Skip to content

Commit 0f23dff

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions-dependencies group across 1 directory with 8 updates
Bumps the actions-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `5.0.0` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `3.6.0` | `3.7.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `5.0.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `6.0.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.4.0` | `3.6.0` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.2` | `2.4.3` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.7` | `4.31.2` | | [actions/setup-go](https://github.com/actions/setup-go) | `5.5.0` | `6.0.0` | Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@11bd719...08c6903) Updates `docker/setup-qemu-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@2910929...c7c5346) Updates `actions/upload-artifact` from 4.6.2 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...330a01c) Updates `actions/download-artifact` from 4.3.0 to 6.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@d3f86a1...018cc2c) Updates `docker/login-action` from 3.4.0 to 3.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@74a5d14...5e57cd1) Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@05b42c6...4eaacf0) Updates `github/codeql-action` from 3.29.7 to 4.31.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@51f7732...0499de3) Updates `actions/setup-go` from 5.5.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@d35c59a...4469467) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies - dependency-name: docker/setup-qemu-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies - dependency-name: actions/download-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies - dependency-name: docker/login-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-dependencies - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-dependencies - dependency-name: github/codeql-action dependency-version: 4.31.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies - dependency-name: actions/setup-go dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
1 parent 216697b commit 0f23dff

File tree

3 files changed

+29
-29
lines changed

3 files changed

+29
-29
lines changed

‎.github/workflows/build-image.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,13 @@ jobs:
1919
build:
2020
runs-on: ubuntu-24.04
2121
steps:
22-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
22+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2323
name: Checkout
2424
with:
2525
fetch-depth: 0
2626

2727
- name: Set up QEMU
28-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
28+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
2929

3030
- name: Set up Docker Buildx
3131
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
@@ -34,7 +34,7 @@ jobs:
3434
run: make save-multiarch-build-image
3535

3636
- name: Upload Docker Images Artifacts
37-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
37+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
3838
with:
3939
name: build-image
4040
path: |
@@ -47,21 +47,21 @@ jobs:
4747
if: (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/')) && github.repository == 'cortexproject/cortex'
4848
runs-on: ubuntu-24.04
4949
steps:
50-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
50+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5151
name: Checkout
5252
with:
5353
fetch-depth: 0
5454

5555
- name: Download Docker Images Artifacts
56-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
56+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
5757
with:
5858
name: build-image
5959

6060
- name: Load image
6161
run: make load-multiarch-build-image
6262

6363
- name: Login to Quay.io
64-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
64+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
6565
with:
6666
registry: quay.io
6767
username: ${{secrets.QUAY_REGISTRY_USER}}

‎.github/workflows/scorecards.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -28,12 +28,12 @@ jobs:
2828

2929
steps:
3030
- name: "Checkout code"
31-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
31+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3232
with:
3333
persist-credentials: false
3434

3535
- name: "Run analysis"
36-
uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
36+
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
3737
with:
3838
results_file: results.sarif
3939
results_format: sarif
@@ -55,7 +55,7 @@ jobs:
5555
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
5656
# format to the repository Actions tab.
5757
- name: "Upload artifact"
58-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v3.pre.node20
58+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v3.pre.node20
5959
with:
6060
name: SARIF file
6161
path: results.sarif
@@ -64,6 +64,6 @@ jobs:
6464
# Upload the results to GitHub's code scanning dashboard (optional).
6565
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
6666
- name: "Upload to code-scanning"
67-
uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
67+
uses: github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
6868
with:
6969
sarif_file: results.sarif

‎.github/workflows/test-build-deploy.yml‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
image: quay.io/cortexproject/build-image:master-59491e9aae
2121
steps:
2222
- name: Checkout Repo
23-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
23+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2424
- name: Setup Git safe.directory
2525
run: |
2626
echo "this step is needed because when running in container, actions/checkout does not set safe.directory effectively."
@@ -51,7 +51,7 @@ jobs:
5151
image: quay.io/cortexproject/build-image:master-59491e9aae
5252
steps:
5353
- name: Checkout Repo
54-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
54+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5555
- name: Setup Git safe.directory
5656
run: |
5757
echo "this step is needed because when running in container, actions/checkout does not set safe.directory effectively."
@@ -69,7 +69,7 @@ jobs:
6969
image: quay.io/cortexproject/build-image:master-59491e9aae
7070
steps:
7171
- name: Checkout Repo
72-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
72+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
7373
- name: Setup Git safe.directory
7474
run: |
7575
echo "this step is needed because when running in container, actions/checkout does not set safe.directory effectively."
@@ -91,19 +91,19 @@ jobs:
9191
security-events: write
9292
steps:
9393
- name: Checkout repository
94-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
94+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
9595

