From 12c9dad4bc6a9be80a7718d05560ba1133704801 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 19:06:07 +0000 Subject: [PATCH] build(deps): bump the github-actions-minor-patch group across 1 directory with 3 updates Bumps the github-actions-minor-patch group with 3 updates in the / directory: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [actions/attest](https://github.com/actions/attest). Updates `github/codeql-action/init` from 4.35.4 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...5595ccaf912efad79be6eef63a5619ff05969be3) Updates `github/codeql-action/analyze` from 4.35.4 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/68bde559dea0fdcac2102bfdf6230c5f70eb485e...5595ccaf912efad79be6eef63a5619ff05969be3) Updates `actions/attest` from 4.1.0 to 4.2.2 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/59d89421af93a897026c735860bf21b6eb4f7b26...1e69f48acb82d1966a394da916b4c1698aa569d6) --- updated-dependencies: - dependency-name: actions/attest dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-minor-patch - dependency-name: github/codeql-action/analyze dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-minor-patch - dependency-name: github/codeql-action/init dependency-version: 4.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/release-artifacts.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 7c8eb9d8..793d6bfd 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -43,7 +43,7 @@ jobs: - name: Initialize CodeQL # github/codeql-action/init@v4.35.3 - uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 with: languages: ${{ matrix.language }} build-mode: manual @@ -53,6 +53,6 @@ jobs: - name: Perform CodeQL Analysis # github/codeql-action/analyze@v4.35.3 - uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/release-artifacts.yml b/.github/workflows/release-artifacts.yml index aa0d0a8c..03ac7f8a 100644 --- a/.github/workflows/release-artifacts.yml +++ b/.github/workflows/release-artifacts.yml @@ -243,14 +243,14 @@ jobs: - name: Attest release JAR provenance if: steps.resolve-release.outputs.release_publish == 'true' # actions/attest@v4.1.0 - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 with: subject-path: release-artifacts/LoadBalancerPro-${{ env.RELEASE_VERSION }}.jar - name: Attest release JAR SBOM if: steps.resolve-release.outputs.release_publish == 'true' # actions/attest@v4.1.0 - uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 with: subject-path: release-artifacts/LoadBalancerPro-${{ env.RELEASE_VERSION }}.jar sbom-path: release-artifacts/LoadBalancerPro-${{ env.RELEASE_VERSION }}-bom.json