From 80b691787b9d2133e31fe168d199d551f71e6982 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 2 Sep 2026 09:06:37 -0500 Subject: [PATCH] build(deps): bump the github-actions group with 11 updates (#6656) Bumps the github-actions group with 11 updates: | Package | From | To | | --- | --- | --- | | [lukka/get-cmake](https://github.com/lukka/get-cmake) | `4.4.1` | `4.4.2` | | [actions/setup-java](https://github.com/actions/setup-java) | `5.6.0` | `6.0.0` | | [fortran-lang/setup-fortran](https://github.com/fortran-lang/setup-fortran) | `1.9.2` | `1.10.0` | | [EndBug/add-and-commit](https://github.com/endbug/add-and-commit) | `10.0.0` | `11.1.1` | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.2` | `4.0.3` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.3` | `4.37.9` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.3` | `4.37.9` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.3` | `4.37.9` | | [vmactions/freebsd-vm](https://github.com/vmactions/freebsd-vm) | `1.5.2` | `1.5.5` | | [vmactions/openbsd-vm](https://github.com/vmactions/openbsd-vm) | `1.4.5` | `1.4.7` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.2` | `3.0.3` | Updates `lukka/get-cmake` from 4.4.1 to 4.4.2 - [Release notes](https://github.com/lukka/get-cmake/releases) - [Changelog](https://github.com/lukka/get-cmake/blob/main/RELEASE_PROCESS.md) - [Commits](https://github.com/lukka/get-cmake/compare/4a7d025fc60f00db0c7b44ebf783d19b52444830...fffaaafeea488556c2c12dad60690008bc1caacb) Updates `actions/setup-java` from 5.6.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/03ad4de0992f5dab5e18fcb136590ce7c4a0ac95...dd06d9cba3e5552c54d9f8ea23572deb30010f7c) Updates `fortran-lang/setup-fortran` from 1.9.2 to 1.10.0 - [Release notes](https://github.com/fortran-lang/setup-fortran/releases) - [Commits](https://github.com/fortran-lang/setup-fortran/compare/195bac823dc6e05bb7c706311ad4540ffc34d5b9...be037f0a45b1160f139d4ccd0b96f9e9bfd6a682) Updates `EndBug/add-and-commit` from 10.0.0 to 11.1.1 - [Release notes](https://github.com/endbug/add-and-commit/releases) - [Commits](https://github.com/endbug/add-and-commit/compare/290ea2c423ad77ca9c62ae0f5b224379612c0321...cc9c08ba6c8df3b93a8f2db63e89b98368ae2ae8) Updates `dorny/paths-filter` from 4.0.2 to 4.0.3 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](https://github.com/dorny/paths-filter/compare/7b450fff21473bca461d4b92ce414b9d0420d706...ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d) Updates `github/codeql-action/init` from 4.37.3 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `github/codeql-action/analyze` from 4.37.3 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...cdf488f595d80d6e07e03d4674febd5ab45fa938) Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Commits](https://github.com/github/codeql-action/compare/v4.37.3...v4.37.9) Updates `vmactions/freebsd-vm` from 1.5.2 to 1.5.5 - [Release notes](https://github.com/vmactions/freebsd-vm/releases) - [Commits](https://github.com/vmactions/freebsd-vm/compare/77ed28d336d03fe19a3f4f7266c1d2c4714dd79d...f0552d3b69211736abd97f02ff3d4674c56b73b1) Updates `vmactions/openbsd-vm` from 1.4.5 to 1.4.7 - [Release notes](https://github.com/vmactions/openbsd-vm/releases) - [Commits](https://github.com/vmactions/openbsd-vm/compare/c941015845c0f0c429676840963dc63b226d4f69...86cdc08415d9d0865267e686561e276c52d62530) Updates `softprops/action-gh-release` from 3.0.2 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/3d0d9888cb7fd7b750713d6e236d1fcb99157228...efb35369e0ad2afab669f228072c1b0d510eae64) --- updated-dependencies: - dependency-name: lukka/get-cmake dependency-version: 4.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: fortran-lang/setup-fortran dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: EndBug/add-and-commit dependency-version: 11.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dorny/paths-filter dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/init dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/analyze dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: vmactions/freebsd-vm dependency-version: 1.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: vmactions/openbsd-vm dependency-version: 1.4.