From faa3a6b83c495dd765a80ef4cbb67027d030f31f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 14 Oct 2026 19:10:50 +0000 Subject: [PATCH] chore: bump the actions group across 1 directory with 8 updates Bumps the actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [burnt-labs/github-workflows/.github/workflows/required-quality.yml](https://github.com/burnt-labs/github-workflows) | `3332fc8e0049b837e851778cb1fb2be1f24acb1a` | `d3096758fcd3e5bbc5a9622b8f1f5182b80aab86` | | [burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml](https://github.com/burnt-labs/github-workflows) | `bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec` | `d3096758fcd3e5bbc5a9622b8f1f5182b80aab86` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [cloudflare/wrangler-action](https://github.com/cloudflare/wrangler-action) | `4.0.0` | `4.1.3` | | [changesets/action](https://github.com/changesets/action) | `1.9.0` | `2.1.2` | | [burnt-labs/github-workflows/.github/workflows/npm-publish.yml](https://github.com/burnt-labs/github-workflows) | `3332fc8e0049b837e851778cb1fb2be1f24acb1a` | `d3096758fcd3e5bbc5a9622b8f1f5182b80aab86` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.2.0` | `4.4.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` | Updates `burnt-labs/github-workflows/.github/workflows/required-quality.yml` from 3332fc8e0049b837e851778cb1fb2be1f24acb1a to d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](https://github.com/burnt-labs/github-workflows/compare/3332fc8e0049b837e851778cb1fb2be1f24acb1a...d3096758fcd3e5bbc5a9622b8f1f5182b80aab86) Updates `burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml` from bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec to d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](https://github.com/burnt-labs/github-workflows/compare/bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec...d3096758fcd3e5bbc5a9622b8f1f5182b80aab86) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `cloudflare/wrangler-action` from 4.0.0 to 4.1.3 - [Release notes](https://github.com/cloudflare/wrangler-action/releases) - [Changelog](https://github.com/cloudflare/wrangler-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/cloudflare/wrangler-action/compare/ebbaa1584979971c8614a24965b4405ff95890e0...953926a2e2182532811c01a25e53647d93bf07c0) Updates `changesets/action` from 1.9.0 to 2.1.2 - [Release notes](https://github.com/changesets/action/releases) - [Changelog](https://github.com/changesets/action/blob/main/CHANGELOG.md) - [Commits](https://github.com/changesets/action/compare/a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d...ae32849d5ba541f9ae29e40e22a623bc13562f51) Updates `burnt-labs/github-workflows/.github/workflows/npm-publish.yml` from 3332fc8e0049b837e851778cb1fb2be1f24acb1a to d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 - [Release notes](https://github.com/burnt-labs/github-workflows/releases) - [Commits](https://github.com/burnt-labs/github-workflows/compare/3332fc8e0049b837e851778cb1fb2be1f24acb1a...d3096758fcd3e5bbc5a9622b8f1f5182b80aab86) Updates `docker/setup-buildx-action` from 4.2.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...f87e5991a6d7451dcb8d9637bfbc97413f497069) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc) --- updated-dependencies: - dependency-name: burnt-labs/github-workflows/.github/workflows/required-quality.yml dependency-version: d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 dependency-type: direct:production dependency-group: actions - dependency-name: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml dependency-version: d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 dependency-type: direct:production dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: cloudflare/wrangler-action dependency-version: 4.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: changesets/action dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: burnt-labs/github-workflows/.github/workflows/npm-publish.yml dependency-version: d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 dependency-type: direct:production dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cloudflare-main.yml | 8 ++++---- .github/workflows/cloudflare-pr.yml | 4 ++-- .github/workflows/cloudflare-release.yml | 6 +++--- .github/workflows/cloudflare-version.yml | 6 +++--- .github/workflows/npm-changesets.yml | 6 +++--- .github/workflows/npm-main.yml | 6 +++--- .github/workflows/npm-pr.yml | 4 ++-- .github/workflows/npm-publish.yml | 2 +- .github/workflows/npm-release.yml | 4 ++-- .github/workflows/phala-deploy.yml | 8 ++++---- .github/workflows/required-quality.yml | 2 +- 11 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/cloudflare-main.yml b/.github/workflows/cloudflare-main.yml index 613f198..68d8ab2 100644 --- a/.github/workflows/cloudflare-main.yml +++ b/.github/workflows/cloudflare-main.yml @@ -27,7 +27,7 @@ permissions: jobs: quality: - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 with: quality-policy-path: ${{ inputs.quality-policy-path }} deployment-policy-path: ${{ inputs.deployment-policy-path }} @@ -76,7 +76,7 @@ jobs: permissions: contents: read deployments: write - uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec # v1.7.1 + uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.1 with: # Under single topology the candidate and the release are the same # Worker, so deploying here would serve the merge immediately and there @@ -98,7 +98,7 @@ jobs: permissions: contents: read deployments: write - uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec # v1.7.1 + uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.1 with: operation: preview target: release @@ -184,7 +184,7 @@ jobs: permissions: contents: read deployments: write - uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec # v1.7.1 + uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.1 with: operation: deploy target: release diff --git a/.github/workflows/cloudflare-pr.yml b/.github/workflows/cloudflare-pr.yml index 21c5dc6..1ee8676 100644 --- a/.github/workflows/cloudflare-pr.yml +++ b/.github/workflows/cloudflare-pr.yml @@ -31,7 +31,7 @@ jobs: github.event_name != 'pull_request' || (github.event.pull_request.draft == false && github.event.pull_request.head.repo.full_name == github.repository) - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 with: quality-policy-path: ${{ inputs.quality-policy-path }} deployment-policy-path: ${{ inputs.deployment-policy-path }} @@ -62,7 +62,7 @@ jobs: permissions: contents: read deployments: write - uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec # v1.7.1 + uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.1 with: operation: preview target: candidate diff --git a/.github/workflows/cloudflare-release.yml b/.github/workflows/cloudflare-release.yml index 63f944e..af9e21d 100644 --- a/.github/workflows/cloudflare-release.yml +++ b/.github/workflows/cloudflare-release.yml @@ -56,7 +56,7 @@ jobs: quality: needs: validate - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 with: quality-policy-path: ${{ inputs.quality-policy-path }} deployment-policy-path: ${{ inputs.deployment-policy-path }} @@ -89,7 +89,7 @@ jobs: permissions: contents: read deployments: write - uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec # v1.7.1 + uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.1 with: operation: preview target: release @@ -108,7 +108,7 @@ jobs: permissions: contents: read deployments: write - uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@bdb6a6c76b0fc229fa2a54ed91c3ddf78c2ea4ec # v1.7.1 + uses: burnt-labs/github-workflows/.github/workflows/cloudflare-version.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.1 with: operation: deploy target: release diff --git a/.github/workflows/cloudflare-version.yml b/.github/workflows/cloudflare-version.yml index e1c10b1..4b13b7e 100644 --- a/.github/workflows/cloudflare-version.yml +++ b/.github/workflows/cloudflare-version.yml @@ -92,7 +92,7 @@ jobs: - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: lts/* - name: Enable Corepack @@ -146,7 +146,7 @@ jobs: # The same pinned action as the deploy below, for the same reason the # secrets step uses it: wrangler out of the consumer's node_modules # would put a caller-resolved binary next to the deployment credential. - uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0 + uses: cloudflare/wrangler-action@953926a2e2182532811c01a25e53647d93bf07c0 # v4.1.3 with: apiToken: ${{ secrets.cloudflare-api-token || secrets.BURNT_CLOUDFLARE_API_TOKEN }} accountId: ${{ secrets.cloudflare-account-id || secrets.BURNT_CLOUDFLARE_ACCOUNT_ID }} @@ -199,7 +199,7 @@ jobs: echo "Publishing $(jq -r 'keys | join(", ")' "$RUNNER_TEMP/worker-secrets.json")" - name: Upload or deploy Worker version id: wrangler - uses: cloudflare/wrangler-action@ebbaa1584979971c8614a24965b4405ff95890e0 # v4.0.0 + uses: cloudflare/wrangler-action@953926a2e2182532811c01a25e53647d93bf07c0 # v4.1.3 with: apiToken: ${{ secrets.cloudflare-api-token || secrets.BURNT_CLOUDFLARE_API_TOKEN }} accountId: ${{ secrets.cloudflare-account-id || secrets.BURNT_CLOUDFLARE_ACCOUNT_ID }} diff --git a/.github/workflows/npm-changesets.yml b/.github/workflows/npm-changesets.yml index c708188..0bc2cd3 100644 --- a/.github/workflows/npm-changesets.yml +++ b/.github/workflows/npm-changesets.yml @@ -96,7 +96,7 @@ permissions: jobs: quality: - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 with: