From ab6c965aad8338e34092b3ed0d2ff76517dbf95b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 25 Nov 2024 21:16:25 +0000 Subject: [PATCH] :seedling: Bump the all-github-actions group with 2 updates Bumps the all-github-actions group with 2 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner) and [Wandalen/wretry.action](https://github.com/wandalen/wretry.action). Updates `step-security/harden-runner` from 2.10.1 to 2.10.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/91182cccc01eb5e619899d80e4e971d6181294a7...0080882f6c36860b6ba35c610c98ce87d4e2f26f) Updates `Wandalen/wretry.action` from 3.7.2 to 3.7.3 - [Release notes](https://github.com/wandalen/wretry.action/releases) - [Commits](https://github.com/wandalen/wretry.action/compare/8ceaefd717b7cdae4f2637f9a433242ade421a0a...ffdd254f4eaf1562b8a2c66aeaa37f1ff2231179) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-github-actions - dependency-name: Wandalen/wretry.action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cover.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cover.yaml b/.github/workflows/cover.yaml index 2c63d1b919..d8bbeae603 100644 --- a/.github/workflows/cover.yaml +++ b/.github/workflows/cover.yaml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit @@ -22,7 +22,7 @@ jobs: go-version: '1.22' - run: "PATH=/usr/local/go/bin:$PATH make test-cover" # Retry codecov upload. It is flaky due to a known issue https://community.codecov.com/t/upload-issues-unable-to-locate-build-via-github-actions-api/3954 - - uses: Wandalen/wretry.action@8ceaefd717b7cdae4f2637f9a433242ade421a0a # v3.7.2 + - uses: Wandalen/wretry.action@ffdd254f4eaf1562b8a2c66aeaa37f1ff2231179 # v3.7.3 with: attempt_limit: 20 action: codecov/codecov-action@7afa10ed9b269c561c2336fd862446844e0cbf71 # v4.2.0