From ad8a91138e88b49c54b692b051be3b18a5bb0a0e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 3 Aug 2026 16:07:30 +0000 Subject: [PATCH] deps: bump the production-dependencies group across 1 directory with 12 updates Bumps the production-dependencies group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `7` | | [peter-murray/workflow-application-token-action](https://github.com/peter-murray/workflow-application-token-action) | `4.0.1` | `5.1.0` | | [42ByteLabs/patch-release-me](https://github.com/42bytelabs/patch-release-me) | `0.6.5` | `0.6.6` | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1` | `4.0.2` | | [dtolnay/rust-toolchain](https://github.com/dtolnay/rust-toolchain) | `3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9` | `2c7215f132e9ebf062739d9130488b56d53c060c` | | [actions/cache](https://github.com/actions/cache) | `5` | `6` | | [github/codeql-action](https://github.com/github/codeql-action) | `4` | `4.37.4` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.6.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `6.1.0` | `6.2.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` | Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `peter-murray/workflow-application-token-action` from 4.0.1 to 5.1.0 - [Release notes](https://github.com/peter-murray/workflow-application-token-action/releases) - [Commits](https://github.com/peter-murray/workflow-application-token-action/compare/d17e3a9a36850ea89f35db16c1067dd2b68ee343...cb731e00cb6754f584507134ff389dfb3dc42bbc) Updates `42ByteLabs/patch-release-me` from 0.6.5 to 0.6.6 - [Release notes](https://github.com/42bytelabs/patch-release-me/releases) - [Commits](https://github.com/42bytelabs/patch-release-me/compare/0.6.5...0.6.6) Updates `dorny/paths-filter` from 4.0.1 to 4.0.2 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](https://github.com/dorny/paths-filter/compare/fbd0ab8f3e69293af611ebaee6363fc25e6d187d...7b450fff21473bca461d4b92ce414b9d0420d706) Updates `dtolnay/rust-toolchain` from 3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 to 2c7215f132e9ebf062739d9130488b56d53c060c - [Release notes](https://github.com/dtolnay/rust-toolchain/releases) - [Commits](https://github.com/dtolnay/rust-toolchain/compare/3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9...2c7215f132e9ebf062739d9130488b56d53c060c) Updates `actions/cache` from 5 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v5...v6) Updates `github/codeql-action` from 4 to 4.37.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4...v4.37.4) Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c) Updates `docker/setup-qemu-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...96fe6ef7f33517b61c61be40b68a1882f3264fb8) Updates `docker/login-action` from 4.2.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...dbcb813823bdd20940b903addbd779551569679f) Updates `docker/metadata-action` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302) Updates `docker/build-push-action` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/f9f3042f7e2789586610d6e8b85c8f03e5195baf...53b7df96c91f9c12dcc8a07bcb9ccacbed38856a) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: peter-murray/workflow-application-token-action dependency-version: 5.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: 42ByteLabs/patch-release-me dependency-version: 0.6.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: dorny/paths-filter dependency-version: 4.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: dtolnay/rust-toolchain dependency-version: 2c7215f132e9ebf062739d9130488b56d53c060c dependency-type: direct:production dependency-group: production-dependencies - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: github/codeql-action dependency-version: 4.37.