Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
24 changes: 12 additions & 12 deletions .github/workflows/actions.lock
Original file line number Diff line number Diff line change
Expand Up @@ -7,7 +7,7 @@ workflows:
- 'actions/checkout@v7.0.1'
'.github/workflows/codeql.yml':
- 'actions/checkout@v7.0.1'
- 'github/codeql-action@v4.39.0'
- 'github/codeql-action@v4.39.1'
'.github/workflows/container-build.yml':
- 'actions/checkout@v7.0.1'
'.github/workflows/dependabot-automerge.yml':
Expand Down Expand Up @@ -40,7 +40,7 @@ workflows:
- 'actions/cache@v6.1.0'
- 'actions/checkout@v7.0.1'
'.github/workflows/push-email-notify.yml':
- 'hyperpolymath/smtp-notify-action@v0.3.0'
- 'hyperpolymath/smtp-notify-action@v0.5.1'
'.github/workflows/quality.yml':
- 'actions/checkout@v7.0.1'
- 'editorconfig-checker/action-editorconfig-checker@v3.0.0'
Expand All @@ -60,7 +60,7 @@ workflows:
- 'actions/checkout@v7.0.1'
'.github/workflows/sonarqube.yml':
- 'actions/checkout@v7.0.1'
- 'sonarsource/sonarqube-scan-action@v8.2.1'
- 'sonarsource/sonarqube-scan-action@v8.4.0'
'.github/workflows/static-analysis-gate.yml':
- 'actions/checkout@v7.0.1'
- 'actions/download-artifact@v8.0.2'
Expand Down Expand Up @@ -140,19 +140,19 @@ dependencies:
commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124'
owner_id: 47606891
repo_id: 331103973
'github/codeql-action@v4.39.0':
ref: 'v4.39.0'
commit: 'sha1-6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee'
'github/codeql-action@v4.39.1':
ref: 'v4.39.1'
commit: 'sha1-9b3254085494b55a0f7c4c2b3d2d52cc712ce370'
owner_id: 9919
repo_id: 259445878
'haskell-actions/setup@v2.12.0':
ref: 'v2.12.0'
commit: 'sha1-6037f33647c3f17758a2356c80fc4a53d7e0685d'
owner_id: 75048950
repo_id: 623796603
'hyperpolymath/smtp-notify-action@v0.3.0':
ref: 'v0.3.0'
commit: 'sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be'
'hyperpolymath/smtp-notify-action@v0.5.1':
ref: 'v0.5.1'
commit: 'sha1-e384daf6167a7a7567642d6a62060106244d2413'
owner_id: 6759885
repo_id: 1352485172
'peter-evans/repository-dispatch@v4.0.1':
Expand All @@ -165,8 +165,8 @@ dependencies:
commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64'
owner_id: 2242
repo_id: 204253808
'sonarsource/sonarqube-scan-action@v8.2.1':
ref: 'v8.2.1'
commit: 'sha1-22918119ff8e1ca75a623e15c8296b6ea4fbe28f'
'sonarsource/sonarqube-scan-action@v8.4.0':
ref: 'v8.4.0'
commit: 'sha1-4d1dc0c91ee400dcf8a6dddf2f705ac36542e304'
owner_id: 545988
repo_id: 366408409
4 changes: 2 additions & 2 deletions .github/workflows/codeql.yml
Original file line number Diff line number Diff line change
Expand Up @@ -38,11 +38,11 @@ jobs:
- name: Checkout
uses: actions/checkout@v7.0.1
- name: Initialize CodeQL
uses: github/codeql-action/init@v4.39.0
uses: github/codeql-action/init@v4.39.1
with:
languages: ${{ matrix.language }}
build-mode: ${{ matrix.build-mode }}
- name: Perform CodeQL Analysis
uses: github/codeql-action/analyze@v4.39.0
uses: github/codeql-action/analyze@v4.39.1
with:
category: "/language:${{ matrix.language }}"
2 changes: 1 addition & 1 deletion .github/workflows/push-email-notify.yml
Original file line number Diff line number Diff line change
Expand Up @@ -41,9 +41,9 @@
timeout-minutes: 5
steps:
- name: Send push notification email
uses: hyperpolymath/smtp-notify-action@v0.5.0
uses: hyperpolymath/smtp-notify-action@v0.5.1
with:
server_address: ${{ secrets.SMTP_HOST }}

Check warning on line 46 in .github/workflows/push-email-notify.yml

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan

[hypatia] job `notify` in .github/workflows/push-email-notify.yml references `secrets.*` but does not install `step-security/harden-runner` or declare its egress — review outbound-egress monitoring
server_port: ${{ secrets.SMTP_PORT }}
secure: true
username: ${{ secrets.SMTP_USER }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/sonarqube.yml
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,6 @@
with:
fetch-depth: 0 # full history for accurate new-code detection
- name: SonarQube Scan
uses: SonarSource/sonarqube-scan-action@v8.3.0
uses: SonarSource/sonarqube-scan-action@v8.4.0
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

Check warning on line 35 in .github/workflows/sonarqube.yml

View workflow job for this annotation

GitHub Actions / Hypatia neurosymbolic scan

[hypatia] job `sonarqube` in .github/workflows/sonarqube.yml references `secrets.*` but does not install `step-security/harden-runner` or declare its egress — review outbound-egress monitoring
Loading