From c3f9c600913f05ace537a59316f7ddc56dbe6d91 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 24 Nov 2025 04:22:25 +0000 Subject: [PATCH] chore(deps): bump the gha group with 3 updates Bumps the gha group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [navikt/sf-platform](https://github.com/navikt/sf-platform) and [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv). Updates `actions/checkout` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/08c6903cd8c0fde910a37f88322edcfb5dd907a8...1af3b93b6815bc44a9784bd300feb67ff0d1eeb3) Updates `navikt/sf-platform` from 8e4d95d394a4c0824ca56036b86a438894a84b49 to b79b17356be49158fff788019a38a8cf0e60d964 - [Release notes](https://github.com/navikt/sf-platform/releases) - [Commits](https://github.com/navikt/sf-platform/compare/8e4d95d394a4c0824ca56036b86a438894a84b49...b79b17356be49158fff788019a38a8cf0e60d964) Updates `astral-sh/setup-uv` from 7.1.2 to 7.1.4 - [Release notes](https://github.com/astral-sh/setup-uv/releases) - [Commits](https://github.com/astral-sh/setup-uv/compare/85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41...1e862dfacbd1d6d858c55d9b792c756523627244) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gha - dependency-name: navikt/sf-platform dependency-version: b79b17356be49158fff788019a38a8cf0e60d964 dependency-type: direct:production dependency-group: gha - dependency-name: astral-sh/setup-uv dependency-version: 7.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gha ... Signed-off-by: dependabot[bot] --- .github/workflows/buildAndPublish.yml | 10 +++++----- .github/workflows/ciStaticCodeValidation.yml | 4 ++-- .github/workflows/createRelease.yml | 4 ++-- .github/workflows/quickbuildOnPush.yml | 8 ++++---- .github/workflows/releaseToDev.yml | 2 +- .github/workflows/releaseToProd.yml | 2 +- .github/workflows/validatePackageChangesOnPr.yml | 10 +++++----- .github/workflows/zizmor.yml | 4 ++-- 8 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/buildAndPublish.yml b/.github/workflows/buildAndPublish.yml index a65bb19..7b06f1c 100644 --- a/.github/workflows/buildAndPublish.yml +++ b/.github/workflows/buildAndPublish.yml @@ -37,13 +37,13 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: fetch-depth: 0 # Full history needed for change detection persist-credentials: false # Check for changes in the src directory excluding .md files - - uses: navikt/sf-platform/.github/actions/checkForPackageChanges@8e4d95d394a4c0824ca56036b86a438894a84b49 + - uses: navikt/sf-platform/.github/actions/checkForPackageChanges@b79b17356be49158fff788019a38a8cf0e60d964 id: checkChanges buildAndPublish: @@ -68,7 +68,7 @@ jobs: NODE_AUTH_TOKEN: ${{ secrets.GITHUB_TOKEN }} steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: fetch-depth: 0 # Full history for release definition and changelog persist-credentials: true @@ -155,14 +155,14 @@ jobs: - name: Push logged metrics if: always() # Always push metrics regardless of build success - uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@b79b17356be49158fff788019a38a8cf0e60d964 with: metricsKey: ${{ secrets.METRICS_KEYS }} # Upload build artifacts and logs if present - name: Upload Artifacts and Logs if: steps.build.outputs.artifactsFound == 'true' - uses: navikt/sf-platform/.github/actions/uploadWorkflowArtifactsAndLogs@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/uploadWorkflowArtifactsAndLogs@b79b17356be49158fff788019a38a8cf0e60d964 with: artifactName: build-artifacts uploadArtifacts: true diff --git a/.github/workflows/ciStaticCodeValidation.yml b/.github/workflows/ciStaticCodeValidation.yml index 57cc9c9..59f17b6 100644 --- a/.github/workflows/ciStaticCodeValidation.yml +++ b/.github/workflows/ciStaticCodeValidation.yml @@ -58,7 +58,7 @@ jobs: version: ${{ vars.SF_CLI_VERSION }} - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: ref: ${{ inputs.gitRef }} fetch-depth: "0" @@ -90,7 +90,7 @@ jobs: - name: Prettier Check if: ${{ !cancelled() && steps.paths.outcome == 'success' }} - uses: navikt/sf-platform/.github/actions/prettierCheck@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/prettierCheck@b79b17356be49158fff788019a38a8cf0e60d964 with: pathToValidate: ${{ steps.paths.outputs.prettierPathsToValidate }} diff --git a/.github/workflows/createRelease.yml b/.github/workflows/createRelease.yml index 02f33f7..43ce920 