Skip to content

Commit 794c59a

Browse files
dependabot[bot]dependabot[bot]
authored
Chore(deps): Bump the github_actions_dependencies group across 1 directory with 8 updates
Bumps the github_actions_dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `5.0.0` | `5.0.1` | | [shivammathur/setup-php](https://github.com/shivammathur/setup-php) | `2.35.3` | `2.35.5` | | [actions/cache](https://github.com/actions/cache) | `4.2.4` | `4.3.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `5` | | [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) | `5.3.0` | `6.0.0` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.28.0` | `0.33.1` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.2` | `2.4.3` | | [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` | Updates `actions/checkout` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v5.0.0...v5.0.1) Updates `shivammathur/setup-php` from 2.35.3 to 2.35.5 - [Release notes](https://github.com/shivammathur/setup-php/releases) - [Commits](shivammathur/setup-php@2.35.3...2.35.5) Updates `actions/cache` from 4.2.4 to 4.3.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@v4.2.4...v4.3.0) Updates `actions/upload-artifact` from 4 to 5 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v5) Updates `SonarSource/sonarqube-scan-action` from 5.3.0 to 6.0.0 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](SonarSource/sonarqube-scan-action@v5.3.0...v6.0.0) Updates `aquasecurity/trivy-action` from 0.28.0 to 0.33.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@0.28.0...0.33.1) Updates `ossf/scorecard-action` from 2.4.2 to 2.4.3 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](ossf/scorecard-action@v2.4.2...v2.4.3) Updates `github/codeql-action` from 3 to 4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github_actions_dependencies - dependency-name: shivammathur/setup-php dependency-version: 2.35.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github_actions_dependencies - dependency-name: actions/cache dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github_actions_dependencies - dependency-name: actions/upload-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github_actions_dependencies - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github_actions_dependencies - dependency-name: aquasecurity/trivy-action dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github_actions_dependencies - dependency-name: ossf/scorecard-action dependency-version: 2.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github_actions_dependencies - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github_actions_dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 2778fff commit 794c59a

File tree

3 files changed

+28
-28
lines changed

3 files changed

+28
-28
lines changed

‎.github/workflows/main.yml‎

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -25,12 +25,12 @@ jobs:
2525
fail-fast: false
2626
steps:
2727
- name: Checkout
28-
uses: actions/checkout@v5.0.0
28+
uses: actions/checkout@v6.0.0
2929
with:
3030
fetch-depth: '0'
3131

3232
- name: Setup PHP, with composer and extensions
33-
uses: shivammathur/setup-php@2.35.3
33+
uses: shivammathur/setup-php@2.35.5
3434
with:
3535
php-version: '8.4'
3636
tools: composer:v2
@@ -40,7 +40,7 @@ jobs:
4040
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
4141

4242
- name: Cache composer dependencies
43-
uses: actions/cache@v4.2.4
43+
uses: actions/cache@v4.3.0
4444
with:
4545
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
4646
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -70,12 +70,12 @@ jobs:
7070
fail-fast: false
7171
steps:
7272
- name: Checkout
73-
uses: actions/checkout@v5.0.0
73+
uses: actions/checkout@v6.0.0
7474
with:
7575
fetch-depth: '0'
7676

7777
- name: Setup PHP, with composer and extensions
78-
uses: shivammathur/setup-php@2.35.3
78+
uses: shivammathur/setup-php@2.35.5
7979
with:
8080
php-version: '8.4'
8181
tools: composer:v2
@@ -85,7 +85,7 @@ jobs:
8585
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
8686

8787
- name: Cache composer dependencies
88-
uses: actions/cache@v4.2.4
88+
uses: actions/cache@v4.3.0
8989
with:
9090
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
9191
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -125,12 +125,12 @@ jobs:
125125
fail-fast: false
126126
steps:
127127
- name: Checkout
128-
uses: actions/checkout@v5.0.0
128+
uses: actions/checkout@v6.0.0
129129
with:
130130
fetch-depth: '0'
131131

132132
- name: Setup PHP, with composer and extensions
133-
uses: shivammathur/setup-php@2.35.3
133+
uses: shivammathur/setup-php@2.35.5
134134
with:
135135
php-version: '8.4'
136136
tools: composer:v2
@@ -140,7 +140,7 @@ jobs:
140140
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
141141

142142
- name: Cache composer dependencies
143-
uses: actions/cache@v4.2.4
143+
uses: actions/cache@v4.3.0
144144
with:
145145
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
146146
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -185,13 +185,13 @@ jobs:
185185
run: make phpinsights
186186

187187
- name: Archive Psalm results (psalm.json)
188-
uses: actions/upload-artifact@v4.6.1
188+
uses: actions/upload-artifact@v5
189189
with:
190190
name: psalm.json
191191
path: ./build/psalm.json
192192

193193
- name: Archive `phploc` results (phploc.json)
194-
uses: actions/upload-artifact@v4.6.1
194+
uses: actions/upload-artifact@v5
195195
with:
196196
name: phploc.json
197197
path: ./build/phploc.json
@@ -216,12 +216,12 @@ jobs:
216216
fail-fast: false
217217
steps:
218218
- name: Checkout
219-
uses: actions/checkout@v5.0.0
219+
uses: actions/checkout@v6.0.0
220220
with:
221221
fetch-depth: '0'
222222

