From 7b4995f411c616f6850557d38fea92228a0055cd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 4 Aug 2026 06:33:42 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 3 updates Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [revanite-io/osps-baseline-action](https://github.com/revanite-io/osps-baseline-action) and [actions/setup-java](https://github.com/actions/setup-java). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `revanite-io/osps-baseline-action` from 1.3.3 to 1.3.4 - [Release notes](https://github.com/revanite-io/osps-baseline-action/releases) - [Commits](https://github.com/revanite-io/osps-baseline-action/compare/ace75cc1fb748be898275f16f59f78363405bc0a...b7d860b68755627c30ab692473511c90daee3ae8) Updates `actions/setup-java` from 5.4.0 to 5.7.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/1bcf9fb12cf4aa7d266a90ae39939e61372fe520...b6effb05e454b25005698d916606bdc6ffcbf961) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: revanite-io/osps-baseline-action dependency-version: 1.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/setup-java dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/baseline-scanner.yaml | 4 ++-- .github/workflows/cue-validate.yaml | 2 +- .github/workflows/golangci-lint.yaml | 2 +- .github/workflows/oscal-check.yaml | 6 +++--- .github/workflows/spellcheck.yml | 2 +- .github/workflows/test-build.yml | 2 +- .github/workflows/web-publish.yml | 2 +- 7 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/baseline-scanner.yaml b/.github/workflows/baseline-scanner.yaml index 37abd4b8..918140bc 100644 --- a/.github/workflows/baseline-scanner.yaml +++ b/.github/workflows/baseline-scanner.yaml @@ -17,12 +17,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Open Source Project Security Baseline Scanner - uses: revanite-io/osps-baseline-action@ace75cc1fb748be898275f16f59f78363405bc0a # v1.3.3 + uses: revanite-io/osps-baseline-action@b7d860b68755627c30ab692473511c90daee3ae8 # v1.3.4 with: owner: ${{ github.repository_owner }} repo: ${{ github.event.repository.name }} diff --git a/.github/workflows/cue-validate.yaml b/.github/workflows/cue-validate.yaml index 8ecfad54..73eac874 100644 --- a/.github/workflows/cue-validate.yaml +++ b/.github/workflows/cue-validate.yaml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/golangci-lint.yaml b/.github/workflows/golangci-lint.yaml index a11a669c..44eeaf34 100644 --- a/.github/workflows/golangci-lint.yaml +++ b/.github/workflows/golangci-lint.yaml @@ -17,7 +17,7 @@ jobs: name: lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/oscal-check.yaml b/.github/workflows/oscal-check.yaml index 3a4b27ab..12178017 100644 --- a/.github/workflows/oscal-check.yaml +++ b/.github/workflows/oscal-check.yaml @@ -17,13 +17,13 @@ jobs: steps: - name: clone-baseline id: clone-baseline - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: clone-go-oscal id: clone-go-oscal - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: defenseunicorns/go-oscal path: .build/go-oscal/ @@ -37,7 +37,7 @@ jobs: cache: true - name: Setup Java # this is here because oscal-cli-action below needs a java runtime - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 + uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 id: setup-java with: distribution: temurin diff --git a/.github/workflows/spellcheck.yml b/.github/workflows/spellcheck.yml index 3dea6ce1..4ce46d2c 100644 --- a/.github/workflows/spellcheck.yml +++ b/.github/workflows/spellcheck.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/test-build.yml b/.github/workflows/test-build.yml index bfbcfe83..a6501602 100644 --- a/.github/workflows/test-build.yml +++ b/.github/workflows/test-build.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/web-publish.yml b/.github/workflows/web-publish.yml index 10242bf9..82f9763f 100644 --- a/.github/workflows/web-publish.yml +++ b/.github/workflows/web-publish.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Setup Pages