Skip to content

Commit 8f46f3b

Browse files
dependabot[bot]patbaumgartner
authored andcommitted
chore(deps): bump the github-actions group with 5 updates
Bumps the github-actions group with 5 updates: | Package | From | To | | --- | --- | --- | | [buildpacks/github-actions/setup-pack](https://github.com/buildpacks/github-actions) | `6.0.0` | `6.0.1` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.6.0` | `5.7.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.5.1` | `4.6.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.3` | `4.37.4` | | [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action) | `3.3.0` | `3.4.0` | Updates `buildpacks/github-actions/setup-pack` from 6.0.0 to 6.0.1 - [Release notes](https://github.com/buildpacks/github-actions/releases) - [Commits](buildpacks/github-actions@c1c7108...9670333) Updates `actions/setup-java` from 5.6.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@03ad4de...b6effb0) Updates `docker/login-action` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@abd2ef4...dbcb813) Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e4fba86...f205ea1) Updates `hadolint/hadolint-action` from 3.3.0 to 3.4.0 - [Release notes](https://github.com/hadolint/hadolint-action/releases) - [Commits](hadolint/hadolint-action@2332a7b...2a66e89) --- updated-dependencies: - dependency-name: buildpacks/github-actions/setup-pack dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: hadolint/hadolint-action dependency-version: 3.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 4859335 commit 8f46f3b

7 files changed

Lines changed: 27 additions & 27 deletions

File tree

.github/workflows/benchmark.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -53,18 +53,18 @@ jobs:
5353
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5454

5555
- name: Set up pack CLI
56-
uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0
56+
uses: buildpacks/github-actions/setup-pack@96703334b4d689ea01dce353220c651e294e3261 # v6.0.1
5757

5858
- name: Set up Java (Spring Boot sample only)
5959
if: matrix.java_version != ''
60-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
60+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
6161
with:
6262
distribution: temurin
6363
java-version: ${{ matrix.java_version }}
6464
cache: maven
6565

6666
- name: Log in to GHCR
67-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
67+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
6868
with:
6969
registry: ghcr.io
7070
username: ${{ github.actor }}
@@ -190,18 +190,18 @@ jobs:
190190
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
191191

192192
- name: Set up pack CLI
193-
uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0
193+
uses: buildpacks/github-actions/setup-pack@96703334b4d689ea01dce353220c651e294e3261 # v6.0.1
194194

195195
- name: Set up Java (Spring Boot sample only)
196196
if: matrix.java_version != ''
197-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
197+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
198198
with:
199199
distribution: temurin
200200
java-version: ${{ matrix.java_version }}
201201
cache: maven
202202

203203
- name: Log in to GHCR
204-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
204+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
205205
with:
206206
registry: ghcr.io
207207
username: ${{ github.actor }}
@@ -356,7 +356,7 @@ jobs:
356356
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
357357

358358
- name: Log in to GHCR
359-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
359+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
360360
with:
361361
registry: ghcr.io
362362
username: ${{ github.actor }}

.github/workflows/build-and-push.yml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040

4141
- name: Log in to GHCR
4242
if: github.event_name != 'pull_request'
43-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
43+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
4444
with:
4545
registry: ${{ env.REGISTRY }}
4646
username: ${{ github.actor }}
@@ -111,7 +111,7 @@ jobs:
111111

112112
- name: Log in to GHCR
113113
if: github.event_name != 'pull_request'
114-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
114+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
115115
with:
116116
registry: ${{ env.REGISTRY }}
117117
username: ${{ github.actor }}
@@ -182,10 +182,10 @@ jobs:
182182
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
183183

184184
- name: Set up pack CLI
185-
uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0
185+
uses: buildpacks/github-actions/setup-pack@96703334b4d689ea01dce353220c651e294e3261 # v6.0.1
186186

