From b23ef8ff7d4ed402f198946c536801b07d7a19fe Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 28 Mar 2026 20:59:29 +0000 Subject: [PATCH] build(deps): update github actions Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/mega-lint.yml | 4 ++-- .github/workflows/openssf-scorecard.yml | 4 ++-- .github/workflows/version-bump-changelog.yml | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/mega-lint.yml b/.github/workflows/mega-lint.yml index fd93f64..20245b8 100644 --- a/.github/workflows/mega-lint.yml +++ b/.github/workflows/mega-lint.yml @@ -49,7 +49,7 @@ jobs: MEGALINTER_CONFIG: ${{ inputs.megalinter-config }} # Use the input value steps: - name: Harden GitHub runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0 with: egress-policy: ${{ inputs.egress-policy }} @@ -73,6 +73,6 @@ jobs: - name: Upload MegaLinter scan results to GitHub Security tab if: success() || failure() - uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 + uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1 with: sarif_file: "megalinter-reports/megalinter-report.sarif" diff --git a/.github/workflows/openssf-scorecard.yml b/.github/workflows/openssf-scorecard.yml index 46ae98b..5e9356e 100644 --- a/.github/workflows/openssf-scorecard.yml +++ b/.github/workflows/openssf-scorecard.yml @@ -54,7 +54,7 @@ jobs: steps: - name: Harden GitHub runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0 with: egress-policy: ${{ inputs.egress-policy }} @@ -82,6 +82,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 + uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1 with: sarif_file: results.sarif diff --git a/.github/workflows/version-bump-changelog.yml b/.github/workflows/version-bump-changelog.yml index 9d9c1d2..076479e 100644 --- a/.github/workflows/version-bump-changelog.yml +++ b/.github/workflows/version-bump-changelog.yml @@ -59,7 +59,7 @@ jobs: contents: write steps: - name: Harden GitHub runner - uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1 + uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0 with: egress-policy: ${{ inputs.egress-policy }}