[llvm] Update [Github] Update GHA Dependencies (PR #173804)
Mend Renovate via llvm-commits
llvm-commits at lists.llvm.org
Sun Dec 28 16:23:06 PST 2025
https://github.com/renovate-bot created https://github.com/llvm/llvm-project/pull/173804
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [EnricoMi/publish-unit-test-result-action](https://redirect.github.com/EnricoMi/publish-unit-test-result-action) | action | minor | `v2.21.0` -> `v2.22.0` |
| [actions/attest-build-provenance](https://redirect.github.com/actions/attest-build-provenance) | action | minor | `v3.0.0` -> `v3.1.0` |
| ghcr.io/llvm/ci-ubuntu-24.04-abi-tests | container | digest | `9138b6a` -> `933e952` |
| [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.31.6` -> `v4.31.9` |
| llvm/actions | action | digest | `5dd9550` -> `89a8cf8` |
| [tj-actions/changed-files](https://redirect.github.com/tj-actions/changed-files) | action | patch | `v47.0.0` -> `v47.0.1` |
---
> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
---
### Release Notes
<details>
<summary>EnricoMi/publish-unit-test-result-action (EnricoMi/publish-unit-test-result-action)</summary>
### [`v2.22.0`](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/releases/tag/v2.22.0)
[Compare Source](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/compare/v2.21.0...v2.22.0)
Adds the following improvements:
- Upgrade all Python dependencies to latest version [#710](https://redirect.github.com/EnricoMi/publish-unit-test-result-action/issues/710)
**Full Changelog**: <https://github.com/EnricoMi/publish-unit-test-result-action/compare/v2.21.0...v2.22.0>
</details>
<details>
<summary>actions/attest-build-provenance (actions/attest-build-provenance)</summary>
### [`v3.1.0`](https://redirect.github.com/actions/attest-build-provenance/releases/tag/v3.1.0)
[Compare Source](https://redirect.github.com/actions/attest-build-provenance/compare/v3.0.0...v3.1.0)
#### What's Changed
- Prepare v3 release by [@bdehamer](https://redirect.github.com/bdehamer) in [#697](https://redirect.github.com/actions/attest-build-provenance/pull/697)
- Bump js-yaml from 3.14.1 to 3.14.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#749](https://redirect.github.com/actions/attest-build-provenance/pull/749)
- Bump tar from 7.5.1 to 7.5.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#753](https://redirect.github.com/actions/attest-build-provenance/pull/753)
- Bump glob from 10.4.5 to 10.5.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#754](https://redirect.github.com/actions/attest-build-provenance/pull/754)
- Bump [@types/node](https://redirect.github.com/types/node) from 24.10.1 to 25.0.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#774](https://redirect.github.com/actions/attest-build-provenance/pull/774)
- Bump [@actions/attest](https://redirect.github.com/actions/attest) from 1.6.0 to 2.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#736](https://redirect.github.com/actions/attest-build-provenance/pull/736)
- Bump [@actions/attest](https://redirect.github.com/actions/attest) from 2.0.0 to 2.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#775](https://redirect.github.com/actions/attest-build-provenance/pull/775)
- Add support for creating artifact metadata storage records by [@malancas](https://redirect.github.com/malancas) in [#779](https://redirect.github.com/actions/attest-build-provenance/pull/779)
#### New Contributors
- [@malancas](https://redirect.github.com/malancas) made their first contribution in [#779](https://redirect.github.com/actions/attest-build-provenance/pull/779)
**Full Changelog**: <https://github.com/actions/attest-build-provenance/compare/v3...v3.1.0>
</details>
<details>
<summary>github/codeql-action (github/codeql-action)</summary>
### [`v4.31.9`](https://redirect.github.com/github/codeql-action/compare/v4.31.8...v4.31.9)
[Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.8...v4.31.9)
### [`v4.31.8`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.8)
[Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.7...v4.31.8)
##### CodeQL Action Changelog
See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
##### 4.31.8 - 11 Dec 2025
- Update default CodeQL bundle version to 2.23.8. [#3354](https://redirect.github.com/github/codeql-action/pull/3354)
See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.8/CHANGELOG.md) for more information.
