Skip to content

Commit 5d44ecc

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): bump the actions-maintenance group with 4 updates
Bumps the actions-maintenance group with 4 updates: [durable-workflow/.github/.github/actions/bootstrap-patched-pip](https://github.com/durable-workflow/.github), [durable-workflow/.github/.github/actions/verify-composer-trust](https://github.com/durable-workflow/.github), [docker/login-action](https://github.com/docker/login-action) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action). Updates `durable-workflow/.github/.github/actions/bootstrap-patched-pip` from 76f333804e68725059039fd54df241d40d855cd3 to edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f - [Release notes](https://github.com/durable-workflow/.github/releases) - [Commits](durable-workflow/.github@76f3338...edba47c) Updates `durable-workflow/.github/.github/actions/verify-composer-trust` from 76f333804e68725059039fd54df241d40d855cd3 to edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f - [Release notes](https://github.com/durable-workflow/.github/releases) - [Commits](durable-workflow/.github@76f3338...edba47c) Updates `docker/login-action` from 4.7.0 to 4.8.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@81c6f93...8aa5831) Updates `SonarSource/sonarqube-scan-action` from 8.4.0 to 8.4.1 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](SonarSource/sonarqube-scan-action@4d1dc0c...e805d87) --- updated-dependencies: - dependency-name: durable-workflow/.github/.github/actions/bootstrap-patched-pip dependency-version: edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f dependency-type: direct:production dependency-group: actions-maintenance - dependency-name: durable-workflow/.github/.github/actions/verify-composer-trust dependency-version: edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f dependency-type: direct:production dependency-group: actions-maintenance - dependency-name: docker/login-action dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-maintenance - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-maintenance ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 49e9636 commit 5d44ecc

5 files changed

Lines changed: 18 additions & 18 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
with:
5151
python-version: '3.13'
5252
- name: Select authenticated dependency trust
53-
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
53+
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
5454
with:
5555
clients: pip,python,composer,curl,git,npm
5656

@@ -63,13 +63,13 @@ jobs:
6363
tools: composer:2.10.3
6464

6565
- name: Verify actual Composer trust before dependency requests
66-
uses: durable-workflow/.github/.github/actions/verify-composer-trust@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
66+
uses: durable-workflow/.github/.github/actions/verify-composer-trust@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
6767

6868
- name: Install dependencies
6969
run: composer install --prefer-dist --no-progress --no-interaction
7070

7171
- name: Verify the playground Composer configuration
72-
uses: durable-workflow/.github/.github/actions/verify-composer-trust@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
72+
uses: durable-workflow/.github/.github/actions/verify-composer-trust@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
7373
with:
7474
working-directory: playground/php-runtime
7575

@@ -159,7 +159,7 @@ jobs:
159159
with:
160160
python-version: '3.13'
161161
- name: Select authenticated dependency trust
162-
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
162+
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
163163
with:
164164
clients: pip,python,composer,curl,git
165165

@@ -172,7 +172,7 @@ jobs:
172172
tools: composer:2.10.3
173173

174174
- name: Verify actual Composer trust before dependency requests
175-
uses: durable-workflow/.github/.github/actions/verify-composer-trust@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
175+
uses: durable-workflow/.github/.github/actions/verify-composer-trust@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
176176
with:
177177
working-directory: microservice
178178

@@ -213,7 +213,7 @@ jobs:
213213
with:
214214
python-version: '3.13'
215215
- name: Bootstrap patched pip trust
216-
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
216+
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
217217
- run: 'python -m pip install --only-binary :all: PyYAML==6.0.2'
218218
- name: Require centrally approved immutable action commits
219219
run: >-

‎.github/workflows/composer-lock-audit.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
python-version: '3.13'
4545

4646
- name: Select authenticated dependency trust
47-
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
47+
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
4848
with:
4949
clients: pip,python,composer,curl,git,npm
5050

@@ -56,7 +56,7 @@ jobs:
5656
tools: composer:2.10.3
5757

5858
- name: Verify actual Composer trust before advisory requests
59-
uses: durable-workflow/.github/.github/actions/verify-composer-trust@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
59+
uses: durable-workflow/.github/.github/actions/verify-composer-trust@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
6060

6161
- name: Audit the committed lock inventory
6262
run: bash scripts/ci/audit-committed-composer-locks.sh

‎.github/workflows/devcontainer-image.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -57,13 +57,13 @@ jobs:
5757
echo '2a36a2417e8947357ea6f6cbc2f6c53a834f3c069f8013a34d6d861b7123d576 .central-apt-source/docker/apt/require-fixed-bookworm-apt.sh' | sha256sum --check --strict
5858
- uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
5959
- name: Sign in to GitHub Container Registry
60-
uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
60+
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
6161
with:
6262
registry: ghcr.io
6363
username: ${{ github.actor }}
6464
password: ${{ github.token }}
6565
- name: Sign in to Docker Hub
66-
uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
66+
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
6767
with:
6868
username: durableworkflow
6969
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -103,13 +103,13 @@ jobs:
103103
steps:
104104
- uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
105105
- name: Sign in to GitHub Container Registry
106-
uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
106+
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
107107
with:
108108
registry: ghcr.io
109109
username: ${{ github.actor }}
110110
password: ${{ github.token }}
111111
- name: Sign in to Docker Hub
112-
uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
112+
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
113113
with:
114114
username: durableworkflow
115115
password: ${{ secrets.DOCKERHUB_TOKEN }}
@@ -210,13 +210,13 @@ jobs:
210210
persist-credentials: false
211211
- uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
212212
- name: Sign in to GitHub Container Registry
213-
uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
213+
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
214214
with:
215215
registry: ghcr.io
216216
username: ${{ github.actor }}
217217
password: ${{ github.token }}
218218
- name: Sign in to Docker Hub
219-
uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0
219+
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
220220
with:
221221
username: durableworkflow
222222
password: ${{ secrets.DOCKERHUB_TOKEN }}

‎.github/workflows/playground-journeys.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
with:
3131
python-version: '3.13'
3232
- name: Select authenticated dependency trust
33-
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
33+
uses: durable-workflow/.github/.github/actions/bootstrap-patched-pip@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
3434
with:
3535
clients: pip,python,composer,curl,git
3636

@@ -43,10 +43,10 @@ jobs:
4343
tools: composer:2.10.3
4444

4545
- name: Verify actual Composer trust before dependency requests
46-
uses: durable-workflow/.github/.github/actions/verify-composer-trust@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
46+
uses: durable-workflow/.github/.github/actions/verify-composer-trust@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
4747

4848
- name: Verify the playground Composer configuration
49-
uses: durable-workflow/.github/.github/actions/verify-composer-trust@76f333804e68725059039fd54df241d40d855cd3 # clean-trust
49+
uses: durable-workflow/.github/.github/actions/verify-composer-trust@edba47c8f9d3b9984731bc3fba4e1ab3299f1b9f # clean-trust
5050
with:
5151
working-directory: playground/php-runtime
5252

‎.github/workflows/sonar.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
with:
2525
fetch-depth: 0
2626
persist-credentials: false
27-
- uses: SonarSource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304 # v8.4.0
27+
- uses: SonarSource/sonarqube-scan-action@e805d875275f728fac1885b413934be6d7c63f65 # v8.4.1
2828
env:
2929
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
3030
with:

0 commit comments

Comments
 (0)