From 0632d0eb05a0dab08756421f05e7c3ae5e8ef7c2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Sep 2026 22:38:57 +0000 Subject: [PATCH] chore(deps): bump the actions group with 4 updates Bumps the actions group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action), [taiki-e/install-action](https://github.com/taiki-e/install-action) and [hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml](https://github.com/hyperpolymath/panic-attack). Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `taiki-e/install-action` from 2.87.16 to 2.87.20 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/v2.87.16...v2.87.20) Updates `hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml` from 27b3d93b11fbfc03cee695e791904d741ce2b24b to edf782bc5e9810de623a9dcacfa672df6de641a0 - [Release notes](https://github.com/hyperpolymath/panic-attack/releases) - [Changelog](https://github.com/hyperpolymath/panic-attack/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/hyperpolymath/panic-attack/compare/27b3d93b11fbfc03cee695e791904d741ce2b24b...edf782bc5e9810de623a9dcacfa672df6de641a0) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: taiki-e/install-action dependency-version: 2.87.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml dependency-version: edf782bc5e9810de623a9dcacfa672df6de641a0 dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/rust-ci.yml | 6 +++--- .github/workflows/security-scan.yml | 2 +- 3 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 997efc6..0a595fb 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,12 +44,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.0 (4.38.1 blocked estate-wide; nexia-list#100) + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.0 (4.38.1 blocked estate-wide; nexia-list#100) with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.0 (4.38.1 blocked estate-wide; nexia-list#100) + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.0 (4.38.1 blocked estate-wide; nexia-list#100) with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/rust-ci.yml b/.github/workflows/rust-ci.yml index ae2c8a2..387d94f 100644 --- a/.github/workflows/rust-ci.yml +++ b/.github/workflows/rust-ci.yml @@ -86,7 +86,7 @@ jobs: timeout-minutes: 60 steps: - uses: actions/checkout@v7.0.1 - - uses: taiki-e/install-action@v2.87.16 + - uses: taiki-e/install-action@v2.87.20 with: tool: cargo-deny - run: cargo deny check advisories bans licenses sources @@ -109,7 +109,7 @@ jobs: - uses: dtolnay/rust-toolchain@stable with: components: llvm-tools-preview - - uses: taiki-e/install-action@v2.87.16 + - uses: taiki-e/install-action@v2.87.20 - name: Generate lcov report run: cargo llvm-cov --workspace --lcov --output-path lcov.info - name: Enforce minimum coverage @@ -127,7 +127,7 @@ jobs: steps: - uses: actions/checkout@v7.0.1 - uses: dtolnay/rust-toolchain@stable - - uses: taiki-e/install-action@v2.87.16 + - uses: taiki-e/install-action@v2.87.20 with: tool: cargo-mutants - name: Run mutation tests on core invariant crates diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index 7ba188b..eaa39f0 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -40,6 +40,6 @@ jobs: # # Pin includes canonical .affine language detection and preserves # JSON.parseExn coverage after the ReScript-to-AffineScript migration. - uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@27b3d93b11fbfc03cee695e791904d741ce2b24b # main 2026-08-24 + uses: hyperpolymath/panic-attack/.github/workflows/scan-and-report.yml@edf782bc5e9810de623a9dcacfa672df6de641a0 # main 2026-08-24 secrets: VERISIMDB_PAT: ${{ secrets.VERISIMDB_PAT }}