### [`v4.31.7`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.7)
[Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.6...v4.31.7)
##### CodeQL Action Changelog
See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs.
##### 4.31.7 - 05 Dec 2025
- Update default CodeQL bundle version to 2.23.7. [#3343](https://redirect.github.com/github/codeql-action/pull/3343)
See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.31.7/CHANGELOG.md) for more information.
</details>
<details>
<summary>tj-actions/changed-files (tj-actions/changed-files)</summary>
### [`v47.0.1`](https://redirect.github.com/tj-actions/changed-files/releases/tag/v47.0.1)
[Compare Source](https://redirect.github.com/tj-actions/changed-files/compare/v47.0.0...v47.0.1)
#### What's Changed
- Upgraded to v47 by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2663](https://redirect.github.com/tj-actions/changed-files/pull/2663)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.3.1 to 24.4.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2664](https://redirect.github.com/tj-actions/changed-files/pull/2664)
- chore(deps-dev): bump ts-jest from 29.4.1 to 29.4.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2671](https://redirect.github.com/tj-actions/changed-files/pull/2671)
- chore(deps-dev): bump [@vercel/ncc](https://redirect.github.com/vercel/ncc) from 0.38.3 to 0.38.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2670](https://redirect.github.com/tj-actions/changed-files/pull/2670)
- chore(deps-dev): bump [@types/uuid](https://redirect.github.com/types/uuid) from 10.0.0 to 11.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2668](https://redirect.github.com/tj-actions/changed-files/pull/2668)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.4.0 to 24.5.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2669](https://redirect.github.com/tj-actions/changed-files/pull/2669)
- chore(deps): bump github/codeql-action from 3.30.3 to 3.30.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2675](https://redirect.github.com/tj-actions/changed-files/pull/2675)
- chore(deps-dev): bump ts-jest from 29.4.3 to 29.4.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2672](https://redirect.github.com/tj-actions/changed-files/pull/2672)
- chore(deps): bump github/codeql-action from 3.30.4 to 3.30.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2676](https://redirect.github.com/tj-actions/changed-files/pull/2676)
- chore(deps-dev): bump jest from 30.1.3 to 30.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2677](https://redirect.github.com/tj-actions/changed-files/pull/2677)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.5.2 to 24.6.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2679](https://redirect.github.com/tj-actions/changed-files/pull/2679)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.6.1 to 24.6.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2681](https://redirect.github.com/tj-actions/changed-files/pull/2681)
- chore(deps): bump github/codeql-action from 3.30.5 to 3.30.6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2680](https://redirect.github.com/tj-actions/changed-files/pull/2680)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.6.2 to 24.9.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2695](https://redirect.github.com/tj-actions/changed-files/pull/2695)
- chore(deps): bump github/codeql-action from 3.30.6 to 4.30.9 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2693](https://redirect.github.com/tj-actions/changed-files/pull/2693)
- chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2690](https://redirect.github.com/tj-actions/changed-files/pull/2690)
- chore(deps): bump github/codeql-action from 4.30.9 to 4.31.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2702](https://redirect.github.com/tj-actions/changed-files/pull/2702)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.9.1 to 24.9.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2700](https://redirect.github.com/tj-actions/changed-files/pull/2700)
- chore(deps): bump actions/upload-artifact from 4.6.2 to 5.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2698](https://redirect.github.com/tj-actions/changed-files/pull/2698)
