From 48fa580aaa23bbd84f4dea1fdcfe9769e53e8980 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 21 Nov 2025 14:27:41 +0000 Subject: [PATCH] Bump the dependencies group across 1 directory with 8 updates Bumps the dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5` | `6` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` | | [actions/setup-python](https://github.com/actions/setup-python) | `5` | `6` | | [ncipollo/release-action](https://github.com/ncipollo/release-action) | `1.18.0` | `1.20.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `5` | | [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `5` | `6` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `8` | Updates `actions/checkout` from 5 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v5...v6) Updates `actions/setup-node` from 4 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v6) Updates `actions/setup-python` from 5 to 6 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/v5...v6) Updates `ncipollo/release-action` from 1.18.0 to 1.20.0 - [Release notes](https://github.com/ncipollo/release-action/releases) - [Commits](https://github.com/ncipollo/release-action/compare/bcfe5470707e8832e12347755757cec0eb3c22af...b7eabc95ff50cbeeedec83973935c8f306dfcd0b) Updates `actions/upload-artifact` from 4 to 5 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v5) Updates `github/codeql-action` from 3 to 4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v3...v4) Updates `actions/download-artifact` from 5 to 6 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v5...v6) Updates `actions/github-script` from 7 to 8 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7...v8) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/setup-python dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: ncipollo/release-action dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: actions/upload-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/download-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: actions/github-script dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/build-checklists.yml | 6 +++--- .github/workflows/build-ebooks.yml | 10 +++++----- .github/workflows/codeql.yml | 6 +++--- .github/workflows/comment.yml | 4 ++-- .github/workflows/md-link-check.yml | 6 +++--- .github/workflows/md-lint-check.yml | 6 +++--- .github/workflows/md-textlint-check.yml | 8 ++++---- 7 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/build-checklists.yml b/.github/workflows/build-checklists.yml index d706010b97..9eaa04f580 100644 --- a/.github/workflows/build-checklists.yml +++ b/.github/workflows/build-checklists.yml @@ -18,11 +18,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Setup Action - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' - name: Install Dependencies @@ -38,7 +38,7 @@ jobs: fi - name: Setup Python if: env.CHANGED == 'true' - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: "3.10" - name: Install Dependencies diff --git a/.github/workflows/build-ebooks.yml b/.github/workflows/build-ebooks.yml index f90795221c..07d5f42abe 100644 --- a/.github/workflows/build-ebooks.yml +++ b/.github/workflows/build-ebooks.yml @@ -19,13 +19,13 @@ jobs: CI: true steps: - name: Setup Action - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' - name: SetUp python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: '3.x' - name: Install dependencies @@ -52,7 +52,7 @@ jobs: - name: Create Release if: github.event_name == 'push' id: create_release - uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1.18.0 + uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0 with: name: Release ${{ steps.vars.outputs.tag }} artifacts: "./build/wstg-${{ steps.vars.outputs.tag }}.pdf, ./build/wstg-${{ steps.vars.outputs.tag }}.epub" @@ -65,7 +65,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Attach PDF and Epub if: github.event_name == 'workflow_dispatch' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: wstg-${{ github.event.inputs.version }}-ebooks path: | diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 47ad9d60a4..f5d98647c8 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -53,7 +53,7 @@ jobs: # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@v6 # Add any setup steps before running the `github/codeql-action/init` action. # This includes steps like installing compilers or runtimes (`actions/setup-node` @@ -63,7 +63,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -91,6 +91,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@v4 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/comment.yml b/.github/workflows/comment.yml index 9f594232bf..3fd33bd671 100644 --- a/.github/workflows/comment.yml +++ b/.github/workflows/comment.yml @@ -16,13 +16,13 @@ jobs: if: ${{ github.event.workflow_run.conclusion == 'failure' }} steps: - name: Download Artifact - uses: actions/download-artifact@v5 + uses: actions/download-artifact@v6 with: name: artifact github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ github.event.workflow_run.id }} - name: Comment on PR - uses: actions/github-script@v7 + uses: actions/github-script@v8 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | diff --git a/.github/workflows/md-link-check.yml b/.github/workflows/md-link-check.yml index 6f90b15c0f..a712f852bd 100644 --- a/.github/workflows/md-link-check.yml +++ b/.github/workflows/md-link-check.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Setup Action - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: ref: ${{github.event.pull_request.head.ref}} repository: ${{github.event.pull_request.head.repo.full_name}} @@ -24,7 +24,7 @@ jobs: PR_NUMBER: ${{ github.event.number }} run: echo $PR_NUMBER > pr_number - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' - name: Install dependencies @@ -69,7 +69,7 @@ jobs: rm -f err log - name: Upload list of broken links if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: artifact path: | diff --git a/.github/workflows/md-lint-check.yml b/.github/workflows/md-lint-check.yml index e715828ffb..33500950c0 100644 --- a/.github/workflows/md-lint-check.yml +++ b/.github/workflows/md-lint-check.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: ref: ${{github.event.pull_request.head.ref}} repository: ${{github.event.pull_request.head.repo.full_name}} @@ -25,7 +25,7 @@ jobs: PR_NUMBER: ${{ github.event.number }} run: echo $PR_NUMBER > pr_number - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' - name: Install dependencies @@ -45,7 +45,7 @@ jobs: cat lint.txt | tee -a artifact.txt - name: Upload list of issues if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: artifact path: | diff --git a/.github/workflows/md-textlint-check.yml b/.github/workflows/md-textlint-check.yml index 2cc9f29671..9bff794265 100644 --- a/.github/workflows/md-textlint-check.yml +++ b/.github/workflows/md-textlint-check.yml @@ -17,13 +17,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: ref: ${{github.event.pull_request.head.ref}} repository: ${{github.event.pull_request.head.repo.full_name}} path: pr - name: Checkout Base - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: repository: OWASP/wstg path: base @@ -32,7 +32,7 @@ jobs: PR_NUMBER: ${{ github.event.number }} run: echo $PR_NUMBER > pr_number - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' - name: Install dependencies @@ -67,7 +67,7 @@ jobs: cat mistakes.txt | tee -a artifact.txt - name: Upload list of mistakes if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: artifact path: |