Skip to content

Commit 5c42cbd

Browse files
authored
chore(deps): bump the github-actions group with 10 updates (#269)
Bumps the github-actions group with 10 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `3.6.0` | `4.2.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.16` | `3.28.18` | | [denoland/setup-deno](https://github.com/denoland/setup-deno) | `2.0.2` | `2.0.3` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.7.0` | `4.7.1` | | [microsoft/DevSkim-Action](https://github.com/microsoft/devskim-action) | `1.0.15` | `1.0.16` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.1` | `2.4.2` | | [rojopolis/spellcheck-github-actions](https://github.com/rojopolis/spellcheck-github-actions) | `0.48.0` | `0.49.0` | | [actions/ai-inference](https://github.com/actions/ai-inference) | `1.0.0` | `1.1.0` | | [super-linter/super-linter](https://github.com/super-linter/super-linter) | `7.3.0` | `7.4.0` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.88.28` | `3.88.35` | Updates `actions/checkout` from 3.6.0 to 4.2.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/releases">actions/checkout's releases</a>.</em></p> <blockquote> <h2>v4.2.2</h2> <h2>What's Changed</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p> <h2>v4.2.1</h2> <h2>What's Changed</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p> <h2>v4.2.0</h2> <h2>What's Changed</h2> <ul> <li>Add Ref and Commit outputs by <a href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li> <li>Dependabot updates in <a href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a> &amp; <a href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/yasonk"><code>@​yasonk</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/1869">actions/checkout#1869</a></li> <li><a href="https://github.com/lucacome"><code>@​lucacome</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v4.1.7...v4.2.0">https://github.com/actions/checkout/compare/v4.1.7...v4.2.0</a></p> <h2>v4.1.7</h2> <h2>What's Changed</h2> <ul> <li>Bump the minor-npm-dependencies group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li> <li>Check out other refs/* by commit by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li> <li>Pin actions/checkout's own workflows to a known, good, stable version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v4.1.6...v4.1.7">https://github.com/actions/checkout/compare/v4.1.6...v4.1.7</a></p> <h2>v4.1.6</h2> <h2>What's Changed</h2> <ul> <li>Check platform to set archive extension appropriately by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li> <li>Update for 4.1.6 release by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1733">actions/checkout#1733</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/checkout/compare/v4.1.5...v4.1.6">https://github.com/actions/checkout/compare/v4.1.5...v4.1.6</a></p> <h2>v4.1.5</h2> <h2>What's Changed</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2>v4.2.2</h2> <ul> <li><code>url-helper.ts</code> now leverages well-known environment variables by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li> <li>Expand unit test coverage for <code>isGhes</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li> </ul> <h2>v4.2.1</h2> <ul> <li>Check out other refs/* by commit if provided, fall back to ref by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li> </ul> <h2>v4.2.0</h2> <ul> <li>Add Ref and Commit outputs by <a href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li> <li>Dependency updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>, <a href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li> </ul> <h2>v4.1.7</h2> <ul> <li>Bump the minor-npm-dependencies group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li> <li>Check out other refs/* by commit by <a href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li> <li>Pin actions/checkout's own workflows to a known, good, stable version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li> </ul> <h2>v4.1.6</h2> <ul> <li>Check platform to set archive extension appropriately by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li> </ul> <h2>v4.1.5</h2> <ul> <li>Update NPM dependencies by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li> <li>Bump github/codeql-action from 2 to 3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li> <li>Bump actions/setup-node from 1 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li> <li>Bump actions/upload-artifact from 2 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li> <li>README: Suggest <code>user.email</code> to be <code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li> </ul> <h2>v4.1.4</h2> <ul> <li>Disable <code>extensions.worktreeConfig</code> when disabling <code>sparse-checkout</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li> <li>Add dependabot config by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li> <li>Bump the minor-actions-dependencies group with 2 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li> <li>Bump word-wrap from 1.2.3 to 1.2.5 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li> </ul> <h2>v4.1.3</h2> <ul> <li>Check git version before attempting to disable <code>sparse-checkout</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1656">actions/checkout#1656</a></li> <li>Add SSH user parameter by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1685">actions/checkout#1685</a></li> <li>Update <code>actions/checkout</code> version in <code>update-main-version.yml</code> by <a href="https://github.com/jww3"><code>@​jww3</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1650">actions/checkout#1650</a></li> </ul> <h2>v4.1.2</h2> <ul> <li>Fix: Disable sparse checkout whenever <code>sparse-checkout</code> option is not present <a href="https://github.com/dscho"><code>@​dscho</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1598">actions/checkout#1598</a></li> </ul> <h2>v4.1.1</h2> <ul> <li>Correct link to GitHub Docs by <a href="https://github.com/peterbe"><code>@​peterbe</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1511">actions/checkout#1511</a></li> <li>Link to release page from what's new section by <a href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in <a href="https://redirect.github.com/actions/checkout/pull/1514">actions/checkout#1514</a></li> </ul> <h2>v4.1.0</h2> <ul> <li><a href="https://redirect.github.com/actions/checkout/pull/1396">Add support for partial checkout filters</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/checkout/commit/11bd71901bbe5b1630ceea73d27597364c9af683"><code>11bd719</code></a> Prepare 4.2.2 Release (<a href="https://redirect.github.com/actions/checkout/issues/1953">#1953</a>)</li> <li><a href="https://github.com/actions/checkout/commit/e3d2460bbb42d7710191569f88069044cfb9d8cf"><code>e3d2460</code></a> Expand unit test coverage (<a href="https://redirect.github.com/actions/checkout/issues/1946">#1946</a>)</li> <li><a href="https://github.com/actions/checkout/commit/163217dfcd28294438ea1c1c149cfaf66eec283e"><code>163217d</code></a> <code>url-helper.ts</code> now leverages well-known environment variables. (<a href="https://redirect.github.com/actions/checkout/issues/1941">#1941</a>)</li> <li><a href="https://github.com/actions/checkout/commit/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871"><code>eef6144</code></a> Prepare 4.2.1 release (<a href="https://redirect.github.com/actions/checkout/issues/1925">#1925</a>)</li> <li><a href="https://github.com/actions/checkout/commit/6b42224f41ee5dfe5395e27c8b2746f1f9955030"><code>6b42224</code></a> Add workflow file for publishing releases to immutable action package (<a href="https://redirect.github.com/actions/checkout/issues/1919">#1919</a>)</li> <li><a href="https://github.com/actions/checkout/commit/de5a000abf73b6f4965bd1bcdf8f8d94a56ea815"><code>de5a000</code></a> Check