From 31795946a3653a72f40f728d4b8825ca477aa46c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 10:47:45 +0000 Subject: [PATCH] chore: bump the actions group across 1 directory with 5 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.85.7` | `2.85.10` | | [stella/.github/.github/workflows/cla.yml](https://github.com/stella/.github) | `44c8092f11c2f454916c320aa7d2144c173329d8` | `80873456a2af7243e09228a08456250d1e938972` | | [stella/.github/.github/workflows/changeset-release-pr.yml](https://github.com/stella/.github) | `4c9e6dbc502a9e9436252315a3be2bd327c5e32e` | `80873456a2af7243e09228a08456250d1e938972` | | [stella/.github/.github/actions/npm-publish-hardened](https://github.com/stella/.github) | `4292546b5b6e5bd8660bd727913b4038644c3d0b` | `80873456a2af7243e09228a08456250d1e938972` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.5` | `4.37.6` | Updates `taiki-e/install-action` from 2.85.7 to 2.85.10 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/67729d5c413db75907f0ad1e39bb04b9c868ff60...6c6fd71fe4fb72c3697d269963d0e15df8adedad) Updates `stella/.github/.github/workflows/cla.yml` from 44c8092f11c2f454916c320aa7d2144c173329d8 to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/44c8092f11c2f454916c320aa7d2144c173329d8...80873456a2af7243e09228a08456250d1e938972) Updates `stella/.github/.github/workflows/changeset-release-pr.yml` from 4c9e6dbc502a9e9436252315a3be2bd327c5e32e to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/4c9e6dbc502a9e9436252315a3be2bd327c5e32e...80873456a2af7243e09228a08456250d1e938972) Updates `stella/.github/.github/actions/npm-publish-hardened` from 4292546b5b6e5bd8660bd727913b4038644c3d0b to 80873456a2af7243e09228a08456250d1e938972 - [Release notes](https://github.com/stella/.github/releases) - [Commits](https://github.com/stella/.github/compare/4292546b5b6e5bd8660bd727913b4038644c3d0b...80873456a2af7243e09228a08456250d1e938972) Updates `github/codeql-action/upload-sarif` from 4.37.5 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/d1ba80a13dd99fba24a470575428917156a28b43...5595ccaf912efad79be6eef63a5619ff05969be3) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.85.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: stella/.github/.github/workflows/cla.yml dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/workflows/changeset-release-pr.yml dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions - dependency-name: stella/.github/.github/actions/npm-publish-hardened dependency-version: 80873456a2af7243e09228a08456250d1e938972 dependency-type: direct:production dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/cla.yml | 2 +- .github/workflows/mutants.yml | 2 +- .github/workflows/release-pr.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9db462ea..94aa2a16 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -216,7 +216,7 @@ jobs: # snapshot-hygiene gate, `cargo ci-snapshot`); avoids a from-source # compile on every CI run. taiki-e/install-action verifies release # checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@67729d5c413db75907f0ad1e39bb04b9c868ff60 # v2.85.7 + uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10 with: tool: nextest@0.9.140,cargo-deny@0.20.2,cargo-insta@1.48.0 diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml index ad8320cf..e184cda9 100644 --- a/.github/workflows/cla.yml +++ b/.github/workflows/cla.yml @@ -27,7 +27,7 @@ jobs: || github.event.comment.body == 'I have read the CLA Document and I hereby sign the CLA' ) ) - uses: stella/.github/.github/workflows/cla.yml@44c8092f11c2f454916c320aa7d2144c173329d8 + uses: stella/.github/.github/workflows/cla.yml@80873456a2af7243e09228a08456250d1e938972 with: allowlist: dependabot[bot],renovate[bot],github-actions[bot],google-labs-jules[bot],cursoragent secrets: diff --git a/.github/workflows/mutants.yml b/.github/workflows/mutants.yml index 27b5d1fe..af2f5867 100644 --- a/.github/workflows/mutants.yml +++ b/.github/workflows/mutants.yml @@ -34,7 +34,7 @@ jobs: - name: Install pinned Rust tools (checksum-verified) # nextest is the test runner used by cargo-mutants. taiki-e/install-action # verifies release checksums, unlike a raw `curl | tar`. - uses: taiki-e/install-action@67729d5c413db75907f0ad1e39bb04b9c868ff60 # v2.85.7 + uses: taiki-e/install-action@6c6fd71fe4fb72c3697d269963d0e15df8adedad # v2.85.10 with: tool: nextest@0.9.140,cargo-mutants@27.1.0 diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml index a6150989..f670e310 100644 --- a/.github/workflows/release-pr.yml +++ b/.github/workflows/release-pr.yml @@ -15,7 +15,7 @@ jobs: name: Maintain version packages PR permissions: contents: read - uses: stella/.github/.github/workflows/changeset-release-pr.yml@4c9e6dbc502a9e9436252315a3be2bd327c5e32e + uses: stella/.github/.github/workflows/changeset-release-pr.yml@80873456a2af7243e09228a08456250d1e938972 with: bun-version-file: package.json sync-cargo-inherited-lock: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2eee5d12..ecaf44ec 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -211,7 +211,7 @@ jobs: fi echo "path=${tarballs[0]}" >> "$GITHUB_OUTPUT" - - uses: stella/.github/.github/actions/npm-publish-hardened@4292546b5b6e5bd8660bd727913b4038644c3d0b + - uses: stella/.github/.github/actions/npm-publish-hardened@80873456a2af7243e09228a08456250d1e938972 with: tarball: ${{ steps.tarball.outputs.path }} tag: ${{ needs.verify.outputs.dist_tag }} @@ -318,7 +318,7 @@ jobs: id: tarball run: echo "path=$(find npm-tarball -name '*.tgz' -print -quit)" >> "$GITHUB_OUTPUT" - - uses: stella/.github/.github/actions/npm-publish-hardened@4292546b5b6e5bd8660bd727913b4038644c3d0b + - uses: stella/.github/.github/actions/npm-publish-hardened@80873456a2af7243e09228a08456250d1e938972 with: tarball: ${{ steps.tarball.outputs.path }} tag: ${{ needs.verify.outputs.dist_tag }} @@ -351,7 +351,7 @@ jobs: id: tarball run: echo "path=$(find npm-tarball -name '*.tgz' -print -quit)" >> "$GITHUB_OUTPUT" - - uses: stella/.github/.github/actions/npm-publish-hardened@4292546b5b6e5bd8660bd727913b4038644c3d0b + - uses: stella/.github/.github/actions/npm-publish-hardened@80873456a2af7243e09228a08456250d1e938972 with: tarball: ${{ steps.tarball.outputs.path }} tag: ${{ needs.verify.outputs.dist_tag }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 2f0f2bd2..b09c814e 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -30,6 +30,6 @@ jobs: publish_results: true - name: Upload SARIF to GitHub Security tab - uses: github/codeql-action/upload-sarif@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: sarif_file: results.sarif