From 80409fb6ef3fc50fcae1ad0b9c768af91951934b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 10:25:18 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 3 updates Bumps the actions group with 3 updates in the / directory: [jdx/mise-action](https://github.com/jdx/mise-action), [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) and [jdx/jactionlint](https://github.com/jdx/jactionlint). Updates `jdx/mise-action` from 5.2.1 to 5.2.6 - [Release notes](https://github.com/jdx/mise-action/releases) - [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/jdx/mise-action/compare/v5.2.1...v5.2.6) Updates `SonarSource/sonarqube-scan-action` from 8.3.0 to 8.4.0 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v8.3.0...v8.4.0) Updates `jdx/jactionlint` from 2.2.0 to 2.4.0 - [Release notes](https://github.com/jdx/jactionlint/releases) - [Changelog](https://github.com/jdx/jactionlint/blob/main/CHANGELOG.md) - [Commits](https://github.com/jdx/jactionlint/compare/v2.2.0...v2.4.0) --- updated-dependencies: - dependency-name: jdx/mise-action dependency-version: 5.2.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: jdx/jactionlint dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 28 ++++++++++++++-------------- .github/workflows/ci.yml | 6 +++--- .github/workflows/docs.yml | 2 +- .github/workflows/release.yml | 2 +- 4 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index a8e8dcc..21a15d3 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -6,18 +6,18 @@ workflows: '.github/workflows/ci.yml': - 'actions/checkout@v7.0.1' - 'codecov/codecov-action@v7.1.1' - - 'jdx/jactionlint@v2.2.0' - - 'jdx/mise-action@v5.2.1' - - 'sonarsource/sonarqube-scan-action@v8.3.0' + - 'jdx/jactionlint@v2.4.0' + - 'jdx/mise-action@v5.2.6' + - 'sonarsource/sonarqube-scan-action@v8.4.0' '.github/workflows/docs.yml': - 'actions/checkout@v7.0.1' - 'actions/github-script@v9.0.0' - 'cloudflare/wrangler-action@v4.1.3' - - 'jdx/mise-action@v5.2.1' + - 'jdx/mise-action@v5.2.6' '.github/workflows/release.yml': - 'actions/checkout@v7.0.1' - 'googleapis/release-please-action@v5.0.0' - - 'jdx/mise-action@v5.2.1' + - 'jdx/mise-action@v5.2.6' dependencies: 'actions/checkout@v7.0.1': ref: 'v7.0.1' @@ -56,20 +56,20 @@ dependencies: commit: 'sha1-45996ed1f6d02564a971a2fa1b5860e934307cf7' owner_id: 16785467 repo_id: 262236530 - 'jdx/jactionlint@v2.2.0': - ref: 'v2.2.0' - commit: 'sha1-1027f0a131ab98bc7e191d995bfa15dbed5bbf8f' + 'jdx/jactionlint@v2.4.0': + ref: 'v2.4.0' + commit: 'sha1-baa8d685e2b27ff5821558c9eeabb2051c1da61b' owner_id: 216188 repo_id: 1404951382 uses: - 'github/codeql-action@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2' - 'jdx/mise-action@v5.2.1': - ref: 'v5.2.1' - commit: 'sha1-fc42bcc7ddbf51124c30f95a877a0c5168a3bfde' + 'jdx/mise-action@v5.2.6': + ref: 'v5.2.6' + commit: 'sha1-f5be966e4a917d54244728e6a5fdcd1d93a35e6c' owner_id: 216188 repo_id: 738284564 - 'sonarsource/sonarqube-scan-action@v8.3.0': - ref: 'v8.3.0' - commit: 'sha1-d209202bc7d53ff1cc128f7f907dac145c9d6ae9' + 'sonarsource/sonarqube-scan-action@v8.4.0': + ref: 'v8.4.0' + commit: 'sha1-4d1dc0c91ee400dcf8a6dddf2f705ac36542e304' owner_id: 545988 repo_id: 366408409 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 64052b0..74e2b42 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -34,7 +34,7 @@ jobs: gh actions-lock --verify-local # Installs the tool versions pinned in mise.toml (bun, node) - - uses: jdx/mise-action@v5.2.1 + - uses: jdx/mise-action@v5.2.6 - name: Install dependencies run: bun install --frozen-lockfile @@ -62,7 +62,7 @@ jobs: # Skipped until the SONAR_TOKEN secret is configured # (secrets aren't readable in step `if`, so check via env) if: ${{ env.SONAR_TOKEN != '' }} - uses: SonarSource/sonarqube-scan-action@v8.3.0 + uses: SonarSource/sonarqube-scan-action@v8.4.0 env: SONAR_HOST_URL: https://sonarcloud.io @@ -75,4 +75,4 @@ jobs: persist-credentials: false # Lints the whole repository from its root (workflows, dependabot.yml, # actions.lock) with .github/jactionlint.yaml - - uses: jdx/jactionlint@v2.2.0 + - uses: jdx/jactionlint@v2.4.0 diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 1fd25a5..6ff2c81 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -33,7 +33,7 @@ jobs: persist-credentials: false # No tool cache: this job deploys with wrangler, so a poisoned cache # entry could end up in the published site - - uses: jdx/mise-action@v5.2.1 + - uses: jdx/mise-action@v5.2.6 with: cache: false - run: bun install --frozen-lockfile diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b4d19ee..1a0fbd9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -54,7 +54,7 @@ jobs: # (bun + node, which provides the npm CLI used to publish). No tool # cache: this job publishes to npm, so a poisoned cache entry could end # up in the published packages. - - uses: jdx/mise-action@v5.2.1 + - uses: jdx/mise-action@v5.2.6 with: cache: false