out other refs/* by commit if provided, fall back to ref (<a href="https://redirect.github.com/actions/checkout/issues/1924">#1924</a>)</li> <li><a href="https://github.com/actions/checkout/commit/d632683dd7b4114ad314bca15554477dd762a938"><code>d632683</code></a> Prepare 4.2.0 release (<a href="https://redirect.github.com/actions/checkout/issues/1878">#1878</a>)</li> <li><a href="https://github.com/actions/checkout/commit/6d193bf28034eafb982f37bd894289fe649468fc"><code>6d193bf</code></a> Bump braces from 3.0.2 to 3.0.3 (<a href="https://redirect.github.com/actions/checkout/issues/1777">#1777</a>)</li> <li><a href="https://github.com/actions/checkout/commit/db0cee9a514becbbd4a101a5fbbbf47865ee316c"><code>db0cee9</code></a> Bump the minor-npm-dependencies group across 1 directory with 4 updates (<a href="https://redirect.github.com/actions/checkout/issues/1872">#1872</a>)</li> <li><a href="https://github.com/actions/checkout/commit/b6849436894e144dbce29d7d7fda2ae3bf9d8365"><code>b684943</code></a> Add Ref and Commit outputs (<a href="https://redirect.github.com/actions/checkout/issues/1180">#1180</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/checkout/compare/v3.6.0...11bd71901bbe5b1630ceea73d27597364c9af683">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action` from 3.28.16 to 3.28.18 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v3.28.18</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.28.18 - 16 May 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.21.3. <a href="https://redirect.github.com/github/codeql-action/pull/2893">#2893</a></li> <li>Skip validating SARIF produced by CodeQL for improved performance. <a href="https://redirect.github.com/github/codeql-action/pull/2894">#2894</a></li> <li>The number of threads and amount of RAM used by CodeQL can now be set via the <code>CODEQL_THREADS</code> and <code>CODEQL_RAM</code> runner environment variables. If set, these environment variables override the <code>threads</code> and <code>ram</code> inputs respectively. <a href="https://redirect.github.com/github/codeql-action/pull/2891">#2891</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.28.18/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.28.17</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.28.17 - 02 May 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.21.2. <a href="https://redirect.github.com/github/codeql-action/pull/2872">#2872</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.28.17/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <ul> <li>The CodeQL Action no longer includes its own copy of the extractor for the <code>actions</code> language, which is currently in public preview. The <code>actions</code> extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the <code>actions</code> language <em>and</em> you have pinned your <code>tools:</code> property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable <code>actions</code> analysis.</li> </ul> <h2>3.28.18 - 16 May 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.21.3. <a href="https://redirect.github.com/github/codeql-action/pull/2893">#2893</a></li> <li>Skip validating SARIF produced by CodeQL for improved performance. <a href="https://redirect.github.com/github/codeql-action/pull/2894">#2894</a></li> <li>The number of threads and amount of RAM used by CodeQL can now be set via the <code>CODEQL_THREADS</code> and <code>CODEQL_RAM</code> runner environment variables. If set, these environment variables override the <code>threads</code> and <code>ram</code> inputs respectively. <a href="https://redirect.github.com/github/codeql-action/pull/2891">#2891</a></li> </ul> <h2>3.28.17 - 02 May 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.21.2. <a href="https://redirect.github.com/github/codeql-action/pull/2872">#2872</a></li> </ul> <h2>3.28.16 - 23 Apr 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.21.1. <a href="https://redirect.github.com/github/codeql-action/pull/2863">#2863</a></li> </ul> <h2>3.28.15 - 07 Apr 2025</h2> <ul> <li>Fix bug where the action would fail if it tried to produce a debug artifact with more than 65535 files. <a href="https://redirect.github.com/github/codeql-action/pull/2842">#2842</a></li> </ul> <h2>3.28.14 - 07 Apr 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.21.0. <a href="https://redirect.github.com/github/codeql-action/pull/2838">#2838</a></li> </ul> <h2>3.28.13 - 24 Mar 2025</h2> <p>No user facing changes.</p> <h2>3.28.12 - 19 Mar 2025</h2> <ul> <li>Dependency caching should now cache more dependencies for Java <code>build-mode: none</code> extractions. This should speed up workflows and avoid inconsistent alerts in some cases.</li> <li>Update default CodeQL bundle version to 2.20.7. <a href="https://redirect.github.com/github/codeql-action/pull/2810">#2810</a></li> </ul> <h2>3.28.11 - 07 Mar 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.20.6. <a href="https://redirect.github.com/github/codeql-action/pull/2793">#2793</a></li> </ul> <h2>3.28.10 - 21 Feb 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.20.5. <a href="https://redirect.github.com/github/codeql-action/pull/2772">#2772</a></li> <li>Address an issue where the CodeQL Bundle would occasionally fail to decompress on macOS. <a href="https://redirect.github.com/github/codeql-action/pull/2768">#2768</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/ff0a06e83cb2de871e5a09832bc6a81e7276941f"><code>ff0a06e</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2896">#2896</a> from github/update-v3.28.18-b86edfc27</li> <li><a href="https://github.com/github/codeql-action/commit/a41e0844be4d25fcef7ce7fa536f3e30275a9a1c"><code>a41e084</code></a> Update changelog for v3.28.18</li> <li><a href="https://github.com/github/codeql-action/commit/b86edfc27a1e0d3b55127a7496a1c770a02b2f84"><code>b86edfc</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2893">#2893</a> from github/update-bundle/codeql-bundle-v2.21.3</li> <li><a href="https://github.com/github/codeql-action/commit/e93b90025f7c49dccc3ee640c4155b63eb9a6b39"><code>e93b900</code></a> Merge branch 'main' into update-bundle/codeql-bundle-v2.21.3</li> <li><a href="https://github.com/github/codeql-action/commit/510dfa3460b15b34a807ab5609b4691aed5ebbee"><code>510dfa3</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2894">#2894</a> from github/henrymercer/skip-validating-codeql-sarif</li> <li><a href="https://github.com/github/codeql-action/commit/492d7832457da825a964331d860789f3f19d105b"><code>492d783</code></a> Merge branch 'main' into henrymercer/skip-validating-codeql-sarif</li> <li><a href="https://github.com/github/codeql-action/commit/83bdf3b7f92061d2f6d74e2a4555ecf719adad68"><code>83bdf3b</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2859">#2859</a> from github/update-supported-enterprise-server-versions</li> <li><a href="https://github.com/github/codeql-action/commit/cffc916774454a5ead1c8fb7925abad20cda85e4"><code>cffc916</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2891">#2891</a> from austinpray-mixpanel/patch-1</li> <li><a href="https://github.com/github/codeql-action/commit/4420887272f1c68c7c58ca2970bdfb5eb657cf08"><code>4420887</code></a> Add deprecation warning for CodeQL 2.16.5 and earlier</li> <li><a href="https://github.com/github/codeql-action/commit/4e178c584157c51ff3d6fb87c764e7ed0715f82a"><code>4e178c5</code></a> Update supported versions table in README</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/v3.28.16...ff0a06e83cb2de871e5a09832bc6a81e7276941f">compare view</a></li> </ul> </details> <br /> Updates `denoland/setup-deno` from 2.0.2 to 2.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/denoland/setup-deno/releases">denoland/setup-deno's releases</a>.