From 0053d129d3d963e887352c34461a737fb329019d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Oct 2026 15:53:54 +0000 Subject: [PATCH] Build(deps): bump the all-github-actions group across 1 directory with 3 updates Bumps the all-github-actions group with 3 updates in the / directory: [actions/setup-node](https://github.com/actions/setup-node), [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/download-artifact](https://github.com/actions/download-artifact). Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v7.0.0...v7.1.0) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v7.0.1...v7.0.2) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v8.0.1...v8.0.2) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-github-actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 52 +++++++++---------- .github/workflows/build-and-test-client.yml | 8 +-- .../workflows/build-and-test-extension.yml | 4 +- .github/workflows/build-server.yml | 4 +- .github/workflows/copilot-setup-steps.yml | 2 +- .github/workflows/lint-and-format.yml | 2 +- .github/workflows/query-unit-tests-swift.yml | 2 +- .github/workflows/query-unit-tests.yml | 2 +- .github/workflows/release-codeql.yml | 2 +- .github/workflows/release-npm.yml | 4 +- .github/workflows/release-tag.yml | 2 +- .github/workflows/release-vsix.yml | 4 +- .github/workflows/release.yml | 10 ++-- .github/workflows/update-codeql.yml | 2 +- 14 files changed, 50 insertions(+), 50 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 5fd0da75..d83133b6 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -11,7 +11,7 @@ workflows: - 'actions/setup-go@v7.0.0' - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' - 'actions/setup-python@v6.2.0' - 'dtolnay/rust-toolchain@master' - 'ruby/setup-ruby@v1.313.0' @@ -23,13 +23,13 @@ workflows: - 'actions/setup-go@v6.4.0' - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' - 'actions/setup-python@v6.2.0' - 'dtolnay/rust-toolchain@master' - 'ruby/setup-ruby@v1.313.0' '.github/workflows/build-server.yml': - 'actions/checkout@v7.0.1' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' '.github/workflows/copilot-setup-steps.yml': - 'actions/cache@v5.0.5' - 'actions/cache@v6.1.0' @@ -38,7 +38,7 @@ workflows: - 'actions/setup-go@v6.4.0' - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' - 'actions/setup-python@v6.2.0' - 'dtolnay/rust-toolchain@master' - 'ruby/setup-ruby@v1.313.0' @@ -48,7 +48,7 @@ workflows: '.github/workflows/lint-and-format.yml': - 'actions/checkout@v7.0.1' - 'actions/setup-go@v7.0.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' '.github/workflows/query-unit-tests-swift.yml': - 'actions/cache@v5.0.5' - 'actions/checkout@v7.0.1' @@ -56,7 +56,7 @@ workflows: - 'actions/setup-go@v6.4.0' - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' - 'actions/setup-python@v6.2.0' - 'dtolnay/rust-toolchain@master' - 'ruby/setup-ruby@v1.313.0' @@ -67,7 +67,7 @@ workflows: - 'actions/setup-go@v6.4.0' - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' - 'actions/setup-python@v6.2.0' - 'dtolnay/rust-toolchain@master' - 'ruby/setup-ruby@v1.313.0' @@ -79,13 +79,13 @@ workflows: - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - 'actions/setup-python@v6.2.0' - - 'actions/upload-artifact@v7.0.1' + - 'actions/upload-artifact@v7.0.2' - 'dtolnay/rust-toolchain@master' - 'ruby/setup-ruby@v1.313.0' '.github/workflows/release-npm.yml': - 'actions/checkout@v7.0.1' - - 'actions/setup-node@v7.0.0' - - 'actions/upload-artifact@v7.0.1' + - 'actions/setup-node@v7.1.0' + - 'actions/upload-artifact@v7.0.2' '.github/workflows/release-tag.yml': - 'actions/cache@v5.0.5' - 'actions/checkout@v7.0.1' @@ -93,18 +93,18 @@ workflows: - 'actions/setup-go@v6.4.0' - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' - 'actions/setup-python@v6.2.0' - 'dtolnay/rust-toolchain@master' - 'ruby/setup-ruby@v1.313.0' '.github/workflows/release-vsix.yml': - 'actions/checkout@v7.0.1' - - 'actions/setup-node@v7.0.0' - - 'actions/upload-artifact@v7.0.1' + - 'actions/setup-node@v7.1.0' + - 'actions/upload-artifact@v7.0.2' '.github/workflows/release.yml': - - 'actions/download-artifact@v8.0.1' - - 'actions/setup-node@v7.0.0' - - 