From 2f414f3a348ba462c3df3e9153b7235702a9fb2c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 13 Sep 2026 05:41:29 +0000 Subject: [PATCH] chore(deps): bump the github-actions group with 14 updates Bumps the github-actions group with 14 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `4` | `6` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `7` | | [actions/setup-java](https://github.com/actions/setup-java) | `4` | `6` | | [android-actions/setup-android](https://github.com/android-actions/setup-android) | `3` | `4` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2` | `4` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.7` | `4.38.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.7` | `4.38.0` | | [cachix/cachix-action](https://github.com/cachix/cachix-action) | `f495f3ffa2f3810a92e5cc0abc2c5d6a2a07ec82` | `38b082610b782e7e93e209c35fd730d399dee866` | | [DeterminateSystems/determinate-nix-action](https://github.com/determinatesystems/determinate-nix-action) | `3.21.9` | `3.22.3` | | [DeterminateSystems/update-flake-lock](https://github.com/determinatesystems/update-flake-lock) | `6eeac1e86e13a9256682f930c4c7568acc43f047` | `da03c0f078bc4b2c37ee4f7e072d34bf8f188bb3` | | [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain) | `1.17.0` | `2.0.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.7` | `4.38.0` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `pnpm/action-setup` from 4 to 6 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v4...v6) Updates `actions/setup-node` from 4 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v7) Updates `actions/setup-java` from 4 to 6 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/v4...v6) Updates `android-actions/setup-android` from 3 to 4 - [Release notes](https://github.com/android-actions/setup-android/releases) - [Commits](https://github.com/android-actions/setup-android/compare/v3...v4) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/attest-build-provenance` from 2 to 4 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Commits](https://github.com/actions/attest-build-provenance/compare/v2...v4) Updates `github/codeql-action/init` from 4.37.7 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...b96794f015dfd88f77b49b1c93e0fa7110f94c63) Updates `github/codeql-action/analyze` from 4.37.7 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...b96794f015dfd88f77b49b1c93e0fa7110f94c63) Updates `cachix/cachix-action` from f495f3ffa2f3810a92e5cc0abc2c5d6a2a07ec82 to 38b082610b782e7e93e209c35fd730d399dee866 - [Release notes](https://github.com/cachix/cachix-action/releases) - [Changelog](https://github.com/cachix/cachix-action/blob/master/RELEASE.md) - [Commits](https://github.com/cachix/cachix-action/compare/f495f3ffa2f3810a92e5cc0abc2c5d6a2a07ec82...38b082610b782e7e93e209c35fd730d399dee866) Updates `DeterminateSystems/determinate-nix-action` from 3.21.9 to 3.22.3 - [Release notes](https://github.com/determinatesystems/determinate-nix-action/releases) - [Commits](https://github.com/determinatesystems/determinate-nix-action/compare/61cbfe2efc2d4e7a8a6d56967c3c1058e846c858...021c8a1bd3570eb21f5c20a054812b0c4d9ca614) Updates `DeterminateSystems/update-flake-lock` from 6eeac1e86e13a9256682f930c4c7568acc43f047 to da03c0f078bc4b2c37ee4f7e072d34bf8f188bb3 - [Release notes](https://github.com/determinatesystems/update-flake-lock/releases) - [Commits](https://github.com/determinatesystems/update-flake-lock/compare/6eeac1e86e13a9256682f930c4c7568acc43f047...da03c0f078bc4b2c37ee4f7e072d34bf8f188bb3) Updates `actions-rust-lang/setup-rust-toolchain` from 1.17.0 to 2.0.0 - [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases) - [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions-rust-lang/setup-rust-toolchain/compare/166cdcfd11aee3cb47222f9ddb555ce30ddb9659...ecabd13d1c56bd1345c230e542e9144811ad706f) Updates `github/codeql-action/upload-sarif` from 4.37.7 to 4.38.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd...b96794f015dfd88f77b49b1c93e0fa7110f94c63) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: pnpm/action-setup dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: android-actions/setup-android dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: cachix/cachix-action dependency-version: 38b082610b782e7e93e209c35fd730d399dee866 dependency-type: direct:production dependency-group: github-actions - dependency-name: DeterminateSystems/determinate-nix-action dependency-version: 3.22.