Merge #270 #271

bors[bot] · renovate[bot] · web-flow · commit 4989170b8892 · 2022-11-06T00:40:28.000Z
270: chore(deps): update actions/upload-artifact action to v3.1.1 r=renovate[bot] a=renovate[bot] [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/upload-artifact](https://togithub.com/actions/upload-artifact) | action | minor | `v3.0.0` -> `v3.1.1` | --- ### Release Notes <details> <summary>actions/upload-artifact</summary> ### [`v3.1.1`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.1) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v3.1.0...v3.1.1) - Update actions/core package to latest version to remove `set-output` deprecation warning [#&#8203;351](https://togithub.com/actions/upload-artifact/issues/351) ### [`v3.1.0`](https://togithub.com/actions/upload-artifact/releases/tag/v3.1.0) [Compare Source](https://togithub.com/actions/upload-artifact/compare/v3.0.0...v3.1.0) ##### What's Changed - Bump [`@&#8203;actions/artifact](https://togithub.com/actions/artifact)` to v1.1.0 ([https://github.com/actions/upload-artifact/pull/327](https://togithub.com/actions/upload-artifact/pull/327)) - Adds checksum headers on artifact upload ([https://github.com/actions/toolkit/pull/1095](https://togithub.com/actions/toolkit/pull/1095)) ([https://github.com/actions/toolkit/pull/1063](https://togithub.com/actions/toolkit/pull/1063)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/OpenPoolProject/stratum).  271: chore(deps): update github/codeql-action action to v1.1.31 r=renovate[bot] a=renovate[bot] [![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://togithub.com/github/codeql-action) | action | minor | `v1.0.26` -> `v1.1.31` | --- ### Release Notes <details> <summary>github/codeql-action</summary> ### [`v1.1.31`](https://togithub.com/github/codeql-action/compare/v1.1.30...v1.1.31) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.30...v1.1.31) ### [`v1.1.30`](https://togithub.com/github/codeql-action/compare/v1.1.29...v1.1.30) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.29...v1.1.30) ### [`v1.1.29`](https://togithub.com/github/codeql-action/compare/v1.1.28...v1.1.29) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.28...v1.1.29) ### [`v1.1.28`](https://togithub.com/github/codeql-action/compare/v1.1.27...v1.1.28) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.27...v1.1.28) ### [`v1.1.27`](https://togithub.com/github/codeql-action/compare/v1.1.26...v1.1.27) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.26...v1.1.27) ### [`v1.1.26`](https://togithub.com/github/codeql-action/compare/v1.1.25...v1.1.26) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.25...v1.1.26) ### [`v1.1.25`](https://togithub.com/github/codeql-action/compare/v1.1.24...v1.1.25) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.24...v1.1.25) ### [`v1.1.24`](https://togithub.com/github/codeql-action/compare/v1.1.23...v1.1.24) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.23...v1.1.24) ### [`v1.1.23`](https://togithub.com/github/codeql-action/compare/v1.1.22...v1.1.23) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.22...v1.1.23) ### [`v1.1.22`](https://togithub.com/github/codeql-action/compare/v1.1.21...v1.1.22) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.21...v1.1.22) ### [`v1.1.21`](https://togithub.com/github/codeql-action/compare/v1.1.20...v1.1.21) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.20...v1.1.21) ### [`v1.1.20`](https://togithub.com/github/codeql-action/compare/v1.1.19...v1.1.20) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.19...v1.1.20) ### [`v1.1.19`](https://togithub.com/github/codeql-action/compare/v1.1.18...v1.1.19) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.18...v1.1.19) ### [`v1.1.18`](https://togithub.com/github/codeql-action/compare/v1.1.17...v1.1.18) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.17...v1.1.18) ### [`v1.1.17`](https://togithub.com/github/codeql-action/compare/v1.1.16...v1.1.17) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.16...v1.1.17) ### [`v1.1.16`](https://togithub.com/github/codeql-action/compare/v1.1.15...v1.1.16) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.15...v1.1.16) ### [`v1.1.15`](https://togithub.com/github/codeql-action/compare/v1.1.14...v1.1.15) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.14...v1.1.15) ### [`v1.1.14`](https://togithub.com/github/codeql-action/compare/v1.1.13...v1.1.14) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.13...v1.1.14) ### [`v1.1.13`](https://togithub.com/github/codeql-action/compare/v1.1.12...v1.1.13) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.12...v1.1.13) ### [`v1.1.12`](https://togithub.com/github/codeql-action/compare/v1.1.11...v1.1.12) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.11...v1.1.12) ### [`v1.1.11`](https://togithub.com/github/codeql-action/compare/v1.1.10...v1.1.11) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.10...v1.1.11) ### [`v1.1.10`](https://togithub.com/github/codeql-action/compare/v1.1.9...v1.1.10) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.9...v1.1.10) ### [`v1.1.9`](https://togithub.com/github/codeql-action/compare/v1.1.8...v1.1.9) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.8...v1.1.9) ### [`v1.1.8`](https://togithub.com/github/codeql-action/compare/v1.1.7...v1.1.8) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.7...v1.1.8) ### [`v1.1.7`](https://togithub.com/github/codeql-action/compare/v1.1.6...v1.1.7) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.6...v1.1.7) ### [`v1.1.6`](https://togithub.com/github/codeql-action/compare/v1.1.5...v1.1.6) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.5...v1.1.6) ### [`v1.1.5`](https://togithub.com/github/codeql-action/compare/v1.1.4...v1.1.5) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.4...v1.1.5) ### [`v1.1.4`](https://togithub.com/github/codeql-action/compare/v1.1.3...v1.1.4) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.3...v1.1.4) ### [`v1.1.3`](https://togithub.com/github/codeql-action/compare/v1.1.2...v1.1.3) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.2...v1.1.3) ### [`v1.1.2`](https://togithub.com/github/codeql-action/compare/v1.1.1...v1.1.2) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.1...v1.1.2) ### [`v1.1.1`](https://togithub.com/github/codeql-action/compare/v1.1.0...v1.1.1) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.1.0...v1.1.1) ### [`v1.1.0`](https://togithub.com/github/codeql-action/compare/v1.0.32...v1.1.0) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.0.32...v1.1.0) ### [`v1.0.32`](https://togithub.com/github/codeql-action/compare/v1.0.31...v1.0.32) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.0.31...v1.0.32) ### [`v1.0.31`](https://togithub.com/github/codeql-action/compare/v1.0.30...v1.0.31) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.0.30...v1.0.31) ### [`v1.0.30`](https://togithub.com/github/codeql-action/compare/v1.0.29...v1.0.30) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.0.29...v1.0.30) ### [`v1.0.29`](https://togithub.com/github/codeql-action/compare/v1.0.28...v1.0.29) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.0.28...v1.0.29) ### [`v1.0.28`](https://togithub.com/github/codeql-action/compare/v1.0.27...v1.0.28) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.0.27...v1.0.28) ### [`v1.0.27`](https://togithub.com/github/codeql-action/compare/v1.0.26...v1.0.27) [Compare Source](https://togithub.com/github/codeql-action/compare/v1.0.26...v1.0.27) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/OpenPoolProject/stratum).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -49,14 +49,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@6673cd052c4cd6fcf4b4e6e60ea986c889389535 # v3.0.0
+        uses: actions/upload-artifact@83fd05a356d7e2593de66fc9913b3002723633cb # v3.1.1
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
       
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@5f532563584d71fdef14ee64d17bafb34f751ce5 # v1.0.26
+        uses: github/codeql-action/upload-sarif@9e288b03632e540432812c08ffaef313da7fb1d9 # v1.1.31
         with:
           sarif_file: results.sarif
