From 237ab9fa655472e87c80139a9fe3c7bb9ef942ed Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 05:11:09 +0000 Subject: [PATCH] chore(deps): bump the actions group with 2 updates Bumps the actions group with 2 updates: [julia-actions/setup-julia](https://github.com/julia-actions/setup-julia) and [github/codeql-action](https://github.com/github/codeql-action). Updates `julia-actions/setup-julia` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/julia-actions/setup-julia/releases) - [Commits](https://github.com/julia-actions/setup-julia/compare/v3.0.2...v3.0.3) Updates `github/codeql-action` from 4.38.3 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.38.3...v4.39.0) --- updated-dependencies: - dependency-name: julia-actions/setup-julia dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 20 ++++++++++---------- .github/workflows/ci-cd.yml | 10 +++++----- .github/workflows/codeql.yml | 4 ++-- 3 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 02a98d6..81ff2f6 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -25,15 +25,15 @@ workflows: - 'docker/login-action@v4.6.0' - 'docker/metadata-action@v6.2.0' - 'docker/setup-buildx-action@v4.4.1' - - 'github/codeql-action@v4.38.3' + - 'github/codeql-action@v4.39.0' - 'gitleaks/gitleaks-action@v3.0.0' - 'hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387' - 'julia-actions/julia-processcoverage@v1.2.2' - - 'julia-actions/setup-julia@v3.0.2' + - 'julia-actions/setup-julia@v3.0.3' - 'sonarsource/sonarcloud-github-action@v5.0.0' '.github/workflows/codeql.yml': - 'actions/checkout@v7.0.1' - - 'github/codeql-action@v4.38.3' + - 'github/codeql-action@v4.39.0' '.github/workflows/dependabot-automerge.yml': - 'dependabot/fetch-metadata@v3.1.0' '.github/workflows/dogfood-gate.yml': @@ -193,9 +193,9 @@ dependencies: commit: 'sha1-f87e5991a6d7451dcb8d9637bfbc97413f497069' owner_id: 5429470 repo_id: 288485773 - 'github/codeql-action@v4.38.3': - ref: 'v4.38.3' - commit: 'sha1-24c54180a607b1449ed407dd24f251e4e9147c8d' + 'github/codeql-action@v4.39.0': + ref: 'v4.39.0' + commit: 'sha1-6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee' owner_id: 9919 repo_id: 259445878 'gitleaks/gitleaks-action@v3.0.0': @@ -204,7 +204,7 @@ dependencies: owner_id: 90395851 repo_id: 242854909 'hadolint/hadolint-action@06be81baf89a55ffd0e24b8f04a4185738dd3387': - ref: '06be81baf89a55ffd0e24b8f04a4185738dd3387' + ref: 'v3.5.0' commit: 'sha1-06be81baf89a55ffd0e24b8f04a4185738dd3387' owner_id: 34047791 repo_id: 212438777 @@ -218,9 +218,9 @@ dependencies: commit: 'sha1-03114f09f119417c3242a9fb6e0b722676aedf38' owner_id: 53965732 repo_id: 249500631 - 'julia-actions/setup-julia@v3.0.2': - ref: 'v3.0.2' - commit: 'sha1-fa02766e078afaaf09b14210362cee14137e6a32' + 'julia-actions/setup-julia@v3.0.3': + ref: 'v3.0.3' + commit: 'sha1-da908477b5db94c10ffce8cfea9f2b3b9d5db687' owner_id: 53965732 repo_id: 202020219 'peter-evans/repository-dispatch@v4.0.1': diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml index 5e98f8c..b924edc 100644 --- a/.github/workflows/ci-cd.yml +++ b/.github/workflows/ci-cd.yml @@ -37,7 +37,7 @@ jobs: fetch-depth: 0 # Full history for SonarCloud - name: Set up Julia - uses: julia-actions/setup-julia@v3.0.2 + uses: julia-actions/setup-julia@v3.0.3 with: version: ${{ env.JULIA_VERSION }} @@ -86,7 +86,7 @@ jobs: limit-severities-for-sarif: true - name: Upload Trivy results to GitHub Security - uses: github/codeql-action/upload-sarif@v4.38.3 + uses: github/codeql-action/upload-sarif@v4.39.0 if: always() && hashFiles('trivy-results.sarif') != '' with: sarif_file: 'trivy-results.sarif' @@ -122,7 +122,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Set up Julia ${{ matrix.julia-version }} - uses: julia-actions/setup-julia@v3.0.2 + uses: julia-actions/setup-julia@v3.0.3 with: version: ${{ matrix.julia-version }} @@ -240,7 +240,7 @@ jobs: limit-severities-for-sarif: true - name: Upload Trivy image results - uses: github/codeql-action/upload-sarif@v4.38.3 + uses: github/codeql-action/upload-sarif@v4.39.0 if: always() && hashFiles('trivy-image-results.sarif') != '' with: sarif_file: 'trivy-image-results.sarif' @@ -348,7 +348,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Set up Julia - uses: julia-actions/setup-julia@v3.0.2 + uses: julia-actions/setup-julia@v3.0.3 with: version: ${{ env.JULIA_VERSION }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6043d30..0c9271e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -43,12 +43,12 @@ jobs: uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.38.3 + uses: github/codeql-action/init@v4.39.0 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.38.3 + uses: github/codeql-action/analyze@v4.39.0 with: category: "/language:${{ matrix.language }}"