From 092742bb1b52ded04536db30a8cef56cdfb44840 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Oct 2026 20:43:25 +0000 Subject: [PATCH] Bump the github-actions-updates group across 1 directory with 6 updates Bumps the github-actions-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml](https://github.com/lfreleng-actions/github2gerrit-action) | `2.4.0` | `2.4.3` | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.21.1` | `2.22.1` | | [lfreleng-actions/gerrit-review-action](https://github.com/lfreleng-actions/gerrit-review-action) | `1.1.3` | `1.2.0` | | [lfreleng-actions/checkout-gerrit-change-action](https://github.com/lfreleng-actions/checkout-gerrit-change-action) | `1.1.0` | `1.1.2` | | [lfreleng-actions/maven-build-action](https://github.com/lfreleng-actions/maven-build-action) | `0.4.3` | `0.5.4` | | [lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml](https://github.com/lfit/releng-reusable-workflows) | `0.10.3` | `0.10.4` | Updates `lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml` from 2.4.0 to 2.4.3 - [Release notes](https://github.com/lfreleng-actions/github2gerrit-action/releases) - [Commits](https://github.com/lfreleng-actions/github2gerrit-action/compare/df12d7f11e4765687efefd034d10116b1d8d0f4d...f2ffe06d3ec444fb4ebff0f40362660380490513) Updates `step-security/harden-runner` from 2.21.1 to 2.22.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/e14015d583714f6e62063499dc959a02595150a1...ccd8616d44fd3846e67624a50d5aad6d37bf2d25) Updates `lfreleng-actions/gerrit-review-action` from 1.1.3 to 1.2.0 - [Release notes](https://github.com/lfreleng-actions/gerrit-review-action/releases) - [Commits](https://github.com/lfreleng-actions/gerrit-review-action/compare/1e3eae766b3de755a2e87aa216cedebbaf9c8292...d56b0b5c81402f8cb435aaca513bebdea3be951e) Updates `lfreleng-actions/checkout-gerrit-change-action` from 1.1.0 to 1.1.2 - [Release notes](https://github.com/lfreleng-actions/checkout-gerrit-change-action/releases) - [Commits](https://github.com/lfreleng-actions/checkout-gerrit-change-action/compare/298f53bbbc1d5f9e54df9feb484d110dc2b33197...35e98c8043ec411611e464e296bcfb441a5c5093) Updates `lfreleng-actions/maven-build-action` from 0.4.3 to 0.5.4 - [Release notes](https://github.com/lfreleng-actions/maven-build-action/releases) - [Commits](https://github.com/lfreleng-actions/maven-build-action/compare/7781c31c0c5e7d345313807cde36377d0932e5d6...840adcca1a3cfdaf155c4ed23e301943cef12bc0) Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.10.3 to 0.10.4 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](https://github.com/lfit/releng-reusable-workflows/compare/87eacd1f8322263ebbc1411ce2ea82bab10ed091...fb907909b12bbaf262de6b24fcafd181cabe6b24) --- updated-dependencies: - dependency-name: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: step-security/harden-runner dependency-version: 2.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfreleng-actions/gerrit-review-action dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfreleng-actions/checkout-gerrit-change-action dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: lfreleng-actions/maven-build-action dependency-version: 0.5.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates - dependency-name: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml dependency-version: 0.10.