From 628655da1453c9adcd6f3bc60ba39ad374fce03a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 21 Sep 2026 19:17:18 +0000 Subject: [PATCH] build(deps): bump the actions group across 1 directory with 3 updates Bumps the actions group with 3 updates in the / directory: [android-actions/setup-android](https://github.com/android-actions/setup-android), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action). Updates `android-actions/setup-android` from 4.0.1 to 4.0.4 - [Release notes](https://github.com/android-actions/setup-android/releases) - [Commits](https://github.com/android-actions/setup-android/compare/40fd30fb8d7440372e1316f5d1809ec01dcd3699...be39fa834029ff78f1a44aa3bb0819b8fc2bd8fd) Updates `github/codeql-action/init` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) Updates `github/codeql-action/analyze` from 4.38.0 to 4.38.1 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/b96794f015dfd88f77b49b1c93e0fa7110f94c63...1c5b675653bb5c22dbe9b12b556ec555138e09fd) --- updated-dependencies: - dependency-name: android-actions/setup-android dependency-version: 4.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.38.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 4 ++-- .github/workflows/security.yml | 10 +++++----- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4653878..8f6eafc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -38,7 +38,7 @@ jobs: with: python-version-file: .python-version - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 - - uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 + - uses: android-actions/setup-android@be39fa834029ff78f1a44aa3bb0819b8fc2bd8fd # v4.0.4 with: packages: platform-tools platforms;android-37.0 build-tools;37.0.0 - name: Resolve automatic version @@ -145,7 +145,7 @@ jobs: - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version-file: .python-version - - uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 + - uses: android-actions/setup-android@be39fa834029ff78f1a44aa3bb0819b8fc2bd8fd # v4.0.4 with: packages: platform-tools build-tools;37.0.0 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 68c7a24..a011d9d 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -61,11 +61,11 @@ jobs: with: fetch-depth: 0 persist-credentials: false - - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 + - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4 with: languages: ${{ matrix.language }} build-mode: none - - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 + - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4 with: category: .github/workflows/ci.yml:codeql/language:${{ matrix.language }} @@ -89,7 +89,7 @@ jobs: with: python-version-file: .python-version - uses: gradle/actions/wrapper-validation@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 - - uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 + - uses: android-actions/setup-android@be39fa834029ff78f1a44aa3bb0819b8fc2bd8fd # v4.0.4 with: packages: platform-tools platforms;android-37.0 build-tools;37.0.0 # Same temporary Kotlin 2.4.20 workaround as Contracts. Remove when the @@ -103,7 +103,7 @@ jobs: bundle="$RUNNER_TEMP/codeql-bundle-java-linux64.tar.zst" curl --fail --silent --show-error --location "$CODEQL_BUNDLE_URL" --output "$bundle" printf '%s %s\n' "$CODEQL_BUNDLE_SHA256" "$bundle" | sha256sum --check --strict - - uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 + - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4 with: languages: java-kotlin build-mode: manual @@ -119,6 +119,6 @@ jobs: ./gradlew --no-daemon --console=plain --no-build-cache -PreleaseVersionName="$VERSION_NAME" -PreleaseVersionCode="$VERSION_CODE" clean :app:assembleDebug :shared:desktopJar - - uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v4 + - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4 with: category: .github/workflows/ci.yml:codeql-kotlin