From 84634ce3bc99618e8e4f11144ecbcb10854820be Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 4 Aug 2026 15:16:46 +0000 Subject: [PATCH] ci(deps): bump the actions-patches group across 1 directory with 8 updates Bumps the actions-patches group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.1.0` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.4.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.36.2` | `4.37.2` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2` | `2.84.0` | | [actions/upload-code-coverage](https://github.com/actions/upload-code-coverage) | `1.3.0` | `1.4.1` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.0` | `4.1.1` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.2.0` | `6.2.2` | Updates `docker/setup-qemu-action` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/v4.1.0...v4.2.0) Updates `docker/login-action` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4.2.0...v4.4.0) Updates `docker/build-push-action` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v7.2.0...v7.3.0) Updates `github/codeql-action` from 4.36.2 to 4.37.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.36.2...v4.37.2) Updates `taiki-e/install-action` from 2 to 2.84.0 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/v2...v2.84.0) Updates `actions/upload-code-coverage` from 1.3.0 to 1.4.1 - [Commits](https://github.com/actions/upload-code-coverage/compare/v1.3.0...v1.4.1) Updates `actions/attest-build-provenance` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v4.1.0...v4.1.1) Updates `aws-actions/configure-aws-credentials` from 6.2.0 to 6.2.2 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/v6.2.0...v6.2.2) --- updated-dependencies: - dependency-name: docker/setup-qemu-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-patches - dependency-name: docker/login-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-patches - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-patches - dependency-name: github/codeql-action dependency-version: 4.37.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-patches - dependency-name: taiki-e/install-action dependency-version: 2.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-patches - dependency-name: actions/upload-code-coverage dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-patches - dependency-name: actions/attest-build-provenance dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-patches - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-patches ... Signed-off-by: dependabot[bot] --- .github/workflows/caddy-image.yml | 6 +++--- .github/workflows/codeql.yml | 4 ++-- .github/workflows/coverage.yml | 6 +++--- .github/workflows/fuzz.yml | 2 +- .github/workflows/release-pr.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- 6 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/caddy-image.yml b/.github/workflows/caddy-image.yml index 4e12faf7..11405175 100644 --- a/.github/workflows/caddy-image.yml +++ b/.github/workflows/caddy-image.yml @@ -27,14 +27,14 @@ jobs: packages: write steps: - uses: actions/checkout@v7.0.0 - - uses: docker/setup-qemu-action@v4.1.0 + - uses: docker/setup-qemu-action@v4.2.0 - uses: docker/setup-buildx-action@v4 - - uses: docker/login-action@v4.2.0 + - uses: docker/login-action@v4.4.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - - uses: docker/build-push-action@v7.2.0 + - uses: docker/build-push-action@v7.3.0 with: context: docker/caddy file: docker/caddy/Containerfile diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 06d3e12a..bbd13287 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -22,11 +22,11 @@ jobs: steps: - uses: actions/checkout@v7.0.0 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.36.2 + uses: github/codeql-action/init@v4.37.2 with: languages: rust build-mode: none - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@v4.36.2 + uses: github/codeql-action/analyze@v4.37.2 with: category: "/language:rust" diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index f96ba87f..86be9413 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -35,7 +35,7 @@ jobs: rustup toolchain install --profile minimal --no-self-update stable rustup default stable rustup component add llvm-tools-preview - - uses: taiki-e/install-action@v2.82.2 + - uses: taiki-e/install-action@v2.84.0 with: tool: cargo-llvm-cov # Coverage builds are instrumented, so keep them in their own cache to @@ -50,7 +50,7 @@ jobs: run: mkdir -p crates/web/frontend/dist - name: cargo llvm-cov run: cargo llvm-cov --workspace --locked --cobertura --output-path cobertura-rust.xml - - uses: actions/upload-code-coverage@v1.3.0 + - uses: actions/upload-code-coverage@v1.4.1 with: file: cobertura-rust.xml language: Rust @@ -73,7 +73,7 @@ jobs: run: npm ci - name: Vitest coverage run: npx --no-install vitest run --coverage - - uses: actions/upload-code-coverage@v1.3.0 + - uses: actions/upload-code-coverage@v1.4.1 # `uses` steps run from the workspace root, not the job's # working-directory, so give the full path to the report. with: diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index 5be81b96..6de50904 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -20,7 +20,7 @@ jobs: run: | rustup toolchain install --profile minimal --no-self-update nightly rustup default nightly - - uses: taiki-e/install-action@v2.82.2 + - uses: taiki-e/install-action@v2.84.0 with: tool: cargo-fuzz - uses: Swatinem/rust-cache@v2 diff --git a/.github/workflows/release-pr.yml b/.github/workflows/release-pr.yml index 9b5fd4c9..ead3ac5b 100644 --- a/.github/workflows/release-pr.yml +++ b/.github/workflows/release-pr.yml @@ -49,7 +49,7 @@ jobs: with: fetch-depth: 0 token: ${{ secrets.RELEASE_PLZ_TOKEN || secrets.GITHUB_TOKEN }} - - uses: taiki-e/install-action@v2 + - uses: taiki-e/install-action@v2.84.0 with: tool: git-cliff - name: Create release for an untagged version bump @@ -85,7 +85,7 @@ jobs: run: | rustup toolchain install --profile minimal --no-self-update stable rustup default stable - - uses: taiki-e/install-action@v2 + - uses: taiki-e/install-action@v2.84.0 with: tool: git-cliff - name: Compute next version diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 521bffa7..7e87caa4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -278,18 +278,18 @@ jobs: done - name: Attest tarball provenance - uses: actions/attest-build-provenance@v4.1.0 + uses: actions/attest-build-provenance@v4.1.1 with: subject-path: "*.tar.zst" - name: Attest deb provenance if: matrix.deb - uses: actions/attest-build-provenance@v4.1.0 + uses: actions/attest-build-provenance@v4.1.1 with: subject-path: "*.deb" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v6.2.0 + uses: aws-actions/configure-aws-credentials@v6.2.2 with: aws-region: ap-southeast-2 role-to-assume: arn:aws:iam::143295493206:role/gha-tamanu-tools-upload