From 8bbbc0983b8a8af31c003b6b10dc066ea960ece8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Sep 2024 09:50:13 +0000 Subject: [PATCH] build(dependencies): bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [wearefrank/ci-cd-templates](https://github.com/wearefrank/ci-cd-templates), [step-security/harden-runner](https://github.com/step-security/harden-runner) and [actions/setup-node](https://github.com/actions/setup-node). Updates `wearefrank/ci-cd-templates` from 1.0.8 to 1.0.9 - [Release notes](https://github.com/wearefrank/ci-cd-templates/releases) - [Changelog](https://github.com/wearefrank/ci-cd-templates/blob/main/CHANGELOG.md) - [Commits](https://github.com/wearefrank/ci-cd-templates/compare/df1db1b1a73abf2e733f3a5e77b87db7693980c0...5f916d5599b9023e0dde73638984a8a58615d2c0) Updates `step-security/harden-runner` from 2.9.1 to 2.10.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde...91182cccc01eb5e619899d80e4e971d6181294a7) Updates `actions/setup-node` from 4.0.3 to 4.0.4 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/1e60f620b9541d16bece96c5465dc8ee9832be0b...0a44ba7841725637a19e28fa30b79a866c81b0a6) --- updated-dependencies: - dependency-name: wearefrank/ci-cd-templates dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/bump-ff-version.yml | 2 +- .github/workflows/ci.yml | 8 ++++---- .github/workflows/release.yml | 16 ++++++++-------- 3 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/bump-ff-version.yml b/.github/workflows/bump-ff-version.yml index 5474db4a..3818987a 100644 --- a/.github/workflows/bump-ff-version.yml +++ b/.github/workflows/bump-ff-version.yml @@ -12,7 +12,7 @@ on: jobs: bump-ff-version: - uses: wearefrank/ci-cd-templates/.github/workflows/ff-version-auto-bumper.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 # 1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/ff-version-auto-bumper.yml@5f916d5599b9023e0dde73638984a8a58615d2c0 # 1.0.9 secrets: token: ${{ secrets.WEAREFRANK_BOT_PAT }} dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 46fd6795..2cfb1b64 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: version-next: ${{ steps.reference.outputs.next-reference }} version-next-strict: ${{ steps.reference.outputs.next-reference }} steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: disable-sudo: true egress-policy: block @@ -27,10 +27,10 @@ jobs: - name: Next Reference id: reference - uses: wearefrank/ci-cd-templates/next-reference@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/next-reference@5f916d5599b9023e0dde73638984a8a58615d2c0 #1.0.9 ci: - uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@5f916d5599b9023e0dde73638984a8a58615d2c0 #1.0.9 needs: - version-next secrets: @@ -48,7 +48,7 @@ jobs: - version-next - ci steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 417f3057..0db74176 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ jobs: version-next-tag: ${{ steps.next-version.outputs.release-tag }} version-next-type: ${{ steps.next-version.outputs.release-type }} steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: disable-sudo: true egress-policy: audit @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #4.1.7 - name: "Setup Node" - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b #4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 #4.0.4 with: node-version: 20 @@ -40,7 +40,7 @@ jobs: GH_TOKEN: ${{ secrets.WEAREFRANK_BOT_PAT }} ci: - uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/ci-generic.yml@5f916d5599b9023e0dde73638984a8a58615d2c0 #1.0.9 needs: analyze-commits secrets: token: ${{ secrets.GITHUB_TOKEN }} @@ -58,7 +58,7 @@ jobs: - analyze-commits - ci steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit @@ -127,7 +127,7 @@ jobs: - ci - run-soapui-tests steps: - - uses: step-security/harden-runner@5c7944e73c4c2a096b17a9cb74d65b6c2bbafbde # v2.9.1 + - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 with: egress-policy: audit @@ -149,7 +149,7 @@ jobs: merge-multiple: true - name: Setup Node - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b #4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 #4.0.4 with: node-version: 20 @@ -163,7 +163,7 @@ jobs: GH_TOKEN: ${{ secrets.WEAREFRANK_BOT_PAT }} docker-release: - uses: wearefrank/ci-cd-templates/.github/workflows/docker-release-generic.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/docker-release-generic.yml@5f916d5599b9023e0dde73638984a8a58615d2c0 #1.0.9 needs: - analyze-commits - release @@ -193,4 +193,4 @@ jobs: - release # Set to true to enable Docusaurus publishing to GitHub Pages if: true - uses: wearefrank/ci-cd-templates/.github/workflows/docusaurus-release.yml@df1db1b1a73abf2e733f3a5e77b87db7693980c0 #1.0.8 + uses: wearefrank/ci-cd-templates/.github/workflows/docusaurus-release.yml@5f916d5599b9023e0dde73638984a8a58615d2c0 #1.0.9