From 2c3020c7fc3c6c234ae4bd808aee5ec4464ad9e1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 23 Jun 2026 14:35:07 +0200 Subject: [PATCH] build(deps): bump the github-actions group across 2 directories with 6 updates (#12001) Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github/codeql-action](https://github.com/github/codeql-action) | `4.36.0` | `4.36.2` | | [crowdin/github-action](https://github.com/crowdin/github-action) | `2.16.2` | `2.16.3` | | [hyland/github-actions-ensure-sha-pinned-actions](https://github.com/hyland/github-actions-ensure-sha-pinned-actions) | `2.0.0` | `2.0.1` | | [Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml](https://github.com/alfresco/alfresco-build-tools) | `18.9.0` | `18.12.0` | | [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) | `18.7.0` | `18.12.0` | Bumps the github-actions group with 2 updates in the /.github/actions/setup directory: [Alfresco/alfresco-build-tools](https://github.com/alfresco/alfresco-build-tools) and [pnpm/action-setup](https://github.com/pnpm/action-setup). Updates `github/codeql-action` from 4.36.0 to 4.36.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/7211b7c8077ea37d8641b6271f6a365a22a5fbfa...8aad20d150bbac5944a9f9d289da16a4b0d87c1e) Updates `crowdin/github-action` from 2.16.2 to 2.16.3 - [Release notes](https://github.com/crowdin/github-action/releases) - [Commits](https://github.com/crowdin/github-action/compare/8868a33591d21088edfc398968173a3b98d51706...52aa776766211d83d975df51f3b9c53c2f8ba35f) Updates `hyland/github-actions-ensure-sha-pinned-actions` from 2.0.0 to 2.0.1 - [Release notes](https://github.com/hyland/github-actions-ensure-sha-pinned-actions/releases) - [Commits](https://github.com/hyland/github-actions-ensure-sha-pinned-actions/compare/7d494b6b53e71f75194d74b4dd890a2266d060b5...7957efb76aba0eec7580a9c0392d3e5bec381359) Updates `Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml` from 18.9.0 to 18.12.0 - [Release notes](https://github.com/alfresco/alfresco-build-tools/releases) - [Commits](https://github.com/alfresco/alfresco-build-tools/compare/4e61fa01622e3f3a1898eb059d9a3af208897515...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1) Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0 - [Release notes](https://github.com/alfresco/alfresco-build-tools/releases) - [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1) Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0 - [Release notes](https://github.com/alfresco/alfresco-build-tools/releases) - [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1) Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0 - [Release notes](https://github.com/alfresco/alfresco-build-tools/releases) - [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1) Updates `pnpm/action-setup` from 6.0.8 to 6.0.9 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/0e279bb959325dab635dd2c09392533439d90093...0ebf47130e4866e96fce0953f49152a61190b271) Updates `Alfresco/alfresco-build-tools` from 18.7.0 to 18.12.0 - [Release notes](https://github.com/alfresco/alfresco-build-tools/releases) - [Commits](https://github.com/alfresco/alfresco-build-tools/compare/a6a8be7429080c132815d0482a55ae4fd28f15ba...ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1) --- updated-dependencies: - dependency-name: Alfresco/alfresco-build-tools dependency-version: 18.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Alfresco/alfresco-build-tools dependency-version: 18.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Alfresco/alfresco-build-tools dependency-version: 18.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Alfresco/alfresco-build-tools dependency-version: 18.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml dependency-version: 18.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: crowdin/github-action dependency-version: 2.16.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: hyland/github-actions-ensure-sha-pinned-actions dependency-version: 2.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: pnpm/action-setup dependency-version: 6.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/actions/setup/action.yml | 4 ++-- .github/workflows/codeql-analysis.yml | 6 +++--- .github/workflows/pull-from-crowdin.yml | 2 +- .github/workflows/pull-request.