From 5efb0f5905a25af98d2a828ee35e7ba9f3e80da2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 8 Sep 2026 16:29:12 +0000 Subject: [PATCH] chore(ci): bump the github-actions-non-major group across 1 directory with 3 updates Bumps the github-actions-non-major group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [bufbuild/buf-action](https://github.com/bufbuild/buf-action) and [actions/cache](https://github.com/actions/cache). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `bufbuild/buf-action` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/bufbuild/buf-action/releases) - [Changelog](https://github.com/bufbuild/buf-action/blob/main/RELEASE.md) - [Commits](https://github.com/bufbuild/buf-action/compare/fd21066df7214747548607aaa45548ba2b9bc1ff...8c6a16e16f12ba20b6470afa9c2ba9b5ba8c97c3) Updates `actions/cache` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/2c8a9bd7457de244a408f35966fab2fb45fda9c8...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) --- updated-dependencies: - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-non-major - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-non-major - dependency-name: bufbuild/buf-action dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-non-major ... Signed-off-by: dependabot[bot] --- .github/workflows/check.yml | 2 +- .github/workflows/dependency-review.yaml | 2 +- .github/workflows/vulnerability.yml | 2 +- .github/workflows/xtest.yml | 22 +++++++++++----------- 4 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index 0c6fc4247..b3d8ada7f 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -12,7 +12,7 @@ jobs: contents: read runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: 🦪 ✔ 🧼🧼🧼 diff --git a/.github/workflows/dependency-review.yaml b/.github/workflows/dependency-review.yaml index d015685b4..47dcaa53c 100644 --- a/.github/workflows/dependency-review.yaml +++ b/.github/workflows/dependency-review.yaml @@ -37,7 +37,7 @@ jobs: - name: Checkout if: ${{ github.event_name != 'merge_group' }} - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/vulnerability.yml b/.github/workflows/vulnerability.yml index 8a9a99973..7a6b229bf 100644 --- a/.github/workflows/vulnerability.yml +++ b/.github/workflows/vulnerability.yml @@ -24,7 +24,7 @@ jobs: contents: read packages: read steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e diff --git a/.github/workflows/xtest.yml b/.github/workflows/xtest.yml index db38c76d4..5ef6f275c 100644 --- a/.github/workflows/xtest.yml +++ b/.github/workflows/xtest.yml @@ -143,7 +143,7 @@ jobs: CRON_NIGHTLY: ${{ github.event.schedule == '30 6 * * *' }} CRON_MONDAY_WEDNESDAY: ${{ github.event.schedule == '0 5 * * 1,3' }} CRON_WEEKLY: ${{ github.event.schedule == '0 18 * * 0' }} - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: path: otdf-sdk persist-credentials: false @@ -298,7 +298,7 @@ jobs: platform-tag: ${{ fromJSON(needs.resolve-versions.outputs.platform-tag-list) }} sdk-version: ${{ fromJSON(needs.resolve-versions.outputs.sdk-version-list) }} steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: opentdf/tests path: otdftests # use different name bc other repos might have tests directories @@ -350,7 +350,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 - - uses: bufbuild/buf-action@fd21066df7214747548607aaa45548ba2b9bc1ff # v1.4.0 + - uses: bufbuild/buf-action@8c6a16e16f12ba20b6470afa9c2ba9b5ba8c97c3 # v1.5.0 with: setup_only: true token: ${{ secrets.BUF_TOKEN }} @@ -404,7 +404,7 @@ jobs: - name: Cache npm if: fromJson(steps.configure-js.outputs.heads)[0] != null - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.npm key: npm-${{ runner.os }}-${{ hashFiles('otdftests/xtest/sdk/js/src/**/package-lock.json') }} @@ -432,7 +432,7 @@ jobs: - name: Cache Go modules if: fromJson(steps.configure-go.outputs.heads)[0] != null - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: | ~/.cache/go-build @@ -467,7 +467,7 @@ jobs: - name: Cache Maven repository if: fromJson(steps.configure-java.outputs.heads)[0] != null - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.m2/repository key: maven-${{ runner.os }}-${{ hashFiles('otdftests/xtest/sdk/java/src/**/pom.xml') }} @@ -804,7 +804,7 @@ jobs: matrix: sdk: [go, java, js] steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: opentdf/tests path: otdftests @@ -833,7 +833,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@fac544c07dec837d0ccb6301d7b5580bf5edae39 # v8.2.0 - - uses: bufbuild/buf-action@fd21066df7214747548607aaa45548ba2b9bc1ff # v1.4.0 + - uses: bufbuild/buf-action@8c6a16e16f12ba20b6470afa9c2ba9b5ba8c97c3 # v1.5.0 if: matrix.sdk == 'java' with: setup_only: true @@ -907,7 +907,7 @@ jobs: # Unconditional: every bench runner builds go now, either as the SDK # under measurement or as otdfctl. - name: Cache Go modules - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: | ~/.cache/go-build @@ -918,7 +918,7 @@ jobs: - name: Cache npm if: matrix.sdk == 'js' - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.npm key: npm-${{ runner.os }}-${{ hashFiles('otdftests/xtest/sdk/js/src/**/package-lock.json') }} @@ -927,7 +927,7 @@ jobs: - name: Cache Maven repository if: matrix.sdk == 'java' - uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.m2/repository key: maven-${{ runner.os }}-${{ hashFiles('otdftests/xtest/sdk/java/src/**/pom.xml') }}