This is an automated email from the ASF dual-hosted git repository.
fpapon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/shiro.git
The following commit(s) were added to refs/heads/main by this push:
new 3d06debe4 chore(deps): bump the github-actions-dependencies group with
7 updates (#2912)
3d06debe4 is described below
commit 3d06debe4c4cc687551dabdb84f8f3302a93dc23
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Oct 16 14:29:35 2026 +0200
chore(deps): bump the github-actions-dependencies group with 7 updates
(#2912)
Bumps the github-actions-dependencies group with 7 updates:
| Package | From | To |
| --- | --- | --- |
|
[apache/infrastructure-actions/allowlist-check](https://github.com/apache/infrastructure-actions)
| `547b55daa5d3c7e45383094ef738b7d16bc8ccc5` |
`e3e0a2261a9c6d5bdd882802b303f34b1511b6df` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.38.2` | `4.38.3` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.38.2` | `4.38.3` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) |
`7.0.1` | `7.0.2` |
| [j178/prek-action](https://github.com/j178/prek-action) | `3.0.0` |
`3.0.1` |
| [ossf/scorecard-action](https://github.com/ossf/scorecard-action) |
`2.4.4` | `2.5.0` |
|
[github/codeql-action/upload-sarif](https://github.com/github/codeql-action) |
`4.38.2` | `4.38.3` |
Updates `apache/infrastructure-actions/allowlist-check` from
547b55daa5d3c7e45383094ef738b7d16bc8ccc5 to
e3e0a2261a9c6d5bdd882802b303f34b1511b6df
-
[Commits](https://github.com/apache/infrastructure-actions/compare/547b55daa5d3c7e45383094ef738b7d16bc8ccc5...e3e0a2261a9c6d5bdd882802b303f34b1511b6df)
Updates `github/codeql-action/init` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `github/codeql-action/analyze` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
Updates `actions/upload-artifact` from 7.0.1 to 7.0.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
-
[Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9)
Updates `j178/prek-action` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/j178/prek-action/releases)
-
[Commits](https://github.com/j178/prek-action/compare/4e14d07f9231acabce116ccfca13b13dd9755ece...1382ad72dea72f9d53832f2bcb65b3e87a947204)
Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
-
[Commits](https://github.com/ossf/scorecard-action/compare/2d1146689b8cda280b9bc96326124645441f03bc...fa7117db83c52d787ae5a89f350999701505d78e)
Updates `github/codeql-action/upload-sarif` from 4.38.2 to 4.38.3
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2...24c54180a607b1449ed407dd24f251e4e9147c8d)
---
updated-dependencies:
- dependency-name: apache/infrastructure-actions/allowlist-check
dependency-version: e3e0a2261a9c6d5bdd882802b303f34b1511b6df
dependency-type: direct:production
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/init
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/analyze
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: actions/upload-artifact
dependency-version: 7.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: j178/prek-action
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
- dependency-name: ossf/scorecard-action
dependency-version: 2.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-dependencies
- dependency-name: github/codeql-action/upload-sarif
dependency-version: 4.38.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-dependencies
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/asf-allowlist-check.yml | 2 +-
.github/workflows/codeql.yml | 4 ++--
.github/workflows/maven.yml | 2 +-
.github/workflows/pre-commit-manual.yml | 2 +-
.github/workflows/pre-commit.yml | 2 +-
.github/workflows/scorecards.yml | 6 +++---
6 files changed, 9 insertions(+), 9 deletions(-)
diff --git a/.github/workflows/asf-allowlist-check.yml
b/.github/workflows/asf-allowlist-check.yml
index dea3be7f2..c712f3d9d 100644
--- a/.github/workflows/asf-allowlist-check.yml
+++ b/.github/workflows/asf-allowlist-check.yml
@@ -31,4 +31,4 @@ jobs:
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses:
apache/infrastructure-actions/allowlist-check@547b55daa5d3c7e45383094ef738b7d16bc8ccc5
# main
+ - uses:
apache/infrastructure-actions/allowlist-check@e3e0a2261a9c6d5bdd882802b303f34b1511b6df
# main
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 304ba3853..dca2ffe74 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -81,7 +81,7 @@ jobs:
# Initializes the CodeQL tools for scanning.
- name: Initialize CodeQL
- uses:
github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+ uses:
github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
with:
languages: ${{ matrix.language }}
# If you wish to specify custom queries, you can do so here or in a
config file.
@@ -107,6 +107,6 @@ jobs:
# ./location_of_script_within_repo/buildscript.sh
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2
+ uses:
github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3
with:
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index a584f89b0..dd52aee6c 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -105,7 +105,7 @@ jobs:
-Pskip_jakarta_ee_tests
- name: Archive test run logs
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# v7.0.2
if: always()
with:
name: test-logs-${{ matrix.os }}-${{ matrix.jdk }}-${{ matrix.dist }}
diff --git a/.github/workflows/pre-commit-manual.yml
b/.github/workflows/pre-commit-manual.yml
index 3c4e9e326..ab8470521 100644
--- a/.github/workflows/pre-commit-manual.yml
+++ b/.github/workflows/pre-commit-manual.yml
@@ -33,7 +33,7 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece #
v3.0.0
+ - uses: j178/prek-action@1382ad72dea72f9d53832f2bcb65b3e87a947204 #
v3.0.1
with:
install-only: true
- name: Run manual pre-commit hooks
diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index b8d9e7420..e31b33609 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -33,6 +33,6 @@ jobs:
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #
v7.0.1
with:
persist-credentials: false
- - uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece #
v3.0.0
+ - uses: j178/prek-action@1382ad72dea72f9d53832f2bcb65b3e87a947204 #
v3.0.1
with:
extra-args: --all-files
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index a7ba7798d..47c0034a6 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -48,7 +48,7 @@ jobs:
persist-credentials: false
- name: "Run analysis"
- uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc #
tag=2.4.4
+ uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e #
tag=2.5.0
with:
results_file: results.sarif
results_format: sarif
@@ -67,7 +67,7 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will
disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a
# tag=v7.0.1
+ uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
# tag=v7.0.2
with:
name: SARIF file
path: results.sarif
@@ -75,6 +75,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
- uses:
github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 #
tag=v2
+ uses:
github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d #
tag=v2
with:
sarif_file: results.sarif
