From 4d4f8f45caeb16de13fda58601abc712ec016844 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 7 May 2025 10:07:02 -0700 Subject: [PATCH] Bump the github-actions group with 2 updates Closes https://github.com/dart-lang/sdk/pull/60656 GitOrigin-RevId: 04ab2a07e05e9ee3400161f4c0d34005726cff41 Change-Id: Icd5a2ed228d4d8cc12bb88b11ab68298f0934267 Reviewed-on: https://dart-review.googlesource.com/c/sdk/+/425687 Reviewed-by: Alexander Thomas Commit-Queue: Alexander Thomas --- .github/workflows/scorecards-analysis.yml | 2 +- .github/workflows/third-party-deps-scan.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index a82d24cda9d..fe0355f2be6 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -52,6 +52,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@1b549b9259bda1cb5ddde3b41741a82a2d15a841 + uses: github/codeql-action/upload-sarif@28deaeda66b76a05916b6923827895f2b14ab387 with: sarif_file: results.sarif diff --git a/.github/workflows/third-party-deps-scan.yml b/.github/workflows/third-party-deps-scan.yml index 9a53d0006ce..30f3e136e2a 100644 --- a/.github/workflows/third-party-deps-scan.yml +++ b/.github/workflows/third-party-deps-scan.yml @@ -26,7 +26,7 @@ jobs: with: persist-credentials: false - name: "setup python" - uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 with: python-version: '3.7.7' # install the python version needed - name: "extract deps, find commit hash, pass to osv-scanner"