diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f16333e..f556cf3 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -17,7 +17,7 @@ jobs: # The reusable workflow fixes the query suite to +security-and-quality org-wide; # build-mode: none analyses the sources directly (no Maven build needed for this # zero-dependency library). - uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@ae4ad6937ec755800c4a77d22e426aba679bf91c # v0.38.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 permissions: security-events: write contents: read diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index ba43e18..7a0c322 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -8,7 +8,7 @@ permissions: jobs: auto-merge: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@ae4ad6937ec755800c4a77d22e426aba679bf91c # v0.38.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 permissions: contents: write pull-requests: write diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 011c040..38d3314 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ permissions: jobs: dependency-review: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@ae4ad6937ec755800c4a77d22e426aba679bf91c # v0.38.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 permissions: contents: read pull-requests: write diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 90dc78b..9201a93 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -18,7 +18,7 @@ permissions: jobs: build: - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@ae4ad6937ec755800c4a77d22e426aba679bf91c # v0.38.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 65182e3..95b3e0b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: permissions: contents: write if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@ae4ad6937ec755800c4a77d22e426aba679bf91c # v0.38.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 97c40cd..2479064 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -12,7 +12,7 @@ permissions: jobs: analysis: - uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@ae4ad6937ec755800c4a77d22e426aba679bf91c # v0.38.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 permissions: security-events: write id-token: write