Skip to content

Commit 7dc16fc

Browse files
authored
Merge PR #294
Bumps the github-actions group with 8 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.12.2` | `2.13.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.2` | `3.29.5` | | [actions/first-interaction](https://github.com/actions/first-interaction) | `1.3.0` | `2.0.0` | | [google/osv-scanner-action](https://github.com/google/osv-scanner-action) | `2.0.3` | `2.1.0` | | [cicirello/generate-sitemap](https://github.com/cicirello/generate-sitemap) | `1.10.1` | `1.10.2` | | [actions/ai-inference](https://github.com/actions/ai-inference) | `1.1.0` | `1.2.3` | | [super-linter/super-linter](https://github.com/super-linter/super-linter) | `7.4.0` | `8.0.0` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `3.89.2` | `3.90.2` | Updates `step-security/harden-runner` from 2.12.2 to 2.13.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/step-security/harden-runner/releases">step-security/harden-runner's releases</a>.</em></p> <blockquote> <h2>v2.13.0</h2> <h2>What's Changed</h2> <ul> <li>Improved job markdown summary</li> <li>Https monitoring for all domains (included with the enterprise tier)</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/step-security/harden-runner/compare/v2...v2.13.0">https://github.com/step-security/harden-runner/compare/v2...v2.13.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/step-security/harden-runner/commit/ec9f2d5744a09debf3a187a3f4f675c53b671911"><code>ec9f2d5</code></a> Merge pull request <a href="https://redirect.github.com/step-security/harden-runner/issues/565">#565</a> from step-security/rc-24</li> <li><a href="https://github.com/step-security/harden-runner/commit/04bcbc31cfcefe0cf4720832008735021cec5ec4"><code>04bcbc3</code></a> update agent</li> <li><a href="https://github.com/step-security/harden-runner/commit/7c7a56fcaa124ab72fff1cc3e81257f264fd7317"><code>7c7a56f</code></a> feat: get job summary from API</li> <li>See full diff in <a href="https://github.com/step-security/harden-runner/compare/6c439dc8bdf85cadbbce9ed30d1c7b959517bc49...ec9f2d5744a09debf3a187a3f4f675c53b671911">compare view</a></li> </ul> </details> <br /> Updates `github/codeql-action` from 3.29.2 to 3.29.5 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v3.29.5</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.29.5 - 29 Jul 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.22.2. <a href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li> </ul> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.29.5/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.29.4</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.29.4 - 23 Jul 2025</h2> <p>No user facing changes.</p> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.29.4/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> <h2>v3.29.3</h2> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>3.29.3 - 21 Jul 2025</h2> <p>No user facing changes.</p> <p>See the full <a href="https://github.com/github/codeql-action/blob/v3.29.3/CHANGELOG.md">CHANGELOG.md</a> for more information.</p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h1>CodeQL Action Changelog</h1> <p>See the <a href="https://github.com/github/codeql-action/releases">releases page</a> for the relevant changes to the CodeQL CLI and language packs.</p> <h2>[UNRELEASED]</h2> <p>No user facing changes.</p> <h2>3.29.5 - 29 Jul 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.22.2. <a href="https://redirect.github.com/github/codeql-action/pull/2986">#2986</a></li> </ul> <h2>3.29.4 - 23 Jul 2025</h2> <p>No user facing changes.</p> <h2>3.29.3 - 21 Jul 2025</h2> <p>No user facing changes.</p> <h2>3.29.2 - 30 Jun 2025</h2> <ul> <li>Experimental: When the <code>quality-queries</code> input for the <code>init</code> action is provided with an argument, separate <code>.quality.sarif</code> files are produced and uploaded for each language with the results of the specified queries. Do not use this in production as it is part of an internal experiment and subject to change at any time. <a href="https://redirect.github.com/github/codeql-action/pull/2935">#2935</a></li> </ul> <h2>3.29.1 - 27 Jun 2025</h2> <ul> <li>Fix bug in PR analysis where user-provided <code>include</code> query filter fails to exclude non-included queries. <a href="https://redirect.github.com/github/codeql-action/pull/2938">#2938</a></li> <li>Update default CodeQL bundle version to 2.22.1. <a href="https://redirect.github.com/github/codeql-action/pull/2950">#2950</a></li> </ul> <h2>3.29.0 - 11 Jun 2025</h2> <ul> <li>Update default CodeQL bundle version to 2.22.0. <a href="https://redirect.github.com/github/codeql-action/pull/2925">#2925</a></li> <li>Bump minimum CodeQL bundle version to 2.16.6. <a href="https://redirect.github.com/github/codeql-action/pull/2912">#2912</a></li> </ul> <h2>3.28.21 - 28 July 2025</h2> <p>No user facing changes.</p> <h2>3.28.20 - 21 July 2025</h2> <ul> <li>Remove support for combining SARIF files from a single upload for GHES 3.18, see <a href="https://github.blog/changelog/2024-05-06-code-scanning-will-stop-combining-runs-from-a-single-upload/">the changelog post</a>. <a href="https://redirect.github.com/github/codeql-action/pull/2959">#2959</a></li> </ul> <h2>3.28.19 - 03 Jun 2025</h2> <ul> <li>The CodeQL Action no longer includes its own copy of the extractor for the <code>actions</code> language, which is currently in public preview. The <code>actions</code> extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the <code>actions</code> language <em>and</em> you have pinned your <code>tools:</code> property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable <code>actions</code> analysis.</li> <li>Update default CodeQL bundle version to 2.21.4. <a href="https://redirect.github.com/github/codeql-action/pull/2910">#2910</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/51f77329afa6477de8c49fc9c7046c15b9a4e79d"><code>51f7732</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2997">#2997</a> from github/update-v3.29.5-80a09d7b0</li> <li><a href="https://github.com/github/codeql-action/commit/8e90243ddbe0de3f12f4fa361675387b7f94c48d"><code>8e90243</code></a> Update changelog for v3.29.5</li> <li><a href="https://github.com/github/codeql-action/commit/80a09d7b0b5468297f127c81b43cb7335eed0f30"><code>80a09d7</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2996">#2996</a> from github/dependabot/npm_and_yarn/npm-240ab9fad0</li> <li><a href="https://github.com/github/codeql-action/commit/8388115dc8d6af25bf915cc8455a7d6a77253970"><code>8388115</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2994">#2994</a> from github/mergeback/changelog/v3.28.21</li> <li><a href="https://github.com/github/codeql-action/commit/401ecaf503b1a19fc0fbd253cc5afe7759870068"><code>401ecaf</code></a> Merge branch 'main' into mergeback/changelog/v3.28.21</li> <li><a href="https://github.com/github/codeql-action/commit/ab5c0c5fa56442a68c2d51b194ccc93faaaaa639"><code>ab5c0c5</code></a> Merge branch 'main' into dependabot/npm_and_yarn/npm-240ab9fad0</li> <li><a href="https://github.com/github/codeql-action/commit/cd264d4dcdc5ee89d8590821e29c66a1bdcaa968"><code>cd264d4</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2986">#2986</a> from github/update-bundle/codeql-bundle-v2.22.2</li> <li><a href="https://github.com/github/codeql-action/commit/4599055b1e273f63344615ade2c46c852c6d5c63"><code>4599055</code></a> Merge branch 'main' into update-bundle/codeql-bundle-v2.22.2</li> <li><a href="https://github.com/github/codeql-action/commit/fd7ad511e6bd5985ebbc84944e0e173d39a968b8"><code>fd7ad51</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/2971">#2971</a> from github/update-supported-enterprise-server-versions</li> <li><a href="https://github.com/github/codeql-action/commit/ac0c9bfe1e34d6a76860325c1b4abe8208ce98a6"><code>ac0c9bf</code></a> Merge branch 'main' into update-supported-enterprise-server-versions</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/181d5eefc20863364f96762470ba6f862bdef56b...51f77329afa6477de8c49fc9c7046c15b9a4e79d">compare view</a></li> </ul> </details> <br /> Updates `actions/first-interaction` from 1.3.0 to 2.