From 382893881f4d682a2080bdda42a0f80f5307b5ee Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 13:46:27 +0000 Subject: [PATCH] ci: bump the actions group across 1 directory with 8 updates Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [bounded-systems/.github/.github/workflows/_auto-merge.yml](https://github.com/bounded-systems/.github) | `a0330aea1a9fc899ff1002bf52d20ef8d9b2edad` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [bounded-systems/.github/.github/workflows/_claim-sweep.yml](https://github.com/bounded-systems/.github) | `953ed46c6560abe5366fbcf1235023dc46192776` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [bounded-systems/ci-workflows/.github/workflows/osv-scan.yml](https://github.com/bounded-systems/ci-workflows) | `ce6310f52e47fcd3f536bfd267edc62974ecfc9f` | `752eb5ca508e4bdcb895ae4f4f2b423ff0726c7b` | | [bounded-systems/.github/.github/actions/broker-gh-token](https://github.com/bounded-systems/.github) | `953ed46c6560abe5366fbcf1235023dc46192776` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [bounded-systems/.github/.github/workflows/_pr-claim.yml](https://github.com/bounded-systems/.github) | `bc4cb7dada47cc59eed416372a4851201bd6f503` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | | [cachix/cachix-action](https://github.com/cachix/cachix-action) | `5f2d7c5294214f71b873db4b969586b980625e71` | `38b082610b782e7e93e209c35fd730d399dee866` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` | | [bounded-systems/.github/.github/workflows/repo-standard.yml](https://github.com/bounded-systems/.github) | `953ed46c6560abe5366fbcf1235023dc46192776` | `1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c` | Updates `bounded-systems/.github/.github/workflows/_auto-merge.yml` from a0330aea1a9fc899ff1002bf52d20ef8d9b2edad to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](https://github.com/bounded-systems/.github/compare/a0330aea1a9fc899ff1002bf52d20ef8d9b2edad...1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c) Updates `bounded-systems/.github/.github/workflows/_claim-sweep.yml` from 953ed46c6560abe5366fbcf1235023dc46192776 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](https://github.com/bounded-systems/.github/compare/953ed46c6560abe5366fbcf1235023dc46192776...1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c) Updates `bounded-systems/ci-workflows/.github/workflows/osv-scan.yml` from ce6310f52e47fcd3f536bfd267edc62974ecfc9f to 752eb5ca508e4bdcb895ae4f4f2b423ff0726c7b - [Commits](https://github.com/bounded-systems/ci-workflows/compare/ce6310f52e47fcd3f536bfd267edc62974ecfc9f...752eb5ca508e4bdcb895ae4f4f2b423ff0726c7b) Updates `bounded-systems/.github/.github/actions/broker-gh-token` from 953ed46c6560abe5366fbcf1235023dc46192776 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](https://github.com/bounded-systems/.github/compare/953ed46c6560abe5366fbcf1235023dc46192776...1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c) Updates `bounded-systems/.github/.github/workflows/_pr-claim.yml` from bc4cb7dada47cc59eed416372a4851201bd6f503 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](https://github.com/bounded-systems/.github/compare/bc4cb7dada47cc59eed416372a4851201bd6f503...1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c) Updates `cachix/cachix-action` from 5f2d7c5294214f71b873db4b969586b980625e71 to 38b082610b782e7e93e209c35fd730d399dee866 - [Release notes](https://github.com/cachix/cachix-action/releases) - [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md) - [Commits](https://github.com/cachix/cachix-action/compare/5f2d7c5294214f71b873db4b969586b980625e71...38b082610b782e7e93e209c35fd730d399dee866) Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/3d0d9888cb7fd7b750713d6e236d1fcb99157228...efb35369e0ad2afab669f228072c1b0d510eae64) Updates `bounded-systems/.github/.github/workflows/repo-standard.yml` from 953ed46c6560abe5366fbcf1235023dc46192776 to 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c - [Release notes](https://github.com/bounded-systems/.github/releases) - [Commits](https://github.com/bounded-systems/.github/compare/953ed46c6560abe5366fbcf1235023dc46192776...1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c) --- updated-dependencies: - dependency-name: bounded-systems/.github/.github/workflows/_auto-merge.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: bounded-systems/.github/.github/workflows/_claim-sweep.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: bounded-systems/ci-workflows/.github/workflows/osv-scan.yml dependency-version: 752eb5ca508e4bdcb895ae4f4f2b423ff0726c7b dependency-type: direct:production dependency-group: actions - dependency-name: bounded-systems/.github/.github/actions/broker-gh-token dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: bounded-systems/.github/.github/workflows/_pr-claim.