From 0419c3344f4ecd7358931ead92ba40674bd61896 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 22 Jul 2026 11:59:16 +0000 Subject: [PATCH] Bump the github-actions-updates group across 1 directory with 2 updates Bumps the github-actions-updates group with 2 updates in the / directory: [actions/checkout](https://github.com/actions/checkout) and [lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml](https://github.com/lfit/releng-reusable-workflows). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml` from 0.7.4 to 0.9.0 - [Release notes](https://github.com/lfit/releng-reusable-workflows/releases) - [Commits](https://github.com/lfit/releng-reusable-workflows/compare/5fa62e396473e823e2bb0f45b744e94c4f842faa...eb97ae44b0af065a905ddd74b7ac7416796c8554) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-updates - dependency-name: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml dependency-version: 0.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-updates ... Signed-off-by: dependabot[bot] --- .github/workflows/gerrit-clm.yaml | 2 +- .github/workflows/open-ssf-scorecard.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/gerrit-clm.yaml b/.github/workflows/gerrit-clm.yaml index ecdb196d..55ad94a9 100644 --- a/.github/workflows/gerrit-clm.yaml +++ b/.github/workflows/gerrit-clm.yaml @@ -153,7 +153,7 @@ jobs: # yamllint disable-line rule:line-length if: github.event_name == 'schedule' || github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && inputs.GERRIT_DISABLED == true) # yamllint disable-line rule:line-length - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Gerrit-aware checkout for workflow_dispatch with Gerrit context - name: 'Checkout Gerrit change' diff --git a/.github/workflows/open-ssf-scorecard.yaml b/.github/workflows/open-ssf-scorecard.yaml index 4311e6fc..e7039a15 100644 --- a/.github/workflows/open-ssf-scorecard.yaml +++ b/.github/workflows/open-ssf-scorecard.yaml @@ -39,7 +39,7 @@ jobs: openssf-scorecard: name: "OpenSSF Scorecard" # yamllint disable-line rule:line-length - uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@5fa62e396473e823e2bb0f45b744e94c4f842faa # v0.7.4 + uses: lfit/releng-reusable-workflows/.github/workflows/reuse-openssf-scorecard.yaml@eb97ae44b0af065a905ddd74b7ac7416796c8554 # v0.9.0 permissions: # Needed to upload the results to code-scanning dashboard. security-events: write