b2d956f71b9833fbed239245aff7e86...0f814e1a0c6c7401778e661209553b6e15f8d92a) Updates `stella/.github/.github/workflows/quarantine-prune.yml` from 699affd63b2d956f71b9833fbed239245aff7e86 to 0f814e1a0c6c7401778e661209553b6e15f8d92a - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/699affd63b2d956f71b9833fbed239245aff7e86...0f814e1a0c6c7401778e661209553b6e15f8d92a) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 to 0f814e1a0c6c7401778e661209553b6e15f8d92a - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/c56b0c1d1e82f5e3fffa733a32b9a503a172ee35...0f814e1a0c6c7401778e661209553b6e15f8d92a) Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.37.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28) --- updated-dependencies: - dependency-name: stella/.github/.github/workflows/dependabot-bun-dedupe.yml dependency-version: 0f814e1a0c6c7401778e661209553b6e15f8d92a dependency-type: direct:production dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.86.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 0f814e1a0c6c7401778e661209553b6e15f8d92a dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/quarantine-policy.yml dependency-version: 0f814e1a0c6c7401778e661209553b6e15f8d92a dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/quarantine-prune.yml dependency-version: 0f814e1a0c6c7401778e661209553b6e15f8d92a dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 0f814e1a0c6c7401778e661209553b6e15f8d92a dependency-type: direct:production dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/autofix.yml | 2 +- .github/workflows/ci.yml | 2 +- .github/workflows/cla.yml | 2 +- .github/workflows/mutants.yml | 2 +- .github/workflows/quarantine-policy.yml | 2 +- .github/workflows/quarantine-prune.yml | 2 +- .github/workflows/release-pr.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index c9fbcc4..b7a60eb 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -15,4 +15,4 @@ permissions: jobs: dependabot-bun-dedupe: - uses: stella/.github/.github/workflows/dependabot-bun-dedupe.yml@dd6e8fa51339814159486cd92b5ae3a051eb15d2 + uses: stella/.github/.github/workflows/dependabot-bun-dedupe.yml@0f814e1a0c6c7401778e661209553b6e15f8d92a diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1504dde..ffbcb40 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -217,7 +217,7 @@ jobs: # snapshot-hygiene gate, `cargo ci-snapshot`); avoids a from-source # compile on every CI run. taiki-e/install-action verifies release # checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2.86.2 + uses: taiki-e/install-action@b6ff580856c41316412a0b9b60540fbc6f8c82cc # v2.86.7 with: tool: nextest@0.9.140,cargo-deny@0.20.2,cargo-insta@1.48.0 diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index 1daa833..0e9ff28 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -27,7 +27,7 @@ jobs: || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA' ) ) - uses: stella/.github/.github/workflows/cla.yml@48aacae31829ce15216a6b766b03a92fd2e84da3 + uses: stella/.github/.github/workflows/cla.yml@0f814e1a0c6c7401778e661209553b6e15f8d92a with: allowlist: dependabot[bot],renovate[bot],github-actions[bot],google-labs-jules[bot],cursoragent secrets: diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml index 8b9ec1b..dfc9f6d 100644 --- a/.github/workflows/mutants.yml +++ b/.github/workflows/mutants.yml @@ -34,7 +34,7 @@ jobs: - name: Install pinned Rust tools (checksum-verified) # nextest is the test runner used by cargo-mutants. taiki-e/install-action # verifies release checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@b6b84cf49ebfe0176417bdce007c624f0db37f20 # v2.86.2 + uses: taiki-e/install-action@b6ff580856c41316412a0b9b60540fbc6f8c82cc # v2.86.7 with: tool: nextest@0.9.140,cargo-mutants@27.1.0 diff --git a/.github/workflows/quarantine-policy.yml b/.github/workflows/quarantine-policy.yml index fdf9a37..1e19c14 100644 --- a/.github/workflows/quarantine-policy.yml +++ b/.github/workflows/quarantine-policy.yml @@ -13,4 +13,4 @@ jobs: if: github.repository == 'stella/stdnum' permissions: contents: read - uses: stella/.github/.github/workflows/quarantine-policy.yml@699affd63b2d956f71b9833fbed239245aff7e86 + uses: stella/.github/.github/workflows/quarantine-policy.yml@0f814e1a0c6c7401778e661209553b6e15f8d92a diff --git a/.github/workflows/quarantine-prune.yml b/.github/workflows/quarantine-prune.yml index 791aebe..b949e7d 100644 --- a/.github/workflows/quarantine-prune.yml +++ b/.github/workflows/quarantine-prune.yml @@ -13,7 +13,7 @@ jobs: if: github.repository == 'stella/stdnum' permissions: contents: read - uses: stella/.github/.github/workflows/quarantine-prune.yml@699affd63b2d956f71b9833fbed239245aff7e86 + uses: stella/.github/.github/workflows/quarantine-prune.yml@0f814e1a0c6c7401778e661209553b6e15f8d92a secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml index 14b64a4..6cef095 100644 --- a/.github/workflows/release-pr.yml +++ b/.github/workflows/release-pr.yml @@ -15,7 +15,7 @@ jobs: name: Maintain version packages PR permissions: contents: read - uses: stella/.github/.github/workflows/changeset-release-pr.yml@c56b0c1d1e82f5e3fffa733a32b9a503a172ee35 + uses: stella/.github/.github/workflows/changeset-release-pr.yml@0f814e1a0c6c7401778e661209553b6e15f8d92a with: bun-version-file: package.json sync-cargo-inherited-lock: true diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index e0dde25..0e08cec 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -30,6 +30,6 @@ jobs: publish_results: true - name: Upload SARIF to GitHub Security tab - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 with: sarif_file: results.sarif