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/arm-main.yml | 6 ++-- .github/workflows/bintest.yml | 10 +++---- .github/workflows/clang-format-fix.yml | 2 +- .github/workflows/codeql.yml | 10 +++---- .github/workflows/ctest.yml | 30 +++++++++---------- .github/workflows/freebsd.yml | 2 +- .github/workflows/intel.yml | 6 ++-- .../workflows/java-examples-maven-test.yml | 6 ++-- .../workflows/java-implementation-test.yml | 2 +- .github/workflows/main-spc.yml | 4 +-- .github/workflows/main-static.yml | 2 +- .github/workflows/main.yml | 4 +-- .github/workflows/maven-build-test.yml | 6 ++-- .github/workflows/maven-deploy.yml | 2 +- .github/workflows/maven-staging.yml | 6 ++-- .github/workflows/openbsd.yml | 2 +- .github/workflows/par-script.yml | 4 +-- .github/workflows/par-source.yml | 4 +-- .github/workflows/release-files.yml | 4 +-- .github/workflows/scorecard.yml | 2 +- .github/workflows/script.yml | 24 +++++++-------- .../workflows/test-binary-installation.yml | 4 +-- .github/workflows/test-maven-packages.yml | 4 +-- .github/workflows/vfd-ros3.yml | 4 +-- .github/workflows/zizmor.yml | 2 +- 25 files changed, 76 insertions(+), 76 deletions(-) diff --git a/.github/workflows/arm-main.yml b/.github/workflows/arm-main.yml index 54a8222d4ff..9bfdf7b4ce4 100644 --- a/.github/workflows/arm-main.yml +++ b/.github/workflows/arm-main.yml @@ -45,7 +45,7 @@ jobs: uses: ./.github/actions/setup-doxygen - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -57,7 +57,7 @@ jobs: cmake --version - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -286,7 +286,7 @@ jobs: uses: ./.github/actions/setup-doxygen - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest diff --git a/.github/workflows/bintest.yml b/.github/workflows/bintest.yml index 0ec84109a5f..e7d12bf75fc 100644 --- a/.github/workflows/bintest.yml +++ b/.github/workflows/bintest.yml @@ -36,7 +36,7 @@ jobs: run: choco install ninja - name: Set up JDK ${{ inputs.java_version }} - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: | ${{ @@ -119,7 +119,7 @@ jobs: sudo apt-get install ninja-build graphviz - name: Set up JDK ${{ inputs.java_version }} - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: | ${{ @@ -173,7 +173,7 @@ jobs: runs-on: macos-latest steps: - name: Set up JDK ${{ inputs.java_version }} - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: | ${{ @@ -213,7 +213,7 @@ jobs: # symlinks the compiler executables to a common location - name: Setup GNU Fortran - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: gcc @@ -241,7 +241,7 @@ jobs: sudo apt-get install ninja-build graphviz - name: Set up JDK ${{ inputs.java_version }} - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: | ${{ diff --git a/.github/workflows/clang-format-fix.yml b/.github/workflows/clang-format-fix.yml index 56c1e08c3e8..351f44d0bb2 100644 --- a/.github/workflows/clang-format-fix.yml +++ b/.github/workflows/clang-format-fix.yml @@ -37,7 +37,7 @@ jobs: style: file exclude: './config ./hl/src/H5LTanalyze.c ./hl/src/H5LTparse.c ./hl/src/H5LTparse.h ./src/H5Epubgen.h ./src/H5Einit.h ./src/H5Eterm.h ./src/H5Edefin.h ./src/H5version.h ./src/H5overflow.h' - - uses: EndBug/add-and-commit@290ea2c423ad77ca9c62ae0f5b224379612c0321 # v10.0.0 + - uses: EndBug/add-and-commit@cc9c08ba6c8df3b93a8f2db63e89b98368ae2ae8 # v11.1.1 with: author_name: github-actions author_email: 41898282+github-actions[bot]@users.noreply.github.com diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index be910c7ebd8..17505b93374 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,7 +25,7 @@ jobs: persist-credentials: false - name: Check for code changes - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2 + uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3 id: filter with: filters: | @@ -92,7 +92,7 @@ jobs: .. - name: Initialize CodeQL - uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: c-cpp build-mode: manual @@ -179,7 +179,7 @@ jobs: shell: bash - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: category: "/language:c-cpp" output: sarif-results @@ -207,7 +207,7 @@ jobs: output: sarif-results/cpp.sarif - name: Upload SARIF - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: sarif_file: sarif-results/cpp.sarif @@ -256,7 +256,7 @@ jobs: - name: Upload empty SARIF for skipped analysis if: needs.analyze.result == 'skipped' && github.event_name == 'pull_request' - uses: github/codeql-action/upload-sarif@1cd4d01d58f636bbdbffbfd3c121b3446d07e9f3 + uses: github/codeql-action/upload-sarif@a0c73122a6231d3a72b4b04036548af1cd2487c9 with: sarif_file: ${{ github.workspace }}/empty.sarif category: "/language:c-cpp" diff --git a/.github/workflows/ctest.yml b/.github/workflows/ctest.yml index 35d1e8f1b8b..7e91f410272 100644 --- a/.github/workflows/ctest.yml +++ b/.github/workflows/ctest.yml @@ -94,7 +94,7 @@ jobs: uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -106,7 +106,7 @@ jobs: cmake --version - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -251,7 +251,7 @@ jobs: arch: arm64 - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -263,7 +263,7 @@ jobs: cmake --version - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -422,7 +422,7 @@ jobs: uses: ./.github/actions/setup-doxygen - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -434,7 +434,7 @@ jobs: cmake --version - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -608,7 +608,7 @@ jobs: clang -v - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -642,7 +642,7 @@ jobs: if: ${{ needs.check-secret.outputs.sign-state == 'exists' }} - name: Set up JDK 19 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -677,7 +677,7 @@ jobs: # symlinks the compiler executables to a common location - name: Setup GNU Fortran - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: gcc @@ -830,7 +830,7 @@ jobs: sudo apt-get install ninja-build - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -925,20 +925,20 @@ jobs: run: choco install ninja - name: add oneAPI to env - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: intel version: '2025.0' - name: Setup Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: 21 distribution: 'temurin' - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -1077,14 +1077,14 @@ jobs: sudo apt-get install ninja-build graphviz - name: add oneAPI to env - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: intel version: '2025.0' - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml index 62e35767601..eb3e470471e 100644 --- a/.github/workflows/freebsd.yml +++ b/.github/workflows/freebsd.yml @@ -54,7 +54,7 @@ jobs: persist-credentials: false - name: Build and test on FreeBSD - uses: vmactions/freebsd-vm@77ed28d336d03fe19a3f4f7266c1d2c4714dd79d # v1 + uses: vmactions/freebsd-vm@f0552d3b69211736abd97f02ff3d4674c56b73b1 # v1 with: release: ${{ matrix.freebsd-version }} usesh: true diff --git a/.github/workflows/intel.yml b/.github/workflows/intel.yml index b2ec9d7b146..d0c67115d58 100644 --- a/.github/workflows/intel.yml +++ b/.github/workflows/intel.yml @@ -31,7 +31,7 @@ jobs: sudo apt install libssl3 libssl-dev libcurl4 libcurl4-openssl-dev - name: Install oneAPI (Linux) - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: intel @@ -80,14 +80,14 @@ jobs: run: choco install ninja - name: install oneAPI (Windows) - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: intel version: '2025.2' - name: Setup Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: 11 distribution: 'temurin' diff --git a/.github/workflows/java-examples-maven-test.yml b/.github/workflows/java-examples-maven-test.yml index 1a14aa2d520..d88d7518a64 100644 --- a/.github/workflows/java-examples-maven-test.yml +++ b/.github/workflows/java-examples-maven-test.yml @@ -37,7 +37,7 @@ jobs: continue-on-error: true - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -200,7 +200,7 @@ jobs: continue-on-error: true - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -319,7 +319,7 @@ jobs: continue-on-error: true - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' diff --git a/.github/workflows/java-implementation-test.yml b/.github/workflows/java-implementation-test.yml index dee74162a9c..f49d12fd7c5 100644 --- a/.github/workflows/java-implementation-test.yml +++ b/.github/workflows/java-implementation-test.yml @@ -129,7 +129,7 @@ jobs: persist-credentials: false - name: Set up Java ${{ matrix.java-version }} (${{ matrix.implementation }}) - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: distribution: ${{ matrix.implementation == 'ffm' && 'oracle' || 'temurin' }} java-version: ${{ matrix.implementation == 'ffm' && '25' || matrix.java-version }} diff --git a/.github/workflows/main-spc.yml b/.github/workflows/main-spc.yml index 2795bdb5077..f54a4ed8dbb 100644 --- a/.github/workflows/main-spc.yml +++ b/.github/workflows/main-spc.yml @@ -380,14 +380,14 @@ jobs: run: choco install ninja - name: install oneAPI (Windows) - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: intel version: '2025.0' - name: Setup Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: 11 distribution: 'temurin' diff --git a/.github/workflows/main-static.yml b/.github/workflows/main-static.yml index 461aedb60b0..f381149727f 100644 --- a/.github/workflows/main-static.yml +++ b/.github/workflows/main-static.yml @@ -142,7 +142,7 @@ jobs: # CMake gets libaec from fetchcontent - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 87af233ab82..ca8dfc329a1 