From aacba71e274337c2fb0d9473a3aa3f1df8975a77 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 19 Sep 2026 09:06:54 +0000 Subject: [PATCH] ci(deps): bump the github-actions group with 6 updates Bumps the github-actions group with 6 updates: | Package | From | To | | --- | --- | --- | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.3.0` | `4.4.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.3.0` | `7.4.0` | | [anomalyco/opencode/github](https://github.com/anomalyco/opencode) | `1.18.30` | `2.0.5` | | [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) | `2.5.1` | `2.6.0` | | [google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml](https://github.com/google/osv-scanner-action) | `2.5.1` | `2.6.0` | | [crate-ci/typos](https://github.com/crate-ci/typos) | `1.50.1` | `1.50.2` | Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069) Updates `docker/build-push-action` from 7.3.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/53b7df96c91f9c12dcc8a07bcb9ccacbed38856a...c3c9e263c25d99ce0380d002d59b67737d91b0dc) Updates `anomalyco/opencode/github` from 1.18.30 to 2.0.5 - [Release notes](https://github.com/anomalyco/opencode/releases) - [Commits](https://github.com/anomalyco/opencode/compare/3104c1428ec91f809e5ab86631300de41eb6952e...79169fe966d58fb0e0a5e41133716184a0ab4ca6) Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.5.1 to 2.6.0 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/6e4298ebc4db23e847df9b2e2de2939d6f066c67...a345acffa64b0eaede81a3d9aae6141214d9c8fc) Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml` from 2.5.1 to 2.6.0 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](https://github.com/google/osv-scanner-action/compare/6e4298ebc4db23e847df9b2e2de2939d6f066c67...a345acffa64b0eaede81a3d9aae6141214d9c8fc) Updates `crate-ci/typos` from 1.50.1 to 1.50.2 - [Release notes](https://github.com/crate-ci/typos/releases) - [Changelog](https://github.com/crate-ci/typos/blob/main/CHANGELOG.md) - [Commits](https://github.com/crate-ci/typos/compare/d43b6c087ac471e2ea7b8af622ff15f05c0c365b...512fc24f32f44ab01972217aaaf3dc86ec234d53) --- updated-dependencies: - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anomalyco/opencode/github dependency-version: 2.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: crate-ci/typos dependency-version: 1.50.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-sync.yml | 4 ++-- .github/workflows/issue-validation.yml | 2 +- .github/workflows/osv.yml | 4 ++-- .github/workflows/pr-checks.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/rolling-release.yml | 2 +- .github/workflows/spellcheck.yml | 2 +- 7 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/docker-sync.yml b/.github/workflows/docker-sync.yml index b8eaf33..dd1553d 100644 --- a/.github/workflows/docker-sync.yml +++ b/.github/workflows/docker-sync.yml @@ -81,7 +81,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e #v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 #v4.4.1 - name: Log in to Docker Hub uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f #v4.6.0 @@ -116,7 +116,7 @@ jobs: printf 'tags=%s\n' "$TAGS" >> "$GITHUB_OUTPUT" - name: Build and push Docker image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a #v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc #v7.4.0 with: context: . file: ./donut-sync/Dockerfile diff --git a/.github/workflows/issue-validation.yml b/.github/workflows/issue-validation.yml index 4c4cab7..b59c4cc 100644 --- a/.github/workflows/issue-validation.yml +++ b/.github/workflows/issue-validation.yml @@ -693,7 +693,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1 - name: Run opencode - uses: anomalyco/opencode/github@3104c1428ec91f809e5ab86631300de41eb6952e #v1.18.30 + uses: anomalyco/opencode/github@79169fe966d58fb0e0a5e41133716184a0ab4ca6 #v2.0.5 env: ZHIPU_API_KEY: ${{ secrets.ZHIPU_API_KEY }} TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/osv.yml b/.github/workflows/osv.yml index b451eab..f18a163 100644 --- a/.github/workflows/osv.yml +++ b/.github/workflows/osv.yml @@ -46,7 +46,7 @@ jobs: scan-scheduled: name: Scheduled Security Scan if: ${{ github.event_name == 'push' || github.event_name == 'schedule' }} - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@6e4298ebc4db23e847df9b2e2de2939d6f066c67" # v2.5.1 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc" # v2.6.0 with: scan-args: |- -r @@ -58,7 +58,7 @@ jobs: scan-pr: name: PR Security Scan if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }} - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@6e4298ebc4db23e847df9b2e2de2939d6f066c67" # v2.5.1 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc" # v2.6.0 with: scan-args: |- -r diff --git a/.github/workflows/pr-checks.yml b/.github/workflows/pr-checks.yml index f6eabcb..afd7d20 100644 --- a/.github/workflows/pr-checks.yml +++ b/.github/workflows/pr-checks.yml @@ -27,7 +27,7 @@ jobs: security-scan: name: Security Vulnerability Scan if: ${{ github.event_name == 'pull_request' || github.event_name == 'merge_group' }} - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@6e4298ebc4db23e847df9b2e2de2939d6f066c67" # v2.5.1 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable-pr.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc" # v2.6.0 with: scan-args: |- -r diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index aa48b99..39f6418 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: security-scan: if: github.repository == 'zhom/donutbrowser' name: Security Vulnerability Scan - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@6e4298ebc4db23e847df9b2e2de2939d6f066c67" # v2.5.1 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc" # v2.6.0 with: scan-args: |- -r diff --git a/.github/workflows/rolling-release.yml b/.github/workflows/rolling-release.yml index 41464ff..f8423bf 100644 --- a/.github/workflows/rolling-release.yml +++ b/.github/workflows/rolling-release.yml @@ -27,7 +27,7 @@ jobs: security-scan: if: github.repository == 'zhom/donutbrowser' name: Security Vulnerability Scan - uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@6e4298ebc4db23e847df9b2e2de2939d6f066c67" # v2.5.1 + uses: "google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@a345acffa64b0eaede81a3d9aae6141214d9c8fc" # v2.6.0 with: scan-args: |- -r diff --git a/.github/workflows/spellcheck.yml b/.github/workflows/spellcheck.yml index 05aae99..c767f44 100644 --- a/.github/workflows/spellcheck.yml +++ b/.github/workflows/spellcheck.yml @@ -23,4 +23,4 @@ jobs: - name: Checkout Actions Repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 #v7.0.1 - name: Spell Check Repo - uses: crate-ci/typos@d43b6c087ac471e2ea7b8af622ff15f05c0c365b #v1.50.1 + uses: crate-ci/typos@512fc24f32f44ab01972217aaaf3dc86ec234d53 #v1.50.2