Bumps the all-actions group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action), [advanced-security/filter-sarif](https://github.com/advanced-security/filter-sarif) and [codecov/codecov-action](https://github.com/codecov/codecov-action).
Updates `github/codeql-action` from 4.32.0 to 4.35.2
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/
b20883b0cd1f46c72ae0ba6d1090936928f9fa30...
95e58e9a2cdfd71adc6e0353d5c52f41a045d225)
Updates `advanced-security/filter-sarif` from 1.0.1 to 1.1
- [Release notes](https://github.com/advanced-security/filter-sarif/releases)
- [Commits](https://github.com/advanced-security/filter-sarif/compare/
f3b8118a9349d88f7b1c0c488476411145b6270d...
2da736ff05ef065cb2894ac6892e47b5eac2c3c0)
Updates `codecov/codecov-action` from 5.5.2 to 6.0.0
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/
671740ac38dd9b0130fbe1cec585b89eea48d3de...
57e3a136b779b570ffcdbf80b3bdc90e7fab3de2)
---
updated-dependencies:
- dependency-name: github/codeql-action
dependency-version: 4.35.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all-actions
- dependency-name: advanced-security/filter-sarif
dependency-version: '1.1'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all-actions
- dependency-name: codecov/codecov-action
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all-actions
...
Signed-off-by: dependabot[bot] <support@github.com>
Link: https://github.com/kmod-project/kmod/pull/435
Signed-off-by: Lucas De Marchi <demarchi@kernel.org>
uses: ./.github/actions/setup-os
- name: Initialize CodeQL
- uses: github/codeql-action/init@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
+ uses: github/codeql-action/init@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
with:
languages: cpp
queries: +security-and-quality
meson compile -C builddir/
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
+ uses: github/codeql-action/analyze@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
with:
category: "/language:cpp"
upload: false
output: sarif-results
- name: Filter out meson-internal test files
- uses: advanced-security/filter-sarif@f3b8118a9349d88f7b1c0c488476411145b6270d # v1.0.1
+ uses: advanced-security/filter-sarif@2da736ff05ef065cb2894ac6892e47b5eac2c3c0 # v1.1
with:
patterns: |
-builddir/meson-private/**/testfile.c
output: sarif-results/cpp.sarif
- name: Upload CodeQL results to code scanning
- uses: github/codeql-action/upload-sarif@b20883b0cd1f46c72ae0ba6d1090936928f9fa30 # v4.32.0
+ uses: github/codeql-action/upload-sarif@95e58e9a2cdfd71adc6e0353d5c52f41a045d225 # v4.35.2
with:
sarif_file: sarif-results/cpp.sarif
category: "/language:cpp"
ninja -C builddir/ coverage-xml
- name: Upload Coverage
- uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
+ uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
with:
token: ${{ secrets.CODECOV_TOKEN }}
file: builddir/meson-logs/coverage.xml