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/call-github2gerrit.yaml | 2 +- .github/workflows/gerrit-clm.yaml | 14 +++++++------- .github/workflows/open-ssf-scorecard.yaml | 2 +- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/call-github2gerrit.yaml b/.github/workflows/call-github2gerrit.yaml index 612afeaae..aa1f486be 100644 --- a/.github/workflows/call-github2gerrit.yaml +++ b/.github/workflows/call-github2gerrit.yaml @@ -67,7 +67,7 @@ jobs: pull-requests: write # comment on and close mirrored PRs issues: write # manage PR/issue metadata during mirroring # yamllint disable-line rule:line-length - uses: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml@df12d7f11e4765687efefd034d10116b1d8d0f4d # v2.4.0 + uses: lfreleng-actions/github2gerrit-action/.github/workflows/github2gerrit.yaml@f2ffe06d3ec444fb4ebff0f40362660380490513 # v2.4.3 with: USE_PR_AS_COMMIT: true GERRIT_KNOWN_HOSTS: ${{ vars.GERRIT_KNOWN_HOSTS }} diff --git a/.github/workflows/gerrit-clm.yaml b/.github/workflows/gerrit-clm.yaml index d70d97667..965a95fe8 100644 --- a/.github/workflows/gerrit-clm.yaml +++ b/.github/workflows/gerrit-clm.yaml @@ -111,13 +111,13 @@ jobs: steps: # Harden the runner used by this workflow # yamllint disable-line rule:line-length - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 with: egress-policy: audit - name: Notify job start # yamllint disable-line rule:line-length - uses: lfreleng-actions/gerrit-review-action@1e3eae766b3de755a2e87aa216cedebbaf9c8292 # v1.1.3 + uses: lfreleng-actions/gerrit-review-action@d56b0b5c81402f8cb435aaca513bebdea3be951e # v1.2.0 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }} @@ -139,7 +139,7 @@ jobs: steps: # Harden the runner used by this workflow # yamllint disable-line rule:line-length - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 with: egress-policy: audit @@ -160,7 +160,7 @@ jobs: # yamllint disable-line rule:line-length if: github.event_name == 'workflow_dispatch' && inputs.GERRIT_DISABLED != true # yamllint disable-line rule:line-length - uses: lfreleng-actions/checkout-gerrit-change-action@298f53bbbc1d5f9e54df9feb484d110dc2b33197 # v1.1.0 + uses: lfreleng-actions/checkout-gerrit-change-action@35e98c8043ec411611e464e296bcfb441a5c5093 # v1.1.2 with: gerrit-refspec: ${{ inputs.GERRIT_REFSPEC }} gerrit-project: ${{ inputs.GERRIT_PROJECT }} @@ -374,7 +374,7 @@ jobs: if: steps.check-pom-xml.outputs.exists == 'true' continue-on-error: true # yamllint disable-line rule:line-length - uses: lfreleng-actions/maven-build-action@7781c31c0c5e7d345313807cde36377d0932e5d6 # v0.4.3 + uses: lfreleng-actions/maven-build-action@840adcca1a3cfdaf155c4ed23e301943cef12bc0 # v0.5.4 with: java-version: ${{ env.JAVA_VERSION }} distribution: ${{ env.JAVA_DISTRIBUTION }} @@ -411,7 +411,7 @@ jobs: steps: # Harden the runner used by this workflow # yamllint disable-line rule:line-length - - uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 # v2.21.1 + - uses: step-security/harden-runner@ccd8616d44fd3846e67624a50d5aad6d37bf2d25 # v2.22.1 with: egress-policy: audit @@ -420,7 +420,7 @@ jobs: - name: Report workflow conclusion # yamllint disable-line rule:line-length - uses: lfreleng-actions/gerrit-review-action@1e3eae766b3de755a2e87aa216cedebbaf9c8292 # v1.1.3 + uses: lfreleng-actions/gerrit-review-action@d56b0b5c81402f8cb435aaca513bebdea3be951e # v1.2.0 with: host: ${{ vars.GERRIT_SERVER }} username: ${{ vars.GERRIT_SSH_USER }} diff --git a/.github/workflows/open-ssf-scorecard.yaml b/.github/workflows/open-ssf-scorecard.yaml index 57ef3c1e8..eb2b8ede9 100644 --- a/.github/workflows/open-ssf-scorecard.yaml +++ b/.github/workflows/open-ssf-scorecard.yaml @@ -39,7 +39,7 @@ jobs: openssf-scorecard: name: "OpenSSF Scorecard" # yamllint disable-line rule:line-length - uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@87eacd1f8322263ebbc1411ce2ea82bab10ed091 # v0.10.3 + uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@fb907909b12bbaf262de6b24fcafd181cabe6b24 # v0.10.4 permissions: # Needed to upload the results to code-scanning dashboard. security-events: write