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: docker/setup-buildx-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: docker/setup-qemu-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: docker/metadata-action dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-patch-release.yml | 6 +++--- .github/workflows/cargo-binaries.yml | 8 ++++---- .github/workflows/cargo-build.yml | 12 ++++++------ .github/workflows/cargo-examples.yml | 2 +- .github/workflows/cargo-publish.yml | 2 +- .github/workflows/cargo-train.yml | 8 ++++---- .github/workflows/container.yml | 14 +++++++------- .github/workflows/dep-review.yml | 2 +- .github/workflows/geekorm-migrations.yml | 10 +++++----- .github/workflows/github-release.yml | 2 +- .github/workflows/markdown.yml | 4 ++-- .github/workflows/project.yml | 2 +- .github/workflows/semgrep.yml | 4 ++-- 13 files changed, 38 insertions(+), 38 deletions(-) diff --git a/.github/workflows/auto-patch-release.yml b/.github/workflows/auto-patch-release.yml index 0a7d86e..27c2d14 100644 --- a/.github/workflows/auto-patch-release.yml +++ b/.github/workflows/auto-patch-release.yml @@ -17,17 +17,17 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Get Token id: get_workflow_token - uses: peter-murray/workflow-application-token-action@d17e3a9a36850ea89f35db16c1067dd2b68ee343 # v4.0.1 + uses: peter-murray/workflow-application-token-action@cb731e00cb6754f584507134ff389dfb3dc42bbc # v5.1.0 with: application_id: ${{ secrets.BYTELABS_APP_ID }} application_private_key: ${{ secrets.BYTELABS_APP_KEY }} - name: "Patch Release Me" - uses: 42ByteLabs/patch-release-me@0.6.5 + uses: 42ByteLabs/patch-release-me@0.6.6 with: mode: ${{ inputs.mode }} diff --git a/.github/workflows/cargo-binaries.yml b/.github/workflows/cargo-binaries.yml index 364b769..bc968a9 100644 --- a/.github/workflows/cargo-binaries.yml +++ b/.github/workflows/cargo-binaries.yml @@ -50,7 +50,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Setup - Rust Toolchain" uses: dtolnay/rust-toolchain@stable @@ -105,7 +105,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Setup - Rust Toolchain" uses: dtolnay/rust-toolchain@stable @@ -165,7 +165,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Setup - Rust Toolchain" uses: dtolnay/rust-toolchain@stable @@ -220,7 +220,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Setup - Rust Toolchain" uses: dtolnay/rust-toolchain@stable diff --git a/.github/workflows/cargo-build.yml b/.github/workflows/cargo-build.yml index 51cccf9..4c5f587 100644 --- a/.github/workflows/cargo-build.yml +++ b/.github/workflows/cargo-build.yml @@ -35,9 +35,9 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d + - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 id: changes with: filters: | @@ -48,7 +48,7 @@ jobs: - '.github/workflows/*.yml' - name: "Setup - Rust Toolchain" - uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 + uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c if: steps.changes.outputs.src == 'true' with: components: clippy,rustfmt @@ -57,7 +57,7 @@ jobs: - name: "Restore cached Cargo" id: cache-restore if: steps.changes.outputs.src == 'true' - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: | ~/.cargo/bin/ @@ -112,7 +112,7 @@ jobs: --message-format=json | clippy-sarif | tee rust-clippy-results.sarif | sarif-fmt - name: Upload analysis results to GitHub - uses: github/codeql-action/upload-sarif@v4 + uses: github/codeql-action/upload-sarif@v4.37.4 if: matrix.rust-version == 'stable' with: sarif_file: rust-clippy-results.sarif @@ -121,7 +121,7 @@ jobs: - name: Save Cargo / Rust Cache id: cache-save if: ${{ steps.changes.outputs.src == 'true' && github.event_name == 'push' }} - uses: actions/cache/save@v5 + uses: actions/cache/save@v6 with: path: | ~/.cargo/bin/ diff --git a/.github/workflows/cargo-examples.yml b/.github/workflows/cargo-examples.yml index 873f52b..a75b36a 100644 --- a/.github/workflows/cargo-examples.yml +++ b/.github/workflows/cargo-examples.yml @@ -16,7 +16,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Run examples" env: diff --git a/.github/workflows/cargo-publish.yml b/.github/workflows/cargo-publish.yml index 28f3960..be45045 100644 --- a/.github/workflows/cargo-publish.yml +++ b/.github/workflows/cargo-publish.yml @@ -23,7 +23,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Cargo Publish" id: cargo diff --git a/.github/workflows/cargo-train.yml b/.github/workflows/cargo-train.yml index c5da324..47dece9 100644 --- a/.github/workflows/cargo-train.yml +++ b/.github/workflows/cargo-train.yml @@ -32,7 +32,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Check crates.io" id: crates-check @@ -73,17 +73,17 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Get Token id: get_workflow_token - uses: peter-murray/workflow-application-token-action@d17e3a9a36850ea89f35db16c1067dd2b68ee343 # v4.0.1 + uses: peter-murray/workflow-application-token-action@cb731e00cb6754f584507134ff389dfb3dc42bbc # v5.1.0 with: application_id: ${{ secrets.BYTELABS_APP_ID }} application_private_key: ${{ secrets.BYTELABS_APP_KEY }} - name: "Patch Release Me" - uses: 42ByteLabs/patch-release-me@0.6.5 + uses: 42ByteLabs/patch-release-me@0.6.6 with: mode: ${{ inputs.mode }} diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml index 33494ad..3569865 100644 --- a/.github/workflows/container.yml +++ b/.github/workflows/container.yml @@ -39,18 +39,18 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 with: submodules: true - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 #v4.1.