- chore(deps): bump actions/download-artifact from 5.0.0 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2697](https://redirect.github.com/tj-actions/changed-files/pull/2697)
- chore(deps-dev): bump [@types/micromatch](https://redirect.github.com/types/micromatch) from 4.0.9 to 4.0.10 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2699](https://redirect.github.com/tj-actions/changed-files/pull/2699)
- chore(deps-dev): bump ts-jest from 29.4.4 to 29.4.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2688](https://redirect.github.com/tj-actions/changed-files/pull/2688)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.9.2 to 24.10.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2707](https://redirect.github.com/tj-actions/changed-files/pull/2707)
- chore(deps): bump [@octokit/rest](https://redirect.github.com/octokit/rest) from 22.0.0 to 22.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2705](https://redirect.github.com/tj-actions/changed-files/pull/2705)
- chore(deps-dev): bump eslint-plugin-jest from 29.0.1 to 29.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2710](https://redirect.github.com/tj-actions/changed-files/pull/2710)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.10.0 to 24.10.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2711](https://redirect.github.com/tj-actions/changed-files/pull/2711)
- chore(deps): bump github/codeql-action from 4.31.2 to 4.31.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2715](https://redirect.github.com/tj-actions/changed-files/pull/2715)
- chore(deps): bump actions/checkout from 5.0.0 to 5.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2714](https://redirect.github.com/tj-actions/changed-files/pull/2714)
- chore(deps): bump nrwl/nx-set-shas from 4.3.3 to 4.4.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2712](https://redirect.github.com/tj-actions/changed-files/pull/2712)
- chore(deps-dev): bump prettier from 3.6.2 to 3.7.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2722](https://redirect.github.com/tj-actions/changed-files/pull/2722)
- chore(deps): bump github/codeql-action from 4.31.4 to 4.31.5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2720](https://redirect.github.com/tj-actions/changed-files/pull/2720)
- chore(deps-dev): bump eslint-plugin-jest from 29.1.0 to 29.2.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2719](https://redirect.github.com/tj-actions/changed-files/pull/2719)
- chore(deps-dev): bump [@types/lodash](https://redirect.github.com/types/lodash) from 4.17.20 to 4.17.21 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2718](https://redirect.github.com/tj-actions/changed-files/pull/2718)
- chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.9 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2717](https://redirect.github.com/tj-actions/changed-files/pull/2717)
- Updated README.md by [@github-actions](https://redirect.github.com/github-actions)\[bot] in [#2723](https://redirect.github.com/tj-actions/changed-files/pull/2723)
- chore(deps): bump yaml from 2.8.1 to 2.8.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2724](https://redirect.github.com/tj-actions/changed-files/pull/2724)
- chore(deps-dev): bump [@types/node](https://redirect.github.com/types/node) from 24.10.1 to 25.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2738](https://redirect.github.com/tj-actions/changed-files/pull/2738)
- chore(deps): bump [@actions/exec](https://redirect.github.com/actions/exec) from 1.1.1 to 2.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2737](https://redirect.github.com/tj-actions/changed-files/pull/2737)
- chore(deps-dev): bump ts-jest from 29.4.5 to 29.4.6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2727](https://redirect.github.com/tj-actions/changed-files/pull/2727)
- chore(deps): bump peter-evans/create-pull-request from 7.0.9 to 8.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2735](https://redirect.github.com/tj-actions/changed-files/pull/2735)
- chore(deps): bump github/codeql-action from 4.31.5 to 4.31.7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2732](https://redirect.github.com/tj-actions/changed-files/pull/2732)
- chore(deps): bump actions/setup-node from 6.0.0 to 6.1.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2730](https://redirect.github.com/tj-actions/changed-files/pull/2730)
