From 0bd3717c08896c8027b9a341d6b8d2ca2c2cd778 Mon Sep 17 00:00:00 2001 From: Taras Drozdovskyi Date: Wed, 2 Sep 2026 08:47:56 +0000 Subject: [PATCH 1/2] ci: Update 3rd-party components Signed-off-by: Taras Drozdovskyi --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/linter.yml | 2 +- .github/workflows/publish.yml | 8 ++++---- .github/workflows/scorecards-analysis.yml | 4 ++-- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 8930bc5..be6ba68 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -55,7 +55,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -89,6 +89,6 @@ jobs: make - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index e9b98fa..095ce94 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - - uses: cpp-linter/cpp-linter-action@0b93f5833680005fbb233652d0e3d8835b3cc2f3 + - uses: cpp-linter/cpp-linter-action@08d1ce7079c971911b36673d2818aef029de8a2e id: linter continue-on-error: true env: diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 930b51d..73bafc3 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c with: egress-policy: audit @@ -78,7 +78,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c with: egress-policy: audit @@ -111,7 +111,7 @@ jobs: if: startsWith(github.ref, 'refs/tags/') steps: - name: Harden Runner - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c with: egress-policy: audit @@ -126,7 +126,7 @@ jobs: name: ${{ needs.build.outputs.version }}_ns.bin - name: Upload assets - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 with: files: | ${{ needs.build.outputs.version }}_s.bin diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index dd170cd..2526a22 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 + uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c with: egress-policy: audit @@ -72,6 +72,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 with: sarif_file: results.sarif \ No newline at end of file From 6841858724a8af26dc5f5342591ac99c47e43375 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 2 Sep 2026 08:51:29 +0000 Subject: [PATCH 2/2] chore(deps): Bump step-security/harden-runner from 2.21.0 to 2.21.1 Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.21.0 to 2.21.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/05e31511f85b41b11d1cf0ef85d0992719546e2c...e14015d583714f6e62063499dc959a02595150a1) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/publish.yml | 6 +++--- .github/workflows/scorecards-analysis.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 73bafc3..04d5517 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 with: egress-policy: audit @@ -78,7 +78,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 with: egress-policy: audit @@ -111,7 +111,7 @@ jobs: if: startsWith(github.ref, 'refs/tags/') steps: - name: Harden Runner - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 with: egress-policy: audit diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index 2526a22..7a648c7 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -32,7 +32,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c + uses: step-security/harden-runner@e14015d583714f6e62063499dc959a02595150a1 with: egress-policy: audit