From 467a7fd89798fd8b247f490a0af5431d465b58cd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Nov 2025 09:58:34 +0200 Subject: [PATCH] build(deps): bump the actions group with 2 updates (#779) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps the actions group with 2 updates: [actions/checkout](https://github.com/actions/checkout) and [anchore/sbom-action](https://github.com/anchore/sbom-action). Updates `actions/checkout` from 5.0.0 to 5.0.1
Release notes

Sourced from actions/checkout's releases.

v5.0.1

What's Changed

Full Changelog: https://github.com/actions/checkout/compare/v5...v5.0.1

Commits

Updates `anchore/sbom-action` from 0.20.9 to 0.20.10
Release notes

Sourced from anchore/sbom-action's releases.

v0.20.10

Changes in v0.20.10

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/cancel-pulumi-lock.yml | 2 +- .github/workflows/ci.yml | 4 ++-- .github/workflows/claude.yml | 2 +- .github/workflows/deploy-production.yml | 2 +- .github/workflows/deploy-staging.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/cancel-pulumi-lock.yml b/.github/workflows/cancel-pulumi-lock.yml index f68635d..4f5753e 100644 --- a/.github/workflows/cancel-pulumi-lock.yml +++ b/.github/workflows/cancel-pulumi-lock.yml @@ -24,7 +24,7 @@ jobs: environment: ${{ inputs.environment }} steps: - name: Checkout code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd - name: Setup Pulumi uses: pulumi/actions@8582a9e8cc630786854029b4e09281acd6794b58 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index b566087..fc733be 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd - name: Set up Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 @@ -48,7 +48,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd - name: Set up Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index eeac0f1..e00af77 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -26,7 +26,7 @@ jobs: actions: read steps: - name: Checkout repository - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd with: fetch-depth: 1 diff --git a/.github/workflows/deploy-production.yml b/.github/workflows/deploy-production.yml index 1b68af8..1be796c 100644 --- a/.github/workflows/deploy-production.yml +++ b/.github/workflows/deploy-production.yml @@ -23,7 +23,7 @@ jobs: cancel-in-progress: false steps: - name: Checkout code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd - name: Setup Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml index 927d2d8..309ce09 100644 --- a/.github/workflows/deploy-staging.yml +++ b/.github/workflows/deploy-staging.yml @@ -22,7 +22,7 @@ jobs: packages: write steps: - name: Checkout repository - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd - name: Set up Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 @@ -70,7 +70,7 @@ jobs: cancel-in-progress: false steps: - name: Checkout code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd - name: Setup Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fca9ec2..0ec1cce 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd with: fetch-depth: 0 @@ -30,7 +30,7 @@ jobs: cosign-release: "v2.6.1" - name: Install Syft - uses: anchore/sbom-action/download-syft@v0.20.9 + uses: anchore/sbom-action/download-syft@v0.20.10 - name: Run GoReleaser uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a @@ -47,7 +47,7 @@ jobs: needs: goreleaser steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd - name: Set up Go uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00