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/first-interaction/releases">actions/first-interaction's releases</a>.</em></p> <blockquote> <h2>v2.0.0</h2> <h2>What's Changed</h2> <ul> <li>Installed <code>@​actions/core</code> by <a href="https://github.com/TheGuptaEmpire"><code>@​TheGuptaEmpire</code></a> in <a href="https://redirect.github.com/actions/first-interaction/pull/274">actions/first-interaction#274</a></li> <li>Update README.md by <a href="https://github.com/Alirezaaraby"><code>@​Alirezaaraby</code></a> in <a href="https://redirect.github.com/actions/first-interaction/pull/75">actions/first-interaction#75</a></li> <li>DOC: adjust the example to show a full yaml file by <a href="https://github.com/tacaswell"><code>@​tacaswell</code></a> in <a href="https://redirect.github.com/actions/first-interaction/pull/36">actions/first-interaction#36</a></li> <li>Demonstrate |- multiline YAML string in README by <a href="https://github.com/simonw"><code>@​simonw</code></a> in <a href="https://redirect.github.com/actions/first-interaction/pull/16">actions/first-interaction#16</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a href="https://redirect.github.com/actions/first-interaction/pull/317">actions/first-interaction#317</a></li> <li>Convert from Container to TypeScript Action by <a href="https://github.com/ncalteen"><code>@​ncalteen</code></a> in <a href="https://redirect.github.com/actions/first-interaction/pull/311">actions/first-interaction#311</a></li> <li>Bump <code>@​octokit/types</code> from 13.8.0 to 14.1.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/first-interaction/pull/323">actions/first-interaction#323</a></li> <li>Bump undici from 5.28.5 to 5.29.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/first-interaction/pull/319">actions/first-interaction#319</a></li> <li>Bump the npm-development group with 16 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/first-interaction/pull/320">actions/first-interaction#320</a></li> <li>Bump <code>@​actions/github</code> from 6.0.0 to 6.0.1 in the npm-production group by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/first-interaction/pull/321">actions/first-interaction#321</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/TheGuptaEmpire"><code>@​TheGuptaEmpire</code></a> made their first contribution in <a href="https://redirect.github.com/actions/first-interaction/pull/274">actions/first-interaction#274</a></li> <li><a href="https://github.com/Alirezaaraby"><code>@​Alirezaaraby</code></a> made their first contribution in <a href="https://redirect.github.com/actions/first-interaction/pull/75">actions/first-interaction#75</a></li> <li><a href="https://github.com/tacaswell"><code>@​tacaswell</code></a> made their first contribution in <a href="https://redirect.github.com/actions/first-interaction/pull/36">actions/first-interaction#36</a></li> <li><a href="https://github.com/simonw"><code>@​simonw</code></a> made their first contribution in <a href="https://redirect.github.com/actions/first-interaction/pull/16">actions/first-interaction#16</a></li> <li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made their first contribution in <a href="https://redirect.github.com/actions/first-interaction/pull/317">actions/first-interaction#317</a></li> <li><a href="https://github.com/ncalteen"><code>@​ncalteen</code></a> made their first contribution in <a href="https://redirect.github.com/actions/first-interaction/pull/311">actions/first-interaction#311</a></li> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/actions/first-interaction/pull/323">actions/first-interaction#323</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/first-interaction/compare/v1.3.0...v2.0.0">https://github.com/actions/first-interaction/compare/v1.3.0...v2.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/first-interaction/commit/2d4393e6bc0e2efb2e48fba7e06819c3bf61ffc9"><code>2d4393e</code></a> Merge pull request <a href="https://redirect.github.com/actions/first-interaction/issues/321">#321</a> from actions/dependabot/npm_and_yarn/npm-production-b...</li> <li><a href="https://github.com/actions/first-interaction/commit/4dbde70384151bfd744db7357b0b084af0f8aa60"><code>4dbde70</code></a> Rebuild dist</li> <li><a href="https://github.com/actions/first-interaction/commit/329f5ebce93dfc6ceecf574968a27bfc964e30a1"><code>329f5eb</code></a> Bump <code>@​actions/github</code> from 6.0.0 to 6.0.1 in the npm-production group</li> <li><a href="https://github.com/actions/first-interaction/commit/a7b6951cb1a192cdd1836a5cfc74ddebc8e6d6d3"><code>a7b6951</code></a> Merge pull request <a href="https://redirect.github.com/actions/first-interaction/issues/320">#320</a> from actions/dependabot/npm_and_yarn/npm-development-...</li> <li><a href="https://github.com/actions/first-interaction/commit/15ecaf52fe1b053d85565554ca5353c00f85cba4"><code>15ecaf5</code></a> Rebuild dist</li> <li><a href="https://github.com/actions/first-interaction/commit/12e4e8b26d063bf642efedd6e139e561d48e8287"><code>12e4e8b</code></a> Bump the npm-development group with 16 updates</li> <li><a href="https://github.com/actions/first-interaction/commit/cf67d10ea145b6732ab396c3b28fa9b7b8e74e9d"><code>cf67d10</code></a> Merge pull request <a href="https://redirect.github.com/actions/first-interaction/issues/319">#319</a> from actions/dependabot/npm_and_yarn/undici-5.29.0</li> <li><a href="https://github.com/actions/first-interaction/commit/b2d4b15c5a811ea1f4bbad268da2bca2109189d7"><code>b2d4b15</code></a> Licensed cache</li> <li><a href="https://github.com/actions/first-interaction/commit/27d1ab573741ae4c5f6754c10101173d25b5f53c"><code>27d1ab5</code></a> Rebuild</li> <li><a href="https://github.com/actions/first-interaction/commit/6418932147dea53065542ff1a93c651148dc8124"><code>6418932</code></a> Bump undici from 5.28.5 to 5.29.0</li> <li>Additional commits viewable in <a href="https://github.com/actions/first-interaction/compare/34f15e814fe48ac9312ccf29db4e74fa767cbab7...2d4393e6bc0e2efb2e48fba7e06819c3bf61ffc9">compare view</a></li> </ul> </details> <br /> Updates `google/osv-scanner-action` from 2.0.3 to 2.1.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google/osv-scanner-action/releases">google/osv-scanner-action's releases</a>.</em></p> <blockquote> <h2>v2.1.0</h2> <h2>What's Changed</h2> <ul> <li>chore(deps): update github/codeql-action action to v3.29.0 by <a href="https://github.com/renovate-bot"><code>@​renovate-bot</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/76">google/osv-scanner-action#76</a></li> <li>Update to v2.1.0 by <a href="https://github.com/michaelkedar"><code>@​michaelkedar</code></a> in <a href="https://redirect.github.com/google/osv-scanner-action/pull/81">google/osv-scanner-action#81</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google/osv-scanner-action/compare/v2.0.3...v2.1.0">https://github.com/google/osv-scanner-action/compare/v2.0.3...v2.1.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/osv-scanner-action/commit/b00f71e051ddddc6e46a193c31c8c0bf283bf9e6"><code>b00f71e</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/81">#81</a> from google/update-to-v2.1.0</li> <li><a href="https://github.com/google/osv-scanner-action/commit/2c241cbab572797753bccd9488c77c8ab77e00af"><code>2c241cb</code></a> Update unified workflow example to point to v2.1.0 reusable workflows</li> <li><a href="https://github.com/google/osv-scanner-action/commit/a36abfb324b4047484494c918df822a43e62035a"><code>a36abfb</code></a> Update reusable workflows to point to v2.1.0 actions</li> <li><a href="https://github.com/google/osv-scanner-action/commit/ce923d29da58ad12e6a700ddb9879fb7ecd1878e"><code>ce923d2</code></a> Update actions to use v2.1.0 osv-scanner image</li> <li><a href="https://github.com/google/osv-scanner-action/commit/9ab005e9d913f2bbccc67bdd3e2f69d2420b5f1e"><code>9ab005e</code></a> Merge pull request <a href="https://redirect.github.com/google/osv-scanner-action/issues/76">#76</a> from renovate-bot/renovate/workflows</li> <li><a href="https://github.com/google/osv-scanner-action/commit/79316138c8171b9ac01c76b6757e22d1e8d989fc"><code>7931613</code></a> chore(deps): update github/codeql-action action to v3.29.0</li> <li>See full diff in <a href="https://github.com/google/osv-scanner-action/compare/40a8940a65eab1544a6af759e43d936201a131a2...b00f71e051ddddc6e46a193c31c8c0bf283bf9e6">compare view</a></li> </ul> </details> <br /> Updates `cicirello/generate-sitemap` from 1.10.1 to 1.10.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/cicirello/generate-sitemap/releases">cicirello/generate-sitemap's releases</a>.</em></p> <blockquote> <h2>generate-sitemap, v1.10.2</h2> <h2>[1.10.2] - 2025-07-15</h2> <h3>Dependencies</h3> <ul> <li>Use the new tag scheme for cicirello/pyaction.</li> <li>Bumps cicirello/pyaction to 3.13.5-<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/2">gh-2</a>.75.1.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/cicirello/generate-sitemap/blob/master/CHANGELOG.md">cicirello/generate-sitemap's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file.</p> <p>The format is based on <a href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>, and this project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p> <h2>[Unreleased] - 2025-07-15</h2> <h3>Added</h3> <h3>Changed</h3> <h3>Deprecated</h3> <h3>Removed</h3> <h3>Fixed</h3> <h3>CI/CD</h3> <h3>Dependencies</h3> <h2>[1.10.2] - 2025-07-15</h2> <h3>Dependencies</h3> <ul> <li>Use the new tag scheme for cicirello/pyaction.</li> <li>Bumps cicirello/pyaction to 3.13.5-<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/2">gh-2</a>.75.1.</li> </ul> <h2>[1.10.1] - 2024-06-08</h2> <h3>Fixed</h3> <ul> <li>Escape characters that must be escaped in XML.</li> </ul> <h3>Dependencies</h3> <ul> <li>Bump cicirello/pyaction from 4.26.0 to 4.30.0</li> </ul> <h2>[1.10.0] - 2023-11-15</h2> <h3>Added</h3> <ul> <li>Ability to specify list of paths to exclude from sitemap, via new input <code>exclude-paths</code>.</li> </ul> <h3>Dependencies</h3> <ul> <li>Bump cicirello/pyaction from 4.25.0 to 4.26.0</li> </ul> <h2>[1.9.2] - 2023-10-05</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/cicirello/generate-sitemap/commit/f76c8312a5a364c49e2610b8af12ae861805a056"><code>f76c831</code></a> Prepare release 1.10.2 (<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/131">#131</a>)</li> <li><a href="https://github.com/cicirello/generate-sitemap/commit/da7307284b3a6eb5f016c9970cc3eda563f29966"><code>da73072</code></a> Bumps cicirello/pyaction to 3.13.5-<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/2">gh-2</a>.75.1 (<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/130">#130</a>)</li> <li><a href="https://github.com/cicirello/generate-sitemap/commit/3ea797120b97e9c8f305d25e0cb0c5983e2f287e"><code>3ea7971</code></a> Bump cicirello/pyaction from 4.32.0 to 4.33.0 (<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/129">#129</a>)</li> <li><a href="https://github.com/cicirello/generate-sitemap/commit/c35df74144397b0fe5da5b8e7ba000a157aeb9ea"><code>c35df74</code></a> Update CHANGELOG.md</li> <li><a href="https://github.com/cicirello/generate-sitemap/commit/ef051086afa1ad15111dc70217ae7c8b56aec0fc"><code>ef05108</code></a> Bump cicirello/pyaction from 4.31.0 to 4.32.0 (<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/128">#128</a>)</li> <li><a href="https://github.com/cicirello/generate-sitemap/commit/c32f93321d21ee8ffea172da38a30b927e701bb6"><code>c32f933</code></a> Bump cicirello/pyaction from 4.30.0 to 4.31.0 (<a href="https://redirect.github.com/cicirello/generate-sitemap/issues/127">#127</a>)</li> <li>See full diff in <a href="https://github.com/cicirello/generate-sitemap/compare/eb8db82126ee30619883c8c43e8c49ec14ebd6dc...f76c8312a5a364c49e2610b8af12ae861805a056">compare view</a></li> </ul> </details> <br /> Updates `actions/ai-inference` from 1.1.0 to 1.2.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/ai-inference/releases">actions/ai-inference's releases</a>.</em></p> <blockquote> <h2>v1.2.3</h2> <h2>What's Changed</h2> <ul> <li>Bump super-linter/super-linter from 7.4.0 to 8.0.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/ai-inference/pull/62">actions/ai-inference#62</a></li> <li>Add GitHub Actions workflow for releasing new version by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/59">actions/ai-inference#59</a></li> <li>Update readme to say MCP needs a PAT by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/60">actions/ai-inference#60</a></li> <li>Support .prompt.yml files by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/61">actions/ai-inference#61</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/ai-inference/compare/v1.2.2...v1.2.3">https://github.com/actions/ai-inference/compare/v1.2.2...v1.2.3</a></p> <h2>v1.2.2</h2> <h2>What's Changed</h2> <ul> <li>Fixup bundle by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/58">actions/ai-inference#58</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/ai-inference/compare/v1.2.1...v1.2.2">https://github.com/actions/ai-inference/compare/v1.2.1...v1.2.2</a></p> <h2>v1.2.1</h2> <h2>What's Changed</h2> <ul> <li>Ensure pkce-challenge is bundled in dist instead of treated as external by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/57">actions/ai-inference#57</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/ai-inference/compare/v1.2.0...v1.2.1">https://github.com/actions/ai-inference/compare/v1.2.0...v1.2.1</a></p> <h2>v1.2.0</h2> <h2>What's Changed</h2> <ul> <li>Setup licensed on the codespace by <a href="https://github.com/maraisr"><code>@​maraisr</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/29">actions/ai-inference#29</a></li> <li>Bump the npm-development group across 1 directory with 11 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/ai-inference/pull/36">actions/ai-inference#36</a></li> <li>Update readme by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/41">actions/ai-inference#41</a></li> <li>Bump <code>@​jest/globals</code> from 29.7.0 to 30.0.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/actions/ai-inference/pull/46">actions/ai-inference#46</a></li> <li>Make actual inference in CI optional, since it depends on org settings by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/55">actions/ai-inference#55</a></li> <li>fix: improve error handling for AI service responses by <a href="https://github.com/ainoya"><code>@​ainoya</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/49">actions/ai-inference#49</a></li> <li>Add read-only GitHub MCP support by <a href="https://github.com/sgoedecke"><code>@​sgoedecke</code></a> in <a href="https://redirect.github.com/actions/ai-inference/pull/56">actions/ai-inference#56</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ainoya"><code>@​ainoya</code></a> made their first contribution in <a href="https://redirect.github.com/actions/ai-inference/pull/49">actions/ai-inference#49</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/ai-inference/compare/v1.1.0...v1.2.0">https://github.com/actions/ai-inference/compare/v1.1.0...v1.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/ai-inference/commit/9693b137b6566bb66055a713613bf4f0493701eb"><code>9693b13</code></a> Merge pull request <a href="https://redirect.github.com/actions/ai-inference/issues/61">#61</a> from actions/sgoedecke/prompt-file</li> <li><a href="https://github.com/actions/ai-inference/commit/d0b2f23c43311aaad7b4a02894c649a1d6571b53"><code>d0b2f23</code></a> Merge branch 'main' into sgoedecke/prompt-file</li> <li><a href="https://github.com/actions/ai-inference/commit/0df96479bcb4ea24c63144c03be8b6ae7b11003f"><code>0df9647</code></a> Merge pull request <a href="https://redirect.github.com/actions/ai-inference/issues/60">#60</a> from actions/sgoedecke/update-readme</li> <li><a href="https://github.com/actions/ai-inference/commit/446f075e3b11fd0afca78c8d0df8d04942161497"><code>446f075</code></a> Merge branch 'main' into sgoedecke/update-readme</li> <li><a href="https://github.com/actions/ai-inference/commit/ce58b26ac7f47baf89dc3d2aeaea560107e25277"><code>ce58b26</code></a> Merge pull request <a href="https://redirect.github.com/actions/ai-inference/issues/59">#59</a> from actions/sgoedecke-patch-1</li> <li><a href="https://github.com/actions/ai-inference/commit/1cf96b0212eda48166c54df14085910a7c1f1faf"><code>1cf96b0</code></a> Merge branch 'main' into sgoedecke/update-readme</li> <li><a href="https://github.com/actions/ai-inference/commit/f79e4e11cbdac29de8a9db3b227468308bdc7897"><code>f79e4e1</code></a> regenerate dist</li> <li><a href="https://github.com/actions/ai-inference/commit/72102e50bfcdb3f04447929bf2b2fb23e2db81cf"><code>72102e5</code></a> Update src/prompt.ts</li> <li><a href="https://github.com/actions/ai-inference/commit/2bc30a525a2d4893b4836711c397c64122da23c6"><code>2bc30a5</code></a> regenerate dist</li> <li><a href="https://github.com/actions/ai-inference/commit/8f64ac12840ea5f874555d8a5f663a339e4c3cd6"><code>8f64ac1</code></a> Fixup types and tests</li> <li>Additional commits viewable in <a href="https://github.com/actions/ai-inference/compare/d645f067d89ee1d5d736a5990e327e504d1c5a4a...9693b137b6566bb66055a713613bf4f0493701eb">compare view</a></li> </ul> </details> <br /> Updates `super-linter/super-linter` from 7.4.0 to 8.0.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/super-linter/super-linter/releases">super-linter/super-linter's releases</a>.</em></p> <blockquote> <h2>v8.0.0</h2> <h2><a href="https://github.com/super-linter/super-linter/compare/v7.4.0...v8.0.0">8.0.0</a> (2025-07-17)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li>migrate to the latest eslint configuration (<a href="https://redirect.github.com/super-linter/super-linter/issues/6814">#6814</a>)</li> <li>remove unmaintained node packages (<a href="https://redirect.github.com/super-linter/super-linter/issues/6848">#6848</a>)</li> <li>remove unmaintained linters and formatters (<a href="https://redirect.github.com/super-linter/super-linter/issues/6773">#6773</a>)</li> </ul> <h3>🚀 Features</h3> <ul> <li>add options to the prettier command (<a href="https://redirect.github.com/super-linter/super-linter/issues/6882">#6882</a>) (<a href="https://github.com/super-linter/super-linter/commit/aeb043e06fe6cbb1702bf57e75dafc40b26b6c0d">aeb043e</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6772">#6772</a></li> <li>add vue files linting support (<a href="https://redirect.github.com/super-linter/super-linter/issues/6800">#6800</a>) (<a href="https://github.com/super-linter/super-linter/commit/597b1952cdc4e9e89fe3093e782a8596935a22a2">597b195</a>)</li> <li>migrate to the latest eslint configuration (<a href="https://redirect.github.com/super-linter/super-linter/issues/6814">#6814</a>) (<a href="https://github.com/super-linter/super-linter/commit/0d8f7aad449c1dc8ecaf2362684de5d379d2cd7d">0d8f7aa</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6405">#6405</a></li> <li>remove unmaintained linters and formatters (<a href="https://redirect.github.com/super-linter/super-linter/issues/6773">#6773</a>) (<a href="https://github.com/super-linter/super-linter/commit/4e80084b0c06e7cd178aa879d3a3cde965b73d65">4e80084</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6771">#6771</a></li> <li>support passing arguments to java (<a href="https://redirect.github.com/super-linter/super-linter/issues/6785">#6785</a>) (<a href="https://github.com/super-linter/super-linter/commit/4099648f56a29ed2b889b6b0765c198d83c9b508">4099648</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6281">#6281</a></li> </ul> <h3>🐛 Bugfixes</h3> <ul> <li>exclude files matching default branch ones (<a href="https://redirect.github.com/super-linter/super-linter/issues/6801">#6801</a>) (<a href="https://github.com/super-linter/super-linter/commit/26efde18b393f7820fcd1a618f21ae205362a687">26efde1</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6798">#6798</a></li> <li>use the current name for space after tabs (<a href="https://redirect.github.com/super-linter/super-linter/issues/6866">#6866</a>) (<a href="https://github.com/super-linter/super-linter/commit/bb9538964e4d0f91418fcb8423fd3901b3bd5e94">bb95389</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6829">#6829</a></li> </ul> <h3>⬆️ Dependency updates</h3> <ul> <li><strong>bundler:</strong> bump rubocop in /dependencies in the rubocop group (<a href="https://redirect.github.com/super-linter/super-linter/issues/6875">#6875</a>) (<a href="https://github.com/super-linter/super-linter/commit/e0f760c874fd64dc38eaa1cb628d169267c59bae">e0f760c</a>)</li> <li><strong>bundler:</strong> bump the rubocop group across 1 directory with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6820">#6820</a>) (<a href="https://github.com/super-linter/super-linter/commit/4cabfd657310aa37806368c500b16df43ded01f2">4cabfd6</a>)</li> <li><strong>docker:</strong> bump the docker group across 1 directory with 16 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6864">#6864</a>) (<a href="https://github.com/super-linter/super-linter/commit/1879b46afce189362ad060b6fa66184d6094a672">1879b46</a>)</li> <li><strong>java:</strong> bump the java-gradle group across 2 directories with 2 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6810">#6810</a>) (<a href="https://github.com/super-linter/super-linter/commit/b900e08c7ef98640db1d62399bde05f6c237a93e">b900e08</a>)</li> <li><strong>java:</strong> bump the java-gradle group across 2 directories with 2 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6880">#6880</a>) (<a href="https://github.com/super-linter/super-linter/commit/4d267db3b1855f53472086a5b0222fbbb70ff0b2">4d267db</a>)</li> <li><strong>npm:</strong> bump <code>@​babel/eslint-parser</code> in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6865">#6865</a>) (<a href="https://github.com/super-linter/super-linter/commit/5a39b53ef576e2eeaf3f850d041e4c25e8e09fb5">5a39b53</a>)</li> <li><strong>npm:</strong> bump <code>@​typescript-eslint/eslint-plugin</code> (<a href="https://redirect.github.com/super-linter/super-linter/issues/6872">#6872</a>) (<a href="https://github.com/super-linter/super-linter/commit/4099a2f87daa168ab43b0cb1a619253260b4feb0">4099a2f</a>)</li> <li><strong>npm:</strong> bump asl-validator from 3.15.0 to 4.0.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6845">#6845</a>) (<a href="https://github.com/super-linter/super-linter/commit/27e1d3b97be6df3ba9402355f4b17448db4580bf">27e1d3b</a>)</li> <li><strong>npm:</strong> bump eslint from 9.29.0 to 9.31.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6878">#6878</a>) (<a href="https://github.com/super-linter/super-linter/commit/c1b79c24e67e9b2d43598abfeaeba9df9df39c15">c1b79c2</a>)</li> <li><strong>npm:</strong> bump markdownlint-cli from 0.44.0 to 0.45.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6796">#6796</a>) (<a href="https://github.com/super-linter/super-linter/commit/cbafd4a64a6624d14043bc5714a38a4d991b8c84">cbafd4a</a>)</li> <li><strong>npm:</strong> bump next (<a href="https://redirect.github.com/super-linter/super-linter/issues/6869">#6869</a>) (<a href="https://github.com/super-linter/super-linter/commit/a0f6e7dc540772fbafb53657c4bc7acfb0933fdb">a0f6e7d</a>)</li> <li><strong>npm:</strong> bump prettier from 3.5.3 to 3.6.2 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6857">#6857</a>) (<a href="https://github.com/super-linter/super-linter/commit/53ab6bbb94bcdeca203858c646b88fa6e8f77576">53ab6bb</a>)</li> <li><strong>npm:</strong> bump react-router-dom (<a href="https://redirect.github.com/super-linter/super-linter/issues/6871">#6871</a>) (<a href="https://github.com/super-linter/super-linter/commit/4258001721a0f0e88d9b9fee849ba5e2341471ee">4258001</a>)</li> <li><strong>npm:</strong> bump renovate from 40.11.8 to 40.28.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6807">#6807</a>) (<a href="https://github.com/super-linter/super-linter/commit/66b6cb3802422e5c67588a7983dae41b518cf91c">66b6cb3</a>)</li> <li><strong>npm:</strong> bump renovate from 40.62.1 to 41.32.2 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6876">#6876</a>) (<a href="https://github.com/super-linter/super-linter/commit/b67cd445cfc4481e467de52bc247b655b32f7dce">b67cd44</a>)</li> <li><strong>npm:</strong> bump stylelint (<a href="https://redirect.github.com/super-linter/super-linter/issues/6867">#6867</a>) (<a href="https://github.com/super-linter/super-linter/commit/9572e8f1315da054fa080b9ed9e2c2ccae8033fe">9572e8f</a>)</li> <li><strong>npm:</strong> bump textlint (<a href="https://redirect.github.com/super-linter/super-linter/issues/6868">#6868</a>) (<a href="https://github.com/super-linter/super-linter/commit/05919fdf12f18417de9530d2202bce606adf957d">05919fd</a>)</li> <li><strong>npm:</strong> bump textlint-rule-terminology (<a href="https://redirect.github.com/super-linter/super-linter/issues/6877">#6877</a>) (<a href="https://github.com/super-linter/super-linter/commit/e2ac8dda85363bdcadd01804c4df2fc99bcb4cbb">e2ac8dd</a>)</li> <li><strong>npm:</strong> bump the eslint-plugins-configs group across 1 directory with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6870">#6870</a>) (<a href="https://github.com/super-linter/super-linter/commit/301a807afb529c0747fbc8ab6579b39b02fa54a5">301a807</a>)</li> <li><strong>python:</strong> bump the pip group across 1 directory with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6879">#6879</a>) (<a href="https://github.com/super-linter/super-linter/commit/8735a57c588de6753da6212598529e7462d49d18">8735a57</a>)</li> <li><strong>python:</strong> bump the pip group across 1 directory with 6 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6851">#6851</a>) (<a href="https://github.com/super-linter/super-linter/commit/a659e7d47bb881934a51f9c21332315a7bde591d">a659e7d</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/super-linter/super-linter/blob/main/CHANGELOG.md">super-linter/super-linter's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <h2><a href="https://github.com/super-linter/super-linter/compare/v7.4.0...v8.0.0">8.0.0</a> (2025-07-17)</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li>migrate to the latest eslint configuration (<a href="https://redirect.github.com/super-linter/super-linter/issues/6814">#6814</a>)</li> <li>remove unmaintained node packages (<a href="https://redirect.github.com/super-linter/super-linter/issues/6848">#6848</a>)</li> <li>remove unmaintained linters and formatters (<a href="https://redirect.github.com/super-linter/super-linter/issues/6773">#6773</a>)</li> </ul> <h3>🚀 Features</h3> <ul> <li>add options to the prettier command (<a href="https://redirect.github.com/super-linter/super-linter/issues/6882">#6882</a>) (<a href="https://github.com/super-linter/super-linter/commit/aeb043e06fe6cbb1702bf57e75dafc40b26b6c0d">aeb043e</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6772">#6772</a></li> <li>add vue files linting support (<a href="https://redirect.github.com/super-linter/super-linter/issues/6800">#6800</a>) (<a href="https://github.com/super-linter/super-linter/commit/597b1952cdc4e9e89fe3093e782a8596935a22a2">597b195</a>)</li> <li>migrate to the latest eslint configuration (<a href="https://redirect.github.com/super-linter/super-linter/issues/6814">#6814</a>) (<a href="https://github.com/super-linter/super-linter/commit/0d8f7aad449c1dc8ecaf2362684de5d379d2cd7d">0d8f7aa</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6405">#6405</a></li> <li>remove unmaintained linters and formatters (<a href="https://redirect.github.com/super-linter/super-linter/issues/6773">#6773</a>) (<a href="https://github.com/super-linter/super-linter/commit/4e80084b0c06e7cd178aa879d3a3cde965b73d65">4e80084</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6771">#6771</a></li> <li>support passing arguments to java (<a href="https://redirect.github.com/super-linter/super-linter/issues/6785">#6785</a>) (<a href="https://github.com/super-linter/super-linter/commit/4099648f56a29ed2b889b6b0765c198d83c9b508">4099648</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6281">#6281</a></li> </ul> <h3>🐛 Bugfixes</h3> <ul> <li>exclude files matching default branch ones (<a href="https://redirect.github.com/super-linter/super-linter/issues/6801">#6801</a>) (<a href="https://github.com/super-linter/super-linter/commit/26efde18b393f7820fcd1a618f21ae205362a687">26efde1</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6798">#6798</a></li> <li>use the current name for space after tabs (<a href="https://redirect.github.com/super-linter/super-linter/issues/6866">#6866</a>) (<a href="https://github.com/super-linter/super-linter/commit/bb9538964e4d0f91418fcb8423fd3901b3bd5e94">bb95389</a>), closes <a href="https://redirect.github.com/super-linter/super-linter/issues/6829">#6829</a></li> </ul> <h3>⬆️ Dependency updates</h3> <ul> <li><strong>bundler:</strong> bump rubocop in /dependencies in the rubocop group (<a href="https://redirect.github.com/super-linter/super-linter/issues/6875">#6875</a>) (<a href="https://github.com/super-linter/super-linter/commit/e0f760c874fd64dc38eaa1cb628d169267c59bae">e0f760c</a>)</li> <li><strong>bundler:</strong> bump the rubocop group across 1 directory with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6820">#6820</a>) (<a href="https://github.com/super-linter/super-linter/commit/4cabfd657310aa37806368c500b16df43ded01f2">4cabfd6</a>)</li> <li><strong>docker:</strong> bump the docker group across 1 directory with 16 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6864">#6864</a>) (<a href="https://github.com/super-linter/super-linter/commit/1879b46afce189362ad060b6fa66184d6094a672">1879b46</a>)</li> <li><strong>java:</strong> bump the java-gradle group across 2 directories with 2 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6810">#6810</a>) (<a href="https://github.com/super-linter/super-linter/commit/b900e08c7ef98640db1d62399bde05f6c237a93e">b900e08</a>)</li> <li><strong>java:</strong> bump the java-gradle group across 2 directories with 2 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6880">#6880</a>) (<a href="https://github.com/super-linter/super-linter/commit/4d267db3b1855f53472086a5b0222fbbb70ff0b2">4d267db</a>)</li> <li><strong>npm:</strong> bump <code>@​babel/eslint-parser</code> in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6865">#6865</a>) (<a href="https://github.com/super-linter/super-linter/commit/5a39b53ef576e2eeaf3f850d041e4c25e8e09fb5">5a39b53</a>)</li> <li><strong>npm:</strong> bump <code>@​typescript-eslint/eslint-plugin</code> (<a href="https://redirect.github.com/super-linter/super-linter/issues/6872">#6872</a>) (<a href="https://github.com/super-linter/super-linter/commit/4099a2f87daa168ab43b0cb1a619253260b4feb0">4099a2f</a>)</li> <li><strong>npm:</strong> bump asl-validator from 3.15.0 to 4.0.