From c199835e5fc20de179f588bb50c643486281ad26 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 28 Oct 2026 02:10:15 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 9 updates Bumps the github-actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `3.7.0` | `7.0.1` | | [Azure/static-web-apps-deploy](https://github.com/azure/static-web-apps-deploy) | `4d27395796ac319302594769cfe812bd207490b1` | `1a947af9992250f3bc2e68ad0754c0b0c11566c9` | | [actions/setup-node](https://github.com/actions/setup-node) | `3.9.1` | `7.1.0` | | [Azure/login](https://github.com/azure/login) | `2.3.1` | `3.1.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.2` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `2.28.1` | `4.39.1` | | [github/codeql-action/autobuild](https://github.com/github/codeql-action) | `2.28.1` | `4.39.1` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `2.28.1` | `4.39.1` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `8.0.2` | Updates `actions/checkout` from 3.7.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v3.7.0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `Azure/static-web-apps-deploy` from 4d27395796ac319302594769cfe812bd207490b1 to 1a947af9992250f3bc2e68ad0754c0b0c11566c9 - [Release notes](https://github.com/azure/static-web-apps-deploy/releases) - [Commits](https://github.com/azure/static-web-apps-deploy/compare/4d27395796ac319302594769cfe812bd207490b1...1a947af9992250f3bc2e68ad0754c0b0c11566c9) Updates `actions/setup-node` from 3.9.1 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/3235b876344d2a9aa001b8d1453c930bba69e610...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `Azure/login` from 2.3.1 to 3.1.0 - [Release notes](https://github.com/azure/login/releases) - [Commits](https://github.com/azure/login/compare/7184910d9eb2b1c5e48f7073824a90609bb9b6d6...a641126d1b8aa4d1fa005f4f92df94a3a4c4c906) Updates `actions/upload-artifact` from 4.6.2 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `github/codeql-action/init` from 2.28.1 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b8d3b6e8af63cde30bdc382c0bc28114f4346c88...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/autobuild` from 2.28.1 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b8d3b6e8af63cde30bdc382c0bc28114f4346c88...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `github/codeql-action/analyze` from 2.28.1 to 4.39.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b8d3b6e8af63cde30bdc382c0bc28114f4346c88...9b3254085494b55a0f7c4c2b3d2d52cc712ce370) Updates `actions/download-artifact` from 4.3.0 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/d3f86a106a0bac45b974a628896c90dbdf5c8093...9000827ccba6bdab643e8b6fd33ac0654aef8333) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: Azure/login dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: Azure/static-web-apps-deploy dependency-version: 1a947af9992250f3bc2e68ad0754c0b0c11566c9 dependency-type: direct:production dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- ...azure-static-web-apps-blue-moss-01913f80f.yml | 6 +++--- .github/workflows/deploy-functions-app-qa.yml | 6 +++--- .github/workflows/deploy-functions-app.yml | 4 ++-- .../workflows/deploy-prod-bootcamp-feedback.yml | 4 ++-- .github/workflows/deploy-production.yml | 12 ++++++------ .github/workflows/deploy-qa.yml | 4 ++-- .github/workflows/secret-scan.yml | 2 +- .github/workflows/security-scan.yml | 16 ++++++++-------- 8 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/azure-static-web-apps-blue-moss-01913f80f.yml b/.github/workflows/azure-static-web-apps-blue-moss-01913f80f.yml index a922f53..4998d4f 100644 --- a/.github/workflows/azure-static-web-apps-blue-moss-01913f80f.yml +++ b/.github/workflows/azure-static-web-apps-blue-moss-01913f80f.yml @@ -16,13 +16,13 @@ jobs: runs-on: ubuntu-latest name: Build and Deploy Job steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: true lfs: false - name: Build And Deploy id: builddeploy - uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 + uses: Azure/static-web-apps-deploy@1a947af9992250f3bc2e68ad0754c0b0c11566c9 # v1 with: azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_BLUE_MOSS_01913F80F }} repo_token: ${{ secrets.GITHUB_TOKEN }} # Used for Github integrations (i.e. PR comments) @@ -41,7 +41,7 @@ jobs: steps: - name: Close Pull Request id: closepullrequest - uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 + uses: Azure/static-web-apps-deploy@1a947af9992250f3bc2e68ad0754c0b0c11566c9 # v1 with: azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_BLUE_MOSS_01913F80F }} action: "close" diff --git a/.github/workflows/deploy-functions-app-qa.yml