From 183c186b981a6290d7d42d0819d2b8b60860f17a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Jan 2026 15:40:33 +0100 Subject: [PATCH] Bump the github-actions group across 1 directory with 7 updates (#4042) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/android-ci.yml | 10 +++++----- .github/workflows/android-device-test.yml | 2 +- .github/workflows/core-release.yml | 6 +++--- .github/workflows/gh-pages-docc.yml | 4 ++-- .github/workflows/gh-pages-mdbook.yml | 4 ++-- .github/workflows/ios-ci.yml | 12 ++++++------ .github/workflows/linux-ci.yml | 16 ++++++++-------- .github/workflows/macos-ci.yml | 4 ++-- .github/workflows/node-ci.yml | 6 +++--- .github/workflows/node-release.yml | 4 ++-- .github/workflows/pr-bloaty-ios.yml | 2 +- .github/workflows/pr-linux-tests.yml | 2 +- .github/workflows/upload-coverage.yml | 2 +- .github/workflows/windows-ci.yml | 22 +++++++++++----------- 14 files changed, 48 insertions(+), 48 deletions(-) diff --git a/.github/workflows/android-ci.yml b/.github/workflows/android-ci.yml index 30f1b1e34..e1cf89c04 100644 --- a/.github/workflows/android-ci.yml +++ b/.github/workflows/android-ci.yml @@ -34,7 +34,7 @@ jobs: - name: Get all Android files that have changed if: github.event_name != 'workflow_dispatch' id: changed-files - uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0 + uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1 with: files_yaml_from_source_file: .github/changed-files.yml @@ -165,7 +165,7 @@ jobs: - name: Create artifact for benchmark APKs if: matrix.renderer == 'opengl' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: if-no-files-found: error name: benchmarkAPKs @@ -200,7 +200,7 @@ jobs: run: sentry-cli debug-files upload MapLibreAndroidTestApp - name: Upload android-ui-test-${{ matrix.renderer }} - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: if-no-files-found: error name: android-ui-test-${{ matrix.renderer }} @@ -259,7 +259,7 @@ jobs: cp app/build/outputs/apk/androidTest/release/app-release-androidTest.apk . - name: Store C++ Unit Tests .apk files - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: android-cpp-tests if-no-files-found: error @@ -339,7 +339,7 @@ jobs: - name: VERSION file changed if: github.ref == 'refs/heads/main' && github.event_name == 'push' id: version-file-android-changed - uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0 + uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1 with: files: platform/android/VERSION diff --git a/.github/workflows/android-device-test.yml b/.github/workflows/android-device-test.yml index 325633d53..02c28efbb 100644 --- a/.github/workflows/android-device-test.yml +++ b/.github/workflows/android-device-test.yml @@ -198,7 +198,7 @@ jobs: - name: Upload Test Artifacts if: (matrix.test.name == 'Android Benchmark' || failure()) && env.run_device_test == 'true' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: "Test Artifacts ${{ matrix.test.name }}" path: test_artifacts.zip diff --git a/.github/workflows/core-release.yml b/.github/workflows/core-release.yml index b63a2ce31..4074977b4 100644 --- a/.github/workflows/core-release.yml +++ b/.github/workflows/core-release.yml @@ -67,7 +67,7 @@ jobs: - name: Upload macOS artifacts if: github.event_name == 'pull_request' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: macos-metal-build path: | @@ -120,7 +120,7 @@ jobs: - name: Upload Linux artifacts if: github.event_name == 'pull_request' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: linux-${{ matrix.runner.arch }}-${{ matrix.renderer }}-build path: | @@ -161,7 +161,7 @@ jobs: - name: Upload Windows artifact if: github.event_name == 'pull_request' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: windows-${{ matrix.renderer }}-build path: | diff --git a/.github/workflows/gh-pages-docc.yml b/.github/workflows/gh-pages-docc.yml index 96df724e6..f80fc96aa 100644 --- a/.github/workflows/gh-pages-docc.yml +++ b/.github/workflows/gh-pages-docc.yml @@ -41,7 +41,7 @@ jobs: cd build zip -r docs.zip docs/ - - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: docc-docs path: build/docs.zip @@ -55,7 +55,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - name: Download DocC docs artifacts - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v4 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4 with: name: docc-docs path: build diff --git a/.github/workflows/gh-pages-mdbook.yml b/.github/workflows/gh-pages-mdbook.yml index 9f8d18bb0..fb9f85dce 100644 --- a/.github/workflows/gh-pages-mdbook.yml +++ b/.github/workflows/gh-pages-mdbook.yml @@ -29,7 +29,7 @@ jobs: working-directory: docs/mdbook shell: bash run: mdbook build - - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: book path: docs/mdbook/book/ @@ -42,7 +42,7 @@ jobs: steps: - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v4 - name: Download book - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v4 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v4 with: name: book path: artifacts/book diff --git a/.github/workflows/ios-ci.yml b/.github/workflows/ios-ci.yml index 2d63d5523..f28055e5a 100644 --- a/.github/workflows/ios-ci.yml +++ b/.github/workflows/ios-ci.yml @@ -46,7 +46,7 @@ jobs: - name: Get all iOS files that have changed if: github.event_name != 'workflow_dispatch' id: changed-files-yaml - uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0 + uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1 with: files_yaml_from_source_file: .github/changed-files.yml @@ -79,7 +79,7 @@ jobs: persist-credentials: false - name: Cache Bazel - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} restore-keys: | @@ -142,7 +142,7 @@ jobs: zip -r "$render_test_app_dir"/RenderTest.xctest.zip RenderTest.xctest echo render_test_artifacts_dir="$render_test_app_dir" >> "$GITHUB_ENV" - - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: ios-render-test retention-days: 3 @@ -169,7 +169,7 @@ jobs: zip -r "$ios_cpp_test_app_dir"/CppUnitTests.xctest.zip CppUnitTests.xctest echo ios_cpp_test_artifacts_dir="$ios_cpp_test_app_dir" >> "$GITHUB_ENV" - - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: ios-cpp-unit-tests retention-days: 3 @@ -190,7 +190,7 @@ jobs: - name: Upload size test as artifact (Bloaty) if: github.event_name == 'pull_request' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: ios-size-test-files retention-days: 3 @@ -236,7 +236,7 @@ jobs: - name: VERSION file changed id: version-file-ios-changed - uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0 + uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1 with: files: platform/ios/VERSION diff --git a/.github/workflows/linux-ci.yml b/.github/workflows/linux-ci.yml index 087b56e2a..486374fa8 100644 --- a/.github/workflows/linux-ci.yml +++ b/.github/workflows/linux-ci.yml @@ -42,7 +42,7 @@ jobs: if: github.event_name != 'workflow_dispatch' id: changed-files - uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0 + uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1 with: files_yaml_from_source_file: .github/changed-files.yml @@ -72,7 +72,7 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 with: languages: cpp @@ -147,7 +147,7 @@ jobs: - name: Upload mbgl-render as artifact if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: mbgl-render path: | @@ -155,7 +155,7 @@ jobs: - name: Upload mbgl-benchmark-runner as artifact if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: mbgl-benchmark-runner path: | @@ -170,7 +170,7 @@ jobs: # CodeQL - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 with: category: "/language:cpp" @@ -197,7 +197,7 @@ jobs: - name: Upload render test result if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: render-test-result-${{ matrix.variant.renderer }} path: | @@ -222,7 +222,7 @@ jobs: run: .github/scripts/install-linux-deps - name: Cache Bazel - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} restore-keys: | @@ -249,7 +249,7 @@ jobs: echo coverage_report="$(bazel info output_path)"/_coverage/_coverage_report.dat >> "$GITHUB_ENV" - name: Upload coverage report - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: coverage-report path: ${{ env.coverage_report }} diff --git a/.github/workflows/macos-ci.yml b/.github/workflows/macos-ci.yml index 8d6f99968..7c9a3c1c7 100644 --- a/.github/workflows/macos-ci.yml +++ b/.github/workflows/macos-ci.yml @@ -75,7 +75,7 @@ jobs: fetch-depth: 0 - name: Cache Bazel - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} restore-keys: | @@ -155,7 +155,7 @@ jobs: - name: Upload render report if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: macos-webgpu-${{ matrix.variant.impl }}-render-report path: metrics/macos-webgpu-${{ matrix.variant.impl }}.html diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml index e23ddcecc..966a77429 100644 --- a/.github/workflows/node-ci.yml +++ b/.github/workflows/node-ci.yml @@ -193,7 +193,7 @@ jobs: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }} - name: Cache cmake-node-module deps - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: # downloaded with platform/node/cmake/module.cmake path: build/headers @@ -218,7 +218,7 @@ jobs: - name: Restore vcpkg binary cache if: runner.os == 'Windows' - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -259,7 +259,7 @@ jobs: - name: Upload render test artifacts (MacOS) if: runner.os == 'MacOS' && steps.render_tests.outcome == 'failure' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: render-query-test-results_${{ runner.os }}_${{ matrix.arch }} path: metrics/macos-xcode11-release-style.html diff --git a/.github/workflows/node-release.yml b/.github/workflows/node-release.yml index e8325c256..a98769e32 100644 --- a/.github/workflows/node-release.yml +++ b/.github/workflows/node-release.yml @@ -168,7 +168,7 @@ jobs: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }} - name: Cache cmake-node-module deps - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: # downloaded with platform/node/cmake/module.cmake path: build/headers @@ -193,7 +193,7 @@ jobs: - name: Restore vcpkg binary cache if: runner.os == 'Windows' - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} diff --git a/.github/workflows/pr-bloaty-ios.yml b/.github/workflows/pr-bloaty-ios.yml index 8daa333e5..64caace80 100644 --- a/.github/workflows/pr-bloaty-ios.yml +++ b/.github/workflows/pr-bloaty-ios.yml @@ -51,7 +51,7 @@ jobs: - name: Cache Bloaty id: cache-bloaty - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: bloaty/build/bloaty key: bloaty-${{ env.bloaty_sha }} diff --git a/.github/workflows/pr-linux-tests.yml b/.github/workflows/pr-linux-tests.yml index 597d94f98..c5557908e 100644 --- a/.github/workflows/pr-linux-tests.yml +++ b/.github/workflows/pr-linux-tests.yml @@ -70,7 +70,7 @@ jobs: - name: Cache Bloaty id: cache-bloaty - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: bloaty/build/bloaty key: bloaty-${{ env.bloaty_sha }} diff --git a/.github/workflows/upload-coverage.yml b/.github/workflows/upload-coverage.yml index 175e308c3..c1616b4db 100644 --- a/.github/workflows/upload-coverage.yml +++ b/.github/workflows/upload-coverage.yml @@ -49,7 +49,7 @@ jobs: - name: Upload coverage report if: '!cancelled()' - uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5.5.1 + uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2 with: override_commit: ${{ github.event.workflow_run.head_sha }} override_pr: ${{ github.event.workflow_run.pull_requests[0].number }} diff --git a/.github/workflows/windows-ci.yml b/.github/workflows/windows-ci.yml index 24f6921cf..f21add9f9 100644 --- a/.github/workflows/windows-ci.yml +++ b/.github/workflows/windows-ci.yml @@ -45,7 +45,7 @@ jobs: - name: Get all Windows files that have changed if: github.event_name != 'workflow_dispatch' id: changed-files - uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0 + uses: tj-actions/changed-files@e0021407031f5be11a464abee9a0776171c79891 # v47.0.1 with: files_yaml_from_source_file: .github/changed-files.yml @@ -76,7 +76,7 @@ jobs: - name: Restore vcpkg binary cache id: vcpkg-cache - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -102,7 +102,7 @@ jobs: - name: Save vcpkg binary cache if: steps.vcpkg-cache.outputs.cache-hit != 'true' - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/save@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -124,7 +124,7 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 with: languages: cpp @@ -143,7 +143,7 @@ jobs: Add-Content -Path $env:GITHUB_ENV -Value "VCPKG_COMMIT_ID=${vcpkg_commit_id}" - name: Restore vcpkg binary cache - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/restore@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -167,7 +167,7 @@ jobs: # CodeQL - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 with: category: "/language:cpp" @@ -231,7 +231,7 @@ jobs: - name: Upload render test result if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: render-test-result-${{ matrix.renderer }} path: | @@ -260,7 +260,7 @@ jobs: submodules: recursive persist-credentials: false - - uses: msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2 # v2.29.0 + - uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0 with: msystem: ${{ matrix.msystem }} update: true @@ -279,7 +279,7 @@ jobs: libuv:p - name: Initialize CodeQL - uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/init@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 with: languages: cpp @@ -308,7 +308,7 @@ jobs: # CodeQL - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/analyze@5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9 with: category: "/language:cpp" @@ -372,7 +372,7 @@ jobs: - name: Upload render test result if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: render-test-result-${{ matrix.renderer }} path: |