From 94384c08fd76fa580c4342fe0d3d3638956e9e03 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 1 May 2026 05:36:24 +0000 Subject: [PATCH] Bump the github-actions group with 4 updates Bumps the github-actions group with 4 updates: [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action), [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata), [ad-m/github-push-action](https://github.com/ad-m/github-push-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `aquasecurity/trivy-action` from 0.35.0 to 0.36.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.35.0...v0.36.0) Updates `dependabot/fetch-metadata` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/ffa630c65fa7e0ecfa0625b5ceda64399aea1b36...25dd0e34f4fe68f24cc83900b1fe3fe149efef98) Updates `ad-m/github-push-action` from 1.0.0 to 1.1.0 - [Release notes](https://github.com/ad-m/github-push-action/releases) - [Commits](https://github.com/ad-m/github-push-action/compare/v1.0.0...v1.1.0) Updates `softprops/action-gh-release` from 2 to 3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v2...v3) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dependabot/fetch-metadata dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: ad-m/github-push-action dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-test.yaml | 4 ++-- .github/workflows/dependabot-reviewer.yaml | 2 +- .github/workflows/helm-docs.yaml | 2 +- .github/workflows/release.yaml | 4 ++-- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml index 783ca61..b2cdc6f 100644 --- a/.github/workflows/build-test.yaml +++ b/.github/workflows/build-test.yaml @@ -45,7 +45,7 @@ jobs: uses: actions/checkout@v6 - name: Run Trivy vulnerability scanner in repo mode - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 continue-on-error: true with: scan-type: "fs" @@ -154,7 +154,7 @@ jobs: type=provenance,mode=max - name: Run Trivy vulnerability scanner - uses: aquasecurity/trivy-action@0.35.0 + uses: aquasecurity/trivy-action@v0.36.0 with: input: ./.oci-image format: "table" diff --git a/.github/workflows/dependabot-reviewer.yaml b/.github/workflows/dependabot-reviewer.yaml index a9c3f99..0c32c85 100644 --- a/.github/workflows/dependabot-reviewer.yaml +++ b/.github/workflows/dependabot-reviewer.yaml @@ -15,7 +15,7 @@ jobs: steps: - name: Dependabot metadata id: metadata - uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # v3.0.0 + uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0 with: github-token: "${{ secrets.GITHUB_TOKEN }}" - name: Approve PR diff --git a/.github/workflows/helm-docs.yaml b/.github/workflows/helm-docs.yaml index 82597e3..c87b4ee 100644 --- a/.github/workflows/helm-docs.yaml +++ b/.github/workflows/helm-docs.yaml @@ -62,7 +62,7 @@ jobs: git commit -m "[HELM] Update helm docs" - name: Push Changes if: steps.filter-readme.outputs.readme == 'true' - uses: ad-m/github-push-action@v1.0.0 + uses: ad-m/github-push-action@v1.1.0 with: github_token: ${{ secrets.GITHUB_TOKEN }} branch: ${{ github.head_ref }} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 0bfb405..4cde807 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -106,7 +106,7 @@ jobs: - name: Push changes if: steps.filter.outputs.versions == 'true' - uses: ad-m/github-push-action@v1.0.0 + uses: ad-m/github-push-action@v1.1.0 with: github_token: ${{ secrets.GITHUB_TOKEN }} branch: ${{ github.ref_name }} @@ -265,7 +265,7 @@ jobs: - release-name steps: - name: Create Release / Change Logs - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: draft: ${{ !startsWith(github.ref, 'refs/tags/') }} prerelease: ${{ contains('-rc', github.ref_name) || !startsWith(github.ref, 'refs/tags/') }}