</em></p> <blockquote> <h2>v2.0.3</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/denoland/setup-deno/compare/v2.0.2...v2.0.3">https://github.com/denoland/setup-deno/compare/v2.0.2...v2.0.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/denoland/setup-deno/commit/e95548e56dfa95d4e1a28d6f422fafe75c4c26fb"><code>e95548e</code></a> 2.0.3 (<a href="https://redirect.github.com/denoland/setup-deno/issues/102">#102</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/8273ddd773c0c6d98f36a2090d9a7ee53dbf3fab"><code>8273ddd</code></a> fix: switch back to package.json as it's necessary for GH actions (<a href="https://redirect.github.com/denoland/setup-deno/issues/101">#101</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/609c0055983975d562c8554cc38ee754969f9287"><code>609c005</code></a> feat: include a hash of deno.lock files in the cache key automatically (<a href="https://redirect.github.com/denoland/setup-deno/issues/98">#98</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/aa0fea114b8b900f9aee1f5c4558935c601c17ee"><code>aa0fea1</code></a> feat: add built-in caching via inputs (<a href="https://redirect.github.com/denoland/setup-deno/issues/89">#89</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/db3496c46ad1f318f963e2c1f2cce55efe67a327"><code>db3496c</code></a> feat: add &quot;lts&quot; version option (<a href="https://redirect.github.com/denoland/setup-deno/issues/97">#97</a>)</li> <li><a href="https://github.com/denoland/setup-deno/commit/d74ee56ed6e07882f5322d77f64db3751d77bf02"><code>d74ee56</code></a> refactor: convert action to TS and bundle code (<a href="https://redirect.github.com/denoland/setup-deno/issues/95">#95</a>)</li> <li>See full diff in <a href="https://github.com/denoland/setup-deno/compare/909cc5acb0fdd60627fb858598759246509fa755...e95548e56dfa95d4e1a28d6f422fafe75c4c26fb">compare view</a></li> </ul> </details> <br /> Updates `actions/dependency-review-action` from 4.7.0 to 4.7.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/dependency-review-action/releases">actions/dependency-review-action's releases</a>.</em></p> <blockquote> <h2>v4.7.1</h2> <ul> <li>Packages added to <code>allow-dependencies-licenses</code> will be allowed even if the package in question has no license information <a href="https://redirect.github.com/actions/dependency-review-action/issues/889">#889</a></li> <li>License expressions (e.g. <code>Ruby OR GPL-2.0</code>) in the allow list are automatically discarded so that they don't invalidate the whole allow list, which should just be license identifier (e.g. <code>Ruby</code>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/dependency-review-action/commit/da24556b548a50705dd671f47852072ea4c105d9"><code>da24556</code></a> Merge pull request <a href="https://redirect.github.com/actions/dependency-review-action/issues/933">#933</a> from actions/dangoor/471-release</li> <li><a href="https://github.com/actions/dependency-review-action/commit/9af0caf0e50bd16cea055a1319f959e718f9cd5d"><code>9af0caf</code></a> Bump version number for 4.7.1</li> <li><a href="https://github.com/actions/dependency-review-action/commit/d8f2df20d5605f0dd46db3bd283002c24e357724"><code>d8f2df2</code></a> Merge pull request <a href="https://redirect.github.com/actions/dependency-review-action/issues/932">#932</a> from actions/907-disallow-expression</li> <li><a href="https://github.com/actions/dependency-review-action/commit/6e9307a3d4e5049e0dd8b5f9d51dfa0544391d3a"><code>6e9307a</code></a> Discard allow list entries that are not SPDX IDs</li> <li><a href="https://github.com/actions/dependency-review-action/commit/8805179dc9a63c54224914839d370dd93bd37b2e"><code>8805179</code></a> Merge pull request <a href="https://redirect.github.com/actions/dependency-review-action/issues/930">#930</a> from actions/889-allow-no-license</li> <li><a href="https://github.com/actions/dependency-review-action/commit/014300b08cd78d8944f631eb3415e4c079cdb3e8"><code>014300b</code></a> Update build</li> <li><a href="https://github.com/actions/dependency-review-action/commit/34486f306eacc0b5ba73c8d12b5af19a58d22364"><code>34486f3</code></a> Check namespaces when excluding license checks</li> <li><a href="https://github.com/actions/dependency-review-action/commit/9b155d6432a2e91d56f1d2ad084483e8cd766a23"><code>9b155d6</code></a> Update build</li> <li><a href="https://github.com/actions/dependency-review-action/commit/f199659a6a39762ca0753d8a2fb41192144f257a"><code>f199659</code></a> Allowing dependencies works with no licenses</li> <li>See full diff in <a href="https://github.com/actions/dependency-review-action/compare/38ecb5b593bf0eb19e335c03f97670f792489a8b...da24556b548a50705dd671f47852072ea4c105d9">compare view</a></li> </ul> </details> <br /> Updates `microsoft/DevSkim-Action` from 1.0.15 to 1.0.16 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/microsoft/devskim-action/releases">microsoft/DevSkim-Action's releases</a>.</em></p> <blockquote> <h2>v1.0.16</h2> <h2>What's Changed</h2> <ul> <li>Fix CodeQL version in README example by <a href="https://github.com/Vinicius-Evangelista"><code>@​Vinicius-Evangelista</code></a> in <a href="https://redirect.github.com/microsoft/DevSkim-Action/pull/33">microsoft/DevSkim-Action#33</a></li> <li>Fix archive crawling by <a href="https://github.com/thomasleplus"><code>@​thomasleplus</code></a> in <a href="https://redirect.github.com/microsoft/DevSkim-Action/pull/32">microsoft/DevSkim-Action#32</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Vinicius-Evangelista"><code>@​Vinicius-Evangelista</code></a> made their first contribution in <a href="https://redirect.github.com/microsoft/DevSkim-Action/pull/33">microsoft/DevSkim-Action#33</a></li> <li><a href="https://github.com/thomasleplus"><code>@​thomasleplus</code></a> made their first contribution in <a href="https://redirect.github.com/microsoft/DevSkim-Action/pull/32">microsoft/DevSkim-Action#32</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/microsoft/DevSkim-Action/compare/v1.0.15...v1.0.16">https://github.com/microsoft/DevSkim-Action/compare/v1.0.15...v1.0.16</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/microsoft/DevSkim-Action/commit/4b5047945a44163b94642a1cecc0d93a3f428cc6"><code>4b50479</code></a> Fix archive crawling (<a href="https://redirect.github.com/microsoft/devskim-action/issues/32">#32</a>)</li> <li><a href="https://github.com/microsoft/DevSkim-Action/commit/ab90723e472553e1ea7e43e1a8c8fbd31e70114c"><code>ab90723</code></a> docs: update codeql action version in readme (<a href="https://redirect.github.com/microsoft/devskim-action/issues/33">#33</a>)</li> <li>See full diff in <a href="https://github.com/microsoft/devskim-action/compare/a6b6966a33b497cd3ae2ebc406edf8f4cc2feec6...4b5047945a44163b94642a1cecc0d93a3f428cc6">compare view</a></li> </ul> </details> <br /> Updates `ossf/scorecard-action` from 2.4.1 to 2.4.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/ossf/scorecard-action/releases">ossf/scorecard-action's releases</a>.</em></p> <blockquote> <h2>v2.4.2</h2> <h2>What's Changed</h2> <p>This update bumps the Scorecard version to the v5.2.1 release. For a complete list of changes, please refer to the Scorecard <a href="https://github.com/ossf/scorecard/releases/tag/v5.2.0">v5.2.0</a> and <a href="https://github.com/ossf/scorecard/releases/tag/v5.2.1">v5.2.1</a> release notes.