Skip to content

Commit 013d324

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the all group with 3 updates (#9567)
Bumps the all group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `github/codeql-action` from 4.30.9 to 4.31.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@16140ae...4e94bd1) Updates `actions/upload-artifact` from 4.6.2 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...330a01c) Updates `actions/download-artifact` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@634f93c...018cc2c) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all - dependency-name: actions/download-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 38f8242 commit 013d324

File tree

4 files changed

+13
-13
lines changed

4 files changed

+13
-13
lines changed

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -70,7 +70,7 @@ jobs:
7070

7171
# Initializes the CodeQL tools for scanning.
7272
- name: Initialize CodeQL
73-
uses: github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v3.29.5
73+
uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.29.5
7474
with:
7575
languages: ${{ matrix.language }}
7676
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -92,4 +92,4 @@ jobs:
9292
format: golang
9393

9494
- name: Perform CodeQL Analysis
95-
uses: github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v3.29.5
95+
uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.29.5

‎.github/workflows/release.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
rm -rf ./bin
4242
ARCH=${{ matrix.arch }} make bin/azure-cloud-controller-manager
4343
mv bin/azure-cloud-controller-manager bin/azure-cloud-controller-manager-${{ matrix.os }}-${{ matrix.arch }}
44-
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
44+
- uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
4545
with:
4646
name: cloud-controller-manager-${{ matrix.os }}-${{ matrix.arch }}
4747
path: bin/azure-cloud-controller-manager-${{ matrix.os }}-${{ matrix.arch }}
@@ -90,13 +90,13 @@ jobs:
9090
mv bin/azure-cloud-node-manager-${{ matrix.arch }}.exe bin/azure-cloud-node-manager-${{ matrix.os }}-${{ matrix.arch }}.exe
9191
- name: Upload artifact for linux
9292
if: matrix.os == 'linux'
93-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
93+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
9494
with:
9595
name: cloud-node-manager-${{ matrix.os }}-${{ matrix.arch }}
9696
path: bin/azure-cloud-node-manager-${{ matrix.os }}-${{ matrix.arch }}
9797
- name: Upload artifact for windows
9898
if: matrix.os == 'windows'
99-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
99+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
100100
with:
101101
name: cloud-node-manager-${{ matrix.os }}-${{ matrix.arch }}
102102
path: bin/azure-cloud-node-manager-${{ matrix.os }}-${{ matrix.arch }}.exe
@@ -144,13 +144,13 @@ jobs:
144144
mv bin/azure-acr-credential-provider.exe bin/azure-acr-credential-provider-${{ matrix.os }}-${{ matrix.arch }}.exe
145145
- name: Upload artifact for linux
146146
if: matrix.os == 'linux'
147-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
147+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
148148
with:
149149
name: acr-credential-provider-${{ matrix.os }}-${{ matrix.arch }}
150150
path: bin/azure-acr-credential-provider-${{ matrix.os }}-${{ matrix.arch }}
151151
- name: Upload artifact for windows
152152
if: matrix.os == 'windows'
153-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
153+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
154154
with:
155155
name: acr-credential-provider-${{ matrix.os }}-${{ matrix.arch }}
156156
path: bin/azure-acr-credential-provider-${{ matrix.os }}-${{ matrix.arch }}.exe
@@ -189,7 +189,7 @@ jobs:
189189
run: |
190190
./hack/generate-release-note.sh ${GITHUB_REF_NAME} release-notes.md true
191191
- name: Download artifacts
192-
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
192+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
193193
with:
194194
path: ./artifacts
195195
- name: Publish release

‎.github/workflows/scorecards.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -64,14 +64,14 @@ jobs:
6464
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6565
# format to the repository Actions tab.
6666
- name: "Upload artifact"
67-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
67+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
6868
with:
6969
name: SARIF file
7070
path: results.sarif
7171
retention-days: 5
7272

7373
# Upload the results to GitHub's code scanning dashboard.
7474
- name: "Upload to code-scanning"
75-
uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v3.29.5
75+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.29.5
7676
with:
7777
sarif_file: results.sarif

‎.github/workflows/trivy.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -67,7 +67,7 @@ jobs:
6767
env:
6868
TRIVY_SKIP_DB_UPDATE: true
6969
- name: Upload Trivy scan results to GitHub Security tab
70-
uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v3.29.5
70+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.29.5
7171
with:
7272
sarif_file: 'trivy-ccm-results.sarif'
7373
category: azure-cloud-controller-manager-image
@@ -83,7 +83,7 @@ jobs:
8383
env:
8484
TRIVY_SKIP_DB_UPDATE: true
8585
- name: Upload Trivy scan results to GitHub Security tab
86-
uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v3.29.5
86+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.29.5
8787
with:
8888
sarif_file: 'trivy-cnm-linux-results.sarif'
8989
category: azure-cloud-node-manager-linux-image
@@ -99,7 +99,7 @@ jobs:
9999
env:
100100
TRIVY_SKIP_DB_UPDATE: true
101101
- name: Upload Trivy scan results to GitHub Security tab
102-
uses: github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v3.29.5
102+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v3.29.5
103103
with:
104104
sarif_file: 'trivy-health-probe-proxy-linux-results.sarif'
105105
category: health-probe-proxy-linux-image

0 commit comments

Comments
 (0)