From 35b9430226dfa7a55d0de4121270ddcd721997aa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Jan 2024 06:50:26 +0000 Subject: [PATCH] Bump actions/upload-artifact from 4.1.0 to 4.3.0 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.1.0 to 4.3.0. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/1eb3cb2b3e0f29609092a73eb033bb759a334595...26f96dfa697d77e81fd5907df203aa23a56210a8) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/scorecards-analysis.yml | 2 +- .github/workflows/third_party_scan.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index cc0430775fae4..2af455dbdeea3 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -41,7 +41,7 @@ jobs: # Upload the results as artifacts (optional). - name: "Upload artifact" - uses: actions/upload-artifact@1eb3cb2b3e0f29609092a73eb033bb759a334595 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 with: name: SARIF file path: results.sarif diff --git a/.github/workflows/third_party_scan.yml b/.github/workflows/third_party_scan.yml index 84fd4ee7bd585..ec51ede23f8b2 100644 --- a/.github/workflows/third_party_scan.yml +++ b/.github/workflows/third_party_scan.yml @@ -31,7 +31,7 @@ jobs: - name: "extract deps, find commit hash, pass to osv-scanner" run: python ci/scan_deps.py --output osv-lockfile-${{github.sha}}.json - name: "upload osv-scanner deps" - uses: actions/upload-artifact@1eb3cb2b3e0f29609092a73eb033bb759a334595 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 with: # use github.ref in name to avoid duplicated artifacts name: osv-lockfile-${{github.sha}}