Merge pull request #233 from wneessen/dependabot/github_actions/codecov/codecov-action-4.4.1

Bump codecov/codecov-action from 4.4.0 to 4.4.1
Merge pull request #234 from wneessen/dependabot/github_actions/github/codeql-action-3.25.6
2024-11-23 14:10:50 +01:00 · 2024-05-21 15:37:34 +02:00 · 2024-05-21 15:37:25 +02:00 · 2024-05-21 13:22:23 +00:00 · 2024-05-21 13:22:13 +00:00
3 changed files with 5 additions and 5 deletions
--- a/.github/workflows/codecov.yml
+++ b/.github/workflows/codecov.yml
@ -58,6 +58,6 @@ jobs:
        go test -v -race --coverprofile=coverage.coverprofile --covermode=atomic ./...
    - name: Upload coverage to Codecov
      if: success() && matrix.go == '1.22' && matrix.os == 'ubuntu-latest'
-      uses: codecov/codecov-action@6d798873df2b1b8e5846dba6fb86631229fbcb17 # v4.4.0
+      uses: codecov/codecov-action@125fc84a9a348dbcf27191600683ec096ec9021c # v4.4.1
      with:
        token: ${{ secrets.CODECOV_TOKEN }} # not required for public repos
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@ -54,7 +54,7 @@ jobs:
    # Initializes the CodeQL tools for scanning.
    - name: Initialize CodeQL
-      uses: github/codeql-action/init@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+      uses: github/codeql-action/init@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
      with:
        languages: ${{ matrix.language }}
        # If you wish to specify custom queries, you can do so here or in a config file.
@ -65,7 +65,7 @@ jobs:
    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
    # If this step fails, then you should remove it and run the build manually (see below)
    - name: Autobuild
-      uses: github/codeql-action/autobuild@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+      uses: github/codeql-action/autobuild@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
    # ℹ️ Command-line programs to run using the OS shell.
    # 📚 https://git.io/JvXDl
@ -79,4 +79,4 @@ jobs:
    #   make release
    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+      uses: github/codeql-action/analyze@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@ -75,6 +75,6 @@ jobs:
      # Upload the results to GitHub's code scanning dashboard.
      - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@b7cec7526559c32f1616476ff32d17ba4c59b2d6 # v3.25.5
+        uses: github/codeql-action/upload-sarif@9fdb3e49720b44c48891d036bb502feb25684276 # v3.25.6
        with:
          sarif_file: results.sarif
Author	SHA1	Message	Date
Winni Neessen	0733614cf5	Merge pull request #233 from wneessen/dependabot/github_actions/codecov/codecov-action-4.4.1 Bump codecov/codecov-action from 4.4.0 to 4.4.1	2024-05-21 15:37:34 +02:00
Winni Neessen	cf85ed6a80	Merge pull request #234 from wneessen/dependabot/github_actions/github/codeql-action-3.25.6 Bump github/codeql-action from 3.25.5 to 3.25.6	2024-05-21 15:37:25 +02:00
dependabot[bot]	af9dcfbdae	--- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2024-05-21 13:22:23 +00:00
dependabot[bot]	533bd2938e	--- updated-dependencies: - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2024-05-21 13:22:13 +00:00