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/ossf/scorecard-action/compare/v2.4.1...v2.4.2">https://github.com/ossf/scorecard-action/compare/v2.4.1...v2.4.2</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/ossf/scorecard-action/commit/05b42c624433fc40578a4040d5cf5e36ddca8cde"><code>05b42c6</code></a> :seedling: bump docker to ghcr v2.4.2 (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1548">#1548</a>)</li> <li><a href="https://github.com/ossf/scorecard-action/commit/b225da6b2b97811a123bb34532642f3ad6a4f011"><code>b225da6</code></a> Bump github.com/ossf/scorecard/v5 from v5.2.0 to v5.2.1 (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1550">#1550</a>)</li> <li><a href="https://github.com/ossf/scorecard-action/commit/9399f6f42496e38fbb8dbcf85e17223226a5dafe"><code>9399f6f</code></a> :seedling: Bump the docker-images group across 1 directory with 2 updates (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1">#1</a>...</li> <li><a href="https://github.com/ossf/scorecard-action/commit/e1daa8c5c7ed469dbb0167e261ed1c9fa673a9ae"><code>e1daa8c</code></a> :seedling: Bump the github-actions group across 1 directory with 5 updates (#...</li> <li><a href="https://github.com/ossf/scorecard-action/commit/9fe6511b9b36af3b03200e49cf8fb09d261b5402"><code>9fe6511</code></a> :seedling: Bump golang.org/x/net from 0.39.0 to 0.40.0 (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1542">#1542</a>)</li> <li><a href="https://github.com/ossf/scorecard-action/commit/25b9cd9cd11610dcac11e59afed9910714b12129"><code>25b9cd9</code></a> :seedling: Bump github.com/ossf/scorecard/v5 from v5.1.1 to v5.2.0 (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1547">#1547</a>)</li> <li><a href="https://github.com/ossf/scorecard-action/commit/18cc9b81307fc5ab3c2cd7092955f06dcfdf8c42"><code>18cc9b8</code></a> :seedling: Bump golang.org/x/net from 0.38.0 to 0.39.0 (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1536">#1536</a>)</li> <li><a href="https://github.com/ossf/scorecard-action/commit/db7814227b097a902957aa24d989c6e473613a8e"><code>db78142</code></a> :seedling: Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1538">#1538</a>)</li> <li><a href="https://github.com/ossf/scorecard-action/commit/de386ed459e2f85111697f50fe076d0ea617a32f"><code>de386ed</code></a> :seedling: Bump golang from 1.24.1 to 1.24.2 in the docker-images group (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1534">#1534</a>)</li> <li><a href="https://github.com/ossf/scorecard-action/commit/5b7cedba4eccfb66a6277e40cbe18d1d559ecc00"><code>5b7cedb</code></a> :seedling: Bump github.com/sigstore/cosign/v2 from 2.4.3 to 2.5.0 (<a href="https://redirect.github.com/ossf/scorecard-action/issues/1537">#1537</a>)</li> <li>Additional commits viewable in <a href="https://github.com/ossf/scorecard-action/compare/f49aabe0b5af0936a0987cfb85d86b75731b0186...05b42c624433fc40578a4040d5cf5e36ddca8cde">compare view</a></li> </ul> </details> <br /> Updates `rojopolis/spellcheck-github-actions` from 0.48.0 to 0.49.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/rojopolis/spellcheck-github-actions/releases">rojopolis/spellcheck-github-actions's releases</a>.</em></p> <blockquote> <h2>0.49.0</h2> <h2>What's Changed</h2> <ul> <li>Bump docker/build-push-action from 6.15.0 to 6.16.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/239">rojopolis/spellcheck-github-actions#239</a></li> <li>Bump python from 3.13.2-slim-bookworm to 3.13.3-slim-bookworm by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/238">rojopolis/spellcheck-github-actions#238</a></li> <li>Bump docker/build-push-action from 6.16.0 to 6.17.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/240">rojopolis/spellcheck-github-actions#240</a></li> <li>Issue 241 and other things by <a href="https://github.com/jonasbn"><code>@​jonasbn</code></a> in <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/242">rojopolis/spellcheck-github-actions#242</a></li> </ul> <ul> <li> <p>Support for Italian as requested by: Stefan Oderbolz (<a href="https://github.com/metaode"><code>@​metaode</code></a>) via issue <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/241">#241</a>, the support is both for <code>aspell</code> and <code>hunspell</code></p> </li> <li> <p>Docker image updated to Python 3.13.3 slim via PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/238">#238</a> from Dependabot. <a href="https://docs.python.org/release/3.13.3/whatsnew/changelog.html">Release notes for Python 3.13.3</a></p> </li> <li> <p><code>pymdown-extensions</code> have been updated to: <code>10.15.0</code> hopefully addressing the issue outlined in issue <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/233">#233</a> from: Micha Hobert (<a href="https://github.com/Isengo1989"><code>@​Isengo1989</code></a>). <a href="https://github.com/facelessuser"><code>@​facelessuser</code></a> made the release of the dependency and I have included it in this release</p> </li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/rojopolis/spellcheck-github-actions/compare/0.48.0...0.49.0">https://github.com/rojopolis/spellcheck-github-actions/compare/0.48.0...0.49.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/rojopolis/spellcheck-github-actions/blob/master/CHANGELOG.md">rojopolis/spellcheck-github-actions's changelog</a>.</em></p> <blockquote> <h1>Change Log for spellcheck-github-actions</h1> <h2>0.49.0, 2025-05-22, feature release, update not required</h2> <ul> <li> <p>Support for Italian as requested by: Stefan Oderbolz (<a href="https://github.com/metaodi"><code>@​metaodi</code></a>) via issue <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/241">#241</a>, the support is both for <code>aspell</code> and <code>hunspell</code></p> </li> <li> <p>Docker image updated to Python 3.13.3 slim via PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/238">#238</a> from Dependabot. <a href="https://docs.python.org/release/3.13.3/whatsnew/changelog.html">Release notes for Python 3.13.3</a></p> </li> <li> <p><code>pymdown-extensions</code> have been updated to: <code>10.15.0</code> hopefully addressing the issue outlined in issue <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/233">#233</a> from: Micha Hobert (<a href="https://github.com/Isengo1989"><code>@​Isengo1989</code></a>). <a href="https://github.com/facelessuser"><code>@​facelessuser</code></a> made the release of the dependency and I have included it in this release</p> </li> </ul> <h2>0.48.0, 2025-04-01, feature release, update not required</h2> <ul> <li> <p>Support for <code>hunspell</code> via PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/224">#224</a> from <a href="https://github.com/funkill"><code>@​funkill</code></a></p> <p>These opens up for use of <code>hunspell</code> instead of the default: <code>aspell</code>. The following languages are supported:</p> <ul> <li>English</li> <li>German</li> <li>Spanish</li> <li>French</li> <li>Russian</li> <li>Ukranian</li> </ul> <p>And the <code>aspell</code> language support has been extended with:</p> <ul> <li>Russian</li> <li>Ukranian</li> </ul> <p>So the two spell checkers are aligned.</p> </li> <li> <p>The action now emits more information on what versions of tools it is using thanks to PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/234">#234</a> from <a href="https://github.com/brooke-hamilton"><code>@​brooke-hamilton</code></a></p> <p>The tools are:</p> <ul> <li><code>aspell</code></li> <li><code>hunspell</code></li> <li><code>pyspelling</code></li> </ul> </li> <li> <p>One step closer to full Docker image build automation via PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/218">#218</a> from <a href="https://github.com/shyim"><code>@​shyim</code></a>.</p> <p>This means that the PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/108">#108</a> from <a href="https://github.com/sxd"><code>@​sxd</code></a> was closed - the contribution from <a href="https://github.com/sxd"><code>@​sxd</code></a> was highly appreciated since it helped to understand the problem area and the solution.