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/stale-pr-cleanup.yml | 2 +- .github/workflows/supply-chain-pr-instructions.yml | 2 +- 7 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml index 53a5f65958..e8eba52fbf 100644 --- a/.github/actions/setup/action.yml +++ b/.github/actions/setup/action.yml @@ -26,7 +26,7 @@ runs: shell: bash run: echo "nx-github-actions" | sudo tee /etc/machine-id > /dev/null - name: Setup pnpm - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 + uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6.0.9 - name: Setup Node uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: @@ -35,7 +35,7 @@ runs: - name: get latest tag sha if: ${{ inputs.full-setup == 'true' }} id: tag-sha - uses: Alfresco/alfresco-build-tools/.github/actions/git-latest-tag@a6a8be7429080c132815d0482a55ae4fd28f15ba # v18.7.0 + uses: Alfresco/alfresco-build-tools/.github/actions/git-latest-tag@ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1 # v18.12.0 - name: load "NPM TAG" if: ${{ inputs.full-setup == 'true' }} id: set-npm-tag diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 8800716bda..9a7a891c7e 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -30,7 +30,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.29.5 + uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.29.5 # Override language selection by uncommenting this and choosing your languages with: languages: javascript @@ -39,7 +39,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.29.5 + uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.29.5 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -53,4 +53,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@7211b7c8077ea37d8641b6271f6a365a22a5fbfa # v3.29.5 + uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v3.29.5 diff --git a/.github/workflows/pull-from-crowdin.yml b/.github/workflows/pull-from-crowdin.yml index 08bcb9f80f..8c5335293f 100644 --- a/.github/workflows/pull-from-crowdin.yml +++ b/.github/workflows/pull-from-crowdin.yml @@ -21,7 +21,7 @@ jobs: ref: develop token: ${{ secrets.BOT_GITHUB_TOKEN }} - name: Pull translations from Crowdin - uses: crowdin/github-action@8868a33591d21088edfc398968173a3b98d51706 # v2.16.2 + uses: crowdin/github-action@52aa776766211d83d975df51f3b9c53c2f8ba35f # v2.16.3 with: skip_ref_checkout: true upload_sources: false diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index 834db3830b..88eed5c16c 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -44,7 +44,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Ensure SHA pinned actions - uses: hyland/github-actions-ensure-sha-pinned-actions@7d494b6b53e71f75194d74b4dd890a2266d060b5 # v2.0.0 + uses: hyland/github-actions-ensure-sha-pinned-actions@7957efb76aba0eec7580a9c0392d3e5bec381359 # v2.0.1 - name: Check pnpm-lock.yaml version run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3fe432e5de..e0fc6048d3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -159,7 +159,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Push Source Files to Crowdin - uses: crowdin/github-action@8868a33591d21088edfc398968173a3b98d51706 # v2.16.2 + uses: crowdin/github-action@52aa776766211d83d975df51f3b9c53c2f8ba35f # v2.16.3 with: upload_sources: true upload_sources_args: --delete-obsolete diff --git a/.github/workflows/stale-pr-cleanup.yml b/.github/workflows/stale-pr-cleanup.yml index d021f7613d..303730c20d 100644 --- a/.github/workflows/stale-pr-cleanup.yml +++ b/.github/workflows/stale-pr-cleanup.yml @@ -11,4 +11,4 @@ permissions: jobs: stale-pr-cleanup: - uses: Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml@4e61fa01622e3f3a1898eb059d9a3af208897515 # v18.9.0 + uses: Alfresco/alfresco-build-tools/.github/workflows/stale-pr-cleanup.yml@ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1 # v18.12.0 diff --git a/.github/workflows/supply-chain-pr-instructions.yml b/.github/workflows/supply-chain-pr-instructions.yml index 2a2a88ee33..d800561351 100644 --- a/.github/workflows/supply-chain-pr-instructions.yml +++ b/.github/workflows/supply-chain-pr-instructions.yml @@ -16,7 +16,7 @@ jobs: permissions: pull-requests: write steps: - - uses: Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment@a6a8be7429080c132815d0482a55ae4fd28f15ba # v18.7.0 + - uses: Alfresco/alfresco-build-tools/.github/actions/github-upsert-comment@ed80b0eef8e432f517ea1aa51d8a82637c1d1cc1 # v18.12.0 with: comment-identifier: supply-chain-review-instructions comment-body: |