From 0f5fd87fcc49a0beaae8cb3e1b4cdb10f08d48dc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 5 Nov 2026 01:56:53 +0000 Subject: [PATCH] Build(deps): bump the actions group with 2 updates Bumps the actions group with 2 updates: [hyperpolymath/smtp-notify-action](https://github.com/hyperpolymath/smtp-notify-action) and [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action). Updates `hyperpolymath/smtp-notify-action` from 0.5.0 to 0.5.1 - [Release notes](https://github.com/hyperpolymath/smtp-notify-action/releases) - [Changelog](https://github.com/hyperpolymath/smtp-notify-action/blob/main/CHANGELOG.adoc) - [Commits](https://github.com/hyperpolymath/smtp-notify-action/compare/v0.5.0...v0.5.1) Updates `SonarSource/sonarqube-scan-action` from 8.3.0 to 8.4.0 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v8.3.0...v8.4.0) --- updated-dependencies: - dependency-name: hyperpolymath/smtp-notify-action dependency-version: 0.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 31 +++++++------------------ .github/workflows/push-email-notify.yml | 2 +- .github/workflows/sonarqube.yml | 2 +- 3 files changed, 10 insertions(+), 25 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 7cc9a98..d2ca16b 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -53,7 +53,7 @@ workflows: - 'actions/upload-pages-artifact@v5.0.0' - 'haskell-actions/setup@v2.12.1' '.github/workflows/push-email-notify.yml': - - 'hyperpolymath/smtp-notify-action@v0.5.0' + - 'hyperpolymath/smtp-notify-action@v0.5.1' '.github/workflows/quality.yml': - 'actions/checkout@v7.0.1' - 'editorconfig-checker/action-editorconfig-checker@v3.0.0' @@ -74,7 +74,7 @@ workflows: - 'actions/checkout@v7.0.1' '.github/workflows/sonarqube.yml': - 'actions/checkout@v7.0.1' - - 'sonarsource/sonarqube-scan-action@v8.3.0' + - 'sonarsource/sonarqube-scan-action@v8.4.0' '.github/workflows/static-analysis-gate.yml': - 'actions/checkout@v7.0.1' - 'actions/download-artifact@v8.0.2' @@ -220,19 +220,9 @@ dependencies: uses: - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - 'hyperpolymath/cicd-suite@0da816c05ae7486671d863e07935f93981c0c2d5' - 'hyperpolymath/deed-ecosystem@main': - ref: 'main' - commit: 'sha1-44f9c9fc42901a55e0f489a40eabf4173e550d1d' - owner_id: 6759885 - repo_id: 1275649586 - 'hyperpolymath/k9-ecosystem@main': - ref: 'main' - commit: 'sha1-2155aa26a21758f2ba119f61bc7e0e1981c106fb' - owner_id: 6759885 - repo_id: 1275650185 - 'hyperpolymath/smtp-notify-action@v0.5.0': - ref: 'v0.5.0' - commit: 'sha1-c1c9fa07992a02c1fd3d67a0dc1b08cccb852aef' + 'hyperpolymath/smtp-notify-action@v0.5.1': + ref: 'v0.5.1' + commit: 'sha1-e384daf6167a7a7567642d6a62060106244d2413' owner_id: 6759885 repo_id: 1352485172 'hyperpolymath/standards@b3ce78e1a8cb24b33fde5c9da6a7c09486efda78': @@ -264,19 +254,14 @@ dependencies: commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6' owner_id: 108928776 repo_id: 512644635 - 'oven-sh/setup-bun@v2.2.0': - ref: 'v2.2.0' - commit: 'sha1-0c5077e51419868618aeaa5fe8019c62421857d6' - owner_id: 108928776 - repo_id: 512644635 'softprops/action-gh-release@v3.0.3': ref: 'v3.0.3' commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' owner_id: 2242 repo_id: 204253808 - 'sonarsource/sonarqube-scan-action@v8.3.0': - ref: 'v8.3.0' - commit: 'sha1-d209202bc7d53ff1cc128f7f907dac145c9d6ae9' + 'sonarsource/sonarqube-scan-action@v8.4.0': + ref: 'v8.4.0' + commit: 'sha1-4d1dc0c91ee400dcf8a6dddf2f705ac36542e304' owner_id: 545988 repo_id: 366408409 'swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6': diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index e7fc164..fff3546 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -39,7 +39,7 @@ jobs: timeout-minutes: 5 steps: - name: Send push notification email - uses: hyperpolymath/smtp-notify-action@v0.5.0 # NOSONAR — pin authority is actions.lock (sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be) + uses: hyperpolymath/smtp-notify-action@v0.5.1 # NOSONAR — pin authority is actions.lock (sha1-22e7bdb322c430c1d0dac6b3bb307f4bb139d0be) with: server_address: ${{ secrets.SMTP_HOST }} server_port: ${{ secrets.SMTP_PORT }} diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index b2d14b0..b72b024 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -64,6 +64,6 @@ jobs: - name: SonarQube Scan if: steps.cfg.outputs.configured == 'true' - uses: SonarSource/sonarqube-scan-action@v8.3.0 + uses: SonarSource/sonarqube-scan-action@v8.4.0 env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}