quality-policy-path: ${{ inputs.quality-policy-path }} @@ -140,7 +140,7 @@ jobs: # API commits are signed by GitHub, which branch protection tends # to want. persist-credentials: false - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: lts/* registry-url: https://registry.npmjs.org @@ -236,7 +236,7 @@ jobs: fi - name: Create release pull request or publish to npm if: steps.freshness.outputs.stale == 'false' - uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 + uses: changesets/action@ae32849d5ba541f9ae29e40e22a623bc13562f51 # v2.1.2 with: title: ${{ inputs.pr-title }} commit: ${{ inputs.pr-commit }} diff --git a/.github/workflows/npm-main.yml b/.github/workflows/npm-main.yml index 892f0b3..f123953 100644 --- a/.github/workflows/npm-main.yml +++ b/.github/workflows/npm-main.yml @@ -8,7 +8,7 @@ permissions: jobs: quality: - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 metadata: needs: quality @@ -107,7 +107,7 @@ jobs: permissions: contents: read id-token: write - uses: burnt-labs/github-workflows/.github/workflows/npm-publish.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/npm-publish.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 with: quality-policy: ${{ needs.quality.outputs.quality-policy }} npm-policy: ${{ needs.quality.outputs.npm-policy }} @@ -171,7 +171,7 @@ jobs: permissions: contents: read id-token: write - uses: burnt-labs/github-workflows/.github/workflows/npm-publish.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/npm-publish.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 with: quality-policy: ${{ needs.quality.outputs.quality-policy }} npm-policy: ${{ needs.quality.outputs.npm-policy }} diff --git a/.github/workflows/npm-pr.yml b/.github/workflows/npm-pr.yml index d7312ae..5f0c64e 100644 --- a/.github/workflows/npm-pr.yml +++ b/.github/workflows/npm-pr.yml @@ -8,7 +8,7 @@ permissions: jobs: quality: - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 pack: name: Package dry run @@ -19,7 +19,7 @@ jobs: working-directory: ${{ fromJSON(needs.quality.outputs.npm-policy).workingDirectory }} steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: lts/* registry-url: https://registry.npmjs.org diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index ac1b3f9..822eb95 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -37,7 +37,7 @@ jobs: working-directory: ${{ fromJSON(inputs.quality-policy).workingDirectory }} steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: lts/* registry-url: https://registry.npmjs.org diff --git a/.github/workflows/npm-release.yml b/.github/workflows/npm-release.yml index ccf3a6c..6a01a32 100644 --- a/.github/workflows/npm-release.yml +++ b/.github/workflows/npm-release.yml @@ -15,7 +15,7 @@ permissions: jobs: quality: - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 metadata: needs: quality @@ -52,7 +52,7 @@ jobs: permissions: contents: read id-token: write - uses: burnt-labs/github-workflows/.github/workflows/npm-publish.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/npm-publish.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 with: quality-policy: ${{ needs.quality.outputs.quality-policy }} npm-policy: ${{ needs.quality.outputs.npm-policy }} diff --git a/.github/workflows/phala-deploy.yml b/.github/workflows/phala-deploy.yml index 52d3ace..da1816a 100644 --- a/.github/workflows/phala-deploy.yml +++ b/.github/workflows/phala-deploy.yml @@ -47,7 +47,7 @@ jobs: quality: needs: policy - uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@3332fc8e0049b837e851778cb1fb2be1f24acb1a # v1.7.0 + uses: burnt-labs/github-workflows/.github/workflows/required-quality.yml@d3096758fcd3e5bbc5a9622b8f1f5182b80aab86 # v1.7.0 deploy: name: Phala ${{ inputs.target }} @@ -69,7 +69,7 @@ jobs: - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: lts/* - name: Resolve image @@ -137,7 +137,7 @@ jobs: ;; esac - name: Setup Docker Buildx - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Login to GHCR for push uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: @@ -146,7 +146,7 @@ jobs: password: ${{ github.token }} - name: Build and push image id: build - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: ${{ fromJSON(needs.policy.outputs.phala).image.context }} file: ${{ fromJSON(needs.policy.outputs.phala).image.dockerfile }} diff --git a/.github/workflows/required-quality.yml b/.github/workflows/required-quality.yml index 7558571..bc60042 100644 --- a/.github/workflows/required-quality.yml +++ b/.github/workflows/required-quality.yml @@ -112,7 +112,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Node if: fromJSON(needs.policy.outputs.quality).toolchain == 'node' - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: lts/* - name: Enable Corepack