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions - dependency-name: cachix/cachix-action dependency-version: 38b082610b782e7e93e209c35fd730d399dee866 dependency-type: direct:production dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: bounded-systems/.github/.github/workflows/repo-standard.yml dependency-version: 1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c dependency-type: direct:production dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-merge.yml | 2 +- .github/workflows/claim-sweep.yml | 2 +- .github/workflows/deps.yml | 2 +- .github/workflows/front-desk-add.yml | 2 +- .github/workflows/pr-claim.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/standard.yml | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml index 104d819..b17b783 100644 --- a/.github/workflows/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -57,4 +57,4 @@ jobs: contents: read id-token: write # SHA-pinned, per org policy — never a branch. The broker door pins this SHA too. - uses: bounded-systems/.github/.github/workflows/_auto-merge.yml@a0330aea1a9fc899ff1002bf52d20ef8d9b2edad + uses: bounded-systems/.github/.github/workflows/_auto-merge.yml@1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c diff --git a/.github/workflows/claim-sweep.yml b/.github/workflows/claim-sweep.yml index 0f44b16..d5a73e8 100644 --- a/.github/workflows/claim-sweep.yml +++ b/.github/workflows/claim-sweep.yml @@ -69,7 +69,7 @@ concurrency: jobs: sweep: # SHA-pinned, per org policy — never a branch. - uses: bounded-systems/.github/.github/workflows/_claim-sweep.yml@953ed46c6560abe5366fbcf1235023dc46192776 + uses: bounded-systems/.github/.github/workflows/_claim-sweep.yml@1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c permissions: contents: read issues: write diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml index 271e320..af193be 100644 --- a/.github/workflows/deps.yml +++ b/.github/workflows/deps.yml @@ -43,4 +43,4 @@ jobs: osv: # SHA-pinned per org policy. `# main` records what the SHA was at the time, so a # reviewer can tell an intentional bump from a drifted one. - uses: bounded-systems/ci-workflows/.github/workflows/osv-scan.yml@ce6310f52e47fcd3f536bfd267edc62974ecfc9f # main + uses: bounded-systems/ci-workflows/.github/workflows/osv-scan.yml@752eb5ca508e4bdcb895ae4f4f2b423ff0726c7b # main diff --git a/.github/workflows/front-desk-add.yml b/.github/workflows/front-desk-add.yml index 70dee97..a483bda 100644 --- a/.github/workflows/front-desk-add.yml +++ b/.github/workflows/front-desk-add.yml @@ -59,7 +59,7 @@ jobs: id: app-token if: ${{ vars.CF_BROKER_URL != '' }} continue-on-error: true - uses: bounded-systems/.github/.github/actions/broker-gh-token@953ed46c6560abe5366fbcf1235023dc46192776 # broker-gh-token (prx-26bq), .github#109 + uses: bounded-systems/.github/.github/actions/broker-gh-token@1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c # broker-gh-token (prx-26bq), .github#109 with: app: front-desk broker-url: ${{ vars.CF_BROKER_URL }} diff --git a/.github/workflows/pr-claim.yml b/.github/workflows/pr-claim.yml index 871c69f..cebf7e0 100644 --- a/.github/workflows/pr-claim.yml +++ b/.github/workflows/pr-claim.yml @@ -81,4 +81,4 @@ jobs: issues: read pull-requests: read # SHA-pinned, per org policy — never a branch. - uses: bounded-systems/.github/.github/workflows/_pr-claim.yml@bc4cb7dada47cc59eed416372a4851201bd6f503 + uses: bounded-systems/.github/.github/workflows/_pr-claim.yml@1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8e6a701..b786cb1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -47,7 +47,7 @@ jobs: trusted-public-keys = cache.nixos.org-1:6NCHdD59X431o0gWypbMrAURkbJ16ZPMQFGspcDShjY= - name: Setup Cachix - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17 + uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 # v17 with: name: hooksmith authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}' @@ -220,7 +220,7 @@ jobs: github_access_token: ${{ secrets.GITHUB_TOKEN }} - name: Setup Cachix - uses: cachix/cachix-action@5f2d7c5294214f71b873db4b969586b980625e71 # v17 + uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 # v17 with: name: hooksmith authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}' @@ -295,7 +295,7 @@ jobs: EOF - name: Create GitHub Release - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 if: startsWith(github.ref, 'refs/tags/') with: files: release-final/* diff --git a/.github/workflows/standard.yml b/.github/workflows/standard.yml index 5509276..54501fb 100644 --- a/.github/workflows/standard.yml +++ b/.github/workflows/standard.yml @@ -7,7 +7,7 @@ permissions: contents: read jobs: standard: - uses: bounded-systems/.github/.github/workflows/repo-standard.yml@953ed46c6560abe5366fbcf1235023dc46192776 + uses: bounded-systems/.github/.github/workflows/repo-standard.yml@1716efd3a3cc81ba97e0ff2be0f9a0a0ebd6574c with: security: true test: true