From a81134c7d305d9f19474c74d208f7950ac6fd659 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 9 Nov 2026 08:23:29 +0000 Subject: [PATCH] build(deps): bump zizmorcore/zizmor-action Bumps the actions group with 1 update: [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `zizmorcore/zizmor-action` from 0.8.0 to 0.8.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/53290badfa369cb0bf7ad16342cb62c2fa47ac7b...45d7276c9ca790aabd705e31ca99c6185c3e76dd) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 16 ++++++++-------- .github/workflows/workflow-security.yml | 2 +- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index ef0c052..265ac80 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -8,7 +8,7 @@ workflows: - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124' '.github/workflows/workflow-security.yml': - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b' + - 'zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd' dependencies: 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': ref: 'v7.0.1' @@ -20,15 +20,15 @@ dependencies: commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' owner_id: 47606891 repo_id: 331103973 - 'github/codeql-action@24c54180a607b1449ed407dd24f251e4e9147c8d': - ref: 'v4.38.3' - commit: 'sha1-24c54180a607b1449ed407dd24f251e4e9147c8d' + 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370': + ref: 'v4.39.1' + commit: 'sha1-9b3254085494b55a0f7c4c2b3d2d52cc712ce370' owner_id: 9919 repo_id: 259445878 - 'zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b': - ref: 'v0.8.0' - commit: 'sha1-53290badfa369cb0bf7ad16342cb62c2fa47ac7b' + 'zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd': + ref: 'v0.8.1' + commit: 'sha1-45d7276c9ca790aabd705e31ca99c6185c3e76dd' owner_id: 210636713 repo_id: 985558803 uses: - - 'github/codeql-action@24c54180a607b1449ed407dd24f251e4e9147c8d' + - 'github/codeql-action@9b3254085494b55a0f7c4c2b3d2d52cc712ce370' diff --git a/.github/workflows/workflow-security.yml b/.github/workflows/workflow-security.yml index f3aeabb..951b0a1 100644 --- a/.github/workflows/workflow-security.yml +++ b/.github/workflows/workflow-security.yml @@ -30,7 +30,7 @@ jobs: - name: Validate workflows with actionlint uses: docker://rhysd/actionlint@sha256:b1934ee5f1c509618f2508e6eb47ee0d3520686341fec936f3b79331f9315667 # 1.7.12 - name: Analyze workflow security - uses: zizmorcore/zizmor-action@53290badfa369cb0bf7ad16342cb62c2fa47ac7b # v0.8.0 + uses: zizmorcore/zizmor-action@45d7276c9ca790aabd705e31ca99c6185c3e76dd # v0.8.1 with: version: '1.31.1' advanced-security: false