From d7d516b812a9293a020a973c877bddb5eab3767e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 10 Nov 2026 10:26:57 +0000 Subject: [PATCH] chore(deps): Bump the actions group across 2 directories with 6 updates Bumps the actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.22.2` | `2.22.4` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.3` | `3.0.4` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.39.0` | `4.39.3` | | [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request) | `6.1.1` | `6.1.2` | | [dorny/test-reporter](https://github.com/dorny/test-reporter) | `3.0.0` | `3.2.0` | Bumps the actions group with 1 update in the /actions/setup-flutter-env directory: [actions/setup-java](https://github.com/actions/setup-java). Updates `step-security/harden-runner` from 2.22.2 to 2.22.4 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/dc2769abcc0fcfbadfc1df54081c1608579ef6b2...1d88384fd173af6ecb012dfd0264a306b711241a) Updates `softprops/action-gh-release` from 3.0.3 to 3.0.4 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/efb35369e0ad2afab669f228072c1b0d510eae64...8a0cd651e5b2365bd640854a3fa5dfc70e4875f3) Updates `github/codeql-action/upload-sarif` from 4.39.0 to 4.39.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee...33d7b85da1a04171e211befe2c739303b9a4c066) Updates `amannn/action-semantic-pull-request` from 6.1.1 to 6.1.2 - [Release notes](https://github.com/amannn/action-semantic-pull-request/releases) - [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md) - [Commits](https://github.com/amannn/action-semantic-pull-request/compare/48f256284bd46cdaab1048c3721360e808335d50...2252a14e810aa9b85c2d560bd7070c802206ecf6) Updates `dorny/test-reporter` from 3.0.0 to 3.2.0 - [Release notes](https://github.com/dorny/test-reporter/releases) - [Changelog](https://github.com/dorny/test-reporter/blob/main/CHANGELOG.md) - [Commits](https://github.com/dorny/test-reporter/compare/a43b3a5f7366b97d083190328d2c652e1a8b6aa2...d1b5dff021aa968b288b02285a8bf47471c5928a) Updates `actions/setup-java` from 6.0.1 to 6.2.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/de7274f081f381c8f8158605e0321c36c376e2e6...77dd5b2ce225ea11469928ac317850245a74ae78) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.22.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: amannn/action-semantic-pull-request dependency-version: 6.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: dorny/test-reporter dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-java dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/dart-ci.yml | 12 ++++++------ .github/workflows/dart-compile.yml | 2 +- .github/workflows/dartdoc.yml | 2 +- .github/workflows/flutter-build.yml | 2 +- .github/workflows/github-release.yml | 4 ++-- .github/workflows/inspectra.yml | 10 +++++----- .github/workflows/pages.yml | 2 +- .github/workflows/pr-lint.yml | 4 ++-- .github/workflows/pub-publish.yml | 4 ++-- .github/workflows/release-please.yml | 2 +- .github/workflows/release-tag.yml | 4 ++-- .github/workflows/self-lint.yml | 4 ++-- .github/workflows/self-release.yml | 2 +- .github/workflows/self-update-pins.yml | 2 +- .github/workflows/test-report.yml | 2 +- .github/workflows/writerside.yml | 2 +- actions/setup-flutter-env/action.yml | 2 +- 17 files changed, 31 insertions(+), 31 deletions(-) diff --git a/.github/workflows/dart-ci.yml b/.github/workflows/dart-ci.yml index 1410a0e..16a988d 100644 --- a/.github/workflows/dart-ci.yml +++ b/.github/workflows/dart-ci.yml @@ -312,7 +312,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -400,7 +400,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -601,7 +601,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -699,7 +699,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -878,7 +878,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -959,7 +959,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/dart-compile.yml b/.github/workflows/dart-compile.yml index 8089446..b7ee4b5 100644 --- a/.github/workflows/dart-compile.yml +++ b/.github/workflows/dart-compile.yml @@ -170,7 +170,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/dartdoc.yml b/.github/workflows/dartdoc.yml index 4561acd..1e6185c 100644 --- a/.github/workflows/dartdoc.yml +++ b/.github/workflows/dartdoc.yml @@ -120,7 +120,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/flutter-build.yml b/.github/workflows/flutter-build.yml index f089d2c..39299fe 100644 --- a/.github/workflows/flutter-build.yml +++ b/.github/workflows/flutter-build.yml @@ -282,7 +282,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml index 939d4b2..7ed6e02 100644 --- a/.github/workflows/github-release.yml +++ b/.github/workflows/github-release.yml @@ -139,7 +139,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -269,7 +269,7 @@ jobs: - name: Release id: release - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 + uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3 # v3.0.4 with: tag_name: ${{ env.TAG }} name: ${{ steps.describe.outputs.name }} diff --git a/.github/workflows/inspectra.yml b/.github/workflows/inspectra.yml index 108772a..41a70b1 100644 --- a/.github/workflows/inspectra.yml +++ b/.github/workflows/inspectra.yml @@ -226,7 +226,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -309,7 +309,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -455,7 +455,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -545,7 +545,7 @@ jobs: - name: Upload the configuration findings if: ${{ !cancelled() && inputs.config-lint-enabled && env.SARIF == 'true' && hashFiles(format('{0}/inspectra-config.sarif', runner.temp)) != '' }} - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: sarif_file: ${{ runner.temp }}/inspectra-config.sarif category: ${{ inputs.sarif-category }}-config @@ -587,7 +587,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 1fa0946..52b652d 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -79,7 +79,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml index 6002c8a..423dab9 100644 --- a/.github/workflows/pr-lint.yml +++ b/.github/workflows/pr-lint.yml @@ -95,7 +95,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -145,7 +145,7 @@ jobs: - name: Check the title if: inputs.title-enabled - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1 + uses: amannn/action-semantic-pull-request@2252a14e810aa9b85c2d560bd7070c802206ecf6 # v6.1.2 env: GITHUB_TOKEN: ${{ github.token }} with: diff --git a/.github/workflows/pub-publish.yml b/.github/workflows/pub-publish.yml index c8dfe5f..6f16fba 100644 --- a/.github/workflows/pub-publish.yml +++ b/.github/workflows/pub-publish.yml @@ -130,7 +130,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -205,7 +205,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index bcfd35e..16d26af 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -106,7 +106,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 826ef36..1ce8e57 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -269,7 +269,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -347,7 +347,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/self-lint.yml b/.github/workflows/self-lint.yml index 9a010cb..ae50693 100644 --- a/.github/workflows/self-lint.yml +++ b/.github/workflows/self-lint.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit @@ -117,7 +117,7 @@ jobs: - name: Upload the audit if: ${{ !cancelled() && (github.event.pull_request.head.repo.full_name == '' || github.event.pull_request.head.repo.full_name == github.repository) }} - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: sarif_file: ${{ runner.temp }}/zizmor.sarif category: zizmor diff --git a/.github/workflows/self-release.yml b/.github/workflows/self-release.yml index fc95150..fa5b390 100644 --- a/.github/workflows/self-release.yml +++ b/.github/workflows/self-release.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit diff --git a/.github/workflows/self-update-pins.yml b/.github/workflows/self-update-pins.yml index 57d9370..60975b4 100644 --- a/.github/workflows/self-update-pins.yml +++ b/.github/workflows/self-update-pins.yml @@ -30,7 +30,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit diff --git a/.github/workflows/test-report.yml b/.github/workflows/test-report.yml index 4542991..abc5067 100644 --- a/.github/workflows/test-report.yml +++ b/.github/workflows/test-report.yml @@ -64,7 +64,7 @@ jobs: - name: Publish the results if: steps.found.outputs.count != '0' - uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0 + uses: dorny/test-reporter@d1b5dff021aa968b288b02285a8bf47471c5928a # v3.2.0 with: name: ${{ inputs.name }} (${{ matrix.toolchain }}) path: ${{ runner.temp }}/davils-reports/**/*.json diff --git a/.github/workflows/writerside.yml b/.github/workflows/writerside.yml index b06f466..5be27e2 100644 --- a/.github/workflows/writerside.yml +++ b/.github/workflows/writerside.yml @@ -160,7 +160,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/actions/setup-flutter-env/action.yml b/actions/setup-flutter-env/action.yml index 062a485..c9a2d96 100644 --- a/actions/setup-flutter-env/action.yml +++ b/actions/setup-flutter-env/action.yml @@ -123,7 +123,7 @@ runs: - name: Set up Java ${{ inputs.java-version }} if: inputs.java-version != '' - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 + uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: temurin java-version: ${{ inputs.java-version }}