b/.github/workflows/deploy-functions-app-qa.yml index 9f122ee..7e147ff 100644 --- a/.github/workflows/deploy-functions-app-qa.yml +++ b/.github/workflows/deploy-functions-app-qa.yml @@ -18,10 +18,10 @@ jobs: name: QA url: https://catbootcamp-api-qa.azurewebsites.net/api/health steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '20' @@ -34,7 +34,7 @@ jobs: npm install --production - name: Azure Login - uses: Azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 + uses: Azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3.1.0 with: creds: ${{ secrets.AZURE_CREDENTIALS_QA }} diff --git a/.github/workflows/deploy-functions-app.yml b/.github/workflows/deploy-functions-app.yml index e5a1b0b..cc00210 100644 --- a/.github/workflows/deploy-functions-app.yml +++ b/.github/workflows/deploy-functions-app.yml @@ -12,10 +12,10 @@ jobs: deploy: runs-on: ubuntu-latest steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '20' diff --git a/.github/workflows/deploy-prod-bootcamp-feedback.yml b/.github/workflows/deploy-prod-bootcamp-feedback.yml index 64f8630..10c0244 100644 --- a/.github/workflows/deploy-prod-bootcamp-feedback.yml +++ b/.github/workflows/deploy-prod-bootcamp-feedback.yml @@ -16,12 +16,12 @@ jobs: name: production-bootcamp-feedback url: https://white-ground-0d6d8650f.7.azurestaticapps.net steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: true lfs: false - name: Build And Deploy - uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 + uses: Azure/static-web-apps-deploy@1a947af9992250f3bc2e68ad0754c0b0c11566c9 # v1 with: azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_NEWPROD }} repo_token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/deploy-production.yml b/.github/workflows/deploy-production.yml index 7b28f7d..ee3ec83 100644 --- a/.github/workflows/deploy-production.yml +++ b/.github/workflows/deploy-production.yml @@ -26,10 +26,10 @@ jobs: echo "✅ Confirmation validated" - name: Checkout code - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '20' @@ -52,14 +52,14 @@ jobs: url: https://blue-moss-01913f80f-prod.centralus.5.azurestaticapps.net steps: - name: Checkout code - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: true lfs: false - name: Build and Deploy to Production id: builddeploy - uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 + uses: Azure/static-web-apps-deploy@1a947af9992250f3bc2e68ad0754c0b0c11566c9 # v1 with: azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_PROD }} repo_token: ${{ secrets.GITHUB_TOKEN }} @@ -86,10 +86,10 @@ jobs: url: https://cat-bootcamp-api-prod.azurewebsites.net steps: - name: Checkout code - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '20' diff --git a/.github/workflows/deploy-qa.yml b/.github/workflows/deploy-qa.yml index 3c8ae40..b0fd751 100644 --- a/.github/workflows/deploy-qa.yml +++ b/.github/workflows/deploy-qa.yml @@ -15,13 +15,13 @@ jobs: name: QA url: https://ashy-rock-0b254600f.4.azurestaticapps.net steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: true lfs: false - name: Build And Deploy id: builddeploy - uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 + uses: Azure/static-web-apps-deploy@1a947af9992250f3bc2e68ad0754c0b0c11566c9 # v1 with: azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN_ASHY_ROCK_0B254600F }} repo_token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/secret-scan.yml b/.github/workflows/secret-scan.yml index ace4457..ab04eb6 100644 --- a/.github/workflows/secret-scan.yml +++ b/.github/workflows/secret-scan.yml @@ -11,7 +11,7 @@ jobs: gitleaks: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Install gitleaks OSS binary diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index acb9087..5663d50 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -14,10 +14,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node.js - uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '20' @@ -39,7 +39,7 @@ jobs: continue-on-error: true - name: Upload audit report - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: npm-audit-report @@ -55,18 +55,18 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2.28.1 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: javascript - name: Autobuild - uses: github/codeql-action/autobuild@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2.28.1 + uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2.28.1 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 security-summary: name: Security Scan Summary @@ -75,7 +75,7 @@ jobs: if: always() steps: - name: Download audit report - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: npm-audit-report continue-on-error: true