100644 --- a/.github/workflows/createRelease.yml +++ b/.github/workflows/createRelease.yml @@ -53,7 +53,7 @@ jobs: registry-url: https://npm.pkg.github.com - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: fetch-depth: 0 # Full history for release definition and changelog persist-credentials: true @@ -272,6 +272,6 @@ jobs: echo "::endgroup::" - name: Push logged metrics - uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@b79b17356be49158fff788019a38a8cf0e60d964 with: metricsKey: ${{ secrets.METRICS_KEYS }} diff --git a/.github/workflows/quickbuildOnPush.yml b/.github/workflows/quickbuildOnPush.yml index 25ca596..3452060 100644 --- a/.github/workflows/quickbuildOnPush.yml +++ b/.github/workflows/quickbuildOnPush.yml @@ -24,11 +24,11 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: fetch-depth: 0 persist-credentials: false - - uses: navikt/sf-platform/.github/actions/checkForPackageChanges@8e4d95d394a4c0824ca56036b86a438894a84b49 + - uses: navikt/sf-platform/.github/actions/checkForPackageChanges@b79b17356be49158fff788019a38a8cf0e60d964 id: checkChanges quickBuild: @@ -42,7 +42,7 @@ jobs: packages: write steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: fetch-depth: 0 persist-credentials: true @@ -64,7 +64,7 @@ jobs: - name: Upload artifacts and logs if: always() - uses: navikt/sf-platform/.github/actions/uploadWorkflowArtifactsAndLogs@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/uploadWorkflowArtifactsAndLogs@b79b17356be49158fff788019a38a8cf0e60d964 with: artifactName: build-artifacts uploadArtifacts: true diff --git a/.github/workflows/releaseToDev.yml b/.github/workflows/releaseToDev.yml index a01974e..6200e10 100644 --- a/.github/workflows/releaseToDev.yml +++ b/.github/workflows/releaseToDev.yml @@ -73,6 +73,6 @@ jobs: auth_token: ${{ secrets.GITHUB_TOKEN }} - name: Push logged metrics - uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@b79b17356be49158fff788019a38a8cf0e60d964 with: metricsKey: ${{ secrets.METRICS_KEYS }} diff --git a/.github/workflows/releaseToProd.yml b/.github/workflows/releaseToProd.yml index 30798b2..45119d1 100644 --- a/.github/workflows/releaseToProd.yml +++ b/.github/workflows/releaseToProd.yml @@ -54,6 +54,6 @@ jobs: auth_token: ${{ secrets.GITHUB_TOKEN }} - name: Push logged metrics - uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@b79b17356be49158fff788019a38a8cf0e60d964 with: metricsKey: ${{ secrets.METRICS_KEYS }} diff --git a/.github/workflows/validatePackageChangesOnPr.yml b/.github/workflows/validatePackageChangesOnPr.yml index 6cf0627..0daa028 100644 --- a/.github/workflows/validatePackageChangesOnPr.yml +++ b/.github/workflows/validatePackageChangesOnPr.yml @@ -27,12 +27,12 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: fetch-depth: 0 persist-credentials: false - - uses: navikt/sf-platform/.github/actions/checkForPackageChanges@8e4d95d394a4c0824ca56036b86a438894a84b49 + - uses: navikt/sf-platform/.github/actions/checkForPackageChanges@b79b17356be49158fff788019a38a8cf0e60d964 id: checkChanges validateChanges: @@ -53,7 +53,7 @@ jobs: PULL_REQUEST_ID: ${{ github.event.pull_request.node_id }} steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: fetch-depth: 0 persist-credentials: false @@ -107,7 +107,7 @@ jobs: fi - name: Push logged metrics - uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/pushLoggedMetrics@b79b17356be49158fff788019a38a8cf0e60d964 with: metricsKey: ${{ secrets.METRICS_KEYS }} @@ -121,6 +121,6 @@ jobs: pull-requests: write steps: - name: Set pull request to draft - uses: navikt/sf-platform/.github/actions/setPrToDraft@8e4d95d394a4c0824ca56036b86a438894a84b49 + uses: navikt/sf-platform/.github/actions/setPrToDraft@b79b17356be49158fff788019a38a8cf0e60d964 with: pullRequestId: ${{ github.event.pull_request.node_id }} diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index e0270b7..2e085dd 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -23,12 +23,12 @@ jobs: actions: read steps: - name: Checkout repository - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 with: persist-credentials: false - name: Install the latest version of uv - uses: astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 + uses: astral-sh/setup-uv@1e862dfacbd1d6d858c55d9b792c756523627244 - name: Run zizmor run: uvx zizmor --format sarif . > results.sarif