From b602f2b6f657d4f3f9bc0e7d8a701394776f0134 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 27 Sep 2026 11:33:44 +0000 Subject: [PATCH] build(deps): bump the github-actions group across 1 directory with 4 updates Bumps the github-actions group with 4 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [github/codeql-action/upload-sarif](https://github.com/github/codeql-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) and [docker/build-push-action](https://github.com/docker/build-push-action). Updates `actions/setup-node` from 4.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...820762786026740c76f36085b0efc47a31fe5020) Updates `github/codeql-action/upload-sarif` from 4.37.9 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.37.9...v4.38.1) Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/checks.yml | 2 +- .github/workflows/container-scan.yml | 2 +- .github/workflows/publish_images.yml | 4 ++-- .github/workflows/sast.yml | 2 +- .github/workflows/sca.yml | 2 +- .github/workflows/secrets-scan.yml | 2 +- 6 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/checks.yml b/.github/workflows/checks.yml index 450237f7..a299fccb 100644 --- a/.github/workflows/checks.yml +++ b/.github/workflows/checks.yml @@ -18,7 +18,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Node - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version-file: .nvmrc cache: npm diff --git a/.github/workflows/container-scan.yml b/.github/workflows/container-scan.yml index f5c7c9ba..7781abd5 100644 --- a/.github/workflows/container-scan.yml +++ b/.github/workflows/container-scan.yml @@ -66,7 +66,7 @@ jobs: - name: Upload merged SARIF to GitHub Security tab if: ${{ !cancelled() && hashFiles(env.CONTAINER_SCAN_MERGED_SARIF_OUTPUT) != '' }} - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.31.2 + uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.31.2 with: sarif_file: ${{ env.CONTAINER_SCAN_MERGED_SARIF_OUTPUT }} category: container-scan diff --git a/.github/workflows/publish_images.yml b/.github/workflows/publish_images.yml index c027c4c5..76c4b061 100644 --- a/.github/workflows/publish_images.yml +++ b/.github/workflows/publish_images.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e #v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 #v4.4.1 - name: Harbor connectivity probe run: | @@ -70,7 +70,7 @@ jobs: ${{ runner.os }}-buildx-platform-ui- - name: Build PLATFORM-UI docker image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a #v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc #v7.4.0 with: context: . file: ./Dockerfile diff --git a/.github/workflows/sast.yml b/.github/workflows/sast.yml index abe93cd3..34199871 100644 --- a/.github/workflows/sast.yml +++ b/.github/workflows/sast.yml @@ -40,7 +40,7 @@ jobs: - name: Upload SARIF to GitHub Security tab if: ${{ !cancelled() && hashFiles(env.OPENGREP_SARIF_OUTPUT) != '' }} - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.31.2 + uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.31.2 with: sarif_file: ${{ env.OPENGREP_SARIF_OUTPUT }} category: semgrep-app diff --git a/.github/workflows/sca.yml b/.github/workflows/sca.yml index 5e14834b..da0340c1 100644 --- a/.github/workflows/sca.yml +++ b/.github/workflows/sca.yml @@ -50,7 +50,7 @@ jobs: - name: Upload merged SARIF to GitHub Security tab if: ${{ !cancelled() && hashFiles(env.SCA_MERGED_SARIF_OUTPUT) != '' }} - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.31.2 + uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.31.2 with: sarif_file: ${{ env.SCA_MERGED_SARIF_OUTPUT }} category: sca-app diff --git a/.github/workflows/secrets-scan.yml b/.github/workflows/secrets-scan.yml index 9101ca35..929d411f 100644 --- a/.github/workflows/secrets-scan.yml +++ b/.github/workflows/secrets-scan.yml @@ -34,7 +34,7 @@ jobs: - name: Upload SARIF to code scanning if: always() - uses: github/codeql-action/upload-sarif@1cf8f518e1ad217271451b975391e639ea196e55 #v2.25.6 + uses: github/codeql-action/upload-sarif@7b6a151fb55e03ce158c75249f8880ea01aabebf #v2.25.6 with: sarif_file: ${{ env.GITLEAKS_SARIF_OUTPUT }} category: gitleaks