</p> <p>PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/218">#218</a> addresses issue: <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/193">#193</a>, which was a request for <code>arm64</code> support. Issue <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/80">#80</a> is still open and will not be closed until we have a fully automated build process for the Docker image.</p> </li> </ul> <h2>0.47.0, 2025-02-11, maintenance release, update not required</h2> <ul> <li>Docker image updated to Python 3.13.2 slim via PR <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/pull/228">#228</a> from Dependabot. <a href="https://docs.python.org/release/3.13.2/whatsnew/changelog.html">Release notes for Python 3.13.2</a></li> </ul> <h2>0.46.0, 2025-01-07, maintenance release, update not required</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/584b2ae95998967a53af7fbfb7f5b15352c38748"><code>584b2ae</code></a> Merge pull request <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/242">#242</a> from rojopolis/issue_241</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/53753563b4eeef2828ce7df56e3941094abc97fa"><code>5375356</code></a> Preparing release 0.49.0</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/79bd8b1c472623122528661471848d63ba1fa2a4"><code>79bd8b1</code></a> Forgot to bump the version numbers in meta-data and documentation</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/c823f02c53bec92419c65ff6b16144783dc7cc47"><code>c823f02</code></a> Merge pull request <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/240">#240</a> from rojopolis/dependabot/github_actions/docker/build...</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/f96134321f910cd499d4c58d59d4fcedf5a54f78"><code>f961343</code></a> Merge pull request <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/238">#238</a> from rojopolis/dependabot/docker/python-3.13.3-slim-b...</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/ba71ec03209bbed49dff4bc51474c7a53e0be2a2"><code>ba71ec0</code></a> Bump docker/build-push-action from 6.16.0 to 6.17.0</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/7a7743049619ed51f86367653ca42086b0b30525"><code>7a77430</code></a> Merge pull request <a href="https://redirect.github.com/rojopolis/spellcheck-github-actions/issues/239">#239</a> from rojopolis/dependabot/github_actions/docker/build...</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/a04e60798f2d256e6c3191442c22092d7081ffd4"><code>a04e607</code></a> Bump docker/build-push-action from 6.15.0 to 6.16.0</li> <li><a href="https://github.com/rojopolis/spellcheck-github-actions/commit/d68b218c556f341e4ea6b4012e9c60dd7316b227"><code>d68b218</code></a> Bump python from 3.13.2-slim-bookworm to 3.13.3-slim-bookworm</li> <li>See full diff in <a href="https://github.com/rojopolis/spellcheck-github-actions/compare/23dc186319866e1de224f94fe1d31b72797aeec7...584b2ae95998967a53af7fbfb7f5b15352c38748">compare view</a></li> </ul> </details> <br /> Updates `actions/ai-inference` from 1.0.0 to 1.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/ai-inference/releases">actions/ai-inference's releases</a>.</em></p> <blockquote> <h2>v1.1.0</h2> <h2>What's Changed</h2> <ul> <li>read prompt from file and print output to file by <a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/15">actions/ai-inference#15</a></li> <li>Clarify description in README by <a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/10">actions/ai-inference#10</a></li> <li>Bump <code>@​rollup/rollup-linux-x64-gnu</code> from 4.39.0 to 4.40.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/13">actions/ai-inference#13</a></li> <li>Bump the npm-development group across 1 directory with 14 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/16">actions/ai-inference#16</a></li> <li>Bumps all package versions, and re-builds by <a href="https://github.com/maraisr"><code>@​maraisr</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/25">actions/ai-inference#25</a></li> <li>Bump super-linter/super-linter from 7.3.0 to 7.4.0 in the actions-minor group by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/24">actions/ai-inference#24</a></li> <li>Bump <code>@​github/local-action</code> from 2.2.1 to 3.2.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/28">actions/ai-inference#28</a></li> <li>feat: Add system-prompt-file input for file-based system prompts by <a href="https://github.com/mattleibow"><code>@​mattleibow</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/27">actions/ai-inference#27</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/aiqiaoy"><code>@​aiqiaoy</code></a> made their first contribution in <a href="https://redirect.github.com/actions/ai-inference/pull/15">actions/ai-inference#15</a></li> <li><a href="https://github.com/joshmgross"><code>@​joshmgross</code></a> made their first contribution in <a href="https://redirect.github.com/actions/ai-inference/pull/10">actions/ai-inference#10</a></li> <li><a href="https://github.com/maraisr"><code>@​maraisr</code></a> made their first contribution in <a href="https://redirect.github.com/actions/ai-inference/pull/25">actions/ai-inference#25</a></li> <li><a href="https://github.com/mattleibow"><code>@​mattleibow</code></a> made their first contribution in <a href="https://redirect.github.com/actions/ai-inference/pull/27">actions/ai-inference#27</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/ai-inference/compare/v1...v1.1.0">https://github.com/actions/ai-inference/compare/v1...v1.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/ai-inference/commit/d645f067d89ee1d5d736a5990e327e504d1c5a4a"><code>d645f06</code></a> Merge pull request <a href="https://redirect.github.com/actions/ai-inference/issues/27">#27</a> from mattleibow/dev/system-prompt-file</li> <li><a href="https://github.com/actions/ai-inference/commit/9c57490bf11264fdb1e661bd26b1dd4f61a7d993"><code>9c57490</code></a> regen</li> <li><a href="https://github.com/actions/ai-inference/commit/aa31275bdc32a72afbf511380bf9a5a827cff838"><code>aa31275</code></a> Merge remote-tracking branch 'upstream/main' into dev/system-prompt-file</li> <li><a href="https://github.com/actions/ai-inference/commit/cacab0de8cd9bf067cf19ea91c8c3e3ede7ff813"><code>cacab0d</code></a> Merge pull request <a href="https://redirect.github.com/actions/ai-inference/issues/28">#28</a> from actions/dependabot/npm_and_yarn/github/local-acti...</li> <li><a href="https://github.com/actions/ai-inference/commit/8562e77a99b30d9cfac95fd217ffa38526700bf9"><code>8562e77</code></a> Bump <code>@​github/local-action</code> from 2.2.1 to 3.2.1</li> <li><a href="https://github.com/actions/ai-inference/commit/9aac9c75b3a7c5d5dc0d23ac911d6b423cee67a8"><code>9aac9c7</code></a> Formatting</li> <li><a href="https://github.com/actions/ai-inference/commit/eb37c9a493ec40a97962c18a73ee484e33fc9610"><code>eb37c9a</code></a> Formatting</li> <li><a href="https://github.com/actions/ai-inference/commit/7ee5d2347ba8ecd256f4954704ca5955fe1b4bfe"><code>7ee5d23</code></a> Merge pull request <a href="https://redirect.github.com/actions/ai-inference/issues/24">#24</a> from actions/dependabot/github_actions/actions-minor-8...</li> <li><a href="https://github.com/actions/ai-inference/commit/c9a9379c7193b57994468d7a62b5bbf3753cf9e0"><code>c9a9379</code></a> Bump super-linter/super-linter in the actions-minor group</li> <li><a href="https://github.com/actions/ai-inference/commit/ad31e754e32ae383f6143bf8f138e5d0c8192852"><code>ad31e75</code></a> Merge pull request <a href="https://redirect.github.com/actions/ai-inference/issues/25">#25</a> from actions/mr/bump-versions</li> <li>Additional commits viewable in <a href="https://github.com/actions/ai-inference/compare/c7105a4c1e9d7e35f7677b5e6f830f5d631ce76e...d645f067d89ee1d5d736a5990e327e504d1c5a4a">compare view</a></li> </ul> </details> <br /> Updates `super-linter/super-linter` from 7.3.0 to 7.4.