diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f556cf3..a302618 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -17,7 +17,7 @@ jobs: # The reusable workflow fixes the query suite to +security-and-quality org-wide; # build-mode: none analyses the sources directly (no Maven build needed for this # zero-dependency library). - uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-codeql.yml@8e6a0c7cca322b3e3189933a130a1df11e0b08e6 # v0.40.0 permissions: security-events: write contents: read diff --git a/.github/workflows/dependabot-auto-merge.yml b/.github/workflows/dependabot-auto-merge.yml index 7a0c322..a407722 100644 --- a/.github/workflows/dependabot-auto-merge.yml +++ b/.github/workflows/dependabot-auto-merge.yml @@ -8,7 +8,7 @@ permissions: jobs: auto-merge: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependabot-auto-merge.yml@8e6a0c7cca322b3e3189933a130a1df11e0b08e6 # v0.40.0 permissions: contents: write pull-requests: write diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 38d3314..244fbe2 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ permissions: jobs: dependency-review: - uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-dependency-review.yml@8e6a0c7cca322b3e3189933a130a1df11e0b08e6 # v0.40.0 permissions: contents: read pull-requests: write diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml index 9201a93..f83f390 100644 --- a/.github/workflows/maven.yml +++ b/.github/workflows/maven.yml @@ -18,7 +18,7 @@ permissions: jobs: build: - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-build.yml@8e6a0c7cca322b3e3189933a130a1df11e0b08e6 # v0.40.0 secrets: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} OSS_SONATYPE_USERNAME: ${{ secrets.OSS_SONATYPE_USERNAME }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 95b3e0b..089c2de 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: permissions: contents: write if: github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' - uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-maven-release.yml@8e6a0c7cca322b3e3189933a130a1df11e0b08e6 # v0.40.0 secrets: RELEASE_APP_ID: ${{ secrets.RELEASE_APP_ID }} RELEASE_APP_PRIVATE_KEY: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 2479064..d201625 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -12,7 +12,7 @@ permissions: jobs: analysis: - uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@47273b80f2d215fd277883956000407eb708db15 # v0.39.0 + uses: cuioss/cuioss-organization/.github/workflows/reusable-scorecards.yml@8e6a0c7cca322b3e3189933a130a1df11e0b08e6 # v0.40.0 permissions: security-events: write id-token: write