- chore(deps-dev): bump prettier from 3.7.1 to 3.7.4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2731](https://redirect.github.com/tj-actions/changed-files/pull/2731)
- chore(deps): bump [@actions/core](https://redirect.github.com/actions/core) from 1.11.1 to 2.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2736](https://redirect.github.com/tj-actions/changed-files/pull/2736)
- chore(deps): bump actions/checkout from 6.0.0 to 6.0.1 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2729](https://redirect.github.com/tj-actions/changed-files/pull/2729)
**Full Changelog**: <https://github.com/tj-actions/changed-files/compare/v47...v47.0.1>
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 12:59 AM, only on Monday ( * 0 * * 1 ) (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
â™» **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/llvm/llvm-project).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi41OS4wIiwidXBkYXRlZEluVmVyIjoiNDIuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
>From 7c896dfd982bbd9fd243bc06896827c6b159c8df Mon Sep 17 00:00:00 2001
From: Mend Renovate <bot at renovateapp.com>
Date: Mon, 29 Dec 2025 00:22:53 +0000
Subject: [PATCH] Update [Github] Update GHA Dependencies
---
.github/workflows/docs.yml | 2 +-
.github/workflows/gha-codeql.yml | 4 ++--
.github/workflows/hlsl-test-all.yaml | 2 +-
.github/workflows/libclang-abi-tests.yml | 4 ++--
.github/workflows/llvm-abi-tests.yml | 4 ++--
.github/workflows/new-issues.yml | 2 +-
.github/workflows/pr-code-format.yml | 2 +-
.github/workflows/pr-code-lint.yml | 2 +-
.github/workflows/scorecard.yml | 2 +-
.github/workflows/upload-release-artifact/action.yml | 2 +-
10 files changed, 13 insertions(+), 13 deletions(-)
diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml
index d994fc478009e..010f4b7d9c624 100644
--- a/.github/workflows/docs.yml
+++ b/.github/workflows/docs.yml
@@ -60,7 +60,7 @@ jobs:
fetch-depth: 2
- name: Get subprojects that have doc changes
id: docs-changed-subprojects
- uses: tj-actions/changed-files at 24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
+ uses: tj-actions/changed-files at e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
with:
skip_initial_fetch: true
base_sha: 'HEAD~1'
diff --git a/.github/workflows/gha-codeql.yml b/.github/workflows/gha-codeql.yml
index 10da1838cfeb3..7ae8b47de1e5a 100644
--- a/.github/workflows/gha-codeql.yml
+++ b/.github/workflows/gha-codeql.yml
@@ -29,9 +29,9 @@ jobs:
sparse-checkout: |
.github/
- name: Initialize CodeQL
- uses: github/codeql-action/init at fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
+ uses: github/codeql-action/init at 5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
with:
languages: actions
queries: security-extended
- name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze at fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
+ uses: github/codeql-action/analyze at 5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
diff --git a/.github/workflows/hlsl-test-all.yaml b/.github/workflows/hlsl-test-all.yaml
index c8f948f97b95a..79b1276f4218a 100644
--- a/.github/workflows/hlsl-test-all.yaml
+++ b/.github/workflows/hlsl-test-all.yaml
@@ -75,7 +75,7 @@ jobs:
ninja check-hlsl-unit
ninja ${{ inputs.TestTarget }}
- name: Publish Test Results
- uses: EnricoMi/publish-unit-test-result-action/macos at 34d7c956a59aed1bfebf31df77b8de55db9bbaaf # v2.21.0
+ uses: EnricoMi/publish-unit-test-result-action/macos at 27d65e188ec43221b20d26de30f4892fad91df2f # v2.22.0
if: always() && runner.os == 'macOS'
with:
comment_mode: off
diff --git a/.github/workflows/libclang-abi-tests.yml b/.github/workflows/libclang-abi-tests.yml
index 504c1eaa32028..3dfa70d368c42 100644
--- a/.github/workflows/libclang-abi-tests.yml
+++ b/.github/workflows/libclang-abi-tests.yml
@@ -85,7 +85,7 @@ jobs:
needs: abi-dump-setup
runs-on: ubuntu-24.04
container:
- image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:9138b6aea737d935e92ad2afdf5d49325880f9b187b5b979b135ac80cd456135" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
+ image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:933e9522ef13ad26c22b4e5a49fac968d553bf1c3d4b90e29acec9b30b7b0f9d" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
strategy:
matrix:
name:
@@ -129,7 +129,7 @@ jobs:
if: github.repository_owner == 'llvm'
