Skip to content

Commit 1d90bd3

Browse files
BjoernAtBoschdependabot[bot]
BjoernAtBosch
and
dependabot[bot]
authored
Vulnerability fix (eclipse-velocitas#126)
* Bump dawidd6/action-download-artifact from 3 to 6 in /.github/workflows Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 3 to 6. - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](dawidd6/action-download-artifact@v3...v6) --- updated-dependencies: - dependency-name: dawidd6/action-download-artifact dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> * Update GitHub workflows * Fix jinja vulnerability * Update NOTICE-3RD-PARTY-CONTENT.md --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 5b8772c commit 1d90bd3

14 files changed

+17
-17
lines changed

‎.github/scripts/deploy_image_from_artifact.sh

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
#!/bin/bash
22
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
3-
# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
3+
# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
44
#
55
# This program and the accompanying materials are made available under the
66
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/build-docker-image.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/build-multiarch-image.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/check-devcontainer.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2023-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/check-licenses.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/check-updates.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2024-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/ci.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/ensure-lifecycle.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2023-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/gen-desired-state.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2023-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at

‎.github/workflows/release.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
2-
# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
2+
# Copyright (c) 2022-2025 Contributors to the Eclipse Foundation
33
#
44
# This program and the accompanying materials are made available under the
55
# terms of the Apache License, Version 2.0 which is available at
@@ -95,7 +95,7 @@ jobs:
9595
intervalSeconds: 20
9696

9797
- name: Download builds from Build multiarch image workflow artifacts
98-
uses: dawidd6/action-download-artifact@v3
98+
uses: dawidd6/action-download-artifact@v6
9999
with:
100100
github_token: ${{secrets.GITHUB_TOKEN}}
101101
workflow: build-multiarch-image.yml
@@ -152,7 +152,7 @@ jobs:
152152
intervalSeconds: 30
153153

154154
- name: Download artifact from CI workflow
155-
uses: dawidd6/action-download-artifact@v3
155+
uses: dawidd6/action-download-artifact@v6
156156
with:
157157
workflow: ci.yml
158158
workflow_conclusion: success

‎.velocitas-lock.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"packages": {
33
"devenv-runtimes": "v4.0.6",
4-
"devenv-github-workflows": "v6.1.3",
4+
"devenv-github-workflows": "v6.1.4",
55
"devenv-github-templates": "v1.0.5",
66
"devenv-devcontainer-setup": "v2.5.3"
77
}

‎.velocitas.json

+1-1
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"packages": {
33
"devenv-runtimes": "v4.0.6",
4-
"devenv-github-workflows": "v6.1.3",
4+
"devenv-github-workflows": "v6.1.4",
55
"devenv-github-templates": "v1.0.5",
66
"devenv-devcontainer-setup": "v2.5.3"
77
},

‎NOTICE-3RD-PARTY-CONTENT.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@
1919
|gcovr|5.2|BSD|
2020
|identify|2.6.1|MIT|
2121
|idna|3.10|BSD|
22-
|jinja2|3.1.4|BSD|
22+
|jinja2|3.1.5|BSD|
2323
|lxml|5.3.0|New BSD|
2424
|MarkupSafe|3.0.1|BSD|
2525
|node-semver|0.6.1|MIT|
@@ -55,7 +55,7 @@
5555
|actions/upload-artifact|v4|MIT License|
5656
|aquasecurity/trivy-action|0.19.0|Apache License 2.0|
5757
|ASzc/change-string-case-action|v6|ISC License|
58-
|dawidd6/action-download-artifact|v3|MIT License|
58+
|dawidd6/action-download-artifact|v6|MIT License|
5959
|de-vri-es/setup-git-credentials|v2|BSD 2-Clause "Simplified" License|
6060
|devcontainers/ci|v0.3|MIT License|
6161
|docker/build-push-action|v5|Apache License 2.0|

‎requirements.txt

+1-1
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ identify==2.6.1
3636
# via pre-commit
3737
idna==3.10
3838
# via requests
39-
jinja2==3.1.4
39+
jinja2==3.1.5
4040
# via
4141
# conan
4242
# gcovr

0 commit comments

Comments
 (0)