deps(github/action): bump all dependencies #5728
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
deps: bump updatecli/updatecli-action GitHub workflow
deps(github): bump Action branch for updatecli/updatecli-action from 44207a7994a93aaedc269254fa6e059203bbecb8 to 1b19fc4760f66a437559d79b096fdcc89c519d1d (Pinned from v2)
change detected: * key "$.jobs.updatecli.steps[1].uses" updated from "updatecli/updatecli-action@44207a7994a93aaedc269254fa6e059203bbecb8" to "updatecli/updatecli-action@1b19fc4760f66a437559d79b096fdcc89c519d1d", in file ".github/workflows/updatecli.yaml"
deps: bump anchore/sbom-action/download-syft GitHub workflow
deps(github): bump Action tag for anchore/sbom-action/download-syft from cee1b8e05ae5b2593a75e197229729eabaa9f8ec to 7b36ad622f042cab6f59a75c2ac24ccb256e9b45 (Pinned from v0.20.4)
change detected: * key "$.jobs.build.steps[10].uses" updated from "anchore/sbom-action/download-syft@cee1b8e05ae5b2593a75e197229729eabaa9f8ec" to "anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45", in file ".github/workflows/release.yaml"
deps: bump github/codeql-action/autobuild GitHub workflow
deps(github): bump Action tag for github/codeql-action/autobuild from 181d5eefc20863364f96762470ba6f862bdef56b to d6bbdef45e766d081b84a2def353b0055f728d3e (Pinned from v3.29.3)
change detected: * key "$.jobs.analyse.steps[3].uses" updated from "github/codeql-action/autobuild@181d5eefc20863364f96762470ba6f862bdef56b" to "github/codeql-action/autobuild@d6bbdef45e766d081b84a2def353b0055f728d3e", in file ".github/workflows/codeql-analysis.yml"
deps: bump github/codeql-action/analyze GitHub workflow
deps(github): bump Action tag for github/codeql-action/analyze from 181d5eefc20863364f96762470ba6f862bdef56b to d6bbdef45e766d081b84a2def353b0055f728d3e (Pinned from v3.29.3)
change detected: * key "$.jobs.analyse.steps[4].uses" updated from "github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b" to "github/codeql-action/analyze@d6bbdef45e766d081b84a2def353b0055f728d3e", in file ".github/workflows/codeql-analysis.yml"
deps: bump sigstore/cosign-installer GitHub workflow
deps(github): bump Action release for sigstore/cosign-installer from 398d4b0eeef1380460a10c8013a76f728fb906ac to d58896d6a1865668819e1d91763c7751a165e159 (Pinned from v3.9.2)
change detected: * key "$.jobs.build.steps[9].uses" updated from "sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac" to "sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159", in file ".github/workflows/release.yaml"
deps: bump github/codeql-action/init GitHub workflow
deps(github): bump Action release for github/codeql-action/init from 181d5eefc20863364f96762470ba6f862bdef56b to d6bbdef45e766d081b84a2def353b0055f728d3e (Pinned from v3.29.3)
change detected: * key "$.jobs.analyse.steps[2].uses" updated from "github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b" to "github/codeql-action/init@d6bbdef45e766d081b84a2def353b0055f728d3e", in file ".github/workflows/codeql-analysis.yml"
Created automatically by Updatecli
Options:
Most of Updatecli configuration is done via its manifest(s).
Feel free to report any issues at github.com/updatecli/updatecli.
If you find this tool useful, do not hesitate to star our GitHub repository as a sign of appreciation, and/or to tell us directly on our chat!