From 78c4e12f9c276fecee1ac5dc33d79d82e65c7734 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 31 Aug 2023 20:05:37 +0000 Subject: [PATCH] Update all dependencies --- .github/workflows/auto-approve.yml | 2 +- .github/workflows/mega-linter.yml | 8 ++++---- .github/workflows/release-action-using-tag.yml | 2 +- action.yml | 2 +- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml index 62c76e6..52c441f 100644 --- a/.github/workflows/auto-approve.yml +++ b/.github/workflows/auto-approve.yml @@ -22,7 +22,7 @@ jobs: github-token: ${{ secrets.MERGE_PR_TOKEN }} - if: ${{ steps.metadata.outputs.update-type == 'version-update:semver-patch' }} - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.3.0 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 with: token: ${{ secrets.MERGE_PR_TOKEN }} diff --git a/.github/workflows/mega-linter.yml b/.github/workflows/mega-linter.yml index 399b92c..ac800b2 100644 --- a/.github/workflows/mega-linter.yml +++ b/.github/workflows/mega-linter.yml @@ -25,12 +25,12 @@ jobs: steps: # Git Checkout - name: Harden Runner - uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.4.0 + uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1 with: egress-policy: audit - name: Checkout Code - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.5.3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 with: token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances @@ -40,7 +40,7 @@ jobs: id: ml # You can override MegaLinter flavor used to have faster performances # More info at https://megalinter.io/flavors/ - uses: oxsecurity/megalinter/flavors/python@93700f8c21c59ea784a32abe23896e49e54463b8 # v6.22.2 + uses: oxsecurity/megalinter/flavors/python@fda6ac3a38be0e969820709ac16e442464e5a035 # v7.3.0 env: # All available variables are described in documentation # https://megalinter.io/configuration/ @@ -62,7 +62,7 @@ jobs: - name: Create Pull Request with applied fixes id: cpr if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') - uses: peter-evans/create-pull-request@38e0b6e68b4c852a5500a94740f0e535e0d7ba54 # v4.2.4 + uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2 with: token: ${{ secrets.PAT || secrets.GITHUB_TOKEN }} commit-message: "[MegaLinter] Apply linters automatic fixes" diff --git a/.github/workflows/release-action-using-tag.yml b/.github/workflows/release-action-using-tag.yml index 9a9a183..c17ca20 100644 --- a/.github/workflows/release-action-using-tag.yml +++ b/.github/workflows/release-action-using-tag.yml @@ -7,7 +7,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 + - uses: actions/checkout@97a652b80035363df47baee5031ec8670b8878ac - name: Bump version and push tag id: tag_version uses: mathieudutour/github-tag-action@v6.1 diff --git a/action.yml b/action.yml index 9ad7a62..47ebb17 100644 --- a/action.yml +++ b/action.yml @@ -44,7 +44,7 @@ runs: steps: - name: Checkout id: checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.3.0 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - name: Configure Git id: git