From 00b461d838c4fff72e3d316422ad74a90e551e1a Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sat, 14 Nov 2026 13:21:19 +0000 Subject: [PATCH] Update github actions --- .github/workflows/benchmark.yaml | 4 ++-- .github/workflows/checks-codecov.yaml | 4 ++-- .github/workflows/codeql.yaml | 2 +- .github/workflows/lint.yaml | 2 +- .github/workflows/release.yaml | 4 ++-- .github/workflows/scorecard.yml | 2 +- .github/workflows/update-go-containerregistry.yaml | 2 +- .github/workflows/website.yaml | 2 +- 8 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/benchmark.yaml b/.github/workflows/benchmark.yaml index 4d7ad99d3e..bb5f27f9c6 100644 --- a/.github/workflows/benchmark.yaml +++ b/.github/workflows/benchmark.yaml @@ -39,7 +39,7 @@ jobs: EC_STRESS_WORKERS: "10" steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true @@ -60,7 +60,7 @@ jobs: cache: false - name: Setup ORAS - uses: oras-project/setup-oras@1d808f7d7f6995cc68b7bf507bfe5c5446e1dc9d # v2.0.1 + uses: oras-project/setup-oras@5e2f2482b30b0cb3e14e67f89a80c88c659a7c63 # v2.0.3 - name: Prepare benchmark data run: | diff --git a/.github/workflows/checks-codecov.yaml b/.github/workflows/checks-codecov.yaml index 9c972b17ed..9031f91c8c 100644 --- a/.github/workflows/checks-codecov.yaml +++ b/.github/workflows/checks-codecov.yaml @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true @@ -168,7 +168,7 @@ jobs: needs: [Test, Acceptance] steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index 70ceb959c6..cc51ad1b2a 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -47,7 +47,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 9b08071309..ae34a6668d 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -41,7 +41,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 64972fbf41..5ea5e9961a 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -67,13 +67,13 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true - name: Free Disk Space (Ubuntu) - uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1 + uses: jlumbroso/free-disk-space@3f13feab2962a87273d379ebc36ea159527e6cc9 # v1.3.2 with: docker-images: false swap-storage: false diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 227093fae1..01e6d95ca0 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true diff --git a/.github/workflows/update-go-containerregistry.yaml b/.github/workflows/update-go-containerregistry.yaml index ea3e8989a4..7a8d37b4f3 100644 --- a/.github/workflows/update-go-containerregistry.yaml +++ b/.github/workflows/update-go-containerregistry.yaml @@ -59,7 +59,7 @@ jobs: private-key: ${{ secrets.EC_AUTOMATION_KEY }} - name: pull-request - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 + uses: peter-evans/create-pull-request@15733dbdfeedb4f7fdb73d13c6f5ac83b710fab8 # v8.1.2 with: add-paths: | go.mod diff --git a/.github/workflows/website.yaml b/.github/workflows/website.yaml index 51a18e39db..f43c044c22 100644 --- a/.github/workflows/website.yaml +++ b/.github/workflows/website.yaml @@ -39,7 +39,7 @@ jobs: REPOSITORY: conforma/conforma.github.io steps: - name: Harden Runner - uses: step-security/harden-runner@46b06cea07f9e64621fdf066ba77ac6915163d43 # v2.22.3 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit disable-telemetry: true