From e8c0f22a1f27cb43b4e6ce83508810de7a8a7cf9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Oct 2024 17:20:38 +0000 Subject: [PATCH] chore(deps): Bump actions/checkout from 4.1.2 to 4.2.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.2 to 4.2.1. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4.1.2...v4.2.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/pipeline.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/pipeline.yaml b/.github/workflows/pipeline.yaml index c8d5561..456f2ac 100644 --- a/.github/workflows/pipeline.yaml +++ b/.github/workflows/pipeline.yaml @@ -23,7 +23,7 @@ jobs: VERSION_FULL: ${{ steps.version.outputs.version_full }} steps: - name: Checkout - uses: actions/checkout@v4.1.2 + uses: actions/checkout@v4.2.1 with: # We need all Git history for "version.sh" fetch-depth: 0 @@ -41,7 +41,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4.1.2 + uses: actions/checkout@v4.2.1 with: # We need all Git history for testing credentials fetch-depth: 0 @@ -65,7 +65,7 @@ jobs: image: returntocorp/semgrep steps: - name: Checkout - uses: actions/checkout@v4.1.2 + uses: actions/checkout@v4.2.1 - name: Run tests # Semgrep can be used to break the build when it detects security issues. In this case we want to upload the issues to GitHub Security @@ -95,7 +95,7 @@ jobs: if: (github.event_name != 'schedule') && (github.ref == 'refs/heads/main') steps: - name: Checkout - uses: actions/checkout@v4.1.2 + uses: actions/checkout@v4.2.1 - name: Create release id: create-release @@ -129,7 +129,7 @@ jobs: - create-release steps: - name: Checkout - uses: actions/checkout@v4.1.7 + uses: actions/checkout@v4.2.1 - name: Run attestation uses: advanced-security/component-detection-dependency-submission-action@v0.0.2 @@ -144,7 +144,7 @@ jobs: - init steps: - name: Checkout - uses: actions/checkout@v4.1.7 + uses: actions/checkout@v4.2.1 - name: Init Syft uses: anchore/sbom-action/download-syft@v0.16.1