From 1a537884de3099d8ee06902ce4c4d066452d6651 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 31 Oct 2026 16:54:52 +0000 Subject: [PATCH] ci: bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [github/codeql-action](https://github.com/github/codeql-action), [hyperpolymath/smtp-notify-action](https://github.com/hyperpolymath/smtp-notify-action) and [ocaml/setup-ocaml](https://github.com/ocaml/setup-ocaml). Updates `github/codeql-action` from 4.38.2 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.38.2...v4.39.1) Updates `hyperpolymath/smtp-notify-action` from 0.5.0 to 0.5.1 - [Release notes](https://github.com/hyperpolymath/smtp-notify-action/releases) - [Changelog](https://github.com/hyperpolymath/smtp-notify-action/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/hyperpolymath/smtp-notify-action/compare/v0.5.0...v0.5.1) Updates `ocaml/setup-ocaml` from 3.9.0 to 3.9.1 - [Release notes](https://github.com/ocaml/setup-ocaml/releases) - [Commits](https://github.com/ocaml/setup-ocaml/compare/v3.9.0...v3.9.1) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: hyperpolymath/smtp-notify-action dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: ocaml/setup-ocaml dependency-version: 3.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 61 ++++++------------------- .github/workflows/codeql.yml | 4 +- .github/workflows/push-email-notify.yml | 2 +- .github/workflows/release.yml | 2 +- 4 files changed, 17 insertions(+), 52 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 60421cbc..55a44dac 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -1,7 +1,7 @@ # This file is machine-generated by `gh actions-lock`. # Do not edit by hand; run `gh actions-lock` to update. # Docs: https://gh.io/actions-lockfile -version: 'v0.0.2' +version: 'v0.0.3' workflows: '.github/workflows/affine-vscode-publish.yml': - 'actions/checkout@v7.0.1' @@ -18,7 +18,7 @@ workflows: - 'actions/upload-artifact@v7.0.1' '.github/workflows/codeql.yml': - 'actions/checkout@v7.0.1' - - 'github/codeql-action@v4.38.0' + - 'github/codeql-action@v4.39.1' '.github/workflows/coq-proof-gate.yml': - 'actions/checkout@v7.0.1' '.github/workflows/deed-validate.yml': @@ -46,11 +46,11 @@ workflows: - 'actions/checkout@v7.0.1' - 'denoland/setup-deno@v2.0.5' '.github/workflows/push-email-notify.yml': - - 'hyperpolymath/smtp-notify-action@v0.3.0' + - 'hyperpolymath/smtp-notify-action@v0.5.1' '.github/workflows/release.yml': - 'actions/attest-build-provenance@v4.2.2' - 'actions/checkout@v7.0.1' - - 'ocaml/setup-ocaml@v3.8.0' + - 'ocaml/setup-ocaml@v3.9.1' '.github/workflows/scorecard.yml': [] '.github/workflows/secret-scanner.yml': - 'actions/checkout@v7.0.1' @@ -124,9 +124,9 @@ dependencies: commit: 'sha1-2c7215f132e9ebf062739d9130488b56d53c060c' owner_id: 1940490 repo_id: 260749683 - 'github/codeql-action@v4.38.0': - ref: 'v4.38.0' - commit: 'sha1-b96794f015dfd88f77b49b1c93e0fa7110f94c63' + 'github/codeql-action@v4.39.1': + ref: 'v4.39.1' + commit: 'sha1-9b3254085494b55a0f7c4c2b3d2d52cc712ce370' owner_id: 9919 repo_id: 259445878 'haskell-actions/setup@v2.12.0': @@ -134,14 +134,14 @@ dependencies: commit: 'sha1-6037f33647c3f17758a2356c80fc4a53d7e0685d' owner_id: 75048950 repo_id: 623796603 - 'hyperpolymath/smtp-notify-action@v0.3.0': - ref: 'v0.3.0' - commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be' + 'hyperpolymath/smtp-notify-action@v0.5.1': + ref: 'v0.5.1' + commit: 'sha1-e384daf6167a7a7567642d6a62060106244d2413' owner_id: 6759885 repo_id: 1352485172 - 'ocaml/setup-ocaml@v3.8.0': - ref: 'v3.8.0' - commit: 'sha1-e89b2ded52a6e13f50162220cf5fe47290162032' + 'ocaml/setup-ocaml@v3.9.1': + ref: 'v3.9.1' + commit: 'sha1-ff66428f72b64472e749b22e0ad4dded4b2ddca6' owner_id: 1841483 repo_id: 220799100 'peter-evans/repository-dispatch@v4.0.1': @@ -149,38 +149,3 @@ dependencies: commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697' owner_id: 18365890 repo_id: 220359305 - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9': - ref: 'v6.1.0' - commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' - owner_id: 44036562 - repo_id: 215566462 - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': - ref: 'v7.0.1' - commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' - owner_id: 44036562 - repo_id: 197814629 - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': - ref: 'v7.0.1' - commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' - owner_id: 44036562 - repo_id: 192625955 - 'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772': - ref: 'stable' - commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772' - owner_id: 1940490 - repo_id: 260749683 - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124': - ref: 'v1.24.1' - commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' - owner_id: 47606891 - repo_id: 331103973 - 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc': - ref: 'v2.4.4' - commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc' - owner_id: 67707773 - repo_id: 421101922 - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555': - ref: 'v0.10.0' - commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555' - owner_id: 135788 - repo_id: 208510314 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 03ac0100..e64e8478 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -40,11 +40,11 @@ jobs: - name: Checkout uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.38.2 + uses: github/codeql-action/init@v4.39.1 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.38.2 + uses: github/codeql-action/analyze@v4.39.1 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index eb8eeab0..dc65d294 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -25,7 +25,7 @@ jobs: timeout-minutes: 5 steps: - name: Send push notification email - uses: hyperpolymath/smtp-notify-action@v0.5.0 # NOSONAR — pin authority is actions.lock (sha1-1b3b752d39a4fe4c0f28f10905e4608789d3e050) + uses: hyperpolymath/smtp-notify-action@v0.5.1 # NOSONAR — pin authority is actions.lock (sha1-1b3b752d39a4fe4c0f28f10905e4608789d3e050) with: server_address: ${{ secrets.SMTP_HOST }} server_port: ${{ secrets.SMTP_PORT }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 112ced0c..888c0fea 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -75,7 +75,7 @@ jobs: - name: Checkout code uses: actions/checkout@v7.0.1 - name: Set up OCaml - uses: ocaml/setup-ocaml@v3.9.0 + uses: ocaml/setup-ocaml@v3.9.1 with: ocaml-compiler: "5.1" - name: Install dependencies