Skip to content

Commit c2b6f20

Browse files
Bump the github-actions group across 1 directory with 3 updates
Bumps the github-actions group with 3 updates in the / directory: [azure/artifact-signing-action](https://github.com/azure/artifact-signing-action), [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) and [github/codeql-action](https://github.com/github/codeql-action). Updates `azure/artifact-signing-action` from 0.5.10 to 1.0.0 - [Release notes](https://github.com/azure/artifact-signing-action/releases) - [Commits](Azure/artifact-signing-action@fc390cf...db7a3a6) Updates `actions/attest-build-provenance` from 3.1.0 to 3.2.0 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@00014ed...96278af) Updates `github/codeql-action` from 4.31.7 to 4.32.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@cf1bb45...6bc82e0) --- updated-dependencies: - dependency-name: azure/artifact-signing-action dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.32.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent f3133f0 commit c2b6f20

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

.github/workflows/build.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
run: ./mvnw -B test --no-transfer-progress -DdevCommandFileDir="${{ vars.MSVC_DEV_FILES_DIR }}"
3838
- name: Sign DLLs with Azure Trusted Signing
3939
if: startsWith(github.ref, 'refs/tags/')
40-
uses: azure/artifact-signing-action@fc390cf8ed0f14e248a542af1d838388a47c7a7c # v0.5.10
40+
uses: azure/artifact-signing-action@db7a3a6bd3912025c705162fb7475389f5b69ec6 # v1.0.0
4141
with:
4242
files: |
4343
${{ github.workspace }}src\main\resources\integrations-x64.dll
@@ -79,7 +79,7 @@ jobs:
7979
"@ | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
8080
- name: Attest
8181
if: startsWith(github.ref, 'refs/tags/')
82-
uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
82+
uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
8383
with:
8484
subject-path: |
8585
target/*.jar

.github/workflows/codeql-analysis.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,10 @@ jobs:
3232
java-version: ${{ env.JAVA_VERSION }}
3333
cache: 'maven'
3434
- name: Initialize CodeQL
35-
uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
35+
uses: github/codeql-action/init@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
3636
with:
3737
languages: java
3838
- name: Build
3939
run: ./mvnw -B compile -DskipTests -DdevCommandFileDir="${{ env.MSVC_DEV_FILES_DIR }}"
4040
- name: Perform CodeQL Analysis
41-
uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7
41+
uses: github/codeql-action/analyze@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1

0 commit comments

Comments
 (0)