187187
- name: Log in to GHCR
188-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
188+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
189189
with:
190190
registry: ${{ env.REGISTRY }}
191191
username: ${{ github.actor }}
@@ -246,10 +246,10 @@ jobs:
246246
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
247247

248248
- name: Set up pack CLI
249-
uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0
249+
uses: buildpacks/github-actions/setup-pack@96703334b4d689ea01dce353220c651e294e3261 # v6.0.1
250250

251251
- name: Log in to GHCR
252-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
252+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
253253
with:
254254
registry: ${{ env.REGISTRY }}
255255
username: ${{ github.actor }}

.github/workflows/openrewrite.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3939

4040
- name: Set up Java
41-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
41+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
4242
with:
4343
distribution: temurin
4444
java-version: "25"
@@ -85,7 +85,7 @@ jobs:
8585
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
8686

8787
- name: Set up Java
88-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
88+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
8989
with:
9090
distribution: temurin
9191
java-version: "25"

.github/workflows/quality-gates.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
5959

6060
- name: Set up Java
61-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
61+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
6262
with:
6363
distribution: temurin
6464
java-version: "25"

.github/workflows/scorecard.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
publish_results: true
4545

4646
- name: Upload Scorecard SARIF
47-
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
47+
uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
4848
with:
4949
sarif_file: scorecard-results.sarif
5050
category: scorecard

.github/workflows/security-scan.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -36,28 +36,28 @@ jobs:
3636
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
3737

3838
- name: Run hadolint on build Dockerfile
39-
uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
39+
uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0
4040
with:
4141
dockerfile: stack/build/Dockerfile
4242
format: sarif
4343
output-file: hadolint-build.sarif
4444

4545
- name: Run hadolint on run Dockerfile
46-
uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
46+
uses: hadolint/hadolint-action@2a66e89f53d0771bb131a7fa31f3136336094aa6 # v3.4.0
4747
with:
4848
dockerfile: stack/run/Dockerfile
4949
format: sarif
5050
output-file: hadolint-run.sarif
5151

5252
- name: Upload hadolint SARIF (build image)
53-
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
53+
uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
5454
if: always()
5555
with:
5656
sarif_file: hadolint-build.sarif
5757
category: hadolint-build
5858

5959
- name: Upload hadolint SARIF (run image)
60-
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
60+
uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
6161
if: always()
6262
with:
6363
sarif_file: hadolint-run.sarif
@@ -89,7 +89,7 @@ jobs:
8989
github-pat: ${{ secrets.GITHUB_TOKEN }}
9090

9191
- name: Upload Trivy SARIF – filesystem
92-
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
92+
uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
9393
if: always()
9494
with:
9595
sarif_file: trivy-fs.sarif
@@ -133,7 +133,7 @@ jobs:
133133
github-pat: ${{ secrets.GITHUB_TOKEN }}
134134

135135
- name: Upload Trivy SARIF – build stack image
136-
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
136+
uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
137137
if: always()
138138
with:
139139
sarif_file: trivy-build-image.sarif
@@ -177,7 +177,7 @@ jobs:
177177
github-pat: ${{ secrets.GITHUB_TOKEN }}
178178

179179
- name: Upload Trivy SARIF – run stack image
180-
uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3
180+
uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
181181
if: always()
182182
with:
183183
sarif_file: trivy-run-image.sarif

.github/workflows/test.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -68,17 +68,17 @@ jobs:
6868
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
6969

7070
- name: Set up pack CLI
71-
uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0
71+
uses: buildpacks/github-actions/setup-pack@96703334b4d689ea01dce353220c651e294e3261 # v6.0.1
7272

7373
- name: Set up Java
74-
uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0
74+
uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
7575
with:
7676
distribution: temurin
7777
java-version: "25"
7878
cache: maven
7979

8080
- name: Log in to GHCR
81-
uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4.5.1
81+
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
8282
with:
8383
registry: ghcr.io
8484
username: ${{ github.actor }}

0 commit comments

Comments
 (0)