From e7479731e528c2c8bac389dded3e982df10e27f1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 7 Apr 2026 22:15:15 +0000 Subject: [PATCH] Bump the actions-all-dependencies group across 1 directory with 2 updates Bumps the actions-all-dependencies group with 2 updates in the / directory: [jdx/mise-action](https://github.com/jdx/mise-action) and [zgosalvez/github-actions-ensure-sha-pinned-actions](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions). Updates `jdx/mise-action` from 3.6.1 to 4.0.1 - [Release notes](https://github.com/jdx/mise-action/releases) - [Changelog](https://github.com/jdx/mise-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/jdx/mise-action/compare/6d1e696aa24c1aa1bcc1adea0212707c71ab78a8...1648a7812b9aeae629881980618f079932869151) Updates `zgosalvez/github-actions-ensure-sha-pinned-actions` from 4.0.1 to 5.0.4 - [Release notes](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/releases) - [Commits](https://github.com/zgosalvez/github-actions-ensure-sha-pinned-actions/compare/6124774845927d14c601359ab8138699fa5b70c3...ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066) --- updated-dependencies: - dependency-name: jdx/mise-action dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all-dependencies - dependency-name: zgosalvez/github-actions-ensure-sha-pinned-actions dependency-version: 5.0.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all-dependencies ... Signed-off-by: dependabot[bot] --- .../guardrail_matching_pentester_cidr_blocks.yml | 2 +- .github/workflows/require-pinned-github-actions.yml | 2 +- .github/workflows/ruby-ci.yml | 4 ++-- .github/workflows/terraform-ci.yml | 10 +++++----- .github/workflows/update-provider-locks.yml | 2 +- 5 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/guardrail_matching_pentester_cidr_blocks.yml b/.github/workflows/guardrail_matching_pentester_cidr_blocks.yml index 5eab8c4a7..978b432b6 100644 --- a/.github/workflows/guardrail_matching_pentester_cidr_blocks.yml +++ b/.github/workflows/guardrail_matching_pentester_cidr_blocks.yml @@ -23,7 +23,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install `hcl2json` with mise - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: install_args: hcl2json diff --git a/.github/workflows/require-pinned-github-actions.yml b/.github/workflows/require-pinned-github-actions.yml index 93c792277..0d1d436f7 100644 --- a/.github/workflows/require-pinned-github-actions.yml +++ b/.github/workflows/require-pinned-github-actions.yml @@ -14,6 +14,6 @@ jobs: - name: Checkout code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Ensure SHA pinned actions - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@6124774845927d14c601359ab8138699fa5b70c3 # v4.0.1 + uses: zgosalvez/github-actions-ensure-sha-pinned-actions@ca46236c6ce584ae24bc6283ba8dcf4b3ec8a066 # v5.0.4 with: allowlist: alphagov/forms-deploy diff --git a/.github/workflows/ruby-ci.yml b/.github/workflows/ruby-ci.yml index 083e0cf0e..0e970afd8 100644 --- a/.github/workflows/ruby-ci.yml +++ b/.github/workflows/ruby-ci.yml @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Initialise mise and cache `hcl2json` - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: install_args: hcl2json @@ -68,7 +68,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up hcl2json - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: install_args: hcl2json diff --git a/.github/workflows/terraform-ci.yml b/.github/workflows/terraform-ci.yml index ceec4d720..ff7398d78 100644 --- a/.github/workflows/terraform-ci.yml +++ b/.github/workflows/terraform-ci.yml @@ -23,7 +23,7 @@ jobs: fetch-depth: 75 - name: Initialise mise - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: github_token: ${{ secrets.MISE_PAT }} # As this is a private repo, we can get API rate limit issues. Use a PAT to avoid this. (The token needs no special permissions.) install_args: go:github.com/hashicorp/terraform-config-inspect @@ -136,7 +136,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Initialise mise - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: github_token: ${{ secrets.MISE_PAT }} install_args: terraform @@ -159,7 +159,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Initialise mise - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: github_token: ${{ secrets.MISE_PAT }} install_args: terraform @@ -184,7 +184,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Initialise mise - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: github_token: ${{ secrets.MISE_PAT }} install_args: tflint @@ -217,7 +217,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Initialise mise - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: github_token: ${{ secrets.MISE_PAT }} install_args: checkov diff --git a/.github/workflows/update-provider-locks.yml b/.github/workflows/update-provider-locks.yml index bd13965de..b1f0946b8 100644 --- a/.github/workflows/update-provider-locks.yml +++ b/.github/workflows/update-provider-locks.yml @@ -22,7 +22,7 @@ jobs: ref: ${{ github.head_ref }} - name: Install `tfupdate` with mise - uses: jdx/mise-action@6d1e696aa24c1aa1bcc1adea0212707c71ab78a8 # v3.6.1 + uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: install_args: tfupdate