From 78b0dbfda5fa01623f3d9c22a6a3bd3aefc73c3a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 31 Oct 2026 23:14:58 +0000 Subject: [PATCH] chore(deps): bump the github-actions group with 8 updates Bumps the github-actions group with 8 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.1` | `4.39.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.1` | `4.39.1` | | [nextcloud-libraries/parse-package-engines-action](https://github.com/nextcloud-libraries/parse-package-engines-action) | `0.1.0` | `0.2.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [LizardByte/actions/actions/setup_python](https://github.com/lizardbyte/actions) | `2026.909.30231` | `2026.928.123224` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.1` | `4.39.1` | | [skjnldsv/read-package-engines-version-actions](https://github.com/skjnldsv/read-package-engines-version-actions) | `3` | `4` | Updates `github/codeql-action/init` from 4.38.1 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/analyze` from 4.38.1 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `nextcloud-libraries/parse-package-engines-action` from 0.1.0 to 0.2.0 - [Release notes](https://github.com/nextcloud-libraries/parse-package-engines-action/releases) - [Commits](https://github.com/nextcloud-libraries/parse-package-engines-action/compare/v0.1.0...39fcc545a815c353dd0a3fd8fd2ef6e59fd02b92) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v7...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `LizardByte/actions/actions/setup_python` from 2026.909.30231 to 2026.928.123224 - [Release notes](https://github.com/lizardbyte/actions/releases) - [Commits](https://github.com/lizardbyte/actions/compare/39c468549cfb87ccb917e5e5342e18abc926dc48...28374bf43cc8b6ee88b9b8a3419b2ac7a6573906) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v7.0.1...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `skjnldsv/read-package-engines-version-actions` from 3 to 4 - [Release notes](https://github.com/skjnldsv/read-package-engines-version-actions/releases) - [Commits](https://github.com/skjnldsv/read-package-engines-version-actions/compare/06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4...06d6db44aa62f4609ba070f556ec24bc99fb85cb) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: nextcloud-libraries/parse-package-engines-action dependency-version: 0.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: LizardByte/actions/actions/setup_python dependency-version: 2026.928.123224 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.39.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: skjnldsv/read-package-engines-version-actions dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/integration-dav.yml | 2 +- .github/workflows/performance.yml | 2 +- .github/workflows/playwright.yml | 6 +++--- .github/workflows/static-code-analysis.yml | 2 +- .github/workflows/update-node-dist.yml | 4 ++-- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ce4badb79d450..58056697e6004 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -37,13 +37,13 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} config-file: ./.github/codeql-config.yml - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/integration-dav.yml b/.github/workflows/integration-dav.yml index d6a668cd42b67..13d4256ca9d44 100644 --- a/.github/workflows/integration-dav.yml +++ b/.github/workflows/integration-dav.yml @@ -71,7 +71,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Set up Python - uses: LizardByte/actions/actions/setup_python@39c468549cfb87ccb917e5e5342e18abc926dc48 # v2026.909.30231 + uses: LizardByte/actions/actions/setup_python@28374bf43cc8b6ee88b9b8a3419b2ac7a6573906 # v2026.928.123224 with: python-version: '2.7' diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml index fe0ac28e54e18..ec60609c90da0 100644 --- a/.github/workflows/performance.yml +++ b/.github/workflows/performance.yml @@ -95,7 +95,7 @@ jobs: - name: Upload profiles if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 with: name: profiles path: | diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index e18ef72ffb7cf..21f7b38a57e3b 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -218,11 +218,11 @@ jobs: submodules: true # for 3rdparty - name: Read package.json - uses: nextcloud-libraries/parse-package-engines-action@122ae05d4257008180a514e1ddeb0c1b9d094bdd # v0.1.0 + uses: nextcloud-libraries/parse-package-engines-action@39fcc545a815c353dd0a3fd8fd2ef6e59fd02b92 # v0.2.0 id: versions - name: Set up node - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ steps.versions.outputs.node-version }} @@ -255,7 +255,7 @@ jobs: - name: Upload blob report to GitHub Actions Artifacts if: ${{ !cancelled() }} - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: blob-report-setup path: blob-report diff --git a/.github/workflows/static-code-analysis.yml b/.github/workflows/static-code-analysis.yml index 9d64c76ef3493..c0434d9195b76 100644 --- a/.github/workflows/static-code-analysis.yml +++ b/.github/workflows/static-code-analysis.yml @@ -123,7 +123,7 @@ jobs: - name: Upload Security Analysis results to GitHub if: always() - uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: sarif_file: results.sarif diff --git a/.github/workflows/update-node-dist.yml b/.github/workflows/update-node-dist.yml index b16e05538ab34..b61a8bfe1d92e 100644 --- a/.github/workflows/update-node-dist.yml +++ b/.github/workflows/update-node-dist.yml @@ -31,14 +31,14 @@ jobs: token: ${{ secrets.BOT_GITHUB_TOKEN }} - name: Read package.json node and npm engines version - uses: skjnldsv/read-package-engines-version-actions@06d6baf7d8f41934ab630e97d9e6c0bc9c9ac5e4 # v3 + uses: skjnldsv/read-package-engines-version-actions@06d6db44aa62f4609ba070f556ec24bc99fb85cb # v4 id: versions with: fallbackNode: '^20' fallbackNpm: '^9' - name: Set up node ${{ steps.versions.outputs.nodeVersion }} - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ steps.versions.outputs.nodeVersion }}