From ca88517b7902a164d6d3258314de4fb6b45f05f4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 3 Sep 2026 07:05:51 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 3 updates Bumps the github-actions group with 3 updates in the / directory: [devr-tools/codeguard](https://github.com/devr-tools/codeguard), [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) and [anchore/sbom-action/download-syft](https://github.com/anchore/sbom-action). Updates `devr-tools/codeguard` from 1.5.0 to 1.8.3 - [Release notes](https://github.com/devr-tools/codeguard/releases) - [Changelog](https://github.com/devr-tools/codeguard/blob/main/CHANGELOG.md) - [Commits](https://github.com/devr-tools/codeguard/compare/8d9ea157e0de725dfa74ee954be9f4ef6157d9f1...5d11767a99393c1d6f1959b0ab8ec293761252a5) Updates `Homebrew/actions/setup-homebrew` from 2026.08.14.1 to 2026.08.31.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](https://github.com/homebrew/actions/compare/8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4...3cdb78d0f62ad29dd32de765782654f4eedea607) Updates `anchore/sbom-action/download-syft` from 0.24.0 to 0.24.2 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/e22c389904149dbc22b58101806040fa8d37a610...3ad7283483fc7af8ff2b4ea19663c2d5ca935e26) --- updated-dependencies: - dependency-name: devr-tools/codeguard dependency-version: 1.8.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Homebrew/actions/setup-homebrew dependency-version: 2026.08.31.1 dependency-type: direct:production dependency-group: github-actions - dependency-name: anchore/sbom-action/download-syft dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/homebrew-validation.yml | 2 +- .github/workflows/release.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2de907f..db462da 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -85,7 +85,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 # make codeguard-ci: CI intentionally runs the stable Marketplace action instead of the in-repo binary. - - uses: devr-tools/codeguard@8d9ea157e0de725dfa74ee954be9f4ef6157d9f1 + - uses: devr-tools/codeguard@5d11767a99393c1d6f1959b0ab8ec293761252a5 with: config: .codeguard/codeguard.yaml diff --git a/.github/workflows/homebrew-validation.yml b/.github/workflows/homebrew-validation.yml index c3bac26..845ad24 100644 --- a/.github/workflows/homebrew-validation.yml +++ b/.github/workflows/homebrew-validation.yml @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Set up Homebrew - uses: Homebrew/actions/setup-homebrew@8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4 # main + uses: Homebrew/actions/setup-homebrew@3cdb78d0f62ad29dd32de765782654f4eedea607 # main - name: Clone Homebrew tap shell: bash diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6ff4d43..a3218cc 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -185,7 +185,7 @@ jobs: cosign-release: v2.6.3 - name: Install syft (SBOM generation) - uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0 + uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 - name: Log in to GHCR uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4