diff --git a/.github/workflows/part_docs.yml b/.github/workflows/part_docs.yml index c976e4f..e33f421 100644 --- a/.github/workflows/part_docs.yml +++ b/.github/workflows/part_docs.yml @@ -27,7 +27,7 @@ jobs: php-version: "8.3" tools: phive - name: Cache Tools - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 id: cache with: path: ~/.phive diff --git a/.github/workflows/part_test.yml b/.github/workflows/part_test.yml index 35d2339..e2b7978 100644 --- a/.github/workflows/part_test.yml +++ b/.github/workflows/part_test.yml @@ -56,7 +56,7 @@ jobs: if: "${{ runner.os == 'Windows' }}" run: echo "dir=$(composer config cache-files-dir)" >> $env:GITHUB_OUTPUT - name: Cache Deps - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 id: cache with: path: ${{ steps.composer-cache-common.outputs.dir }}${{ steps.composer-cache-windows.outputs.dir }} @@ -124,7 +124,7 @@ jobs: id: composer-cache run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT - name: Cache Deps - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 id: cache with: path: ${{ steps.composer-cache.outputs.dir }} @@ -139,7 +139,7 @@ jobs: - name: Run Psalm run: composer run test:lint -- --report=results.sarif - name: "Upload SARIF" - uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3 + uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5 with: sarif_file: results.sarif @@ -165,7 +165,7 @@ jobs: id: composer-cache run: echo "dir=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT - name: Cache Deps - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 id: cache with: path: ${{ steps.composer-cache.outputs.dir }} diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index efc58c9..ffa3e36 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -47,4 +47,4 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: 'Dependency Review' - uses: actions/dependency-review-action@595b5aeba73380359d98a5e087f648dbb0edce1b # v4.7.3 + uses: actions/dependency-review-action@56339e523c0409420f6c2c9a2f4292bbb3c07dd3 # v4.8.0 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 0e88a01..993e149 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -76,6 +76,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.30.3 + uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5 with: sarif_file: results.sarif