diff --git a/.github/workflows/build-gossamer-gui.yml b/.github/workflows/build-gossamer-gui.yml index e0296ea8..21c430d3 100644 --- a/.github/workflows/build-gossamer-gui.yml +++ b/.github/workflows/build-gossamer-gui.yml @@ -143,7 +143,7 @@ jobs: targets: wasm32-unknown-unknown - name: Install just - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.9 with: # Pin an explicit modern just: the Justfile uses `import?` # (optional import, just >= 1.19.0). Unversioned `tool: just` diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d1cb2927..163cb3e7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -113,7 +113,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.9 with: tool: cargo-llvm-cov diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 07310081..6e0db8e1 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -47,12 +47,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3 + uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3 + uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 6fdc0d3a..e77ba409 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -53,4 +53,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index 52757af7..35befdc2 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -41,7 +41,7 @@ jobs: timeout-minutes: 5 steps: - name: Send push notification email - uses: hyperpolymath/smtp-notify-action@v0.2.0 # NOSONAR — pin authority is actions.lock (sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7) + uses: hyperpolymath/smtp-notify-action@v0.3.0 # NOSONAR — pin authority is actions.lock (sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7) with: server_address: ${{ secrets.SMTP_HOST }} server_port: ${{ secrets.SMTP_PORT }} diff --git a/.github/workflows/quality.yml b/.github/workflows/quality.yml index 12096113..d2f9fd76 100644 --- a/.github/workflows/quality.yml +++ b/.github/workflows/quality.yml @@ -285,7 +285,7 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 # ============================================================================ # Documentation Status @@ -337,7 +337,7 @@ jobs: find . -type f -size +1M -not -path "./.git/*" | head -10 - name: EditorConfig check - uses: editorconfig-checker/action-editorconfig-checker@v2.2.0 + uses: editorconfig-checker/action-editorconfig-checker@v3.0.0 docs: runs-on: ubuntu-latest diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fd5f0ba4..61850532 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -209,7 +209,7 @@ jobs: path: artifacts - name: Set up QEMU - uses: docker/setup-qemu-action@v4.2.0 + uses: docker/setup-qemu-action@v4.3.0 - name: Set up Docker Buildx uses: docker/setup-buildx-action@v4.3.0 @@ -325,7 +325,7 @@ jobs: cat checksums.txt - name: Create GitHub Release - uses: softprops/action-gh-release@v3.0.2 + uses: softprops/action-gh-release@v3.0.3 with: name: Hypatia v${{ needs.prepare.outputs.version }} body_path: release-notes.md diff --git a/.github/workflows/security-policy.yml b/.github/workflows/security-policy.yml index 4ca09e3b..e9f33b6e 100644 --- a/.github/workflows/security-policy.yml +++ b/.github/workflows/security-policy.yml @@ -70,7 +70,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.9 with: tool: cargo-deny @@ -92,7 +92,7 @@ jobs: fetch-depth: 0 - name: TruffleHog Secret Scan - uses: trufflesecurity/trufflehog@v3.97.1 + uses: trufflesecurity/trufflehog@v3.97.4 with: path: ./ base: ${{ github.event.repository.default_branch }} @@ -120,13 +120,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.38.0 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.38.0 with: category: "/language:${{matrix.language}}" @@ -190,7 +190,7 @@ jobs: severity: 'CRITICAL,HIGH' - name: Upload Trivy scan results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.38.0 if: always() with: sarif_file: 'trivy-results.sarif' @@ -299,7 +299,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Install cargo-deny - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.9 with: tool: cargo-deny @@ -412,7 +412,7 @@ jobs: ignore-unfixed: true - name: Upload Trivy SARIF results - uses: github/codeql-action/upload-sarif@v4.37.8 + uses: github/codeql-action/upload-sarif@v4.38.0 if: always() with: sarif_file: 'trivy-${{ steps.image.outputs.name }}.sarif' @@ -495,7 +495,7 @@ jobs: fetch-depth: 0 - name: TruffleHog Secret Scan - uses: trufflesecurity/trufflehog@v3.97.1 + uses: trufflesecurity/trufflehog@v3.97.4 with: path: ./ base: ${{ github.event.repository.default_branch }} @@ -522,13 +522,13 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.8 + uses: github/codeql-action/init@v4.38.0 with: languages: ${{ matrix.language }} queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.8 + uses: github/codeql-action/analyze@v4.38.0 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index a0fda1ca..9338a549 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -520,7 +520,7 @@ jobs: components: llvm-tools-preview - name: Install cargo-llvm-cov - uses: taiki-e/install-action@v2.86.7 + uses: taiki-e/install-action@v2.87.9 with: tool: cargo-llvm-cov diff --git a/.github/workflows/verify-proofs.yml b/.github/workflows/verify-proofs.yml index 4c4dad72..822862b6 100644 --- a/.github/workflows/verify-proofs.yml +++ b/.github/workflows/verify-proofs.yml @@ -213,7 +213,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Set up Eclipse Temurin 21 JRE - uses: actions/setup-java@v6.0.0 + uses: actions/setup-java@v6.0.1 with: distribution: temurin java-version: '21'