From 902b28e8a84ccf442e12d3ac69ce0cc241c3c5ad Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 19:04:56 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 2 updates Bumps the github-actions group with 2 updates in the / directory: [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action). Updates `ruby/setup-ruby` from 1.321.0 to 1.324.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](https://github.com/ruby/setup-ruby/compare/95ef2b042f9d7a56d8268cba8559e2842e2ad01b...a0102e0972be65f351c307e2d64b9314a57c8073) Updates `SonarSource/sonarqube-scan-action` from 6.0.0 to 8.2.2 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/fd88b7d7ccbaefd23d8f36f73b59db7a3d246602...ba9859eae8dd6bd29e412f25ddbbef3d032000f4) --- updated-dependencies: - dependency-name: ruby/setup-ruby dependency-version: 1.324.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/publish-pod.yml | 2 +- .github/workflows/sonarqube.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish-pod.yml b/.github/workflows/publish-pod.yml index b921e69..2bd3f35 100644 --- a/.github/workflows/publish-pod.yml +++ b/.github/workflows/publish-pod.yml @@ -23,7 +23,7 @@ jobs: persist-credentials: false # 2. Install a recent Ruby - - uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0 + - uses: ruby/setup-ruby@a0102e0972be65f351c307e2d64b9314a57c8073 # v1.324.0 with: ruby-version: 3.4.3 diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index 515f013..cea2751 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -65,7 +65,7 @@ jobs: # dirmngr resolves keyservers over SRV records, which harden-runner's DNS # proxy does not answer. v6.0.0 already carries the fixes for CVE-2025-58178 # and CVE-2025-59844, so this pin is current on security. - uses: SonarSource/sonarqube-scan-action@fd88b7d7ccbaefd23d8f36f73b59db7a3d246602 # v6.0.0 + uses: SonarSource/sonarqube-scan-action@ba9859eae8dd6bd29e412f25ddbbef3d032000f4 # v8.2.2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}