From 78723e2629433a19ce1ad4007f43a60972387331 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 08:15:00 +0000 Subject: [PATCH] chore(ci): bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [docker/login-action](https://github.com/docker/login-action), [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) and [actions/upload-artifact](https://github.com/actions/upload-artifact). Updates `docker/login-action` from 4.6.0 to 4.8.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...8aa5831fb8d48d8f76594c7ddde61ae58019f550) Updates `github/codeql-action/upload-sarif` from 7c1e4cf0b20d7c1872b26569c00ba908797a59bf to 0911ee96d2d6c8def97122c36c5cadd93829a4b4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7c1e4cf0b20d7c1872b26569c00ba908797a59bf...0911ee96d2d6c8def97122c36c5cadd93829a4b4) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: '0911ee96d2d6c8def97122c36c5cadd93829a4b4' dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/apps-api-release.yml | 2 +- .github/workflows/apps-api-security-deps.yml | 2 +- .github/workflows/apps-api-security-sast.yml | 2 +- .github/workflows/apps-api-security-secrets.yml | 2 +- .github/workflows/apps-docs-security-deps.yml | 2 +- .github/workflows/apps-docs-security-secrets.yml | 2 +- .github/workflows/apps-site-release.yml | 2 +- .github/workflows/apps-site-security-deps.yml | 2 +- .github/workflows/apps-site-security-secrets.yml | 2 +- .github/workflows/apps-ui-release.yml | 2 +- .github/workflows/apps-ui-security-deps.yml | 2 +- .github/workflows/apps-ui-security-sast.yml | 2 +- .github/workflows/apps-ui-security-secrets.yml | 2 +- .github/workflows/apps-ui-validate.yml | 6 +++--- .github/workflows/infra-bootstrap-security-deps.yml | 2 +- .github/workflows/infra-bootstrap-security-secrets.yml | 2 +- .github/workflows/infra-compose-playwright-e2e.yml | 2 +- .github/workflows/infra-compose-security-secrets.yml | 2 +- .github/workflows/production-release.yml | 2 +- 19 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/apps-api-release.yml b/.github/workflows/apps-api-release.yml index 1a2f197..a617e46 100644 --- a/.github/workflows/apps-api-release.yml +++ b/.github/workflows/apps-api-release.yml @@ -43,7 +43,7 @@ jobs: uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Log in to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/apps-api-security-deps.yml b/.github/workflows/apps-api-security-deps.yml index f4fe6b1..30d5203 100644 --- a/.github/workflows/apps-api-security-deps.yml +++ b/.github/workflows/apps-api-security-deps.yml @@ -75,7 +75,7 @@ jobs: - name: Upload osv SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: osv-results.sarif category: osv-scanner-api diff --git a/.github/workflows/apps-api-security-sast.yml b/.github/workflows/apps-api-security-sast.yml index 86c1ed9..132fd31 100644 --- a/.github/workflows/apps-api-security-sast.yml +++ b/.github/workflows/apps-api-security-sast.yml @@ -89,7 +89,7 @@ jobs: - name: Upload semgrep SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: semgrep-results.sarif category: semgrep-api diff --git a/.github/workflows/apps-api-security-secrets.yml b/.github/workflows/apps-api-security-secrets.yml index d10f349..210b634 100644 --- a/.github/workflows/apps-api-security-secrets.yml +++ b/.github/workflows/apps-api-security-secrets.yml @@ -76,7 +76,7 @@ jobs: - name: Upload SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: gitleaks-results.sarif category: gitleaks-api diff --git a/.github/workflows/apps-docs-security-deps.yml b/.github/workflows/apps-docs-security-deps.yml index 480ebc2..f2a1293 100644 --- a/.github/workflows/apps-docs-security-deps.yml +++ b/.github/workflows/apps-docs-security-deps.yml @@ -73,7 +73,7 @@ jobs: - name: Upload osv SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: osv-results.sarif category: osv-scanner-docs diff --git a/.github/workflows/apps-docs-security-secrets.yml b/.github/workflows/apps-docs-security-secrets.yml index 1a9527b..a4fa5e8 100644 --- a/.github/workflows/apps-docs-security-secrets.yml +++ b/.github/workflows/apps-docs-security-secrets.yml @@ -76,7 +76,7 @@ jobs: - name: Upload SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: gitleaks-results.sarif category: gitleaks-docs diff --git a/.github/workflows/apps-site-release.yml b/.github/workflows/apps-site-release.yml index e7e258a..0fa2c5e 100644 --- a/.github/workflows/apps-site-release.yml +++ b/.github/workflows/apps-site-release.yml @@ -50,7 +50,7 @@ jobs: uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Log in to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/apps-site-security-deps.yml b/.github/workflows/apps-site-security-deps.yml index 12b14e7..b3d8fb4 100644 --- a/.github/workflows/apps-site-security-deps.yml +++ b/.github/workflows/apps-site-security-deps.yml @@ -70,7 +70,7 @@ jobs: - name: Upload osv SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: osv-results.sarif category: osv-scanner-site diff --git a/.github/workflows/apps-site-security-secrets.yml b/.github/workflows/apps-site-security-secrets.yml index 4480083..1f2bb12 100644 --- a/.github/workflows/apps-site-security-secrets.yml +++ b/.github/workflows/apps-site-security-secrets.yml @@ -74,7 +74,7 @@ jobs: - name: Upload SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: gitleaks-results.sarif category: gitleaks-site diff --git a/.github/workflows/apps-ui-release.yml b/.github/workflows/apps-ui-release.yml index 73d26d8..0574303 100644 --- a/.github/workflows/apps-ui-release.yml +++ b/.github/workflows/apps-ui-release.yml @@ -79,7 +79,7 @@ jobs: uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Log in to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/apps-ui-security-deps.yml b/.github/workflows/apps-ui-security-deps.yml index 5d2bdec..2dbc022 100644 --- a/.github/workflows/apps-ui-security-deps.yml +++ b/.github/workflows/apps-ui-security-deps.yml @@ -73,7 +73,7 @@ jobs: - name: Upload osv SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: osv-results.sarif category: osv-scanner-ui diff --git a/.github/workflows/apps-ui-security-sast.yml b/.github/workflows/apps-ui-security-sast.yml index 28e0251..9c68a62 100644 --- a/.github/workflows/apps-ui-security-sast.yml +++ b/.github/workflows/apps-ui-security-sast.yml @@ -88,7 +88,7 @@ jobs: - name: Upload semgrep SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: semgrep-results.sarif category: semgrep-ui diff --git a/.github/workflows/apps-ui-security-secrets.yml b/.github/workflows/apps-ui-security-secrets.yml index ca122ff..1c01b3c 100644 --- a/.github/workflows/apps-ui-security-secrets.yml +++ b/.github/workflows/apps-ui-security-secrets.yml @@ -76,7 +76,7 @@ jobs: - name: Upload SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: gitleaks-results.sarif category: gitleaks-ui diff --git a/.github/workflows/apps-ui-validate.yml b/.github/workflows/apps-ui-validate.yml index 87cf1b4..ab0d943 100644 --- a/.github/workflows/apps-ui-validate.yml +++ b/.github/workflows/apps-ui-validate.yml @@ -114,7 +114,7 @@ jobs: - name: Upload dist if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: dist path: dist @@ -125,7 +125,7 @@ jobs: - name: Upload Storybook if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: storybook-static path: storybook-static @@ -133,7 +133,7 @@ jobs: - name: Upload Lighthouse reports if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: lighthouse-reports path: .lighthouseci diff --git a/.github/workflows/infra-bootstrap-security-deps.yml b/.github/workflows/infra-bootstrap-security-deps.yml index 1c3baac..f727758 100644 --- a/.github/workflows/infra-bootstrap-security-deps.yml +++ b/.github/workflows/infra-bootstrap-security-deps.yml @@ -51,7 +51,7 @@ jobs: - name: Upload trivy SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: trivy-results.sarif category: trivy diff --git a/.github/workflows/infra-bootstrap-security-secrets.yml b/.github/workflows/infra-bootstrap-security-secrets.yml index 9ea976d..50c8ba9 100644 --- a/.github/workflows/infra-bootstrap-security-secrets.yml +++ b/.github/workflows/infra-bootstrap-security-secrets.yml @@ -67,7 +67,7 @@ jobs: - name: Upload SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: gitleaks-results.sarif category: gitleaks-bootstrap diff --git a/.github/workflows/infra-compose-playwright-e2e.yml b/.github/workflows/infra-compose-playwright-e2e.yml index 6480a19..3ae5039 100644 --- a/.github/workflows/infra-compose-playwright-e2e.yml +++ b/.github/workflows/infra-compose-playwright-e2e.yml @@ -140,7 +140,7 @@ jobs: - name: Upload Playwright artifacts on failure if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: playwright-results path: | diff --git a/.github/workflows/infra-compose-security-secrets.yml b/.github/workflows/infra-compose-security-secrets.yml index 956085a..917eb24 100644 --- a/.github/workflows/infra-compose-security-secrets.yml +++ b/.github/workflows/infra-compose-security-secrets.yml @@ -76,7 +76,7 @@ jobs: - name: Upload SARIF if: always() - uses: github/codeql-action/upload-sarif@7c1e4cf0b20d7c1872b26569c00ba908797a59bf # v4 + uses: github/codeql-action/upload-sarif@0911ee96d2d6c8def97122c36c5cadd93829a4b4 # v4 with: sarif_file: gitleaks-results.sarif category: gitleaks-compose diff --git a/.github/workflows/production-release.yml b/.github/workflows/production-release.yml index f0bf89d..d370aec 100644 --- a/.github/workflows/production-release.yml +++ b/.github/workflows/production-release.yml @@ -58,7 +58,7 @@ jobs: git fetch origin main test "$(git rev-parse origin/main)" = "$GITHUB_SHA" - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + - uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0 with: registry: ghcr.io username: ${{ github.actor }}