Merge pull request #1500 from google:dependabot/github_actions/everything-0a43ab5142 PiperOrigin-RevId: 942121953
diff --git a/.github/workflows/build_test.yml b/.github/workflows/build_test.yml index 598e84b..f6713bb 100644 --- a/.github/workflows/build_test.yml +++ b/.github/workflows/build_test.yml
@@ -231,7 +231,7 @@ sudo apt install -y ${EXTRA_PACKAGES} - name: Checkout the source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: false fetch-depth: 1 @@ -332,7 +332,7 @@ # cd integration # mvn -B verify - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 if: ${{ matrix.build_system == 'python' }} with: python-version: ${{ matrix.python_version }} @@ -352,7 +352,7 @@ steps: - name: Checkout the source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: false fetch-depth: 1
diff --git a/.github/workflows/build_test_wasm.yml b/.github/workflows/build_test_wasm.yml index a821967..0c8b07c 100644 --- a/.github/workflows/build_test_wasm.yml +++ b/.github/workflows/build_test_wasm.yml
@@ -39,7 +39,7 @@ with: egress-policy: audit - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: true fetch-depth: 1
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 53eb588..d9fa1a5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml
@@ -40,11 +40,11 @@ egress-policy: audit - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 with: languages: ${{ matrix.language }} # CodeQL is currently crashing on files with large lists: @@ -56,7 +56,7 @@ - if: matrix.language == 'cpp' name: Build CPP - uses: github/codeql-action/autobuild@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 - if: matrix.language == 'cpp' || matrix.language == 'java' name: Build Java @@ -66,7 +66,7 @@ - if: matrix.language == 'javascript' name: Build JS - uses: github/codeql-action/autobuild@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 - if: matrix.language == 'cpp' || matrix.language == 'python' name: Build Python @@ -76,7 +76,7 @@ python setup.py build_ext - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 with: category: "/language:${{matrix.language}}" ref: "${{ github.ref != 'master' && github.ref || '/refs/heads/master' }}"
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 6e9a864..2129dcb 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml
@@ -35,7 +35,7 @@ egress-policy: audit - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Install tools run: |
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 916f25a..bb32037 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml
@@ -69,12 +69,12 @@ egress-policy: audit - name: Checkout the source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: false fetch-depth: 1 - - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 + - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 id: cache-vcpkg with: path: vcpkg @@ -150,7 +150,7 @@ egress-policy: audit - name: Checkout the source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: false fetch-depth: 1 @@ -176,7 +176,7 @@ steps: - name: Checkout the source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: false fetch-depth: 1 @@ -208,7 +208,7 @@ egress-policy: audit - name: Checkout the source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: submodules: false fetch-depth: 1
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 42446bc..043c31b 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml
@@ -42,7 +42,7 @@ egress-policy: audit - name: "Checkout code" - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: persist-credentials: false @@ -77,6 +77,6 @@ # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v4.36.0 + uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2 with: sarif_file: results.sarif