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: DeterminateSystems/update-flake-lock dependency-version: da03c0f078bc4b2c37ee4f7e072d34bf8f188bb3 dependency-type: direct:production dependency-group: github-actions - dependency-name: actions-rust-lang/setup-rust-toolchain dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/android-debug.yml | 12 +++++------ .github/workflows/android-e2e.yml | 2 +- .github/workflows/android-stable-release.yml | 22 ++++++++++---------- .github/workflows/codeql.yml | 4 ++-- .github/workflows/nightly.yml | 2 +- .github/workflows/nix-build.yml | 2 +- .github/workflows/nix-update-inputs.yml | 4 ++-- .github/workflows/pull-request.yml | 8 +++---- .github/workflows/release.yml | 2 +- .github/workflows/scorecard.yml | 2 +- 10 files changed, 30 insertions(+), 30 deletions(-) diff --git a/.github/workflows/android-debug.yml b/.github/workflows/android-debug.yml index c5f8911..f348f2b 100644 --- a/.github/workflows/android-debug.yml +++ b/.github/workflows/android-debug.yml @@ -29,7 +29,7 @@ jobs: CARGO_PROFILE_DEV_STRIP: symbols steps: - name: Check out source - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 1 @@ -46,25 +46,25 @@ jobs: git clone --depth 1 https://github.com/readest/tauri-plugin-webview-upgrade.git apps/readest-app/src-tauri/plugins/tauri-plugin-webview-upgrade - name: Set up pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 11.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: node-version: 22 cache: pnpm - name: Set up Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v6 with: distribution: temurin java-version: '17' cache: gradle - name: Set up Android SDK - uses: android-actions/setup-android@v3 + uses: android-actions/setup-android@v4 - name: Install Android SDK packages run: sdkmanager "platform-tools" "platforms;android-35" "build-tools;35.0.0" @@ -297,7 +297,7 @@ jobs: echo "Verified arm64-v8a-only APK: $apk_path" - name: Upload Android arm64-v8a debug APK - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: readinfinity-android-arm64-v8a-debug-${{ github.sha }} path: ${{ steps.apk.outputs.path }} diff --git a/.github/workflows/android-e2e.yml b/.github/workflows/android-e2e.yml index ed4d6bd..213562f 100644 --- a/.github/workflows/android-e2e.yml +++ b/.github/workflows/android-e2e.yml @@ -46,7 +46,7 @@ jobs: cache: pnpm - name: setup Java - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 + uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: distribution: 'zulu' java-version: '17' diff --git a/.github/workflows/android-stable-release.yml b/.github/workflows/android-stable-release.yml index c653826..231a2d5 100644 --- a/.github/workflows/android-stable-release.yml +++ b/.github/workflows/android-stable-release.yml @@ -31,7 +31,7 @@ jobs: timeout-minutes: 120 steps: - name: Check out source - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 1 @@ -48,25 +48,25 @@ jobs: git clone --depth 1 https://github.com/readest/tauri-plugin-webview-upgrade.git apps/readest-app/src-tauri/plugins/tauri-plugin-webview-upgrade - name: Set up pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@v6 with: version: 11.1.1 - name: Set up Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v7 with: node-version: 22 cache: pnpm - name: Set up Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v6 with: distribution: temurin java-version: '17' cache: gradle - name: Set up Android SDK - uses: android-actions/setup-android@v3 + uses: android-actions/setup-android@v4 - name: Install Android SDK packages run: sdkmanager "platform-tools" "platforms;android-35" "build-tools;35.0.0" @@ -398,7 +398,7 @@ jobs: echo "version=$version" >> "$GITHUB_OUTPUT" - name: Upload all ABI build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: readinfinity-android-all-abi-release-${{ github.sha }} path: | @@ -462,22 +462,22 @@ jobs: gh release upload "$RELEASE_TAG" latest.json release-notes.json --clobber - name: Attest arm64-v8a APK - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-path: apps/readest-app/${{ steps.apk.outputs.arm64_asset }} - name: Attest armeabi-v7a APK - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-path: apps/readest-app/${{ steps.apk.outputs.armv7_asset }} - name: Attest x86 APK - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-path: apps/readest-app/${{ steps.apk.outputs.x86_asset }} - name: Attest x86_64 APK - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-path: apps/readest-app/${{ steps.apk.outputs.x86_64_asset }} @@ -506,7 +506,7 @@ jobs: cat "apps/readest-app/${{ steps.apk.outputs.x86_64_asset }}.sha256" - name: Upload all-ABI release metadata - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: readinfinity-all-abi-release-metadata-${{ github.sha }} path: | diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e096469..5ad9ac3 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -71,7 +71,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4 + uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -100,6 +100,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4 + uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 6004fb8..4d3bfad 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -104,7 +104,7 @@ jobs: - name: setup Java (for Android build only) if: matrix.config.release == 'android' - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 + uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: distribution: 'zulu' java-version: '17' diff --git a/.github/workflows/nix-build.yml b/.github/workflows/nix-build.yml index da2f67a..d2e675e 100644 --- a/.github/workflows/nix-build.yml +++ b/.github/workflows/nix-build.yml @@ -16,7 +16,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: cachix/install-nix-action@13d8dd58da0234aa297dedd986986ccb8e7f3e24 - - uses: cachix/cachix-action@f495f3ffa2f3810a92e5cc0abc2c5d6a2a07ec82 + - uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 with: name: readest authToken: '${{ secrets.CACHIX_AUTH_TOKEN }}' diff --git a/.github/workflows/nix-update-inputs.yml b/.github/workflows/nix-update-inputs.yml index 8640ac3..9f85815 100644 --- a/.github/workflows/nix-update-inputs.yml +++ b/.github/workflows/nix-update-inputs.yml @@ -15,8 +15,8 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - - uses: DeterminateSystems/determinate-nix-action@61cbfe2efc2d4e7a8a6d56967c3c1058e846c858 - - uses: DeterminateSystems/update-flake-lock@6eeac1e86e13a9256682f930c4c7568acc43f047 + - uses: DeterminateSystems/determinate-nix-action@021c8a1bd3570eb21f5c20a054812b0c4d9ca614 + - uses: DeterminateSystems/update-flake-lock@da03c0f078bc4b2c37ee4f7e072d34bf8f188bb3 with: pr-title: "chore(nix): update flake inputs" pr-labels: | diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index e5ff024..a829718 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -24,7 +24,7 @@ jobs: # skipPush is a cachix-action input, not an install-nix-action one. The # cache is public, so pulling needs no token at all; omitting authToken # keeps the push token out of PR-triggered builds entirely. - - uses: cachix/cachix-action@f495f3ffa2f3810a92e5cc0abc2c5d6a2a07ec82 + - uses: cachix/cachix-action@38b082610b782e7e93e209c35fd730d399dee866 with: name: readest skipPush: true @@ -61,7 +61,7 @@ jobs: uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11 - name: Install minimal stable with clippy and rustfmt if: steps.changes.outputs.tauri == 'true' - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1 + uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0 with: toolchain: stable override: true @@ -120,7 +120,7 @@ jobs: uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11 - name: Install minimal stable with clippy and rustfmt if: steps.changes.outputs.native == 'true' - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1 + uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0 with: toolchain: stable override: true @@ -407,7 +407,7 @@ jobs: - name: install Rust toolchain if: steps.changes.outputs.tauri == 'true' - uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1 + uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0 with: toolchain: stable # This action defaults RUSTFLAGS to -D warnings. Path-patched diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 975f4af..9fc8af2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -329,7 +329,7 @@ jobs: - name: setup Java (for Android build only) if: matrix.config.release == 'android' - uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5 + uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 with: distribution: 'zulu' java-version: '17' diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index be660e1..7ccaa68 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -73,6 +73,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + uses: github/codeql-action/upload-sarif@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4.38.0 with: sarif_file: results.sarif