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/super-linter/super-linter/releases">super-linter/super-linter's releases</a>.</em></p> <blockquote> <h2>v7.4.0</h2> <h2><a href="https://github.com/super-linter/super-linter/compare/v7.3.0...v7.4.0">7.4.0</a> (2025-05-13)</h2> <h3>🚀 Features</h3> <ul> <li>add env var for npm-groovy-lint failon level (<a href="https://redirect.github.com/super-linter/super-linter/issues/6530">#6530</a>) (<a href="https://github.com/super-linter/super-linter/commit/418c922120006007fad0f1839b3dae7210c0a50b">418c922</a>)</li> <li>check in-progress commit msg with commitlint (<a href="https://redirect.github.com/super-linter/super-linter/issues/6757">#6757</a>) (<a href="https://github.com/super-linter/super-linter/commit/57345c5c792fc2719987f110bd7fcb9c5973e1a1">57345c5</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6411">#6411</a></li> <li>disable xmllint verbose output if debuging (<a href="https://redirect.github.com/super-linter/super-linter/issues/6747">#6747</a>) (<a href="https://github.com/super-linter/super-linter/commit/e6c42ca463ef54ca2f2c2075f2e3e87f0d98577c">e6c42ca</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6653">#6653</a></li> <li>do not hide php composer output (<a href="https://redirect.github.com/super-linter/super-linter/issues/6637">#6637</a>) (<a href="https://github.com/super-linter/super-linter/commit/1c621411943c1ca0b2e057424cff5f7158addc2a">1c62141</a>)</li> <li>pass optional arguments to gitleaks (<a href="https://redirect.github.com/super-linter/super-linter/issues/6756">#6756</a>) (<a href="https://github.com/super-linter/super-linter/commit/109384b3f0f3398204739c8a4748e517e8c4a6d1">109384b</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6601">#6601</a></li> <li>set github_before_sha on pull requests (<a href="https://redirect.github.com/super-linter/super-linter/issues/6687">#6687</a>) (<a href="https://github.com/super-linter/super-linter/commit/d7f522206a7ce6f2a76be2e489fd69d590fcf1e8">d7f5222</a>)</li> <li>support eslint flat config files (<a href="https://redirect.github.com/super-linter/super-linter/issues/6619">#6619</a>) (<a href="https://github.com/super-linter/super-linter/commit/d349d575765a595151dd8ae5f42355336f37b028">d349d57</a>)</li> <li>support ktlint format fix (<a href="https://redirect.github.com/super-linter/super-linter/issues/6748">#6748</a>) (<a href="https://github.com/super-linter/super-linter/commit/5cb5915c0d20a2bb6ee51134a67af05a0b984161">5cb5915</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6618">#6618</a></li> <li>warn the user on conflicting tools (<a href="https://redirect.github.com/super-linter/super-linter/issues/6759">#6759</a>) (<a href="https://github.com/super-linter/super-linter/commit/b4aaae9add1a33d2161135540bce9afea7ffd24e">b4aaae9</a>)</li> </ul> <h3>🐛 Bugfixes</h3> <ul> <li>check if commit count is defined before using (<a href="https://redirect.github.com/super-linter/super-linter/issues/6733">#6733</a>) (<a href="https://github.com/super-linter/super-linter/commit/d007229c20a9759603dda61d6fa449bb244440c1">d007229</a>)</li> <li>check return code and misc test improvements (<a href="https://redirect.github.com/super-linter/super-linter/issues/6697">#6697</a>) (<a href="https://github.com/super-linter/super-linter/commit/7f46ec3f956811ca47e4234cd7fa694a96f19caf">7f46ec3</a>)</li> <li>configure nbqa tools (<a href="https://redirect.github.com/super-linter/super-linter/issues/6761">#6761</a>) (<a href="https://github.com/super-linter/super-linter/commit/e31adf99f984b59dbb2b093e5c26d7383fbdf440">e31adf9</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6736">#6736</a></li> <li>consider git dirs safe (<a href="https://redirect.github.com/super-linter/super-linter/issues/6675">#6675</a>) (<a href="https://github.com/super-linter/super-linter/commit/101d5a6e79d6caf56aa9fa45b432eaf17151019c">101d5a6</a>)</li> <li>do not use a pager on git log (<a href="https://redirect.github.com/super-linter/super-linter/issues/6765">#6765</a>) (<a href="https://github.com/super-linter/super-linter/commit/f5bae0c893640c928e51c39f6408f9f43e186ff0">f5bae0c</a>)</li> <li>emit prettier verbose output when debugging (<a href="https://redirect.github.com/super-linter/super-linter/issues/6636">#6636</a>) (<a href="https://github.com/super-linter/super-linter/commit/4e1eb5f5e0bffb6484d6411426a4edd32e35eeed">4e1eb5f</a>)</li> <li>export github_before_sha (<a href="https://redirect.github.com/super-linter/super-linter/issues/6714">#6714</a>) (<a href="https://github.com/super-linter/super-linter/commit/6401906d78fb46bed63ab074daac098d75305e26">6401906</a>)</li> <li>fix default values for prettier fix vars (<a href="https://redirect.github.com/super-linter/super-linter/issues/6769">#6769</a>) (<a href="https://github.com/super-linter/super-linter/commit/4230ecc9a86a7ae77b6da88a9f16227ac74359be">4230ecc</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6768">#6768</a></li> <li>more robust error checking and test fixes (<a href="https://redirect.github.com/super-linter/super-linter/issues/6693">#6693</a>) (<a href="https://github.com/super-linter/super-linter/commit/1c70566ff2fa29fa52365733a591857a66a6964c">1c70566</a>)</li> <li>skip symbolic links when passing files to prettier (<a href="https://redirect.github.com/super-linter/super-linter/issues/6620">#6620</a>) (<a href="https://github.com/super-linter/super-linter/commit/417a58a62d9b71cab86a467908b0aca8b4ec88b3">417a58a</a>)</li> <li>update editorconfig-checker config file name (<a href="https://redirect.github.com/super-linter/super-linter/issues/6730">#6730</a>) (<a href="https://github.com/super-linter/super-linter/commit/72f02f08d97c1351fad5a0959a9de8fdd3ca1786">72f02f0</a>)</li> </ul> <h3>⬆️ Dependency updates</h3> <ul> <li><strong>bundler:</strong> bump the rubocop group in /dependencies with 10 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6661">#6661</a>) (<a href="https://github.com/super-linter/super-linter/commit/2757a99ca5ce4642797fd2187a068c28f10acb3b">2757a99</a>)</li> <li><strong>bundler:</strong> bump the rubocop group in /dependencies with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6782">#6782</a>) (<a href="https://github.com/super-linter/super-linter/commit/17cf93575b5edb6cc02b4ef8d8738927d07c719b">17cf935</a>)</li> <li><strong>docker:</strong> bump python in the docker-base-images group (<a href="https://redirect.github.com/super-linter/super-linter/issues/6723">#6723</a>) (<a href="https://github.com/super-linter/super-linter/commit/960298bbebd32dc07191a2efe750cf813e6eabdc">960298b</a>)</li> <li><strong>docker:</strong> bump the docker group across 1 directory with 17 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6776">#6776</a>) (<a href="https://github.com/super-linter/super-linter/commit/8b602a4d8b62847d02044e9bd7b19b2081631f1d">8b602a4</a>)</li> <li><strong>java:</strong> bump com.google.googlejavaformat:google-java-format (<a href="https://redirect.github.com/super-linter/super-linter/issues/6780">#6780</a>) (<a href="https://github.com/super-linter/super-linter/commit/aa3f3f87797b1d4b58682f4012069b0d5739c0b4">aa3f3f8</a>)</li> <li><strong>java:</strong> bump com.puppycrawl.tools:checkstyle (<a href="https://redirect.github.com/super-linter/super-linter/issues/6639">#6639</a>) (<a href="https://github.com/super-linter/super-linter/commit/59f2b6bebb71bd8587eda48518b7fec475138eb4">59f2b6b</a>)</li> <li><strong>npm:</strong> bump <code>@​babel/eslint-parser</code> in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6762">#6762</a>) (<a href="https://github.com/super-linter/super-linter/commit/fd53895808c3312b4a8bbd5d017626f895f86f88">fd53895</a>)</li> <li><strong>npm:</strong> bump <code>@​babel/runtime-corejs3</code> (<a href="https://redirect.github.com/super-linter/super-linter/issues/6651">#6651</a>) (<a href="https://github.com/super-linter/super-linter/commit/8fbf79e7cd4907ab33eb5b130ec81873582444c0">8fbf79e</a>)</li> <li><strong>npm:</strong> bump <code>@​stoplight/spectral-cli</code> in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6742">#6742</a>) (<a href="https://github.com/super-linter/super-linter/commit/56355b5d6ea91fdf7dfc98aef76cebad07cc7fb7">56355b5</a>)</li> <li><strong>npm:</strong> bump asl-validator from 3.13.0 to 3.14.