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -169,7 +169,7 @@ jobs: # CMake gets libaec from fetchcontent - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -182,7 +182,7 @@ jobs: - name: Set up Java (if specified or FFM required) if: inputs.java_version != 'auto' || inputs.force_java_implementation == 'ffm' - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: distribution: ${{ inputs.force_java_implementation == 'ffm' && 'oracle' || 'temurin' }} java-version: | diff --git a/.github/workflows/maven-build-test.yml b/.github/workflows/maven-build-test.yml index 4e38ca6863f..773e400c5f5 100644 --- a/.github/workflows/maven-build-test.yml +++ b/.github/workflows/maven-build-test.yml @@ -83,7 +83,7 @@ jobs: ls -R ./artifacts/ - name: Set up Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '11' distribution: 'temurin' @@ -155,7 +155,7 @@ jobs: persist-credentials: false - name: Set up Java 21 for JNI - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -214,7 +214,7 @@ jobs: persist-credentials: false - name: Set up Java 25 for FFM - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '25' distribution: 'oracle' diff --git a/.github/workflows/maven-deploy.yml b/.github/workflows/maven-deploy.yml index 6925f053b1f..07a91706184 100644 --- a/.github/workflows/maven-deploy.yml +++ b/.github/workflows/maven-deploy.yml @@ -269,7 +269,7 @@ jobs: done - name: Set up Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '11' distribution: 'temurin' diff --git a/.github/workflows/maven-staging.yml b/.github/workflows/maven-staging.yml index d51bbdee28c..6c6d7df827f 100644 --- a/.github/workflows/maven-staging.yml +++ b/.github/workflows/maven-staging.yml @@ -262,7 +262,7 @@ jobs: uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - name: Set up JDK (Java 25 for FFM builds) - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: ${{ matrix.implementation == 'ffm' && '25' || '21' }} distribution: ${{ matrix.implementation == 'ffm' && 'oracle' || 'temurin' }} @@ -694,7 +694,7 @@ jobs: version: ${{ steps.extract-version.outputs.version }} steps: - name: Set up JDK 21 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -825,7 +825,7 @@ jobs: persist-credentials: false - name: Set up JDK (Java 25 for FFM builds) - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: ${{ matrix.implementation == 'ffm' && '25' || '21' }} distribution: ${{ matrix.implementation == 'ffm' && 'oracle' || 'temurin' }} diff --git a/.github/workflows/openbsd.yml b/.github/workflows/openbsd.yml index 56deef15f7c..0872ba0111d 100644 --- a/.github/workflows/openbsd.yml +++ b/.github/workflows/openbsd.yml @@ -54,7 +54,7 @@ jobs: persist-credentials: false - name: Build and test on OpenBSD - uses: vmactions/openbsd-vm@c941015845c0f0c429676840963dc63b226d4f69 + uses: vmactions/openbsd-vm@86cdc08415d9d0865267e686561e276c52d62530 with: release: ${{ matrix.openbsd-version }} usesh: true diff --git a/.github/workflows/par-script.yml b/.github/workflows/par-script.yml index 2dd06a7c1b8..475165f9602 100644 --- a/.github/workflows/par-script.yml +++ b/.github/workflows/par-script.yml @@ -47,7 +47,7 @@ jobs: run: choco install ninja - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -178,7 +178,7 @@ jobs: sudo apt install libaec0 libaec-dev - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest diff --git a/.github/workflows/par-source.yml b/.github/workflows/par-source.yml index 7701c362d4e..5f0538a0773 100644 --- a/.github/workflows/par-source.yml +++ b/.github/workflows/par-source.yml @@ -80,7 +80,7 @@ jobs: echo "FC=${{ runner.workspace }}/openmpi/bin/mpif90" >> $GITHUB_ENV - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -197,7 +197,7 @@ jobs: echo "FC=${{ runner.workspace }}/mpich/bin/mpif90" >> $GITHUB_ENV - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest diff --git a/.github/workflows/release-files.yml b/.github/workflows/release-files.yml index b32ca8aef01..5a1a49cc1a4 100644 --- a/.github/workflows/release-files.yml +++ b/.github/workflows/release-files.yml @@ -194,7 +194,7 @@ jobs: - name: PreRelease tag id: create_prerelease if: ${{ (inputs.use_environ == 'snapshots') }} - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 with: tag_name: "${{ inputs.use_tag }}" target_commitish: ${{ inputs.file_sha }} @@ -236,7 +236,7 @@ jobs: - name: Release tag id: create_release if: ${{ (inputs.use_environ == 'release') }} - uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 with: tag_name: "${{ steps.create_release_tag_name.outputs.TAG_BASE }}" target_commitish: ${{ inputs.file_sha }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 05b4d5a33dc..e3cffbd9597 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -67,6 +67,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v3.29.5 + uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3.29.5 with: sarif_file: results.sarif diff --git a/.github/workflows/script.yml b/.github/workflows/script.yml index 806888444d1..8ad74ac5755 100644 --- a/.github/workflows/script.yml +++ b/.github/workflows/script.yml @@ -48,7 +48,7 @@ jobs: uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -161,7 +161,7 @@ jobs: sudo apt-get install ninja-build graphviz curl - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -260,7 +260,7 @@ jobs: clang -v - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -272,7 +272,7 @@ jobs: cmake --version - name: Set up JDK 19 - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -312,7 +312,7 @@ jobs: # symlinks the compiler executables to a common location - name: Setup GNU Fortran - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: gcc @@ -379,7 +379,7 @@ jobs: sudo apt-get install ninja-build - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -495,20 +495,20 @@ jobs: run: choco install ninja - name: add oneAPI to env - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: intel version: '2025.0' - name: Setup Java - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: 21 distribution: 'temurin' - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -620,14 +620,14 @@ jobs: sudo apt-get install ninja-build graphviz curl - name: add oneAPI to env - uses: fortran-lang/setup-fortran@195bac823dc6e05bb7c706311ad4540ffc34d5b9 # v1 + uses: fortran-lang/setup-fortran@be037f0a45b1160f139d4ccd0b96f9e9bfd6a682 # v1 id: setup-fortran with: compiler: intel version: '2025.0' - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest @@ -735,7 +735,7 @@ jobs: clang -v - name: Install CMake - uses: lukka/get-cmake@4a7d025fc60f00db0c7b44ebf783d19b52444830 # latest + uses: lukka/get-cmake@fffaaafeea488556c2c12dad60690008bc1caacb # latest with: cmakeVersion: ${{ inputs.cmake_version }} ninjaVersion: latest diff --git a/.github/workflows/test-binary-installation.yml b/.github/workflows/test-binary-installation.yml index fdfe56199f4..75b2c924736 100644 --- a/.github/workflows/test-binary-installation.yml +++ b/.github/workflows/test-binary-installation.yml @@ -78,7 +78,7 @@ jobs: path: HDF5Examples - name: Set up Java 11 for JNI - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '11' distribution: 'temurin' @@ -283,7 +283,7 @@ jobs: path: HDF5Examples - name: Set up Java 25 for FFM - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '25' distribution: 'oracle' diff --git a/.github/workflows/test-maven-packages.yml b/.github/workflows/test-maven-packages.yml index 7807a9a7013..20c5bfe5843 100644 --- a/.github/workflows/test-maven-packages.yml +++ b/.github/workflows/test-maven-packages.yml @@ -63,7 +63,7 @@ jobs: persist-credentials: false - name: Set up Java 21 for JNI - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '21' distribution: 'temurin' @@ -334,7 +334,7 @@ jobs: persist-credentials: false - name: Set up Java 25 for FFM - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: java-version: '25' distribution: 'oracle' diff --git a/.github/workflows/vfd-ros3.yml b/.github/workflows/vfd-ros3.yml index 4636cfe3e15..dcfe86d1d61 100644 --- a/.github/workflows/vfd-ros3.yml +++ b/.github/workflows/vfd-ros3.yml @@ -104,7 +104,7 @@ jobs: - name: Set up Java (if specified or FFM required) if: inputs.java_version != 'auto' || inputs.force_java_implementation == 'ffm' - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: distribution: ${{ inputs.force_java_implementation == 'ffm' && 'oracle' || 'temurin' }} java-version: | @@ -267,7 +267,7 @@ jobs: - name: Set up Java (if specified or FFM required) if: inputs.java_version != 'auto' || inputs.force_java_implementation == 'ffm' - uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v5 with: distribution: ${{ inputs.force_java_implementation == 'ffm' && 'oracle' || 'temurin' }} java-version: | diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 3be2a9d0368..778179559dd 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -47,7 +47,7 @@ jobs: continue-on-error: true env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - uses: github/codeql-action/upload-sarif@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 + - uses: github/codeql-action/upload-sarif@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 if: always() continue-on-error: true with: