Skip to content

Commit 1121ba3

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the all group with 3 updates (#8665)
Bumps the all group with 3 updates: [actions/setup-go](https://github.com/actions/setup-go), [github/codeql-action](https://github.com/github/codeql-action) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/setup-go` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@f111f33...0aaccfd) Updates `github/codeql-action` from 3.28.11 to 3.28.12 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@6bb031a...5f8171a) Updates `actions/download-artifact` from 4.2.0 to 4.2.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@b14cf4c...95815c3) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 5c22673 commit 1121ba3

7 files changed

+16
-16
lines changed

‎.github/workflows/codeql-analysis.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -62,15 +62,15 @@ jobs:
6262
- name: Checkout repository
6363
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6464
- name: Set up Go 1.x
65-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
65+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
6666
with:
6767
go-version: '>=1.20'
6868
check-latest: true
6969
id: go
7070

7171
# Initializes the CodeQL tools for scanning.
7272
- name: Initialize CodeQL
73-
uses: github/codeql-action/init@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
73+
uses: github/codeql-action/init@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
7474
with:
7575
languages: ${{ matrix.language }}
7676
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -94,4 +94,4 @@ jobs:
9494
$(go env GOPATH)/bin/goveralls -coverprofile=profile.cov -service=github
9595
9696
- name: Perform CodeQL Analysis
97-
uses: github/codeql-action/analyze@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
97+
uses: github/codeql-action/analyze@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12

‎.github/workflows/lint-ci-weekly.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
with:
1919
egress-policy: audit
2020
- name: Setup Golang
21-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
21+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
2222
with:
2323
go-version: '>=1.21'
2424
check-latest: true

‎.github/workflows/lint.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
- name: Checkout
2424
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2525
- name: Setup Golang
26-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
26+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
2727
with:
2828
go-version: '1.23'
2929
check-latest: true

‎.github/workflows/release.yaml

+5-5
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
- name: Checkout
3131
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3232
- name: Setup Golang
33-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
33+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
3434
with:
3535
go-version-file: go.mod
3636
- name: Build binary
@@ -66,7 +66,7 @@ jobs:
6666
- name: Checkout
6767
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6868
- name: Setup Golang
69-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
69+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
7070
with:
7171
go-version-file: go.mod
7272
cache: true
@@ -118,7 +118,7 @@ jobs:
118118
- name: Checkout
119119
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
120120
- name: Setup Golang
121-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
121+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
122122
with:
123123
go-version-file: go.mod
124124
- name: Build binary for linux
@@ -167,7 +167,7 @@ jobs:
167167
ref: documentation
168168
fetch-depth: 2
169169
- name: Setup Golang
170-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
170+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
171171
with:
172172
go-version: '>=1.22'
173173
check-latest: true
@@ -177,7 +177,7 @@ jobs:
177177
run: |
178178
./hack/generate-release-note.sh ${GITHUB_REF_NAME} release-notes.md true
179179
- name: Download artifacts
180-
uses: actions/download-artifact@b14cf4c92620c250e1c074ab0a5800e37df86765 # v4.2.0
180+
uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
181181
with:
182182
path: ./artifacts
183183
- name: Publish release

‎.github/workflows/scorecards.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -72,6 +72,6 @@ jobs:
7272

7373
# Upload the results to GitHub's code scanning dashboard.
7474
- name: "Upload to code-scanning"
75-
uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
75+
uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
7676
with:
7777
sarif_file: results.sarif

‎.github/workflows/trivy.yaml

+4-4
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
- name: Checkout code
4545
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4646
- name: Set up Go 1.x
47-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
47+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
4848
with:
4949
go-version: '>=1.20'
5050
check-latest: true
@@ -67,7 +67,7 @@ jobs:
6767
vuln-type: 'os,library'
6868
severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'
6969
- name: Upload Trivy scan results to GitHub Security tab
70-
uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
70+
uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
7171
with:
7272
sarif_file: 'trivy-ccm-results.sarif'
7373
category: azure-cloud-controller-manager-image
@@ -81,7 +81,7 @@ jobs:
8181
vuln-type: 'os,library'
8282
severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'
8383
- name: Upload Trivy scan results to GitHub Security tab
84-
uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
84+
uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
8585
with:
8686
sarif_file: 'trivy-cnm-linux-results.sarif'
8787
category: azure-cloud-node-manager-linux-image
@@ -95,7 +95,7 @@ jobs:
9595
vuln-type: 'os,library'
9696
severity: 'CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN'
9797
- name: Upload Trivy scan results to GitHub Security tab
98-
uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11
98+
uses: github/codeql-action/upload-sarif@5f8171a638ada777af81d42b55959a643bb29017 # v3.28.12
9999
with:
100100
sarif_file: 'trivy-health-probe-proxy-linux-results.sarif'
101101
category: health-probe-proxy-linux-image

‎.github/workflows/update-vendor-license.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
- name: Checkout repository
4545
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4646
- name: Set up Go 1.x
47-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
47+
uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
4848
with:
4949
go-version: '>=1.20'
5050
check-latest: true

0 commit comments

Comments
 (0)