From 872b24442d21e13d5a12d910d6cd69145d1b4b2c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 7 May 2024 09:11:36 -0300 Subject: [PATCH] chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 (#4843) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.4 to 4.1.5.
Release notes

Sourced from actions/checkout's releases.

v4.1.5

What's Changed

Full Changelog: https://github.com/actions/checkout/compare/v4.1.4...v4.1.5

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4.1.4&new-version=4.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/build.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/depsreview.yaml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/generate.yml | 2 +- .github/workflows/gitleaks.yml | 2 +- .github/workflows/grype.yml | 2 +- .github/workflows/lint.yml | 2 +- .github/workflows/nightly-oss.yml | 2 +- .github/workflows/release.yml | 4 ++-- 10 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 305cddf4f..09c64ecc6 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -29,7 +29,7 @@ jobs: env: DOCKER_CLI_EXPERIMENTAL: "enabled" steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 with: fetch-depth: 0 - uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v1 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b8124e5ac..f17561df7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -15,7 +15,7 @@ jobs: contents: read steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v4 with: go-version: stable diff --git a/.github/workflows/depsreview.yaml b/.github/workflows/depsreview.yaml index fa1a9cf7f..94809496e 100644 --- a/.github/workflows/depsreview.yaml +++ b/.github/workflows/depsreview.yaml @@ -8,7 +8,7 @@ jobs: dependency-review: runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 - uses: actions/dependency-review-action@v4 with: allow-licenses: BSD-2-Clause, BSD-3-Clause, MIT, Apache-2.0, MPL-2.0, ISC diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 435468a4f..a3ce4dc37 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -19,7 +19,7 @@ jobs: htmltest: runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 - uses: cachix/install-nix-action@v26 with: nix_path: nixpkgs=channel:nixos-unstable diff --git a/.github/workflows/generate.yml b/.github/workflows/generate.yml index 72bbd0ac5..e6e28aebc 100644 --- a/.github/workflows/generate.yml +++ b/.github/workflows/generate.yml @@ -12,7 +12,7 @@ jobs: contents: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 with: token: ${{ secrets.GH_PAT }} - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v4 diff --git a/.github/workflows/gitleaks.yml b/.github/workflows/gitleaks.yml index a2d53092a..683600487 100644 --- a/.github/workflows/gitleaks.yml +++ b/.github/workflows/gitleaks.yml @@ -14,7 +14,7 @@ jobs: gitleaks: runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 with: fetch-depth: 0 - uses: gitleaks/gitleaks-action@v2 diff --git a/.github/workflows/grype.yml b/.github/workflows/grype.yml index dca0d253a..173b9404f 100644 --- a/.github/workflows/grype.yml +++ b/.github/workflows/grype.yml @@ -17,7 +17,7 @@ jobs: contents: read steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 - uses: anchore/scan-action@v3 with: path: "." diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 0c6b317ce..de46a5dcc 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -17,7 +17,7 @@ jobs: name: lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v4 with: go-version: stable diff --git a/.github/workflows/nightly-oss.yml b/.github/workflows/nightly-oss.yml index 223895dc2..c8bf4f168 100644 --- a/.github/workflows/nightly-oss.yml +++ b/.github/workflows/nightly-oss.yml @@ -16,7 +16,7 @@ jobs: env: DOCKER_CLI_EXPERIMENTAL: "enabled" steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 with: fetch-depth: 0 - uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v1 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 0f9ff6f08..405e8e72e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -49,7 +49,7 @@ jobs: matrix: format: [deb, rpm, apk] steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 with: fetch-depth: 0 - uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v1 @@ -70,7 +70,7 @@ jobs: env: DOCKER_CLI_EXPERIMENTAL: "enabled" steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v3 + - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v3 with: fetch-depth: 0 - uses: arduino/setup-task@b91d5d2c96a56797b48ac1e0e89220bf64044611 # v1