8000 Bump the gh-actions-packages group with 5 updates (#8655) · DataDog/dd-trace-java@c55dc46 · GitHub
[go: up one dir, main page]

Skip to content

Commit c55dc46

Browse files
Bump the gh-actions-packages group with 5 updates (#8655)
Bumps the gh-actions-packages group with 5 updates: | Package | From | To | | --- | --- | --- | | [planetscale/ghcommit-action](https://github.com/planetscale/ghcommit-action) | `0.2.7` | `0.2.10` | | [DataDog/datadog-static-analyzer-github-action](https://github.com/datadog/datadog-static-analyzer-github-action) | `1.2.2` | `1.2.3` | | [actions/cache](https://github.com/actions/cache) | `4.2.2` | `4.2.3` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.28.10` | `3.28.13` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.29.0` | `0.30.0` | Updates `planetscale/ghcommit-action` from 0.2.7 to 0.2.10 - [Release notes](https://github.com/planetscale/ghcommit-action/releases) - [Commits](planetscale/ghcommit-action@9400254...b1cac81) Updates `DataDog/datadog-static-analyzer-github-action` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/datadog/datadog-static-analyzer-github-action/releases) - [Commits](DataDog/datadog-static-analyzer-github-action@1297a54...2707598) Updates `actions/cache` from 4.2.2 to 4.2.3 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@d4323d4...5a3ec84) Updates `github/codeql-action` from 3.28.10 to 3.28.13 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@b56ba49...1b549b9) Updates `aquasecurity/trivy-action` from 0.29.0 to 0.30.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@18f2510...6c175e9) --- updated-dependencies: - dependency-name: planetscale/ghcommit-action dependency-version: 0.2.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: DataDog/datadog-static-analyzer-github-action dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: actions/cache dependency-version: 4.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: github/codeql-action dependency-version: 3.28.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: aquasecurity/trivy-action dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent d306e15 commit c55dc46

File tree

2 files changed

+8
-8
lines changed

2 files changed

+8
-8
lines changed

.github/workflows/add-release-to-cloudfoundry.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
run: |
4444
echo "${{ steps.get-release-version.outputs.VERSION }}: ${{ steps.get-release-url.outputs.URL }}" >> index.yml
4545
- name: Commit and push changes
46-
uses: planetscale/ghcommit-action@9400254a26464337cbe5af17c5f25075134e0089 # v0.2.7
46+
uses: planetscale/ghcommit-action@b1cac81e65b25c96bc767d2b726b6a6e10d226d0 # v0.2.10
4747
with:
4848
commit_message: "chore: Add version ${{ steps.get-release-version.outputs.VERSION }} to Cloud Foundry"
4949
repo: ${{ github.repository }}

.github/workflows/analyze-changes.yaml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
# Run the static analysis on the staging environment to benefit from the new features not yet released
2525
- name: Check code meets quality standards (staging)
2626
id: datadog-static-analysis-staging
27-
uses: DataDog/datadog-static-analyzer-github-action@1297a546e6bb268e2ac5bc98a1477d22be335822 # v1
27+
uses: DataDog/datadog-static-analyzer-github-action@2707598b1182dce1d1792186477b5b4132338e1c # v1
2828
with:
2929
dd_app_key: ${{ secrets.DATADOG_APP_KEY_STAGING }}
3030
dd_api_key: ${{ secrets.DATADOG_API_KEY_STAGING }}
@@ -49,7 +49,7 @@ jobs:
4949
submodules: 'recursive'
5050

5151
- name: Cache Gradle dependencies
52-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
52+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
5353
with:
5454
path: |
5555
~/.gradle/caches
@@ -59,7 +59,7 @@ jobs:
5959
${{ runner.os }}-gradle-
6060
6161
- name: Initialize CodeQL
62-
uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
62+
uses: github/codeql-action/init@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
6363
with:
6464
languages: 'java'
6565
build-mode: 'manual'
@@ -76,7 +76,7 @@ jobs:
7676
--build-cache --parallel --stacktrace --no-daemon --max-workers=4
7777
7878
- name: Perform CodeQL Analysis and upload results to GitHub Security tab
79-
uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
79+
uses: github/codeql-action/analyze@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
8080

8181
# For now, CodeQL SARIF results are not supported by Datadog CI
8282
# - name: Upload results to Datadog CI Static Analysis
@@ -111,7 +111,7 @@ jobs:
111111
submodules: 'recursive'
112112

113113
- name: Cache Gradle dependencies
114-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
114+
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
115115
with:
116116
path: |
117117
~/.gradle/caches
@@ -144,7 +144,7 @@ jobs:
144144
ls -laR "./workspace/.trivy"
145145
146146
- name: Run Trivy security scanner
147-
uses: aquasecurity/trivy-action@18f2510ee396bbf400402947b394f2dd8c87dbb0 # v0.29.0
147+
uses: aquasecurity/trivy-action@6c175e9c4083a92bbca2f9724c8a5e33bc2d97a5 # v0.30.0
148148
with:
149149
scan-type: rootfs
150150
scan-ref: './workspace/.trivy/'
@@ -157,7 +157,7 @@ jobs:
157157
TRIVY_JAVA_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-java-db,public.ecr.aws/aquasecurity/trivy-java-db
158158

159159
- name: Upload Trivy scan results to GitHub Security tab
160-
uses: github/codeql-action/upload-sarif@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
160+
uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 # v3.28.13
161161
if: always()
162162
with:
163163
sarif_file: 'trivy-results.sarif'

0 commit comments

Comments
 (0)
0