From 0feafe15ac4eb88a491f38da6914abb0da7db3d2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 4 Aug 2025 09:20:34 +0000 Subject: [PATCH] Bump the github-action-dependencies group with 2 updates Bumps the github-action-dependencies group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [docker/metadata-action](https://github.com/docker/metadata-action). Updates `github/codeql-action` from 3.29.4 to 3.29.5 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3.29.4...v3.29.5) Updates `docker/metadata-action` from 5.7.0 to 5.8.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/v5.7.0...v5.8.0) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-action-dependencies - dependency-name: docker/metadata-action dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-action-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/release.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 26e852e721..f51cb6a721 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -17,7 +17,7 @@ jobs: uses: actions/checkout@v4.2.2 - name: Initialize CodeQL - uses: github/codeql-action/init@v3.29.4 + uses: github/codeql-action/init@v3.29.5 with: languages: 'java' - name: setup java @@ -34,4 +34,4 @@ jobs: id: build run: ./gradlew build --info --init-script init.gradle - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3.29.4 \ No newline at end of file + uses: github/codeql-action/analyze@v3.29.5 \ No newline at end of file diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index edd90a6da5..70988885e1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -87,7 +87,7 @@ jobs: uses: docker/setup-buildx-action@v3.11.1 - name: Docker meta id: meta - uses: docker/metadata-action@v5.7.0 + uses: docker/metadata-action@v5.8.0 with: # this is triggered by the schedule so we want to actually use the checked out information # and not the context from the workflow itself.