223223
- name: Setup PHP, with composer and extensions
224-
uses: shivammathur/setup-php@2.35.3
224+
uses: shivammathur/setup-php@2.35.5
225225
with:
226226
php-version: '8.4'
227227
extensions: pdo_mysql, mysql
@@ -233,7 +233,7 @@ jobs:
233233
run: echo "CACHE_DIR=$(composer config cache-files-dir)" >> $GITHUB_OUTPUT
234234

235235
- name: Cache composer dependencies
236-
uses: actions/cache@v4.2.4
236+
uses: actions/cache@v4.3.0
237237
with:
238238
path: ${{ steps.composer-cache.outputs.CACHE_DIR }}
239239
key: ${{ runner.os }}-composer-${{ hashFiles('**/composer.lock') }}
@@ -288,7 +288,7 @@ jobs:
288288
COVERALLS_RUN_LOCALLY: 1
289289

290290
- name: SonarQube Scan (https://sonarcloud.io/dashboard?id=github.com.tarlepp.symfony-flex-backend)
291-
uses: SonarSource/sonarqube-scan-action@v5.3.0
291+
uses: SonarSource/sonarqube-scan-action@v6.0.0
292292
env:
293293
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
294294
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # https://github.com/SonarSource/sonarqube-scan-action?tab=readme-ov-file#environment-variables
@@ -297,25 +297,25 @@ jobs:
297297
run: make phpmetrics
298298

299299
- name: Archive code coverage results (clover.xml)
300-
uses: actions/upload-artifact@v4.6.1
300+
uses: actions/upload-artifact@v5
301301
with:
302302
name: clover.xml
303303
path: ./build/logs/clover.xml
304304

305305
- name: Archive code coverage results (junit.xml)
306-
uses: actions/upload-artifact@v4.6.1
306+
uses: actions/upload-artifact@v5
307307
with:
308308
name: junit.xml
309309
path: ./build/logs/junit.xml
310310

311311
- name: Archive Code Coverage
312-
uses: actions/upload-artifact@v4.6.1
312+
uses: actions/upload-artifact@v5
313313
with:
314314
name: CodeCoverage
315315
path: ./build/report
316316

317317
- name: Archive PhpMetrics results
318-
uses: actions/upload-artifact@v4.6.1
318+
uses: actions/upload-artifact@v5
319319
with:
320320
name: PhpMetrics
321321
path: ./build/phpmetrics
@@ -326,7 +326,7 @@ jobs:
326326

327327
steps:
328328
- name: Make checkout
329-
uses: actions/checkout@v5.0.0
329+
uses: actions/checkout@v6.0.0
330330

331331
- name: Lint `./README.md`
332332
uses: avto-dev/markdown-lint@v1.5.0
@@ -359,7 +359,7 @@ jobs:
359359
- test
360360

361361
steps:
362-
- uses: actions/checkout@v5.0.0
362+
- uses: actions/checkout@v6.0.0
363363

364364
- name: Set tag var
365365
id: vars
@@ -369,7 +369,7 @@ jobs:
369369
run: docker build . --file Dockerfile --tag symfony-flex-backend:${{ steps.vars.outputs.DOCKER_TAG }}
370370

371371
- name: Scan Docker image with Trivy vulnerability scanner
372-
uses: aquasecurity/trivy-action@0.32.0
372+
uses: aquasecurity/trivy-action@0.33.1
373373
with:
374374
image-ref: 'symfony-flex-backend:${{ steps.vars.outputs.DOCKER_TAG }}'
375375
format: 'table'

‎.github/workflows/scorecard.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -35,12 +35,12 @@ jobs:
3535

3636
steps:
3737
- name: "Checkout code"
38-
uses: actions/checkout@v5.0.0
38+
uses: actions/checkout@v6.0.0
3939
with:
4040
persist-credentials: false
4141

4242
- name: "Run analysis"
43-
uses: ossf/scorecard-action@v2.4.2
43+
uses: ossf/scorecard-action@v2.4.3
4444
with:
4545
results_file: results.sarif
4646
results_format: sarif
@@ -62,14 +62,14 @@ jobs:
6262
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
6363
# format to the repository Actions tab.
6464
- name: "Upload artifact"
65-
uses: actions/upload-artifact@v4
65+
uses: actions/upload-artifact@v5
6666
with:
6767
name: SARIF file
6868
path: results.sarif
6969
retention-days: 5
7070

7171
# Upload the results to GitHub's code scanning dashboard.
7272
- name: "Upload to code-scanning"
73-
uses: github/codeql-action/upload-sarif@v3
73+
uses: github/codeql-action/upload-sarif@v4
7474
with:
7575
sarif_file: results.sarif

‎.github/workflows/vulnerability-scan.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,13 +15,13 @@ jobs:
1515

1616
steps:
1717
- name: Checkout code
18-
uses: actions/checkout@v5.0.0
18+
uses: actions/checkout@v6.0.0
1919

2020
- name: Build the Docker image
2121
run: docker build . --file Dockerfile --tag symfony-flex-backend:master
2222

2323
- name: Scan image with Trivy
24-
uses: aquasecurity/trivy-action@0.28.0
24+
uses: aquasecurity/trivy-action@0.33.1
2525
with:
2626
image-ref: symfony-flex-backend:master
2727
ignore-unfixed: 'true'

0 commit comments

Comments
 (0)