9696
# Initializes the CodeQL tools for scanning.
9797
- name: Initialize CodeQL
98-
uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
98+
uses: github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
9999
with:
100100
languages: go
101101

102102
- name: Autobuild
103-
uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
103+
uses: github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
104104

105105
- name: Perform CodeQL Analysis
106-
uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
106+
uses: github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v3.29.5
107107

108108

109109
build:
@@ -112,7 +112,7 @@ jobs:
112112
image: quay.io/cortexproject/build-image:master-59491e9aae
113113
steps:
114114
- name: Checkout Repo
115-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
115+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
116116
- name: Setup Git safe.directory
117117
run: |
118118
echo "this step is needed because when running in container, actions/checkout does not set safe.directory effectively."
@@ -133,7 +133,7 @@ jobs:
133133
touch build-image/.uptodate
134134
make BUILD_IN_CONTAINER=false web-build
135135
- name: Upload Website Artifact
136-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
136+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
137137
with:
138138
name: website public
139139
path: website/public/
@@ -145,7 +145,7 @@ jobs:
145145
- name: Create Docker Images Archive
146146
run: tar -cvf images.tar /tmp/images
147147
- name: Upload Docker Images Artifact
148-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
148+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
149149
with:
150150
name: Docker Images
151151
path: ./images.tar
@@ -208,19 +208,19 @@ jobs:
208208
tags: integration_querier
209209
steps:
210210
- name: Upgrade golang
211-
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
211+
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
212212
with:
213213
go-version: 1.24.0
214214
- name: Checkout Repo
215-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
215+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
216216
- name: Install Docker Client
217217
run: sudo ./.github/workflows/scripts/install-docker.sh
218218
- name: Sym Link Expected Path to Workspace
219219
run: |
220220
sudo mkdir -p /go/src/github.com/cortexproject/cortex
221221
sudo ln -s $GITHUB_WORKSPACE/* /go/src/github.com/cortexproject/cortex
222222
- name: Download Docker Images Artifacts
223-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
223+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
224224
with:
225225
name: Docker Images
226226
- name: Extract Docker Images Archive
@@ -277,11 +277,11 @@ jobs:
277277
arch: arm64
278278
steps:
279279
- name: Checkout Repo
280-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
280+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
281281
- name: Install Docker Client
282282
run: sudo ./.github/workflows/scripts/install-docker.sh
283283
- name: Download Docker Images Artifact
284-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
284+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
285285
with:
286286
name: Docker Images
287287
- name: Extract Docker Images Archive
@@ -303,7 +303,7 @@ jobs:
303303
image: quay.io/cortexproject/build-image:master-59491e9aae
304304
steps:
305305
- name: Checkout Repo
306-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
306+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
307307
with:
308308
# web-deploy script expects repo to be cloned with ssh for some commands to work
309309
ssh-key: ${{ secrets.WEBSITE_DEPLOY_SSH_PRIVATE_KEY }}
@@ -317,7 +317,7 @@ jobs:
317317
mkdir -p /go/src/github.com/cortexproject/cortex
318318
ln -s $GITHUB_WORKSPACE/* /go/src/github.com/cortexproject/cortex
319319
- name: Download Website Artifact
320-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
320+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
321321
with:
322322
name: website public
323323
path: website/public
@@ -345,7 +345,7 @@ jobs:
345345
image: quay.io/cortexproject/build-image:master-59491e9aae
346346
steps:
347347
- name: Checkout Repo
348-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
348+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
349349
- name: Setup Git safe.directory
350350
run: |
351351
echo "this step is needed because when running in container, actions/checkout does not set safe.directory effectively."
@@ -358,7 +358,7 @@ jobs:
358358
mkdir -p /go/src/github.com/cortexproject/cortex
359359
ln -s $GITHUB_WORKSPACE/* /go/src/github.com/cortexproject/cortex
360360
- name: Download Docker Images Artifact
361-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
361+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
362362
with:
363363
name: Docker Images
364364
- name: Extract Docker Images Archive

0 commit comments

Comments
 (0)