Skip to content

Commit d1614e9

Browse files
dependabot[bot]kriptoburak
dependabot[bot]
and
kriptoburak
authored
chore(deps): bump github/codeql-action/upload-sarif from 4.37.2 to 4.37.6 (#46)
* chore(deps): bump github/codeql-action/upload-sarif Bumps [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) from 4.37.2 to 4.37.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@e064762...5595cca) --- updated-dependencies: - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * chore: consolidate dependency updates Signed-off-by: kriptoburak <kriptoburak@users.noreply.github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: kriptoburak <kriptoburak@users.noreply.github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: kriptoburak <kriptoburak@users.noreply.github.com>
1 parent 33a0ebe commit d1614e9

9 files changed

Lines changed: 26 additions & 22 deletions

File tree

‎.devcontainer/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# syntax=docker/dockerfile:1
2-
FROM debian:bookworm-slim@sha256:7b140f374b289a7c2befc338f42ebe6441b7ea838a042bbd5acbfca6ec875818
2+
FROM debian:bookworm-slim@sha256:abd67ffcfa541b485a3dff59865ab629aa048a6c613e639d36e7456b0b229241
33

44
RUN apt-get update && apt-get install -y --no-install-recommends \
55
libxkbcommon0 \

‎.github/dependabot.yml‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,10 @@ version: 2
22
updates:
33
- package-ecosystem: github-actions
44
directory: /
5+
groups:
6+
codeql:
7+
patterns:
8+
- "github/codeql-action/*"
59
schedule:
610
interval: weekly
711
cooldown:

‎.github/workflows/ci.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
java-version: "26"
4141

4242
- name: Set up Gradle
43-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
43+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
4444
with:
4545
cache-cleanup: always
4646

@@ -97,7 +97,7 @@ jobs:
9797
java-version: "26"
9898

9999
- name: Set up Gradle
100-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
100+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
101101
with:
102102
cache-cleanup: always
103103

@@ -130,7 +130,7 @@ jobs:
130130
java-version: "26"
131131

132132
- name: Set up Gradle
133-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
133+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
134134
with:
135135
cache-cleanup: always
136136

@@ -154,7 +154,7 @@ jobs:
154154
java-version: "26"
155155

156156
- name: Set up Gradle
157-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
157+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
158158
with:
159159
cache-cleanup: always
160160

@@ -187,7 +187,7 @@ jobs:
187187
java-version: "26"
188188

189189
- name: Set up Gradle
190-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
190+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
191191
with:
192192
cache-cleanup: always
193193

@@ -218,7 +218,7 @@ jobs:
218218
java-version: "26"
219219

220220
- name: Set up Gradle
221-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
221+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
222222
with:
223223
cache-cleanup: always
224224

‎.github/workflows/codeql.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,12 +36,12 @@ jobs:
3636
java-version: "26"
3737

3838
- name: Set up Gradle
39-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
39+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
4040
with:
4141
cache-cleanup: always
4242

4343
- name: Initialize CodeQL
44-
uses: github/codeql-action/init@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2
44+
uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
4545
with:
4646
languages: java-kotlin
4747
build-mode: manual
@@ -51,4 +51,4 @@ jobs:
5151
run: ./gradlew clean classes --no-daemon --no-build-cache
5252

5353
- name: Analyze
54-
uses: github/codeql-action/analyze@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2
54+
uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6

‎.github/workflows/publish-sonatype.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
java-version: "26"
4444

4545
- name: Set up Gradle without shared caches
46-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
46+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
4747
with:
4848
cache-disabled: true
4949

‎.github/workflows/release-doctor.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
java-version: "26"
3434

3535
- name: Set up Gradle
36-
uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0
36+
uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0
3737
with:
3838
cache-cleanup: always
3939

‎.github/workflows/scorecard.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
persist-credentials: false
2929

3030
- name: Run analysis
31-
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
31+
uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
3232
with:
3333
results_file: results.sarif
3434
results_format: sarif
@@ -42,6 +42,6 @@ jobs:
4242
retention-days: 5
4343

4444
- name: Upload to code scanning
45-
uses: github/codeql-action/upload-sarif@e0647621c2984b5ed2f768cb892365bf2a616ad1 # v4.37.2
45+
uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6
4646
with:
4747
sarif_file: results.sarif

‎build.gradle.kts‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ allprojects {
4949
"com.fasterxml.jackson.core:jackson-databind:2.22.1",
5050
"com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.22.1",
5151
"com.fasterxml.jackson.module:jackson-module-kotlin:2.22.1",
52-
"com.github.jknack:handlebars:4.5.3",
52+
"com.github.jknack:handlebars:4.5.4",
5353
"com.google.guava:guava:33.6.0-jre",
5454
"com.jayway.jsonpath:json-path:3.0.0",
5555
"commons-fileupload:commons-fileupload:1.6.0",
@@ -58,9 +58,9 @@ allprojects {
5858
"org.apache.commons:commons-lang3:3.20.0",
5959
"org.apache.logging.log4j:log4j-api:2.26.1",
6060
"org.apache.logging.log4j:log4j-core:2.26.1",
61-
"org.xmlunit:xmlunit-core:2.12.0",
62-
"org.xmlunit:xmlunit-legacy:2.12.0",
63-
"org.xmlunit:xmlunit-placeholders:2.12.0",
61+
"org.xmlunit:xmlunit-core:2.13.0",
62+
"org.xmlunit:xmlunit-legacy:2.13.0",
63+
"org.xmlunit:xmlunit-placeholders:2.13.0",
6464
)
6565
}
6666
}

‎buildSrc/build.gradle.kts‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ configurations.configureEach {
3535
"com.fasterxml.jackson.core:jackson-databind:2.22.1",
3636
"com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.22.1",
3737
"com.fasterxml.jackson.module:jackson-module-kotlin:2.22.1",
38-
"com.github.jknack:handlebars:4.5.3",
38+
"com.github.jknack:handlebars:4.5.4",
3939
"com.google.guava:guava:33.6.0-jre",
4040
"com.jayway.jsonpath:json-path:3.0.0",
4141
"commons-fileupload:commons-fileupload:1.6.0",
@@ -44,9 +44,9 @@ configurations.configureEach {
4444
"org.apache.commons:commons-lang3:3.20.0",
4545
"org.apache.logging.log4j:log4j-api:2.26.1",
4646
"org.apache.logging.log4j:log4j-core:2.26.1",
47-
"org.xmlunit:xmlunit-core:2.12.0",
48-
"org.xmlunit:xmlunit-legacy:2.12.0",
49-
"org.xmlunit:xmlunit-placeholders:2.12.0",
47+
"org.xmlunit:xmlunit-core:2.13.0",
48+
"org.xmlunit:xmlunit-legacy:2.13.0",
49+
"org.xmlunit:xmlunit-placeholders:2.13.0",
5050
)
5151
}
5252

0 commit comments

Comments
 (0)