From 5adfcab3898993894d4751285afbb06b7d495c12 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 30 Jul 2026 10:21:47 +0000 Subject: [PATCH 1/6] chore: bump pinned versions --- tool/versions.env | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/tool/versions.env b/tool/versions.env index d043dd8..fac84b5 100644 --- a/tool/versions.env +++ b/tool/versions.env @@ -39,7 +39,7 @@ ZIZMOR_VERSION="1.28.0" # composite-refs sweep (upgrade-check.yml), closing the dependabot-core#6704 # blind spot. Go-installed by this tag; Go verifies the module checksum, so no # separate sha is tracked. -PINACT_VERSION="4.1.0" +PINACT_VERSION="4.1.1" # ── Pinned binary downloads (verified via tool/fetch_verified.sh) ── # sha256 values are the upstream-published digest where one exists, else @@ -58,10 +58,10 @@ BORE_SHA256_WINDOWS_X64="01709c64fe2787cdc9a21d7030b0f08ad72dff0c36b7ecb72f4f667 # chrome-for-testing publishes no digests, so these are self-computed. # upgrade.sh re-bumps on Chrome's ~4-week Stable cadence; the CDN prunes old # versions, so the pin must be kept fresh or the download 404s. -CHROME_VERSION="151.0.7922.47" -CHROME_SHA256_LINUX_X64="14ac03a67e154e3f8bbc57e03ef03315fda8fedff8e045eee8b31500283a33f4" -CHROME_SHA256_MACOS_ARM64="9529990b6afd9867a862c7a5bff2a4a8eef84614d910acac22e4c5fa5c24daee" -CHROME_SHA256_WINDOWS_X64="fc77bb98b550b7da23b14edfa282b59a022e7fdb075ac7625d2a5152ceb22396" -CHROMEDRIVER_SHA256_LINUX_X64="2faa72828261cd3c5ff00cbc71cfca57a12c26c1406e084e1a34d8d90e292140" -CHROMEDRIVER_SHA256_MACOS_ARM64="d450678936f5a2b39598a4e7d548177931a7a5c4759c0e4824f2cab1ae26523e" -CHROMEDRIVER_SHA256_WINDOWS_X64="8af9c85a8793ae9fa09783a2a554234d4aae05b44a8254cf6a674e3e4e247b30" +CHROME_VERSION="151.0.7922.71" +CHROME_SHA256_LINUX_X64="6bd04aab53fba1544ce6027d9daddb24137295033124a61ecdf9840d785792e9" +CHROME_SHA256_MACOS_ARM64="1c516b5d6c00a074034d5ce03dc1cc9bd2cde2a09293d9613244e0bc153cb80f" +CHROME_SHA256_WINDOWS_X64="7ea2e94833ef710026c8cb08d0d2dafcb13f5d304d9c475ac07a3fa8c11d846c" +CHROMEDRIVER_SHA256_LINUX_X64="89b11804aa50b90b4821b19311f4bf688ce8d394484b2eea08bbcffd5644c1d8" +CHROMEDRIVER_SHA256_MACOS_ARM64="e2956eda0e610414ea280574ccab35e5dd88b5b7f510353232fe157e5a598b7b" +CHROMEDRIVER_SHA256_WINDOWS_X64="87368d15c1dffa5826f6d002a4440a20c9858bab09345a33d883912c2902b230" From c67814e39713da2eafbb71ecff889374ce561620 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Sun, 2 Aug 2026 09:52:40 +0000 Subject: [PATCH 2/6] chore: bump pinned versions --- tool/versions.env | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tool/versions.env b/tool/versions.env index fac84b5..37e90f9 100644 --- a/tool/versions.env +++ b/tool/versions.env @@ -33,7 +33,7 @@ ACTIONLINT_VERSION="1.7.12" # zizmor — the security half of the pr-checks gate, run via `pipx run`. pipx # resolves the version from PyPI, so no separate sha is tracked. -ZIZMOR_VERSION="1.28.0" +ZIZMOR_VERSION="1.29.0" # pinact — pins third-party actions inside composite action.yml to a SHA in the # composite-refs sweep (upgrade-check.yml), closing the dependabot-core#6704 From 239cbf5065099e296a935baf14f63bbb09a7f039 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 5 Aug 2026 10:30:44 +0000 Subject: [PATCH 3/6] chore: bump pinned versions --- tool/versions.env | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/tool/versions.env b/tool/versions.env index 37e90f9..cb431be 100644 --- a/tool/versions.env +++ b/tool/versions.env @@ -58,10 +58,10 @@ BORE_SHA256_WINDOWS_X64="01709c64fe2787cdc9a21d7030b0f08ad72dff0c36b7ecb72f4f667 # chrome-for-testing publishes no digests, so these are self-computed. # upgrade.sh re-bumps on Chrome's ~4-week Stable cadence; the CDN prunes old # versions, so the pin must be kept fresh or the download 404s. -CHROME_VERSION="151.0.7922.71" -CHROME_SHA256_LINUX_X64="6bd04aab53fba1544ce6027d9daddb24137295033124a61ecdf9840d785792e9" -CHROME_SHA256_MACOS_ARM64="1c516b5d6c00a074034d5ce03dc1cc9bd2cde2a09293d9613244e0bc153cb80f" -CHROME_SHA256_WINDOWS_X64="7ea2e94833ef710026c8cb08d0d2dafcb13f5d304d9c475ac07a3fa8c11d846c" -CHROMEDRIVER_SHA256_LINUX_X64="89b11804aa50b90b4821b19311f4bf688ce8d394484b2eea08bbcffd5644c1d8" -CHROMEDRIVER_SHA256_MACOS_ARM64="e2956eda0e610414ea280574ccab35e5dd88b5b7f510353232fe157e5a598b7b" -CHROMEDRIVER_SHA256_WINDOWS_X64="87368d15c1dffa5826f6d002a4440a20c9858bab09345a33d883912c2902b230" +CHROME_VERSION="151.0.7922.76" +CHROME_SHA256_LINUX_X64="d9e4c5916f77e737f22056cab47cd8abb7d39ebec559500ffc2d6f3e02106a7e" +CHROME_SHA256_MACOS_ARM64="4d727601939c51719d2b5ff7d2cd57c44fab6d2529f9f1d2e5769939b86590bf" +CHROME_SHA256_WINDOWS_X64="19e700a206718b59ad2d208a37112b7543aead4b2da34b9539a3d6950341a866" +CHROMEDRIVER_SHA256_LINUX_X64="b80c87a1a41ec5209163f6fbe1e139d5aca7b632116707097fe9a61302e8e555" +CHROMEDRIVER_SHA256_MACOS_ARM64="7f0c7c77ee4a36b3d7a62b7372a44ad3cc287e4664a31822eab447fa10cdb62d" +CHROMEDRIVER_SHA256_WINDOWS_X64="d10ca4f7bdaa6d9560b681db3e636772d6697004ace7eff1c67192154ec7f0df" From 4633b116cc15a76be8f36fdb96f2802affb14d52 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Fri, 7 Aug 2026 08:54:54 +0000 Subject: [PATCH 4/6] chore: bump pinned versions --- tool/versions.env | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/tool/versions.env b/tool/versions.env index cb431be..e3f2169 100644 --- a/tool/versions.env +++ b/tool/versions.env @@ -58,10 +58,10 @@ BORE_SHA256_WINDOWS_X64="01709c64fe2787cdc9a21d7030b0f08ad72dff0c36b7ecb72f4f667 # chrome-for-testing publishes no digests, so these are self-computed. # upgrade.sh re-bumps on Chrome's ~4-week Stable cadence; the CDN prunes old # versions, so the pin must be kept fresh or the download 404s. -CHROME_VERSION="151.0.7922.76" -CHROME_SHA256_LINUX_X64="d9e4c5916f77e737f22056cab47cd8abb7d39ebec559500ffc2d6f3e02106a7e" -CHROME_SHA256_MACOS_ARM64="4d727601939c51719d2b5ff7d2cd57c44fab6d2529f9f1d2e5769939b86590bf" -CHROME_SHA256_WINDOWS_X64="19e700a206718b59ad2d208a37112b7543aead4b2da34b9539a3d6950341a866" -CHROMEDRIVER_SHA256_LINUX_X64="b80c87a1a41ec5209163f6fbe1e139d5aca7b632116707097fe9a61302e8e555" -CHROMEDRIVER_SHA256_MACOS_ARM64="7f0c7c77ee4a36b3d7a62b7372a44ad3cc287e4664a31822eab447fa10cdb62d" -CHROMEDRIVER_SHA256_WINDOWS_X64="d10ca4f7bdaa6d9560b681db3e636772d6697004ace7eff1c67192154ec7f0df" +CHROME_VERSION="151.0.7922.77" +CHROME_SHA256_LINUX_X64="60a324a6e1d27b20f2035a2cdaf71641a739fe1f5571f63794773225820bce8a" +CHROME_SHA256_MACOS_ARM64="4b3caaabb967070f1541ff5b0fd2c95b2ba839be33a58842a8a877ec5f3fbd9b" +CHROME_SHA256_WINDOWS_X64="a561db084cf08f3f4d25681ed3e764726b0537082f27063848a01e2e23d612ae" +CHROMEDRIVER_SHA256_LINUX_X64="65dca829d176845f864b794be1ecdd31e855f14ca9fa1eb93b2d1c0e7242abdd" +CHROMEDRIVER_SHA256_MACOS_ARM64="31e6009ba241f62362b9ca44c5b8dfb10c040f84dd79985d5ea91ea3168b5ce0" +CHROMEDRIVER_SHA256_WINDOWS_X64="ed5189d0a048fcbc16ccc6ed45b47d4e78a79184a23e2fc12a3f804f3242b7c8" From 2571b5de8c3ff09775828814f55fcc21ac092947 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Wed, 12 Aug 2026 09:07:51 +0000 Subject: [PATCH 5/6] chore: bump pinned versions --- tool/versions.env | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/tool/versions.env b/tool/versions.env index e3f2169..078c161 100644 --- a/tool/versions.env +++ b/tool/versions.env @@ -58,10 +58,10 @@ BORE_SHA256_WINDOWS_X64="01709c64fe2787cdc9a21d7030b0f08ad72dff0c36b7ecb72f4f667 # chrome-for-testing publishes no digests, so these are self-computed. # upgrade.sh re-bumps on Chrome's ~4-week Stable cadence; the CDN prunes old # versions, so the pin must be kept fresh or the download 404s. -CHROME_VERSION="151.0.7922.77" -CHROME_SHA256_LINUX_X64="60a324a6e1d27b20f2035a2cdaf71641a739fe1f5571f63794773225820bce8a" -CHROME_SHA256_MACOS_ARM64="4b3caaabb967070f1541ff5b0fd2c95b2ba839be33a58842a8a877ec5f3fbd9b" -CHROME_SHA256_WINDOWS_X64="a561db084cf08f3f4d25681ed3e764726b0537082f27063848a01e2e23d612ae" -CHROMEDRIVER_SHA256_LINUX_X64="65dca829d176845f864b794be1ecdd31e855f14ca9fa1eb93b2d1c0e7242abdd" -CHROMEDRIVER_SHA256_MACOS_ARM64="31e6009ba241f62362b9ca44c5b8dfb10c040f84dd79985d5ea91ea3168b5ce0" -CHROMEDRIVER_SHA256_WINDOWS_X64="ed5189d0a048fcbc16ccc6ed45b47d4e78a79184a23e2fc12a3f804f3242b7c8" +CHROME_VERSION="151.0.7922.138" +CHROME_SHA256_LINUX_X64="f2c1d48c310a2fc79aad59e985103902f27b70fd186b3f663ee67c4c722f5566" +CHROME_SHA256_MACOS_ARM64="a75add0d61f398ac7ec51237a10a8369688e3b78e8467612c3cfa5205e29abef" +CHROME_SHA256_WINDOWS_X64="864a03252382fcfaf0475a1d7cad30b99cb54883060dcb5526249f4ca08aa03a" +CHROMEDRIVER_SHA256_LINUX_X64="5f956ac30d5c78453f5eb578fea14cb09caf62bb05141429be43af0b0c9922f8" +CHROMEDRIVER_SHA256_MACOS_ARM64="7019d73dad20c0b85362930bce64fbb514d33f991020cafd83c0b67b1340b64d" +CHROMEDRIVER_SHA256_WINDOWS_X64="31e264dfcc36435ae7f7a4711ce78caa5674f60ffa2c793b6b3e66378fabc32d" From 833b61a9a20dadf4ce62d19eead20b5520249ce5 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" Date: Thu, 13 Aug 2026 09:07:44 +0000 Subject: [PATCH 6/6] chore: bump pinned versions --- tool/versions.env | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/tool/versions.env b/tool/versions.env index 078c161..d390752 100644 --- a/tool/versions.env +++ b/tool/versions.env @@ -58,10 +58,10 @@ BORE_SHA256_WINDOWS_X64="01709c64fe2787cdc9a21d7030b0f08ad72dff0c36b7ecb72f4f667 # chrome-for-testing publishes no digests, so these are self-computed. # upgrade.sh re-bumps on Chrome's ~4-week Stable cadence; the CDN prunes old # versions, so the pin must be kept fresh or the download 404s. -CHROME_VERSION="151.0.7922.138" -CHROME_SHA256_LINUX_X64="f2c1d48c310a2fc79aad59e985103902f27b70fd186b3f663ee67c4c722f5566" -CHROME_SHA256_MACOS_ARM64="a75add0d61f398ac7ec51237a10a8369688e3b78e8467612c3cfa5205e29abef" -CHROME_SHA256_WINDOWS_X64="864a03252382fcfaf0475a1d7cad30b99cb54883060dcb5526249f4ca08aa03a" -CHROMEDRIVER_SHA256_LINUX_X64="5f956ac30d5c78453f5eb578fea14cb09caf62bb05141429be43af0b0c9922f8" -CHROMEDRIVER_SHA256_MACOS_ARM64="7019d73dad20c0b85362930bce64fbb514d33f991020cafd83c0b67b1340b64d" -CHROMEDRIVER_SHA256_WINDOWS_X64="31e264dfcc36435ae7f7a4711ce78caa5674f60ffa2c793b6b3e66378fabc32d" +CHROME_VERSION="152.0.7977.42" +CHROME_SHA256_LINUX_X64="cb77f4781cad7d5e06fcc78b4476e6a6375616e7278dc313abaa9db22ed4674e" +CHROME_SHA256_MACOS_ARM64="c9a7b6bfb57731944990ffb7cafc17ae2f2a2e25ad1f145f45584d7b799d3ce8" +CHROME_SHA256_WINDOWS_X64="5093f03a401b5579da490d281aba80b687d92fe6fdfec47ee522920918d6e327" +CHROMEDRIVER_SHA256_LINUX_X64="d6625ea71d0bd3dc0afb45b559d6737d5a5fccfbc04621ad9429e7668de65503" +CHROMEDRIVER_SHA256_MACOS_ARM64="c6ef55f25a0524c7b82f7cd6aff0ed8906c90047743dd9ad3dac763c1422b47d" +CHROMEDRIVER_SHA256_WINDOWS_X64="fe5b997d7415dd148970d2b694f4d95ac0735ab352feddcc62a8c89112074061"