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6845">#6845</a>) (<a href="https://github.com/super-linter/super-linter/commit/27e1d3b97be6df3ba9402355f4b17448db4580bf">27e1d3b</a>)</li> <li><strong>npm:</strong> bump eslint from 9.29.0 to 9.31.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6878">#6878</a>) (<a href="https://github.com/super-linter/super-linter/commit/c1b79c24e67e9b2d43598abfeaeba9df9df39c15">c1b79c2</a>)</li> <li><strong>npm:</strong> bump markdownlint-cli from 0.44.0 to 0.45.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6796">#6796</a>) (<a href="https://github.com/super-linter/super-linter/commit/cbafd4a64a6624d14043bc5714a38a4d991b8c84">cbafd4a</a>)</li> <li><strong>npm:</strong> bump next (<a href="https://redirect.github.com/super-linter/super-linter/issues/6869">#6869</a>) (<a href="https://github.com/super-linter/super-linter/commit/a0f6e7dc540772fbafb53657c4bc7acfb0933fdb">a0f6e7d</a>)</li> <li><strong>npm:</strong> bump prettier from 3.5.3 to 3.6.2 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6857">#6857</a>) (<a href="https://github.com/super-linter/super-linter/commit/53ab6bbb94bcdeca203858c646b88fa6e8f77576">53ab6bb</a>)</li> <li><strong>npm:</strong> bump react-router-dom (<a href="https://redirect.github.com/super-linter/super-linter/issues/6871">#6871</a>) (<a href="https://github.com/super-linter/super-linter/commit/4258001721a0f0e88d9b9fee849ba5e2341471ee">4258001</a>)</li> <li><strong>npm:</strong> bump renovate from 40.11.8 to 40.28.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6807">#6807</a>) (<a href="https://github.com/super-linter/super-linter/commit/66b6cb3802422e5c67588a7983dae41b518cf91c">66b6cb3</a>)</li> <li><strong>npm:</strong> bump renovate from 40.62.1 to 41.32.2 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6876">#6876</a>) (<a href="https://github.com/super-linter/super-linter/commit/b67cd445cfc4481e467de52bc247b655b32f7dce">b67cd44</a>)</li> <li><strong>npm:</strong> bump stylelint (<a href="https://redirect.github.com/super-linter/super-linter/issues/6867">#6867</a>) (<a href="https://github.com/super-linter/super-linter/commit/9572e8f1315da054fa080b9ed9e2c2ccae8033fe">9572e8f</a>)</li> <li><strong>npm:</strong> bump textlint (<a href="https://redirect.github.com/super-linter/super-linter/issues/6868">#6868</a>) (<a href="https://github.com/super-linter/super-linter/commit/05919fdf12f18417de9530d2202bce606adf957d">05919fd</a>)</li> <li><strong>npm:</strong> bump textlint-rule-terminology (<a href="https://redirect.github.com/super-linter/super-linter/issues/6877">#6877</a>) (<a href="https://github.com/super-linter/super-linter/commit/e2ac8dda85363bdcadd01804c4df2fc99bcb4cbb">e2ac8dd</a>)</li> <li><strong>npm:</strong> bump the eslint-plugins-configs group across 1 directory with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6870">#6870</a>) (<a href="https://github.com/super-linter/super-linter/commit/301a807afb529c0747fbc8ab6579b39b02fa54a5">301a807</a>)</li> <li><strong>python:</strong> bump the pip group across 1 directory with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6879">#6879</a>) (<a href="https://github.com/super-linter/super-linter/commit/8735a57c588de6753da6212598529e7462d49d18">8735a57</a>)</li> <li><strong>python:</strong> bump the pip group across 1 directory with 6 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6851">#6851</a>) (<a href="https://github.com/super-linter/super-linter/commit/a659e7d47bb881934a51f9c21332315a7bde591d">a659e7d</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/super-linter/super-linter/commit/5119dcd8011e92182ce8219d9e9efc82f16fddb6"><code>5119dcd</code></a> chore(main): release 8.0.0 (<a href="https://redirect.github.com/super-linter/super-linter/issues/6786">#6786</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/b67cd445cfc4481e467de52bc247b655b32f7dce"><code>b67cd44</code></a> deps(npm): bump renovate from 40.62.1 to 41.32.2 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6876">#6876</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/53ab6bbb94bcdeca203858c646b88fa6e8f77576"><code>53ab6bb</code></a> deps(npm): bump prettier from 3.5.3 to 3.6.2 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6857">#6857</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/aeb043e06fe6cbb1702bf57e75dafc40b26b6c0d"><code>aeb043e</code></a> feat: add options to the prettier command (<a href="https://redirect.github.com/super-linter/super-linter/issues/6882">#6882</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/e2ac8dda85363bdcadd01804c4df2fc99bcb4cbb"><code>e2ac8dd</code></a> deps(npm): bump textlint-rule-terminology (<a href="https://redirect.github.com/super-linter/super-linter/issues/6877">#6877</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/e0f760c874fd64dc38eaa1cb628d169267c59bae"><code>e0f760c</code></a> deps(bundler): bump rubocop in /dependencies in the rubocop group (<a href="https://redirect.github.com/super-linter/super-linter/issues/6875">#6875</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/c1b79c24e67e9b2d43598abfeaeba9df9df39c15"><code>c1b79c2</code></a> deps(npm): bump eslint from 9.29.0 to 9.31.0 in /dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6878">#6878</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/8735a57c588de6753da6212598529e7462d49d18"><code>8735a57</code></a> deps(python): bump the pip group across 1 directory with 4 updates (<a href="https://redirect.github.com/super-linter/super-linter/issues/6879">#6879</a>)</li> <li><a href="https://github.com/super-linter/super-linter/commit/4d267db3b1855f53472086a5b0222fbbb70ff0b2"><code>4d267db</code></a> deps(java): bump the java-gradle group across 2 directories with 2 updates (#...</li> <li><a href="https://github.com/super-linter/super-linter/commit/f7855fe64db599395ee7c9a57ee52e9e72ed4163"><code>f7855fe</code></a> ci(dev-docker): bump node in /dev-dependencies (<a href="https://redirect.github.com/super-linter/super-linter/issues/6881">#6881</a>)</li> <li>Additional commits viewable in <a href="https://github.com/super-linter/super-linter/compare/12150456a73e248bdc94d0794898f94e23127c88...5119dcd8011e92182ce8219d9e9efc82f16fddb6">compare view</a></li> </ul> </details> <br /> Updates `trufflesecurity/trufflehog` from 3.89.2 to 3.90.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/trufflesecurity/trufflehog/releases">trufflesecurity/trufflehog's releases</a>.</em></p> <blockquote> <h2>v3.90.2</h2> <h2>What's Changed</h2> <ul> <li>Added Anypoint API OAuth2 Detector by <a href="https://github.com/nabeelalam"><code>@​nabeelalam</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4312">trufflesecurity/trufflehog#4312</a></li> <li>Updated and Fixed CircleCI Source by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4309">trufflesecurity/trufflehog#4309</a></li> <li>Add additional Vector configuration options by <a href="https://github.com/dustin-decker"><code>@​dustin-decker</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4301">trufflesecurity/trufflehog#4301</a></li> <li>Removed stored logger from HuggingFace source by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4328">trufflesecurity/trufflehog#4328</a></li> <li>Suppress AWS SDK checksum skip warnings for S3 by <a href="https://github.com/peterfraedrich"><code>@​peterfraedrich</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4324">trufflesecurity/trufflehog#4324</a></li> <li>Add slack continuous protobuf messages by <a href="https://github.com/camgunz"><code>@​camgunz</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4330">trufflesecurity/trufflehog#4330</a></li> <li>[Update] Dovico Detector Updated by <a href="https://github.com/nabeelalam"><code>@​nabeelalam</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4290">trufflesecurity/trufflehog#4290</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/peterfraedrich"><code>@​peterfraedrich</code></a> made their first contribution in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4324">trufflesecurity/trufflehog#4324</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.90.1...v3.90.2">https://github.com/trufflesecurity/trufflehog/compare/v3.90.1...v3.90.2</a></p> <h2>v3.90.1</h2> <h2>What's Changed</h2> <ul> <li>Added KeySet Pagination for Gitlab Projects V2 Enumeration by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4319">trufflesecurity/trufflehog#4319</a></li> <li>Salesforce Refresh Token Detector by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4295">trufflesecurity/trufflehog#4295</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/trufflesecurity/trufflehog/compare/v3.90.0...v3.90.1">https://github.com/trufflesecurity/trufflehog/compare/v3.90.0...v3.90.1</a></p> <h2>v3.90.0</h2> <h2>What's Changed</h2> <ul> <li>chore: fix comment by <a href="https://github.com/largemouth"><code>@​largemouth</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4239">trufflesecurity/trufflehog#4239</a></li> <li>Fixed jira detector invalid domain issue by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4250">trufflesecurity/trufflehog#4250</a></li> <li>Added LangSmith API Key detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4251">trufflesecurity/trufflehog#4251</a></li> <li>Gitparse test: Decreased MaxDiffSize in gitparse TestMaxDiffSize() function by <a href="https://github.com/nabeelalam"><code>@​nabeelalam</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4240">trufflesecurity/trufflehog#4240</a></li> <li>Updated GoDaddy Detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4258">trufflesecurity/trufflehog#4258</a></li> <li>Bannerbear Detector V2 by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4222">trufflesecurity/trufflehog#4222</a></li> <li>Surface errors when Github source cannot fetch repo or gist by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4259">trufflesecurity/trufflehog#4259</a></li> <li>Move default detectors ownership to OSS by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4257">trufflesecurity/trufflehog#4257</a></li> <li>Added Shannon Entropy Check in Gitlab v1 detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4260">trufflesecurity/trufflehog#4260</a></li> <li>Feat: bitbucket app by <a href="https://github.com/x-stp"><code>@​x-stp</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4214">trufflesecurity/trufflehog#4214</a></li> <li>fix: throws error if dir not found by <a href="https://github.com/sahil9001"><code>@​sahil9001</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3419">trufflesecurity/trufflehog#3419</a></li> <li>(fix) Flaky BoxOAuth detector test by <a href="https://github.com/abmussani"><code>@​abmussani</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4199">trufflesecurity/trufflehog#4199</a></li> <li>Enabled and Enhanced Artifactory Detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4207">trufflesecurity/trufflehog#4207</a></li> <li>Fix TestChunkUnit by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4263">trufflesecurity/trufflehog#4263</a></li> <li>Disable s3 filter test by <a href="https://github.com/rosecodym"><code>@​rosecodym</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4262">trufflesecurity/trufflehog#4262</a></li> <li>feat [detector]: added hasura detector by <a href="https://github.com/sahil9001"><code>@​sahil9001</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/3427">trufflesecurity/trufflehog#3427</a></li> <li>Handle no such host errors for Algolia Detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4264">trufflesecurity/trufflehog#4264</a></li> <li>[Update] Coinbase API Detector Updated by <a href="https://github.com/nabeelalam"><code>@​nabeelalam</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4202">trufflesecurity/trufflehog#4202</a></li> <li>Added SQL Server error code and message to verification error by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4267">trufflesecurity/trufflehog#4267</a></li> <li>Fixed and Improved billomat detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4268">trufflesecurity/trufflehog#4268</a></li> <li>Allow users to exit the TUI when there are extra args by <a href="https://github.com/mcastorina"><code>@​mcastorina</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4274">trufflesecurity/trufflehog#4274</a></li> <li>Updated ExchangeRate Detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4278">trufflesecurity/trufflehog#4278</a></li> <li>Deprecated AirTable API Key detector by <a href="https://github.com/kashifkhan0771"><code>@​kashifkhan0771</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4266">trufflesecurity/trufflehog#4266</a></li> <li>[chore] Write --help to stdout by <a href="https://github.com/mcastorina"><code>@​mcastorina</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4277">trufflesecurity/trufflehog#4277</a></li> <li>Salesforce OAuth2 Detector by <a href="https://github.com/shahzadhaider1"><code>@​shahzadhaider1</code></a> in <a href="https://redirect.github.com/trufflesecurity/trufflehog/pull/4252">trufflesecurity/trufflehog#4252</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/a05cf0859455b5b16317ee22d809887a4043cdf0"><code>a05cf08</code></a> [Update] Dovico Detector Updated (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4290">#4290</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/227d92c99c13da391ac3eebff9e1f36601141870"><code>227d92c</code></a> Add slack continuous protobuf messages (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4330">#4330</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/cb1b3b72fb250b40d3121225e94b4acbb283947e"><code>cb1b3b7</code></a> Suppress AWS SDK checksum skip warnings for S3 (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4324">#4324</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/dbfe811b48cdde3a4b15901d94bf5d56bfe204cf"><code>dbfe811</code></a> Removed stored logger from HuggingFace source (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4328">#4328</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/143f2f562e3f4227c25e53aa23f29a2d2ea7cf66"><code>143f2f5</code></a> Add additional Vector configuration options (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4301">#4301</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/cf169cca83c943af2f636ce46022c16a12675382"><code>cf169cc</code></a> Updated and Fixed CircleCI Source (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4309">#4309</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/bfaddae9b6ca7337eada56b56bbfcccfe32717b2"><code>bfaddae</code></a> Added Anypoint API OAuth2 Detector (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4312">#4312</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/907ac64fd42b18dab2ceba2fda39834d3f8ba7e3"><code>907ac64</code></a> Salesforce Refresh Token Detector (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4295">#4295</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/7792f0263e37f777ab0d98dadcad0bfad552eba5"><code>7792f02</code></a> Added KeySet Pagination for Gitlab Projects V2 Enumeration (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4319">#4319</a>)</li> <li><a href="https://github.com/trufflesecurity/trufflehog/commit/eafb8c5f6a06175141c27f17bcc17941853d0047"><code>eafb8c5</code></a> Add support for docker daemon as a source (<a href="https://redirect.github.com/trufflesecurity/trufflehog/issues/4306">#4306</a>)</li> <li>Additional commits viewable in <a href="https://github.com/trufflesecurity/trufflehog/compare/6641d4ba5b684fffe195b9820345de1bf19f3181...a05cf0859455b5b16317ee22d809887a4043cdf0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>
2 parents de6383e + a256533 commit 7dc16fc

