From a79a3714e713396991f89212837bf8ab343e9f85 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Nov 2026 10:33:54 +0000 Subject: [PATCH] chore(deps): Bump the actions group across 2 directories with 4 updates Bumps the actions group with 3 updates in the / directory: [step-security/harden-runner](https://github.com/step-security/harden-runner), [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) and [dorny/test-reporter](https://github.com/dorny/test-reporter). Bumps the actions group with 1 update in the /actions/setup-flutter-env directory: [actions/setup-java](https://github.com/actions/setup-java). Updates `step-security/harden-runner` from 2.22.2 to 2.22.3 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/dc2769abcc0fcfbadfc1df54081c1608579ef6b2...46b06cea07f9e64621fdf066ba77ac6915163d43) Updates `github/codeql-action/upload-sarif` from 4.39.0 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `dorny/test-reporter` from 3.0.0 to 3.2.0 - [Release notes](https://github.com/dorny/test-reporter/releases) - [Changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md) - [Commits](https://github.com/dorny/test-reporter/compare/a43b3a5f7366b97d083190328d2c652e1a8b6aa2...d1b5dff021aa968b288b02285a8bf47471c5928a) Updates `actions/setup-java` from 6.0.1 to 6.1.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/de7274f081f381c8f8158605e0321c36c376e2e6...b843ebf9b913146b38da2eaa7aeddf76074ae1ad) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: dorny/test-reporter dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-java dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/dart-ci.yml | 12 ++++++------ .github/workflows/dart-compile.yml | 2 +- .github/workflows/dartdoc.yml | 2 +- .github/workflows/flutter-build.yml | 2 +- .github/workflows/github-release.yml | 2 +- .github/workflows/inspectra.yml | 10 +++++----- .github/workflows/pages.yml | 2 +- .github/workflows/pr-lint.yml | 2 +- .github/workflows/pub-publish.yml | 4 ++-- .github/workflows/release-please.yml | 2 +- .github/workflows/release-tag.yml | 4 ++-- .github/workflows/self-lint.yml | 4 ++-- .github/workflows/self-release.yml | 2 +- .github/workflows/self-update-pins.yml | 2 +- .github/workflows/test-report.yml | 2 +- .github/workflows/writerside.yml | 2 +- actions/setup-flutter-env/action.yml | 2 +- 17 files changed, 29 insertions(+), 29 deletions(-) diff --git a/.github/workflows/dart-ci.yml b/.github/workflows/dart-ci.yml index 1410a0e..f462047 100644 --- a/.github/workflows/dart-ci.yml +++ b/.github/workflows/dart-ci.yml @@ -312,7 +312,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -400,7 +400,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -601,7 +601,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -699,7 +699,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -878,7 +878,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -959,7 +959,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/dart-compile.yml b/.github/workflows/dart-compile.yml index 8089446..97c4b1c 100644 --- a/.github/workflows/dart-compile.yml +++ b/.github/workflows/dart-compile.yml @@ -170,7 +170,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/dartdoc.yml b/.github/workflows/dartdoc.yml index 4561acd..4d75487 100644 --- a/.github/workflows/dartdoc.yml +++ b/.github/workflows/dartdoc.yml @@ -120,7 +120,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/flutter-build.yml b/.github/workflows/flutter-build.yml index f089d2c..3ae28f5 100644 --- a/.github/workflows/flutter-build.yml +++ b/.github/workflows/flutter-build.yml @@ -282,7 +282,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml index 939d4b2..9e037d1 100644 --- a/.github/workflows/github-release.yml +++ b/.github/workflows/github-release.yml @@ -139,7 +139,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/inspectra.yml b/.github/workflows/inspectra.yml index 108772a..123ee53 100644 --- a/.github/workflows/inspectra.yml +++ b/.github/workflows/inspectra.yml @@ -226,7 +226,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -309,7 +309,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -455,7 +455,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -545,7 +545,7 @@ jobs: - name: Upload the configuration findings if: ${{ !cancelled() && inputs.config-lint-enabled && env.SARIF == 'true' && hashFiles(format('{0}/inspectra-config.sarif', runner.temp)) != '' }} - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: sarif_file: ${{ runner.temp }}/inspectra-config.sarif category: ${{ inputs.sarif-category }}-config @@ -587,7 +587,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 1fa0946..d9e8124 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -79,7 +79,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml index 6002c8a..011ebce 100644 --- a/.github/workflows/pr-lint.yml +++ b/.github/workflows/pr-lint.yml @@ -95,7 +95,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/pub-publish.yml b/.github/workflows/pub-publish.yml index c8dfe5f..d1be7bb 100644 --- a/.github/workflows/pub-publish.yml +++ b/.github/workflows/pub-publish.yml @@ -130,7 +130,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -205,7 +205,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index bcfd35e..21b7417 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -106,7 +106,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 826ef36..575a50b 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -269,7 +269,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -347,7 +347,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/self-lint.yml b/.github/workflows/self-lint.yml index 9a010cb..49ef135 100644 --- a/.github/workflows/self-lint.yml +++ b/.github/workflows/self-lint.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit @@ -117,7 +117,7 @@ jobs: - name: Upload the audit if: ${{ !cancelled() && (github.event.pull_request.head.repo.full_name == '' || github.event.pull_request.head.repo.full_name == github.repository) }} - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: sarif_file: ${{ runner.temp }}/zizmor.sarif category: zizmor diff --git a/.github/workflows/self-release.yml b/.github/workflows/self-release.yml index fc95150..401a1e6 100644 --- a/.github/workflows/self-release.yml +++ b/.github/workflows/self-release.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/self-update-pins.yml b/.github/workflows/self-update-pins.yml index 57d9370..0a154e4 100644 --- a/.github/workflows/self-update-pins.yml +++ b/.github/workflows/self-update-pins.yml @@ -30,7 +30,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: audit diff --git a/.github/workflows/test-report.yml b/.github/workflows/test-report.yml index 4542991..abc5067 100644 --- a/.github/workflows/test-report.yml +++ b/.github/workflows/test-report.yml @@ -64,7 +64,7 @@ jobs: - name: Publish the results if: steps.found.outputs.count != '0' - uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0 + uses: dorny/test-reporter@d1b5dff021aa968b288b02285a8bf47471c5928a # v3.2.0 with: name: ${{ inputs.name }} (${{ matrix.toolchain }}) path: ${{ runner.temp }}/davils-reports/**/*.json diff --git a/.github/workflows/writerside.yml b/.github/workflows/writerside.yml index b06f466..e67c4c6 100644 --- a/.github/workflows/writerside.yml +++ b/.github/workflows/writerside.yml @@ -160,7 +160,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/actions/setup-flutter-env/action.yml b/actions/setup-flutter-env/action.yml index 062a485..15d1683 100644 --- a/actions/setup-flutter-env/action.yml +++ b/actions/setup-flutter-env/action.yml @@ -123,7 +123,7 @@ runs: - name: Set up Java ${{ inputs.java-version }} if: inputs.java-version != '' - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 + uses: actions/setup-java@b843ebf9b913146b38da2eaa7aeddf76074ae1ad # v6.1.0 with: distribution: temurin java-version: ${{ inputs.java-version }}