mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git
parent: d9d626c0 | patch | commit | ignore whitespace
dependabot[bot]
22 hours ago adfdc8f1f09e83c5191a7b427744415a2beede45 
Bump the github-actions group with 3 updates

Bumps the github-actions group with 3 updates: [github/codeql-action/upload-sarif](https://github.com/github/codeql-action), [github/codeql-action/init](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).


Updates `github/codeql-action/upload-sarif` from 4.39.1 to 4.39.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...1fc58d04a4d4374f921bdac573c3811c240f9c26)

Updates `github/codeql-action/init` from 4.39.1 to 4.39.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...1fc58d04a4d4374f921bdac573c3811c240f9c26)

Updates `github/codeql-action/analyze` from 4.39.1 to 4.39.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/9b3254085494b55a0f7c4c2b3d2d52cc712ce370...1fc58d04a4d4374f921bdac573c3811c240f9c26)

---
updated-dependencies:
- dependency-name: github/codeql-action/upload-sarif
  dependency-version: 4.39.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/init
  dependency-version: 4.39.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
- dependency-name: github/codeql-action/analyze
  dependency-version: 4.39.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
3 files modified
8 ■■■■■ changed files
.github/workflows/build.yml 2 ●●●●● patch | view | raw | blame | history
.github/workflows/codeql.yml 4 ●●●●● patch | view | raw | blame | history
.github/workflows/docker-scan.yml 2 ●●●●● patch | view | raw | blame | history 
 .github/workflows/build.yml


@@ -1069,7 +1069,7 @@


          scanners: vuln


          cache: false


      - name: Upload Trivy report to GitHub Security


        uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1


        uses: github/codeql-action/upload-sarif@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2


        # upload even if a preceding step failed, but not without a report to upload


        if: ${{ always() && hashFiles('trivy-results.sarif') != '' }}


        with:




 .github/workflows/codeql.yml


@@ -99,7 +99,7 @@


          distribution: 'temurin'




      - name: Initialize CodeQL


        uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1


        uses: github/codeql-action/init@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2


        with:


          languages: ${{ matrix.language }}


          build-mode: ${{ matrix.build-mode }}


@@ -147,6 +147,6 @@


      # ---------------------------------------------------------------------




      - name: Perform CodeQL Analysis


        uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1


        uses: github/codeql-action/analyze@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2


        with:


          category: "/language:${{ matrix.language }}"




 .github/workflows/docker-scan.yml


@@ -51,7 +51,7 @@


          scanners: vuln


          cache: false


      - name: Upload report to GitHub Security


        uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1


        uses: github/codeql-action/upload-sarif@1fc58d04a4d4374f921bdac573c3811c240f9c26 # v4.39.2


        # upload even if a preceding step failed, but not without a report to upload


        if: ${{ always() && hashFiles(format('trivy-{0}.sarif', matrix.tag)) != '' }}


        with: