From 68471b67e59c3c1de109fc2866f216d096450106 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 10:25:42 +0000 Subject: [PATCH] build(deps): bump the actions group with 2 updates Bumps the actions group with 2 updates: [JacobPEvans/.github/.github/workflows/_zizmor.yml](https://github.com/JacobPEvans/.github) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `JacobPEvans/.github/.github/workflows/_zizmor.yml` to 493cc15bfe16d5385669397d9fd830b9dccf754d Updates `github/codeql-action/upload-sarif` from 4.38.3 to 4.39.0 Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/scorecard.yml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0ce44a9..6edb14a 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,11 +32,11 @@ jobs: # this repository. A branch or tag can be repointed at new code after review, # which would hand anything able to push to that repository code execution # here. Bump deliberately: resolve the new SHA with - # `gh api repos/dryvist/.github/commits/main --jq .sha`, read the diff, then + # `gh api repos/JacobPEvans/.github/commits/main --jq .sha`, read the diff, then # update the reference below and its dated comment. workflow-security: if: github.event_name == 'pull_request' - uses: dryvist/.github/.github/workflows/_zizmor.yml@7b9b165be9556c0228830c25246df2bde10a188e # main @ 2026-08-02 + uses: JacobPEvans/.github/.github/workflows/_zizmor.yml@493cc15bfe16d5385669397d9fd830b9dccf754d # main @ 2026-10-23 with: runner_label: ubuntu-latest diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 847591e..46e93f8 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -39,6 +39,6 @@ jobs: publish_results: true - name: Upload results to code scanning - uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4 + uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4 with: sarif_file: results.sarif