From 34390825decd822b88f1db8552ec569fd12ff04d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Sep 2026 01:35:15 +0000 Subject: [PATCH] Bump the github-actions group with 2 updates Bumps the github-actions group with 2 updates: [erlef/mix-dependency-submission](https://github.com/erlef/mix-dependency-submission) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `erlef/mix-dependency-submission` from 1.3.3 to 1.3.4 - [Release notes](https://github.com/erlef/mix-dependency-submission/releases) - [Commits](https://github.com/erlef/mix-dependency-submission/compare/764980370c6cdddd16b9c00141a628203dee1b7b...257b2df58056895d7a0f3f7dba5b0520d71d9a46) Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: erlef/mix-dependency-submission dependency-version: 1.3.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/part_dependency_submission.yml | 2 +- .github/workflows/part_test.yml | 2 +- .github/workflows/scorecards.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/part_dependency_submission.yml b/.github/workflows/part_dependency_submission.yml index e7d6aa6..d3bc625 100644 --- a/.github/workflows/part_dependency_submission.yml +++ b/.github/workflows/part_dependency_submission.yml @@ -23,4 +23,4 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: erlef/mix-dependency-submission@764980370c6cdddd16b9c00141a628203dee1b7b # v1.3.3 \ No newline at end of file + - uses: erlef/mix-dependency-submission@257b2df58056895d7a0f3f7dba5b0520d71d9a46 # v1.3.4 \ No newline at end of file diff --git a/.github/workflows/part_test.yml b/.github/workflows/part_test.yml index e5e524b..89bb3a6 100644 --- a/.github/workflows/part_test.yml +++ b/.github/workflows/part_test.yml @@ -160,7 +160,7 @@ jobs: - run: mix compile --warning-as-errors - run: mix credo --strict --format sarif > results.sarif - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: sarif_file: results.sarif category: credo diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 1b1694d..8bd9d99 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -76,6 +76,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: sarif_file: results.sarif