Skip to content

GH Action Updates suggested by dependabot #546

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 4 commits into from
Oct 9, 2025
Merged

GH Action Updates suggested by dependabot #546

merged 4 commits into from
Oct 9, 2025

Conversation

@jreineckearm
Copy link
Collaborator

@jreineckearm jreineckearm commented Oct 9, 2025

Fixes

Changes

Screenshots

Checklist

  • 🤖 This change is covered by unit tests (if applicable).
  • 🤹 Manual testing has been performed (if necessary).
  • 🛡️ Security impacts have been considered (if relevant).
  • 📖 Documentation updates are complete (if required).
  • 🧠 Third-party dependencies and TPIP updated (if required).

dependabot bot added 3 commits October 9, 2025 15:59
@dependabot @jreineckearm
Bump step-security/harden-runner from 2.13.0 to 2.13.1
04fb6b8 
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](step-security/harden-runner@ec9f2d5...f4a75cf)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jreineckearm
Bump actions/dependency-review-action from 4.7.3 to 4.8.0
0b81a97 
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.7.3 to 4.8.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](actions/dependency-review-action@595b5ae...56339e5)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot @jreineckearm
Bump github/codeql-action from 3.30.1 to 3.30.6
5cf253c 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.1 to 3.30.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@f1f6e5f...64d10c1)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 3.30.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@jreineckearm jreineckearm requested a review from soumeh01 October 9, 2025 14:04
@jreineckearm
Copy link
Collaborator Author

jreineckearm commented Oct 9, 2025

Suggested action versions appear to be safe to update to.

@qltysh
Copy link

qltysh bot commented Oct 9, 2025 •
edited
Loading

Diff Coverage: Not applicable. There was no coverage data reported for the files in this diff.

Total Coverage: This PR will not change total coverage.

🛟 Help

  • Diff Coverage: Coverage for added or modified lines of code (excludes deleted files). Learn more.

  • Total Coverage: Coverage for the whole repository, calculated as the sum of all File Coverage. Learn more.

  • File Coverage: Covered Lines divided by Covered Lines plus Missed Lines. (Excludes non-executable lines including blank lines and comments.)

    • Indirect Changes: Changes to File Coverage for files that were not modified in this PR. Learn more.

soumeh01
soumeh01 approved these changes Oct 9, 2025
View reviewed changes
Copy link
Collaborator

@soumeh01 soumeh01 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needed to be merged after #548
The branch needed to be updated to get correct URL.

@jreineckearm
Copy link
Collaborator Author

jreineckearm commented Oct 9, 2025

#548 is merged, but things are a bit slow at the moment presumably due to issues on GitHub (see https://www.githubstatus.com/ ). Hence may take a while until all merges from main are through

@jreineckearm jreineckearm merged commit cb277a8 into main Oct 9, 2025
18 checks passed
@jreineckearm jreineckearm deleted the gh-action-updates branch October 9, 2025 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@soumeh01 soumeh01 soumeh01 approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@jreineckearm @soumeh01