From 1bf7ffc2d9005d46c3614dbdc02ca5c01d5aaecd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 3 Nov 2026 17:46:38 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 6 updates Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [actions/cache](https://github.com/actions/cache) | `4` | `6` | | [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `4` | `5` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [azure/login](https://github.com/azure/login) | `2` | `3` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/cache` from 4 to 6 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v4...v6) Updates `actions/setup-dotnet` from 4 to 5 - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](https://github.com/actions/setup-dotnet/compare/v4...v5) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `azure/login` from 2 to 3 - [Release notes](https://github.com/azure/login/releases) - [Commits](https://github.com/azure/login/compare/v2...v3) --- updated-dependencies: - dependency-name: actions/cache dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-dotnet dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: azure/login dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/deploy.yml | 22 +++++++++++----------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index c0beae0..2db7080 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -50,11 +50,11 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 # Cached: `az bicep install` pulls the CLI from GitHub releases on every run otherwise, # which was ~20s of the job's total. - name: Cache Bicep CLI - uses: actions/cache@v4 + uses: actions/cache@v6 with: path: ~/.azure/bin key: bicep-${{ runner.os }} @@ -76,14 +76,14 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 - - uses: actions/setup-dotnet@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-dotnet@v5 with: dotnet-version: ${{ env.DOTNET_VERSION }} # NuGet cache — keyed on csproj + Directory.Packages.props, so a code-only # change still reuses the cache and skips the network restore. - name: Cache NuGet packages - uses: actions/cache@v4 + uses: actions/cache@v6 with: path: ~/.nuget/packages key: nuget-${{ runner.os }}-${{ hashFiles('**/*.csproj', 'Directory.Packages.props') }} @@ -114,7 +114,7 @@ jobs: cd publish zip -r ../webapp.zip . -q - name: Upload webapp artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: webapp path: webapp.zip @@ -143,18 +143,18 @@ jobs: # github.event.before, and a depth-1 checkout does not contain that commit — the diff fails, # the guard falls through to "changed", and infra is applied on every push exactly as it was # before the guard existed. - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 # Lands webapp.zip in the workspace root — the build job already packaged it, so this job # deploys the exact bytes that were tested rather than re-zipping a folder it just unpacked. - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: name: webapp path: . # OIDC federated identity — no client secrets stored in GitHub. # Federated credential subject: repo:punkouter26/PoRepoLineTracker:ref:refs/heads/master - - uses: azure/login@v2 + - uses: azure/login@v3 with: client-id: ${{ vars.AZURE_CLIENT_ID }} tenant-id: ${{ vars.AZURE_TENANT_ID }} @@ -262,8 +262,8 @@ jobs: if: github.event_name == 'workflow_dispatch' && inputs.deploy_infra timeout-minutes: 30 steps: - - uses: actions/checkout@v4 - - uses: azure/login@v2 + - uses: actions/checkout@v7 + - uses: azure/login@v3 with: client-id: ${{ vars.AZURE_CLIENT_ID }} tenant-id: ${{ vars.AZURE_TENANT_ID }}