'actions/upload-artifact@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'actions/setup-node@v7.1.0' + - 'actions/upload-artifact@v7.0.2' - 'softprops/action-gh-release@v3.0.3' '.github/workflows/update-codeql.yml': - 'actions/cache@v5.0.5' @@ -113,7 +113,7 @@ workflows: - 'actions/setup-go@v6.4.0' - 'actions/setup-java@v5.3.0' - 'actions/setup-node@v6.4.0' - - 'actions/setup-node@v7.0.0' + - 'actions/setup-node@v7.1.0' - 'actions/setup-python@v6.2.0' - 'dtolnay/rust-toolchain@master' - 'peter-evans/create-pull-request@v8.1.1' @@ -139,9 +139,9 @@ dependencies: commit: 'sha1-a1d282b36b6f3519aa1f3fc636f609c47dddb294' owner_id: 44036562 repo_id: 476372928 - 'actions/download-artifact@v8.0.1': - ref: 'v8.0.1' - commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c' + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' owner_id: 44036562 repo_id: 192626254 'actions/setup-dotnet@v5.3.0': @@ -169,9 +169,9 @@ dependencies: commit: 'sha1-48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e' owner_id: 44036562 repo_id: 189476904 - 'actions/setup-node@v7.0.0': - ref: 'v7.0.0' - commit: 'sha1-820762786026740c76f36085b0efc47a31fe5020' + 'actions/setup-node@v7.1.0': + ref: 'v7.1.0' + commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1' owner_id: 44036562 repo_id: 189476904 'actions/setup-python@v6.2.0': @@ -179,9 +179,9 @@ dependencies: commit: 'sha1-a309ff8b426b58ec0e2a45f0f869d46889d02405' owner_id: 44036562 repo_id: 192625525 - 'actions/upload-artifact@v7.0.1': - ref: 'v7.0.1' - commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' owner_id: 44036562 repo_id: 192625955 'dtolnay/rust-toolchain@master': diff --git a/.github/workflows/build-and-test-client.yml b/.github/workflows/build-and-test-client.yml index 95cdda55..b784abe5 100644 --- a/.github/workflows/build-and-test-client.yml +++ b/.github/workflows/build-and-test-client.yml @@ -106,14 +106,14 @@ jobs: - name: Setup Node.js environment (from .node-version) if: matrix.node == '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' - name: Setup Node.js environment (explicit version) if: matrix.node != '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version: ${{ matrix.node }} @@ -225,14 +225,14 @@ jobs: - name: Setup Node.js (from .node-version) if: matrix.node == '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' - name: Setup Node.js (explicit version) if: matrix.node != '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version: ${{ matrix.node }} diff --git a/.github/workflows/build-and-test-extension.yml b/.github/workflows/build-and-test-extension.yml index ff234e0f..510c82f3 100644 --- a/.github/workflows/build-and-test-extension.yml +++ b/.github/workflows/build-and-test-extension.yml @@ -45,14 +45,14 @@ jobs: - name: Setup Node.js environment (from .node-version) if: matrix.node == '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' - name: Setup Node.js environment (explicit version) if: matrix.node != '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version: ${{ matrix.node }} diff --git a/.github/workflows/build-server.yml b/.github/workflows/build-server.yml index bacbf59b..bc94cd36 100644 --- a/.github/workflows/build-server.yml +++ b/.github/workflows/build-server.yml @@ -43,14 +43,14 @@ jobs: - name: Build Server - Setup Node.js environment (from .node-version) if: matrix.node == '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' - name: Build Server - Setup Node.js environment (explicit version) if: matrix.node != '.node-version' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version: ${{ matrix.node }} diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 12eae5c9..48083882 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -42,7 +42,7 @@ jobs: # token: ${{ secrets.QL_DEV_TOKEN }} - name: Copilot Setup - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' diff --git a/.github/workflows/lint-and-format.yml b/.github/workflows/lint-and-format.yml index 7dec80ee..7e5d7edc 100644 --- a/.github/workflows/lint-and-format.yml +++ b/.github/workflows/lint-and-format.yml @@ -21,7 +21,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Lint and Format - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' diff --git a/.github/workflows/query-unit-tests-swift.yml