Skip to content

test#14

Closed
mtahle wants to merge 23 commits into
copilot/sub-pr-2from
main
Closed

test#14
mtahle wants to merge 23 commits into
copilot/sub-pr-2from
main

Conversation

@mtahle

@mtahle mtahle commented Mar 18, 2026

Copy link
Copy Markdown
Owner

No description provided.

mtahle and others added 23 commits March 18, 2026 10:10
chore: Update GitHub Actions to latest versions (checkout@v4, remove …
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 6.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](actions/setup-python@v4...v6)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
- Update github/codeql-action from v3 to v4 to avoid deprecation
- Fix TruffleHog invalid 'extra_kwargs' parameter (use 'extra_args')
- Use proper BASE/HEAD commits to avoid 'same commit' error
- Update upload-sarif action to v4
fix: Update CodeQL actions to v4 and fix TruffleHog configuration
…etup-python-6

chore(ci): Bump actions/setup-python from 4 to 6
Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
…pload-artifact-7

chore(ci): Bump actions/upload-artifact from 4 to 7
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
…heckout-6

chore(ci): Bump actions/checkout from 4 to 6
Potential fix for code scanning alert no. 3: Unused import
Potential fix for code scanning alert no. 2: Unused import
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Potential fix for code scanning alert no. 5: Empty except
Potential fix for code scanning alert no. 1: Unused import
Potential fix for code scanning alert no. 4: Empty except
- Add security-events write permission to trivy-scan job
- Skip SARIF upload for pull requests from forks (prevents permission errors)
- Remove push-based trigger from publish workflow
- Publishing now only on tag creation via release[published] event
- Resolves 'Resource not accessible by integration' warnings
@mtahle mtahle closed this Mar 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant