From cadac1d888b639a020a24548b64f9f63d00783fc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 2 Aug 2026 22:04:02 +0000 Subject: [PATCH] chore(deps): bump the github-actions group with 4 updates Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-node](https://github.com/actions/setup-node), [actions/attest](https://github.com/actions/attest) and [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action). Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v7.0.0...v7.0.1) Updates `actions/setup-node` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v6.4.0...v7.0.0) Updates `actions/attest` from 4.1.1 to 4.2.0 - [Release notes](https://github.com/actions/attest/releases) - [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest/compare/a1948c3f048ba23858d222213b7c278aabede763...f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6) Updates `slackapi/slack-github-action` from 3.0.5 to 4.0.0 - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/slackapi/slack-github-action/compare/v3.0.5...v4.0.0) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/attest dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: slackapi/slack-github-action dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/edge.yml | 4 ++-- .github/workflows/release.yml | 10 +++++----- .github/workflows/slack-lite.yml | 2 +- .github/workflows/tav-command.yml | 4 ++-- .github/workflows/tav.yml | 4 ++-- .github/workflows/test-fips.yml | 2 +- .github/workflows/test.yml | 12 ++++++------ .github/workflows/updatecli.yml | 2 +- 8 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/edge.yml b/.github/workflows/edge.yml index e065a9bfe8..a16d9eed2f 100644 --- a/.github/workflows/edge.yml +++ b/.github/workflows/edge.yml @@ -34,7 +34,7 @@ jobs: matrix: node: [ "23" ] steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 - run: .ci/scripts/test.sh -b "nightly" "${{ matrix.node }}" # This should list all the Node.js major versions listed at @@ -55,7 +55,7 @@ jobs: - "20" - "18" steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 - run: .ci/scripts/test.sh -b "rc" "${{ matrix.node }}" env: VERSION: ${{ matrix.node }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index ad6abe0a4b..8c6b104228 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,11 +20,11 @@ jobs: env: DOCKER_IMAGE_NAME: docker.elastic.co/observability/apm-agent-nodejs steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 with: fetch-depth: 0 - - uses: actions/setup-node@v6.4.0 + - uses: actions/setup-node@v7.0.0 with: # Require npm 11.5.1 or later for https://docs.npmjs.com/trusted-publishers. node-version: 'v24.8.0' @@ -46,7 +46,7 @@ jobs: - run: make -C .ci dist - name: Attest Lambda layer zip - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-path: "${{ github.workspace }}/build/aws/elastic-apm-node-lambda-layer-*.zip" @@ -77,7 +77,7 @@ jobs: AGENT_DIR=/build/dist/nodejs - name: Attest Docker image - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-name: "${{ env.DOCKER_IMAGE_NAME }}" subject-digest: ${{ steps.docker-push.outputs.digest }} @@ -111,7 +111,7 @@ jobs: AGENT_DIR=/build/dist/nodejs - name: Attest Docker image (wolfi) - uses: actions/attest@a1948c3f048ba23858d222213b7c278aabede763 # v4.1.1 + uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0 with: subject-name: "${{ env.DOCKER_IMAGE_NAME }}" subject-digest: ${{ steps.docker-push-wolfi.outputs.digest }} diff --git a/.github/workflows/slack-lite.yml b/.github/workflows/slack-lite.yml index b11234dec1..bd5588bac0 100644 --- a/.github/workflows/slack-lite.yml +++ b/.github/workflows/slack-lite.yml @@ -122,7 +122,7 @@ jobs: f.write("payload={}".format(json.dumps(payload))) - name: Post Slack message - uses: slackapi/slack-github-action@v3.0.5 + uses: slackapi/slack-github-action@v4.0.0 with: method: chat.postMessage token: ${{ secrets.SLACK_BOT_TOKEN }} diff --git a/.github/workflows/tav-command.yml b/.github/workflows/tav-command.yml index ddbb1d7216..db72eedbfd 100644 --- a/.github/workflows/tav-command.yml +++ b/.github/workflows/tav-command.yml @@ -41,7 +41,7 @@ jobs: return; } - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 with: ref: ${{ github.event.pull_request.head.sha }} @@ -141,7 +141,7 @@ jobs: module_and_node: ${{ fromJSON(needs.command-validation.outputs.permutations) }} steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 with: ref: ${{ github.event.pull_request.head.sha }} diff --git a/.github/workflows/tav.yml b/.github/workflows/tav.yml index 1d8cc454f6..008711f041 100644 --- a/.github/workflows/tav.yml +++ b/.github/workflows/tav.yml @@ -27,7 +27,7 @@ jobs: permutations: ${{ steps.transform.outputs.permutations }} steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 - id: transform name: Load matrix from tav.json @@ -70,7 +70,7 @@ jobs: # https://docs.github.com/en/actions/learn-github-actions/usage-limits-billing-and-administration module_and_node: ${{ fromJSON(needs.prepare-matrix.outputs.permutations) }} steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 - run: .ci/scripts/test.sh -b "release" -t ${{ matrix.module_and_node }} env: ELASTIC_APM_CONTEXT_MANAGER: '' diff --git a/.github/workflows/test-fips.yml b/.github/workflows/test-fips.yml index c009249b12..e50263eb19 100644 --- a/.github/workflows/test-fips.yml +++ b/.github/workflows/test-fips.yml @@ -30,7 +30,7 @@ jobs: - run: | apk update apk add nodejs npm - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 - name: Is Node.js running in FIPS mode? run: | node -e 'const isFips = require("node:crypto").getFips(); console.log("isFips:", isFips); assert(isFips)' diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 0a846c5850..eed3c467e0 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -34,8 +34,8 @@ jobs: lint: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v7.0.0 - - uses: actions/setup-node@v6.4.0 + - uses: actions/checkout@v7.0.1 + - uses: actions/setup-node@v7.0.0 with: node-version: 18 - run: npm ci @@ -160,8 +160,8 @@ jobs: - '14.17' runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@v7.0.0 - - uses: actions/setup-node@v6.4.0 + - uses: actions/checkout@v7.0.1 + - uses: actions/setup-node@v7.0.0 with: node-version: ${{ matrix.node }} - run: docker ps # show the services against which we'll be testing @@ -173,8 +173,8 @@ jobs: test-windows: runs-on: windows-latest steps: - - uses: actions/checkout@v7.0.0 - - uses: actions/setup-node@v6.4.0 + - uses: actions/checkout@v7.0.1 + - uses: actions/setup-node@v7.0.0 with: # What Node.js version to test on Windows is a balance between which # is the current LTS version (https://github.com/nodejs/release) and diff --git a/.github/workflows/updatecli.yml b/.github/workflows/updatecli.yml index 47a2f1965e..cd41770494 100644 --- a/.github/workflows/updatecli.yml +++ b/.github/workflows/updatecli.yml @@ -15,7 +15,7 @@ jobs: contents: read packages: read steps: - - uses: actions/checkout@v7.0.0 + - uses: actions/checkout@v7.0.1 - name: Get token id: get_token