From 28440a288705bb1075ae5fd945ba8ca41183db74 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 17 Aug 2026 14:27:20 +0000 Subject: [PATCH] build(deps): bump the actions group with 6 updates Bumps the actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `4` | `6` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4` | `5` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.0` | `2.4.4` | Updates `actions/checkout` from 4 to 7 - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `pnpm/action-setup` from 4 to 6 - [Commits](https://github.com/pnpm/action-setup/compare/v4...v6) Updates `actions/setup-node` from 4 to 7 - [Commits](https://github.com/actions/setup-node/compare/v4...v7) Updates `actions/upload-artifact` from 4 to 7 - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/dependency-review-action` from 4 to 5 - [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5) Updates `ossf/scorecard-action` from 2.4.0 to 2.4.4 - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/v2.4.0...v2.4.4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: pnpm/action-setup dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: ossf/scorecard-action dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 28 ++++++++++++------------- .github/workflows/codeql.yml | 4 ++-- .github/workflows/dependency-review.yml | 4 ++-- .github/workflows/fuzz.yml | 4 ++-- .github/workflows/scorecard.yml | 6 +++--- 5 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 52d4420..1991105 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -29,7 +29,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest, macos-latest] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install pinned toolchain (1.96.0) uses: dtolnay/rust-toolchain@stable @@ -79,13 +79,13 @@ jobs: name: UI (typecheck + contract) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 - name: Install Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: node-version: 22 @@ -120,7 +120,7 @@ jobs: name: Security Audit (cargo-audit + cargo-deny + pnpm audit) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install pinned toolchain (1.96.0) uses: dtolnay/rust-toolchain@stable @@ -168,10 +168,10 @@ jobs: run: git diff --exit-code Cargo.lock src-tauri/Cargo.lock - name: Install pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 - name: Install Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: node-version: 22 @@ -187,7 +187,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest, macos-latest] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Linux system dependencies if: matrix.os == 'ubuntu-latest' @@ -202,10 +202,10 @@ jobs: components: clippy - name: Install pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 - name: Install Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: node-version: 22 cache: 'pnpm' @@ -243,7 +243,7 @@ jobs: matrix: os: [ubuntu-latest, windows-latest, macos-latest] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Linux system dependencies if: matrix.os == 'ubuntu-latest' @@ -257,10 +257,10 @@ jobs: toolchain: 1.96.0 - name: Install pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 - name: Install Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: node-version: 22 cache: 'pnpm' @@ -313,7 +313,7 @@ jobs: Get-Content SHA256SUMS.txt - name: Upload Desktop Application Artifacts (${{ matrix.os }}) - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: netpulse-desktop-${{ matrix.os }} path: artifacts/ diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index b7407f9..9389668 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -26,7 +26,7 @@ jobs: language: [actions, javascript-typescript] steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v4 @@ -40,7 +40,7 @@ jobs: upload: never - name: Upload CodeQL Results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: codeql-results-${{ matrix.language }} path: sarif-results/*.sarif diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 2c0ae08..f7753ea 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -18,10 +18,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Dependency Review - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5 with: fail-on-severity: high deny-licenses: GPL-1.0, GPL-2.0, GPL-3.0, AGPL-1.0, AGPL-3.0 diff --git a/.github/workflows/fuzz.yml b/.github/workflows/fuzz.yml index 4361a95..10d4c46 100644 --- a/.github/workflows/fuzz.yml +++ b/.github/workflows/fuzz.yml @@ -18,7 +18,7 @@ jobs: name: Cargo Fuzz Protocol Dissectors runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust nightly toolchain uses: dtolnay/rust-toolchain@nightly @@ -37,7 +37,7 @@ jobs: - name: Upload Crash Artifacts (if any) if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: fuzz-crash-artifacts path: fuzz/artifacts/ diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 53ead19..c97433b 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -21,10 +21,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Run OSSF Scorecard Analysis - uses: ossf/scorecard-action@v2.4.0 + uses: ossf/scorecard-action@v2.4.4 with: results_file: results.sarif results_format: sarif @@ -32,7 +32,7 @@ jobs: publish_results: false - name: Upload Scorecard Results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: scorecard-results path: results.sarif