From d5a85c0b7ab1ac76a410bbed4e0760aad8572ab0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Oct 2026 00:24:42 +0000 Subject: [PATCH] ci(deps): bump the github-actions-minor-patch group across 2 directories with 3 updates Bumps the github-actions-minor-patch group with 3 updates in the / directory: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/setup-node](https://github.com/actions/setup-node) and [actions/download-artifact](https://github.com/actions/download-artifact). Bumps the github-actions-minor-patch group with 1 update in the /.github/actions/setup-sfw directory: [actions/setup-node](https://github.com/actions/setup-node). Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-minor-patch - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-minor-patch - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-minor-patch - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-minor-patch ... Signed-off-by: dependabot[bot] --- .github/actions/setup-sfw/action.yml | 2 +- .github/workflows/dependency-review.yml | 12 ++++++------ .github/workflows/e2e-test.yml | 4 ++-- .github/workflows/package-check.yml | 2 +- .github/workflows/pr-preview.yml | 6 +++--- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/actions/setup-sfw/action.yml b/.github/actions/setup-sfw/action.yml index 11048d80..0fb5b32d 100644 --- a/.github/actions/setup-sfw/action.yml +++ b/.github/actions/setup-sfw/action.yml @@ -32,7 +32,7 @@ runs: python-version: "3.12" - if: ${{ inputs.node == 'true' }} - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: "20" diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index fba08631..afe59aff 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -210,7 +210,7 @@ jobs: - name: Upload SFW report artifact if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socket-firewall-free-python-${{ github.event.pull_request.number }} path: sfw-artifacts/ @@ -302,7 +302,7 @@ jobs: - name: Upload SFW report artifact if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socket-firewall-enterprise-python-${{ github.event.pull_request.number }} path: sfw-artifacts/ @@ -362,7 +362,7 @@ jobs: - name: Upload SFW report artifact if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socket-firewall-free-npm-${{ github.event.pull_request.number }} path: sfw-artifacts/ @@ -424,7 +424,7 @@ jobs: - name: Upload SFW report artifact if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socket-firewall-enterprise-npm-${{ github.event.pull_request.number }} path: sfw-artifacts/ @@ -487,7 +487,7 @@ jobs: - name: Upload SFW report artifact if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socket-firewall-free-pypi-${{ github.event.pull_request.number }} path: sfw-artifacts/ @@ -552,7 +552,7 @@ jobs: - name: Upload SFW report artifact if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socket-firewall-enterprise-pypi-${{ github.event.pull_request.number }} path: sfw-artifacts/ diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml index fe763699..2cb3c9fd 100644 --- a/.github/workflows/e2e-test.yml +++ b/.github/workflows/e2e-test.yml @@ -84,7 +84,7 @@ jobs: with: python-version: '3.12' - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 if: matrix.setup-node == 'true' with: node-version: '20' @@ -138,7 +138,7 @@ jobs: - name: Upload diagnostics on failure if: failure() || steps.run-cli.outputs.diagnostics == 'true' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: e2e-${{ matrix.name }}-diagnostics-attempt${{ github.run_attempt }} path: | diff --git a/.github/workflows/package-check.yml b/.github/workflows/package-check.yml index d71083a4..517199cd 100644 --- a/.github/workflows/package-check.yml +++ b/.github/workflows/package-check.yml @@ -58,7 +58,7 @@ jobs: PY - name: Upload distributions - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socketsecurity-${{ github.sha }} path: dist/* diff --git a/.github/workflows/pr-preview.yml b/.github/workflows/pr-preview.yml index 620eb016..cdd1ffbf 100644 --- a/.github/workflows/pr-preview.yml +++ b/.github/workflows/pr-preview.yml @@ -153,7 +153,7 @@ jobs: PY - name: Upload preview distributions - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: socketsecurity-preview-${{ github.run_id }}-${{ github.run_attempt }} path: dist/* @@ -173,7 +173,7 @@ jobs: pull-requests: write steps: - name: Download preview distributions - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: socketsecurity-preview-${{ github.run_id }}-${{ github.run_attempt }} path: dist @@ -246,7 +246,7 @@ jobs: persist-credentials: false - name: Download preview distributions - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: socketsecurity-preview-${{ github.run_id }}-${{ github.run_attempt }} path: dist