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6631">#6631</a>) (<a href="https://github.com/super-linter/super-linter/commit/30aa4b3218937031b1485461bb57124575a09b90">30aa4b3</a>)</li> <li><strong>npm:</strong> bump asl-validator from 3.14.0 to 3.15.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6777">#6777</a>) (<a href="https://github.com/super-linter/super-linter/commit/660f7dcb41565d1f232b9f16d81ee769e46753c7">660f7dc</a>)</li> <li><strong>npm:</strong> bump next (<a href="https://redirect.github.com/super-linter/super-linter/issues/6676">#6676</a>) (<a href="https://github.com/super-linter/super-linter/commit/f171ee5245d05a25a5901c8ddf5a55eb779b11f4">f171ee5</a>)</li> <li><strong>npm:</strong> bump next (<a href="https://redirect.github.com/super-linter/super-linter/issues/6708">#6708</a>) (<a href="https://github.com/super-linter/super-linter/commit/43faf9530c2b779d74245b557b58a8f680e7df77">43faf95</a>)</li> <li><strong>npm:</strong> bump next (<a href="https://redirect.github.com/super-linter/super-linter/issues/6729">#6729</a>) (<a href="https://github.com/super-linter/super-linter/commit/536538ab2da9d255ce7a368fba137778fab32642">536538a</a>)</li> <li><strong>npm:</strong> bump npm-groovy-lint from 15.1.0 to 15.2.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6779">#6779</a>) (<a href="https://github.com/super-linter/super-linter/commit/c19a3da4cfec85e855885f784c612d3536e6d96e">c19a3da</a>)</li> <li><strong>npm:</strong> bump prettier from 3.5.2 to 3.5.3 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6629">#6629</a>) (<a href="https://github.com/super-linter/super-linter/commit/6864c8c0d5cb1e7c8bbee4625a94dc0dcb88c666">6864c8c</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md">super-linter/super-linter's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2><a href="https://github.com/super-linter/super-linter/compare/v7.3.0...v7.4.0">7.4.0</a> (2025-05-13)</h2> <h3>🚀 Features</h3> <ul> <li>add env var for npm-groovy-lint failon level (<a href="https://redirect.github.com/super-linter/super-linter/issues/6530">#6530</a>) (<a href="https://github.com/super-linter/super-linter/commit/418c922120006007fad0f1839b3dae7210c0a50b">418c922</a>)</li> <li>check in-progress commit msg with commitlint (<a href="https://redirect.github.com/super-linter/super-linter/issues/6757">#6757</a>) (<a href="https://github.com/super-linter/super-linter/commit/57345c5c792fc2719987f110bd7fcb9c5973e1a1">57345c5</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6411">#6411</a></li> <li>disable xmllint verbose output if debuging (<a href="https://redirect.github.com/super-linter/super-linter/issues/6747">#6747</a>) (<a href="https://github.com/super-linter/super-linter/commit/e6c42ca463ef54ca2f2c2075f2e3e87f0d98577c">e6c42ca</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6653">#6653</a></li> <li>do not hide php composer output (<a href="https://redirect.github.com/super-linter/super-linter/issues/6637">#6637</a>) (<a href="https://github.com/super-linter/super-linter/commit/1c621411943c1ca0b2e057424cff5f7158addc2a">1c62141</a>)</li> <li>pass optional arguments to gitleaks (<a href="https://redirect.github.com/super-linter/super-linter/issues/6756">#6756</a>) (<a href="https://github.com/super-linter/super-linter/commit/109384b3f0f3398204739c8a4748e517e8c4a6d1">109384b</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6601">#6601</a></li> <li>set github_before_sha on pull requests (<a href="https://redirect.github.com/super-linter/super-linter/issues/6687">#6687</a>) (<a href="https://github.com/super-linter/super-linter/commit/d7f522206a7ce6f2a76be2e489fd69d590fcf1e8">d7f5222</a>)</li> <li>support eslint flat config files (<a href="https://redirect.github.com/super-linter/super-linter/issues/6619">#6619</a>) (<a href="https://github.com/super-linter/super-linter/commit/d349d575765a595151dd8ae5f42355336f37b028">d349d57</a>)</li> <li>support ktlint format fix (<a href="https://redirect.github.com/super-linter/super-linter/issues/6748">#6748</a>) (<a href="https://github.com/super-linter/super-linter/commit/5cb5915c0d20a2bb6ee51134a67af05a0b984161">5cb5915</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6618">#6618</a></li> <li>warn the user on conflicting tools (<a href="https://redirect.github.com/super-linter/super-linter/issues/6759">#6759</a>) (<a href="https://github.com/super-linter/super-linter/commit/b4aaae9add1a33d2161135540bce9afea7ffd24e">b4aaae9</a>)</li> </ul> <h3>🐛 Bugfixes</h3> <ul> <li>check if commit count is defined before using (<a href="https://redirect.github.com/super-linter/super-linter/issues/6733">#6733</a>) (<a href="https://github.com/super-linter/super-linter/commit/d007229c20a9759603dda61d6fa449bb244440c1">d007229</a>)</li> <li>check return code and misc test improvements (<a href="https://redirect.github.com/super-linter/super-linter/issues/6697">#6697</a>) (<a href="https://github.com/super-linter/super-linter/commit/7f46ec3f956811ca47e4234cd7fa694a96f19caf">7f46ec3</a>)</li> <li>configure nbqa tools (<a href="https://redirect.github.com/super-linter/super-linter/issues/6761">#6761</a>) (<a href="https://github.com/super-linter/super-linter/commit/e31adf99f984b59dbb2b093e5c26d7383fbdf440">e31adf9</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6736">#6736</a></li> <li>consider git dirs safe (<a href="https://redirect.github.com/super-linter/super-linter/issues/6675">#6675</a>) (<a href="https://github.com/super-linter/super-linter/commit/101d5a6e79d6caf56aa9fa45b432eaf17151019c">101d5a6</a>)</li> <li>do not use a pager on git log (<a href="https://redirect.github.com/super-linter/super-linter/issues/6765">#6765</a>) (<a href="https://github.com/super-linter/super-linter/commit/f5bae0c893640c928e51c39f6408f9f43e186ff0">f5bae0c</a>)</li> <li>emit prettier verbose output when debugging (<a href="https://redirect.github.com/super-linter/super-linter/issues/6636">#6636</a>) (<a href="https://github.com/super-linter/super-linter/commit/4e1eb5f5e0bffb6484d6411426a4edd32e35eeed">4e1eb5f</a>)</li> <li>export github_before_sha (<a href="https://redirect.github.com/super-linter/super-linter/issues/6714">#6714</a>) (<a href="https://github.com/super-linter/super-linter/commit/6401906d78fb46bed63ab074daac098d75305e26">6401906</a>)</li> <li>fix default values for prettier fix vars (<a href="https://redirect.github.com/super-linter/super-linter/issues/6769">#6769</a>) (<a href="https://github.com/super-linter/super-linter/commit/4230ecc9a86a7ae77b6da88a9f16227ac74359be">4230ecc</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6768">#6768</a></li> <li>more robust error checking and test fixes (<a href="https://redirect.github.com/super-linter/super-linter/issues/6693">#6693</a>) (<a href="https://github.com/super-linter/super-linter/commit/1c70566ff2fa29fa52365733a591857a66a6964c">1c70566</a>)</li> <li>skip symbolic links when passing files to prettier (<a href="https://redirect.github.com/super-linter/super-linter/issues/6620">#6620</a>) (<a href="https://github.com/super-linter/super-linter/commit/417a58a62d9b71cab86a467908b0aca8b4ec88b3">417a58a</a>)</li> <li>update editorconfig-checker config file name (<a href="https://redirect…
2 parents 85a3340 + 9d4d1f8 commit 5c42cbd