37 files changed

Lines changed: 53 additions & 53 deletions

.github/workflows/ActionLint.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
runs-on: ubuntu-latest
3737
steps:
3838
- name: Harden Runner
39-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
39+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4040
with:
4141
egress-policy: audit
4242
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

.github/workflows/Bandit.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
runs-on: ubuntu-latest
5454
steps:
5555
- name: Harden Runner
56-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
56+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
5757
with:
5858
disable-sudo: true
5959
egress-policy: block

.github/workflows/Snake.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
steps:
4747
# generates a snake game from a github user (<github_user_name>) contributions graph, output a svg animation at <svg_out_path>
4848
- name: Harden Runner
49-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
49+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
5050
with:
5151
egress-policy: audit
5252

.github/workflows/black-formatter.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
steps:
3838
# Step to harden the runner for security purposes
3939
- name: Harden Runner
40-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
40+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4141
with:
4242
disable-sudo: true # Disable sudo to prevent privilege escalation
4343
egress-policy: block # Block all egress traffic

.github/workflows/codeql.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ jobs:
6666

6767
steps:
6868
- name: Harden Runner
69-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
69+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
7070
with:
7171
egress-policy: audit
7272

@@ -75,7 +75,7 @@ jobs:
7575

7676
# Initializes the CodeQL tools for scanning.
7777
- name: Initialize CodeQL
78-
uses: github/codeql-action/init@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
78+
uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
7979
with:
8080
languages: ${{ matrix.language }}
8181
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -85,7 +85,7 @@ jobs:
8585
# Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
8686
# If this step fails, then you should remove it and run the build manually (see below)
8787
- name: Autobuild
88-
uses: github/codeql-action/autobuild@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
88+
uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
8989

9090
# ℹ️ Command-line programs to run using the OS shell.
9191
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -98,6 +98,6 @@ jobs:
9898
# ./location_of_script_within_repo/buildscript.sh
9999

100100
- name: Perform CodeQL Analysis
101-
uses: github/codeql-action/analyze@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
101+
uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
102102
with:
103103
category: "/language:${{matrix.language}}"

.github/workflows/deno.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646

4747
steps:
4848
- name: Harden Runner
49-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
49+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
5050
with:
5151
egress-policy: audit
5252

.github/workflows/dependency-review.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
runs-on: ubuntu-latest
4040
steps:
4141
- name: Harden Runner
42-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
42+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4343
with:
4444
egress-policy: audit
4545

.github/workflows/devskim.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
security-events: write
3131
steps:
3232
- name: Harden the runner (Audit all outbound calls)
33-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
33+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
3434
with:
3535
egress-policy: audit
3636

@@ -63,6 +63,6 @@ jobs:
6363
path: devskim-results.sarif
6464

6565
- name: Upload DevSkim scan results to GitHub Security tab
66-
uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3.29.2
66+
uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
6767
with:
6868
sarif_file: devskim-results.sarif

.github/workflows/eslint.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
actions: read # only required for a private repository by github/codeql-action/upload-sarif to get the Action run status
4545
steps:
4646
- name: Harden Runner
47-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
47+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
4848
with:
4949
egress-policy: audit
5050

@@ -72,7 +72,7 @@ jobs:
7272
continue-on-error: true
7373

7474
- name: Upload analysis results to GitHub
75-
uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v2.27.0
75+
uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v2.27.0
7676
with:
7777
sarif_file: eslint-results.sarif
7878
wait-for-processing: true

.github/workflows/generate-file-list.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717

1818
steps:
1919
- name: Harden the runner (Audit all outbound calls)
20-
uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2
20+
uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
2121
with:
2222
egress-policy: audit
2323

0 commit comments

Comments
 (0)