b/.github/workflows/query-unit-tests-swift.yml index d553454f..9344b99f 100644 --- a/.github/workflows/query-unit-tests-swift.yml +++ b/.github/workflows/query-unit-tests-swift.yml @@ -37,7 +37,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Query Unit Tests - swift - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' diff --git a/.github/workflows/query-unit-tests.yml b/.github/workflows/query-unit-tests.yml index e79b4e1a..5f6b603d 100644 --- a/.github/workflows/query-unit-tests.yml +++ b/.github/workflows/query-unit-tests.yml @@ -50,7 +50,7 @@ jobs: uses: actions/checkout@v7.0.1 - name: Query Unit Tests - ${{ matrix.language }} - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version' diff --git a/.github/workflows/release-codeql.yml b/.github/workflows/release-codeql.yml index 02c9d506..fcf956b1 100644 --- a/.github/workflows/release-codeql.yml +++ b/.github/workflows/release-codeql.yml @@ -137,7 +137,7 @@ jobs: ls -lh dist-packs/ - name: CodeQL - Upload CodeQL pack artifacts - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: codeql-tool-query-packs-${{ steps.version.outputs.version }} path: dist-packs/*.tar.gz diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml index 0e91f905..d50f8f23 100644 --- a/.github/workflows/release-npm.yml +++ b/.github/workflows/release-npm.yml @@ -67,7 +67,7 @@ jobs: persist-credentials: false - name: npm - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: node-version-file: '.node-version' registry-url: 'https://registry.npmjs.org' @@ -106,7 +106,7 @@ jobs: echo "✅ Published npm package to npmjs.org (with provenance)" - name: npm - Upload release build artifact - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: include-hidden-files: true name: release-build-${{ steps.version.outputs.version }} diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 2703ab0f..a5fa1bf1 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -105,7 +105,7 @@ jobs: - name: Tag - Setup Node.js if: steps.check-tag.outputs.tag_exists != 'true' - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: node-version-file: '.node-version' diff --git a/.github/workflows/release-vsix.yml b/.github/workflows/release-vsix.yml index bea81fd1..5c059d34 100644 --- a/.github/workflows/release-vsix.yml +++ b/.github/workflows/release-vsix.yml @@ -68,7 +68,7 @@ jobs: persist-credentials: false - name: VSIX - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: node-version-file: '.node-version' @@ -119,7 +119,7 @@ jobs: done - name: VSIX - Upload artifact - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: codeql-development-mcp-server-vsix-${{ steps.version.outputs.version }} path: extensions/vscode/${{ steps.package.outputs.vsix_name }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e98364af..1b02123c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -199,24 +199,24 @@ jobs: steps: - name: Release - Download release build artifact - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: name: release-build-${{ needs.resolve-version.outputs.version }} - name: Release - Download CodeQL pack artifacts - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: name: codeql-tool-query-packs-${{ needs.resolve-version.outputs.version }} path: dist-packs - name: Release - Download VSIX artifact - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: name: codeql-development-mcp-server-vsix-${{ needs.resolve-version.outputs.version }} path: dist-vsix - name: Release - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: node-version-file: '.node-version' @@ -255,7 +255,7 @@ jobs: tar -czvf codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}.tar.gz -C dist-package . - name: Release - Upload artifact - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }} path: codeql-development-mcp-server-${{ needs.resolve-version.outputs.version }}.tar.gz diff --git a/.github/workflows/update-codeql.yml b/.github/workflows/update-codeql.yml index e9c96ce8..67844c2c 100644 --- a/.github/workflows/update-codeql.yml +++ b/.github/workflows/update-codeql.yml @@ -199,7 +199,7 @@ jobs: install-language-runtimes: false - name: Update - Setup Node.js - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: cache: 'npm' node-version-file: '.node-version'