12 files changed

Lines changed: 16 additions & 16 deletions

.github/workflows/codeql.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ jobs:
7575

7676
# Initializes the CodeQL tools for scanning.
7777
- name: Initialize CodeQL
78-
uses: github/codeql-action/init@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
78+
uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
7979
with:
8080
languages: ${{ matrix.language }}
8181
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -85,7 +85,7 @@ jobs:
8585
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
8686
# If this step fails, then you should remove it and run the build manually (see below)
8787
- name: Autobuild
88-
uses: github/codeql-action/autobuild@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
88+
uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
8989

9090
# ℹ️ Command-line programs to run using the OS shell.
9191
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -98,6 +98,6 @@ jobs:
9898
# ./location_of_script_within_repo/buildscript.sh
9999

100100
- name: Perform CodeQL Analysis
101-
uses: github/codeql-action/analyze@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
101+
uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
102102
with:
103103
category: "/language:${{matrix.language}}"

.github/workflows/deno.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ jobs:
5555

5656
- name: Setup Deno
5757
# uses: denoland/setup-deno@v1
58-
uses: denoland/setup-deno@909cc5acb0fdd60627fb858598759246509fa755 # v2.0.2
58+
uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
5959
with:
6060
deno-version: v1.x
6161

.github/workflows/dependency-review.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,4 +46,4 @@ jobs:
4646
- name: "Checkout Repository"
4747
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4848
- name: "Dependency Review"
49-
uses: actions/dependency-review-action@38ecb5b593bf0eb19e335c03f97670f792489a8b # v4.7.0
49+
uses: actions/dependency-review-action@da24556b548a50705dd671f47852072ea4c105d9 # v4.7.1

.github/workflows/devskim.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3636

3737
- name: Run DevSkim scanner
38-
uses: microsoft/DevSkim-Action@a6b6966a33b497cd3ae2ebc406edf8f4cc2feec6 # v1.0.15
38+
uses: microsoft/DevSkim-Action@4b5047945a44163b94642a1cecc0d93a3f428cc6 # v1.0.16
3939
with:
4040
directory-to-scan: .
4141
should-scan-archives: false
@@ -60,6 +60,6 @@ jobs:
6060
path: devskim-results.sarif
6161

6262
- name: Upload DevSkim scan results to GitHub Security tab
63-
uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17
63+
uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
6464
with:
6565
sarif_file: devskim-results.sarif

.github/workflows/eslint.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -72,7 +72,7 @@ jobs:
7272
continue-on-error: true
7373

7474
- name: Upload analysis results to GitHub
75-
uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v2.27.0
75+
uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v2.27.0
7676
with:
7777
sarif_file: eslint-results.sarif
7878
wait-for-processing: true

.github/workflows/ossar.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,6 @@ jobs:
5656

5757
# Upload results to the Security tab
5858
- name: Upload OSSAR results
59-
uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v3.28.16
59+
uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
6060
with:
6161
sarif_file: ${{ steps.ossar.outputs.sarifFile }}

.github/workflows/rebase.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
egress-policy: audit
2323

2424
- name: Checkout the latest code
25-
uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0
25+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2626
with:
2727
token: ${{ secrets.GITHUB_TOKEN }}
2828
fetch-depth: 0 # otherwise, you will fail to push refs to dest repo

.github/workflows/scorecards.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,7 @@ jobs:
7575
persist-credentials: false
7676

7777
- name: "Run analysis"
78-
uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
78+
uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
7979
with:
8080
results_file: results.sarif
8181
results_format: sarif
@@ -105,6 +105,6 @@ jobs:
105105

106106
# Upload the results to GitHub's code scanning dashboard.
107107
- name: "Upload to code-scanning"
108-
uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 # v2.27.0
108+
uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v2.27.0
109109
with:
110110
sarif_file: results.sarif

.github/workflows/spelling_action.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
egress-policy: audit
2020

2121
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
22-
- uses: rojopolis/spellcheck-github-actions@23dc186319866e1de224f94fe1d31b72797aeec7 # 0.48.0
22+
- uses: rojopolis/spellcheck-github-actions@584b2ae95998967a53af7fbfb7f5b15352c38748 # 0.49.0
2323
name: Spellcheck
2424
continue-on-error: true
2525
with:

.github/workflows/summary.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
- name: Run AI inference
2727
id: inference
28-
uses: actions/ai-inference@c7105a4c1e9d7e35f7677b5e6f830f5d631ce76e # v1.0.0
28+
uses: actions/ai-inference@d645f067d89ee1d5d736a5990e327e504d1c5a4a # v1.1.0
2929
with:
3030
prompt: |
3131
Summarize the following GitHub issue in one paragraph:

0 commit comments

Comments
 (0)