runs-on: ubuntu-24.04
container:
- image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:9138b6aea737d935e92ad2afdf5d49325880f9b187b5b979b135ac80cd456135" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
+ image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:933e9522ef13ad26c22b4e5a49fac968d553bf1c3d4b90e29acec9b30b7b0f9d" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:9524b37c503f
needs:
- abi-dump-setup
- abi-dump
diff --git a/.github/workflows/llvm-abi-tests.yml b/.github/workflows/llvm-abi-tests.yml
index d29b7e01f3cc4..c99419f9a1910 100644
--- a/.github/workflows/llvm-abi-tests.yml
+++ b/.github/workflows/llvm-abi-tests.yml
@@ -73,7 +73,7 @@ jobs:
needs: abi-dump-setup
runs-on: ubuntu-24.04
container:
- image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:9138b6aea737d935e92ad2afdf5d49325880f9b187b5b979b135ac80cd456135" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b"
+ image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:933e9522ef13ad26c22b4e5a49fac968d553bf1c3d4b90e29acec9b30b7b0f9d" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b"
strategy:
matrix:
name:
@@ -133,7 +133,7 @@ jobs:
if: github.repository_owner == 'llvm'
runs-on: ubuntu-24.04
container:
- image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:9138b6aea737d935e92ad2afdf5d49325880f9b187b5b979b135ac80cd456135" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b
+ image: "ghcr.io/llvm/ci-ubuntu-24.04-abi-tests at sha256:933e9522ef13ad26c22b4e5a49fac968d553bf1c3d4b90e29acec9b30b7b0f9d" #ghcr.io/llvm/ci-ubuntu-24.04-abi-tests:bb0bd382ab2b
needs:
- abi-dump-setup
- abi-dump
diff --git a/.github/workflows/new-issues.yml b/.github/workflows/new-issues.yml
index cbcf042ac53c1..3b372a632e3c8 100644
--- a/.github/workflows/new-issues.yml
+++ b/.github/workflows/new-issues.yml
@@ -13,7 +13,7 @@ jobs:
runs-on: ubuntu-24.04
if: github.repository == 'llvm/llvm-project'
steps:
- - uses: llvm/actions/issue-labeler at 5dd955034a6742a2e21d82bf165fcb1050ae7b49 # main
+ - uses: llvm/actions/issue-labeler at 89a8cf80982d830faab019237860b344a6390c30 # main
with:
repo-token: ${{ secrets.ISSUE_SUBSCRIBER_TOKEN }}
configuration-path: .github/new-issues-labeler.yml
diff --git a/.github/workflows/pr-code-format.yml b/.github/workflows/pr-code-format.yml
index d65b196a34e6c..d4e338d778e5c 100644
--- a/.github/workflows/pr-code-format.yml
+++ b/.github/workflows/pr-code-format.yml
@@ -27,7 +27,7 @@ jobs:
- name: Get changed files
id: changed-files
- uses: tj-actions/changed-files at 24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
+ uses: tj-actions/changed-files at e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
with:
separator: ","
skip_initial_fetch: true
diff --git a/.github/workflows/pr-code-lint.yml b/.github/workflows/pr-code-lint.yml
index b314f740e59de..445a9638d2dc2 100644
--- a/.github/workflows/pr-code-lint.yml
+++ b/.github/workflows/pr-code-lint.yml
@@ -34,7 +34,7 @@ jobs:
- name: Get changed files
id: changed-files
- uses: tj-actions/changed-files at 24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0
+ uses: tj-actions/changed-files at e0021407031f5be11a464abee9a0776171c79891 # v47.0.1
with:
separator: ","
skip_initial_fetch: true
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index fc1a4ff31c88e..7317e126279ff 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -57,6 +57,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
- uses: github/codeql-action/upload-sarif at fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
+ uses: github/codeql-action/upload-sarif at 5d4e8d1aca955e8d8589aabd499c5cae939e33c7 # v4.31.9
with:
sarif_file: results.sarif
diff --git a/.github/workflows/upload-release-artifact/action.yml b/.github/workflows/upload-release-artifact/action.yml
index e8d00d0858395..7f2f485e9e02e 100644
--- a/.github/workflows/upload-release-artifact/action.yml
+++ b/.github/workflows/upload-release-artifact/action.yml
@@ -62,7 +62,7 @@ runs:
- name: Attest Build Provenance
id: provenance
- uses: actions/attest-build-provenance at 977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0
+ uses: actions/attest-build-provenance at 00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0
with:
subject-path: ${{ steps.download-artifact.outputs.download-path }}/*
More information about the llvm-commits
mailing list