From 59f6ace20193858a3c44dac9dfcaee4767d2b814 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 01:48:18 +0000 Subject: [PATCH] chore(deps): update github actions --- .github/actions/setup-dev-env/action.yml | 2 +- .github/workflows/_codeql.yml | 6 +++--- .github/workflows/_scheduled-test-daily.yml | 2 +- .github/workflows/_test.yml | 2 +- .github/workflows/claude-code-automation-pr-review.yml | 2 +- .github/workflows/mise-lock-sync.yml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/actions/setup-dev-env/action.yml b/.github/actions/setup-dev-env/action.yml index cf8543a..f4876a8 100644 --- a/.github/actions/setup-dev-env/action.yml +++ b/.github/actions/setup-dev-env/action.yml @@ -6,7 +6,7 @@ runs: steps: - name: Install mise - uses: jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195 # v5.2.5 + uses: jdx/mise-action@f5be966e4a917d54244728e6a5fdcd1d93a35e6c # v5.2.6 - name: Initialize mise and install Python dependencies shell: bash diff --git a/.github/workflows/_codeql.yml b/.github/workflows/_codeql.yml index 1620aba..63b4956 100644 --- a/.github/workflows/_codeql.yml +++ b/.github/workflows/_codeql.yml @@ -50,7 +50,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/init@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -77,9 +77,9 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # If this step fails, then you should remove it and run the build manually - name: Autobuild - uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/autobuild@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/analyze@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/_scheduled-test-daily.yml b/.github/workflows/_scheduled-test-daily.yml index e86df30..0c7ff96 100644 --- a/.github/workflows/_scheduled-test-daily.yml +++ b/.github/workflows/_scheduled-test-daily.yml @@ -213,7 +213,7 @@ jobs: - name: SonarQube Scan if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} - uses: SonarSource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304 # v8.4.0 + uses: SonarSource/sonarqube-scan-action@e805d875275f728fac1885b413934be6d7c63f65 # v8.4.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml index f9f41cc..6616e1f 100644 --- a/.github/workflows/_test.yml +++ b/.github/workflows/_test.yml @@ -114,7 +114,7 @@ jobs: - name: SonarQube Scan if: ${{ !cancelled() && (env.GITHUB_WORKFLOW_RUNTIME != 'ACT') }} - uses: SonarSource/sonarqube-scan-action@4d1dc0c91ee400dcf8a6dddf2f705ac36542e304 # v8.4.0 + uses: SonarSource/sonarqube-scan-action@e805d875275f728fac1885b413934be6d7c63f65 # v8.4.1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} diff --git a/.github/workflows/claude-code-automation-pr-review.yml b/.github/workflows/claude-code-automation-pr-review.yml index 06d7330..e458cdd 100644 --- a/.github/workflows/claude-code-automation-pr-review.yml +++ b/.github/workflows/claude-code-automation-pr-review.yml @@ -24,7 +24,7 @@ jobs: fetch-depth: 0 - name: Run Claude Code PR Review - uses: anthropics/claude-code-action@d535f5172dec02b204866b393d6b20b9b2aaf98d # v1.0.266 + uses: anthropics/claude-code-action@c0949c50a78c1ec8ce2647db36629b870e715d0c # v1.0.268 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} track_progress: ${{ github.event_name == 'pull_request' && contains(fromJSON('["opened", "synchronize", "ready_for_review", "reopened"]'), github.event.action) }} diff --git a/.github/workflows/mise-lock-sync.yml b/.github/workflows/mise-lock-sync.yml index ce6e6f4..0d2782b 100644 --- a/.github/workflows/mise-lock-sync.yml +++ b/.github/workflows/mise-lock-sync.yml @@ -31,7 +31,7 @@ jobs: ref: ${{ github.head_ref }} - name: Install mise - uses: jdx/mise-action@6612f0ef07ed2a736cd1e00a94a065522dd41195 # v5.2.5 + uses: jdx/mise-action@f5be966e4a917d54244728e6a5fdcd1d93a35e6c # v5.2.6 with: install: false