From 045e0277dd87c9d942ee9cc4de6ed35f3030bf31 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 6 Sep 2026 00:10:18 +0000 Subject: [PATCH] chore(ci): bump the actions-major group across 1 directory with 5 updates Bumps the actions-major group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [openai/codex-action](https://github.com/openai/codex-action) | `1.11` | `1.12` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.7` | `4.37.9` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` | | [linear/linear-release-action](https://github.com/linear/linear-release-action) | `0.15.1` | `0.17.1` | Updates `openai/codex-action` from 1.11 to 1.12 - [Changelog](https://github.com/openai/codex-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/openai/codex-action/compare/52fe01ec70a42f454c9d2ebd47598f9fd6893d56...86365089eb2b84e0a8fb0717b304f8bdcb13b20e) Updates `github/codeql-action/init` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `github/codeql-action/analyze` from 4.37.7 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/3d0d9888cb7fd7b750713d6e236d1fcb99157228...efb35369e0ad2afab669f228072c1b0d510eae64) Updates `linear/linear-release-action` from 0.15.1 to 0.17.1 - [Release notes](https://github.com/linear/linear-release-action/releases) - [Commits](https://github.com/linear/linear-release-action/compare/17b8c24f8ceb2b98cabaf1965ff83c55dd596fac...3f31fcf14c110cc53579fcc3575a26d469c413b4) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-major - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-major - dependency-name: linear/linear-release-action dependency-version: 0.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-major - dependency-name: openai/codex-action dependency-version: '1.12' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-major - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-major ... Signed-off-by: dependabot[bot] --- .github/workflows/ai-review.yml | 4 ++-- .github/workflows/cli-go-codeql.yml | 4 ++-- .github/workflows/release-config.yml | 2 +- .github/workflows/release-shared.yml | 6 +++--- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/ai-review.yml b/.github/workflows/ai-review.yml index 1d38ff06dc..2c82cc1e7e 100644 --- a/.github/workflows/ai-review.yml +++ b/.github/workflows/ai-review.yml @@ -331,7 +331,7 @@ jobs: # its output file — the step sits idle until the job timeout, discarding # a completed review (openai/codex-action#150). v1.11 handles the same # heavy workload cleanly. There is no released fix above v1.12 yet. - uses: openai/codex-action@52fe01ec70a42f454c9d2ebd47598f9fd6893d56 # v1.11 + uses: openai/codex-action@86365089eb2b84e0a8fb0717b304f8bdcb13b20e # v1.12 with: openai-api-key: ${{ secrets.OPENAI_API_KEY }} prompt-file: .github/ai-review/codex-review-prompt.md @@ -495,7 +495,7 @@ jobs: # its output file — the step sits idle until the job timeout, discarding # a completed review (openai/codex-action#150). v1.11 handles the same # heavy workload cleanly. There is no released fix above v1.12 yet. - uses: openai/codex-action@52fe01ec70a42f454c9d2ebd47598f9fd6893d56 # v1.11 + uses: openai/codex-action@86365089eb2b84e0a8fb0717b304f8bdcb13b20e # v1.12 with: openai-api-key: ${{ secrets.OPENAI_API_KEY }} prompt-file: trusted/.github/ai-review/adjudicate-prompt.md diff --git a/.github/workflows/cli-go-codeql.yml b/.github/workflows/cli-go-codeql.yml index 7e51715cb8..e079be038c 100644 --- a/.github/workflows/cli-go-codeql.yml +++ b/.github/workflows/cli-go-codeql.yml @@ -67,7 +67,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -95,7 +95,7 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: category: "/language:${{matrix.language}}" defaults: diff --git a/.github/workflows/release-config.yml b/.github/workflows/release-config.yml index c8c7aa83fb..c002f39c8f 100644 --- a/.github/workflows/release-config.yml +++ b/.github/workflows/release-config.yml @@ -393,7 +393,7 @@ jobs: echo "dist-tag ${NPM_TAG} -> ${VERSION} confirmed." - name: Create GitHub Release - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 with: token: ${{ github.token }} tag_name: config-v${{ needs.plan.outputs.version }} diff --git a/.github/workflows/release-shared.yml b/.github/workflows/release-shared.yml index acfed18f70..3ad7fec72e 100644 --- a/.github/workflows/release-shared.yml +++ b/.github/workflows/release-shared.yml @@ -389,7 +389,7 @@ jobs: done - name: Create draft GitHub Release - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 with: tag_name: v${{ inputs.version }} name: v${{ inputs.version }} @@ -426,7 +426,7 @@ jobs: - name: Sync stable release to Linear if: ${{ inputs.channel == 'stable' && env.LINEAR_CLI_STABLE_RELEASE_ACCESS_KEY != '' }} - uses: linear/linear-release-action@17b8c24f8ceb2b98cabaf1965ff83c55dd596fac # v0 + uses: linear/linear-release-action@3f31fcf14c110cc53579fcc3575a26d469c413b4 # v0 with: access_key: ${{ env.LINEAR_CLI_STABLE_RELEASE_ACCESS_KEY }} version: v${{ inputs.version }} @@ -437,7 +437,7 @@ jobs: - name: Sync beta release to Linear if: ${{ inputs.channel == 'beta' && env.LINEAR_CLI_BETA_RELEASE_ACCESS_KEY != '' }} - uses: linear/linear-release-action@17b8c24f8ceb2b98cabaf1965ff83c55dd596fac # v0 + uses: linear/linear-release-action@3f31fcf14c110cc53579fcc3575a26d469c413b4 # v0 with: access_key: ${{ env.LINEAR_CLI_BETA_RELEASE_ACCESS_KEY }} version: v${{ inputs.version }}