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c #v4.2.0 - name: Set up QEMU - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Log in to the Container registry - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -58,7 +58,7 @@ jobs: - name: Extract metadata (tags, labels) for Docker id: meta - uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0 + uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0 with: images: ${{ env.REGISTRY }}/${{ inputs.container-name }} tags: | @@ -71,7 +71,7 @@ jobs: type=semver,pattern=v{{major}}.{{minor}},value=${{ inputs.version }} - name: Build initial ${{ inputs.container-name }} image - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf #v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a #v7.3.0 with: file: "${{ inputs.docker-file }}" context: . @@ -106,7 +106,7 @@ jobs: # category: "/grype-${{ inputs.container-name }}" - name: "Push Container ${{ inputs.container-name }}" - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf #v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a #v7.3.0 id: build with: file: "${{ inputs.docker-file }}" diff --git a/.github/workflows/dep-review.yml b/.github/workflows/dep-review.yml index 0580b69..b730359 100644 --- a/.github/workflows/dep-review.yml +++ b/.github/workflows/dep-review.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: 'Dependency Review' uses: actions/dependency-review-action@v5 diff --git a/.github/workflows/geekorm-migrations.yml b/.github/workflows/geekorm-migrations.yml index 63a2392..3b81d84 100644 --- a/.github/workflows/geekorm-migrations.yml +++ b/.github/workflows/geekorm-migrations.yml @@ -24,9 +24,9 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d + - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 id: changes with: filters: | @@ -37,7 +37,7 @@ jobs: - '.github/workflows/*.yml' - name: "Setup - Rust Toolchain" - uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 + uses: dtolnay/rust-toolchain@2c7215f132e9ebf062739d9130488b56d53c060c if: steps.changes.outputs.src == 'true' with: toolchain: stable @@ -45,7 +45,7 @@ jobs: - name: "Restore cached Cargo" id: cache-restore if: steps.changes.outputs.src == 'true' - uses: actions/cache/restore@v5 + uses: actions/cache/restore@v6 with: path: | ~/.cargo/bin/ @@ -93,7 +93,7 @@ jobs: - name: Save Cargo / Rust Cache id: cache-save if: ${{ steps.changes.outputs.src == 'true' && github.event_name == 'push' }} - uses: actions/cache/save@v5 + uses: actions/cache/save@v6 with: path: | ~/.cargo/bin/ diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml index 9ec8e8f..0bb226c 100644 --- a/.github/workflows/github-release.yml +++ b/.github/workflows/github-release.yml @@ -15,7 +15,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "GitHub Release" env: diff --git a/.github/workflows/markdown.yml b/.github/workflows/markdown.yml index b96057d..4e6706d 100644 --- a/.github/workflows/markdown.yml +++ b/.github/workflows/markdown.yml @@ -13,10 +13,10 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Filter Changes" - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d + uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 id: changes with: filters: | diff --git a/.github/workflows/project.yml b/.github/workflows/project.yml index c872e93..7fbe53e 100644 --- a/.github/workflows/project.yml +++ b/.github/workflows/project.yml @@ -20,7 +20,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Set Project Information" id: get-info diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml index f531874..b1a75f5 100644 --- a/.github/workflows/semgrep.yml +++ b/.github/workflows/semgrep.yml @@ -22,7 +22,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: "Run Semgrep" run: semgrep . --sarif --metrics=off --output semgrep.sarif @@ -30,7 +30,7 @@ jobs: SEMGREP_RULES: p/default - name: "Upload SARIF file" - uses: github/codeql-action/upload-sarif@v4 + uses: github/codeql-action/upload-sarif@v4.37.4 with: sarif_file: semgrep.sarif if: always()