From 421dd8840a19a8abb5a4f7ab74ca6d62d7f14c6b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Apr 2026 12:34:10 +0000 Subject: [PATCH] build(deps): bump the actions-updates group across 1 directory with 6 updates Bumps the actions-updates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-node](https://github.com/actions/setup-node) | `6.2.0` | `6.3.0` | | [github/codeql-action](https://github.com/github/codeql-action) | `4.31.8` | `4.35.1` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4.8.2` | `4.9.0` | | [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login) | `2.0.1` | `2.1.2` | | [aws-actions/amazon-ecs-render-task-definition](https://github.com/aws-actions/amazon-ecs-render-task-definition) | `1.8.3` | `1.8.4` | | [aws-actions/amazon-ecs-deploy-task-definition](https://github.com/aws-actions/amazon-ecs-deploy-task-definition) | `2.6.0` | `2.6.1` | Updates `actions/setup-node` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/6044e13b5dc448c55e2357c09f80417699197238...53b83947a5a98c8d113130e565377fae1a50d02f) Updates `github/codeql-action` from 4.31.8 to 4.35.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1b168cd39490f61582a9beae412bb7057a6b2c4e...c10b8064de6f491fea524254123dbe5e09572f13) Updates `actions/dependency-review-action` from 4.8.2 to 4.9.0 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261...2031cfc080254a8a887f58cffee85186f0e49e48) Updates `aws-actions/amazon-ecr-login` from 2.0.1 to 2.1.2 - [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases) - [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/amazon-ecr-login/compare/062b18b96a7aff071d4dc91bc00c4c1a7945b076...f2e9fc6c2b355c1890b65e6f6f0e2ac3e6e22f78) Updates `aws-actions/amazon-ecs-render-task-definition` from 1.8.3 to 1.8.4 - [Release notes](https://github.com/aws-actions/amazon-ecs-render-task-definition/releases) - [Changelog](https://github.com/aws-actions/amazon-ecs-render-task-definition/blob/master/CHANGELOG.md) - [Commits](https://github.com/aws-actions/amazon-ecs-render-task-definition/compare/6b89923a897d41e9ad789181d8865b532ecf973c...77954e213ba1f9f9cb016b86a1d4f6fcdea0d57e) Updates `aws-actions/amazon-ecs-deploy-task-definition` from 2.6.0 to 2.6.1 - [Release notes](https://github.com/aws-actions/amazon-ecs-deploy-task-definition/releases) - [Changelog](https://github.com/aws-actions/amazon-ecs-deploy-task-definition/blob/master/CHANGELOG.md) - [Commits](https://github.com/aws-actions/amazon-ecs-deploy-task-definition/compare/cbf54ec46642b86ff78c2f5793da6746954cf8ff...fc8fc60f3a60ffd500fcb13b209c59d221ac8c8c) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: github/codeql-action dependency-version: 4.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: actions/dependency-review-action dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: aws-actions/amazon-ecr-login dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-updates - dependency-name: aws-actions/amazon-ecs-render-task-definition dependency-version: 1.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates - dependency-name: aws-actions/amazon-ecs-deploy-task-definition dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 6 +++--- .github/workflows/dependency_review.yml | 2 +- .github/workflows/deploy.yml | 6 +++--- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 7 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index beb22c2..61e41f4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -24,7 +24,7 @@ jobs: run: corepack enable - name: Setup Node - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6.3.0 with: cache: "yarn" node-version-file: ".nvmrc" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ce978a0..4460453 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,15 +33,15 @@ jobs: run: ./configure.sh - name: Initialize CodeQL - uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/dependency_review.yml b/.github/workflows/dependency_review.yml index 1f7c7b5..8aba310 100644 --- a/.github/workflows/dependency_review.yml +++ b/.github/workflows/dependency_review.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2 - name: "Dependency Review" - uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2 + uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0 with: fail-on-severity: high comment-summary-in-pr: true diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 966ed00..e9d5fff 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -49,7 +49,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 #v2.0.1 + uses: aws-actions/amazon-ecr-login@f2e9fc6c2b355c1890b65e6f6f0e2ac3e6e22f78 #v2.1.2 - name: Generate image name id: generate-img-name @@ -70,14 +70,14 @@ jobs: - name: Fill in the new image ID in the Amazon ECS task definition id: task-def - uses: aws-actions/amazon-ecs-render-task-definition@6b89923a897d41e9ad789181d8865b532ecf973c #v1.8.3 + uses: aws-actions/amazon-ecs-render-task-definition@77954e213ba1f9f9cb016b86a1d4f6fcdea0d57e #v1.8.4 with: task-definition-arn: ${{ secrets.AWS_ECS_TASK_DEFINITION_ARN }} container-name: ${{ secrets.AWS_ECS_CONTAINER_NAME }} image: ${{ steps.generate-img-name.outputs.image-name }} - name: Deploy Amazon ECS task definition - uses: aws-actions/amazon-ecs-deploy-task-definition@cbf54ec46642b86ff78c2f5793da6746954cf8ff #v2.6.0 + uses: aws-actions/amazon-ecs-deploy-task-definition@fc8fc60f3a60ffd500fcb13b209c59d221ac8c8c #v2.6.1 with: task-definition: ${{ steps.task-def.outputs.task-definition }} service: ${{ secrets.AWS_ECS_SERVICE }} diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 72ebd8c..6c8abaa 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -24,7 +24,7 @@ jobs: run: corepack enable - name: Setup Node - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6.3.0 with: cache: "yarn" node-version-file: ".nvmrc" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8997aff..6b2984a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: run: corepack enable - name: Setup Node - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6.3.0 with: cache: "yarn" node-version-file: ".nvmrc" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 53abb74..28e81fa 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -64,6 +64,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: sarif_file: results.sarif