@marcel91200 / caddy Mirror · read-only / commits / 5bc2afbb
Fork 0

Fast and extensible multi-platform HTTP/1-2-3 web server with automatic HTTPS

Mirrored from https://github.com/Slazee/caddy.git

Synced Nov 11, 22:15 UTC

build(deps): bump the actions-deps group with 6 updates (#7142)

Bumps the actions-deps group with 6 updates: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.12.1` | `2.13.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.1` | `4.6.2` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `e9a05e6d32d7ed22b5656cd874ef31af58d05bfa` | `d58896d6a1865668819e1d91763c7751a165e159` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.1` | `0.20.4` | | [ossf/scorecard-action](https://github.com/ossf/scorecard-action) | `2.4.1` | `2.4.2` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.29.0` | `3.29.4` | Updates `step-security/harden-runner` from 2.12.1 to 2.13.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/002fdce3c6a235733a90a27c80493a3241e56863...ec9f2d5744a09debf3a187a3f4f675c53b671911) Updates `actions/upload-artifact` from 4.6.1 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.6.1...ea165f8d65b6e75b540449e92b4886f43607fa02) Updates `sigstore/cosign-installer` from e9a05e6d32d7ed22b5656cd874ef31af58d05bfa to d58896d6a1865668819e1d91763c7751a165e159 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/e9a05e6d32d7ed22b5656cd874ef31af58d05bfa...d58896d6a1865668819e1d91763c7751a165e159) Updates `anchore/sbom-action` from 0.20.1 to 0.20.4 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/9246b90769f852b3a8921f330c59e0b3f439d6e9...7b36ad622f042cab6f59a75c2ac24ccb256e9b45) Updates `ossf/scorecard-action` from 2.4.1 to 2.4.2 - [Release notes](https://github.com/ossf/scorecard-action/releases) - [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md) - [Commits](https://github.com/ossf/scorecard-action/compare/f49aabe0b5af0936a0987cfb85d86b75731b0186...05b42c624433fc40578a4040d5cf5e36ddca8cde) Updates `github/codeql-action` from 3.29.0 to 3.29.4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/ce28f5bb42b7a9f2c824e633a3f6ee835bab6858...4e828ff8d448a8a6e532957b1811f387a63867e8) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: sigstore/cosign-installer dependency-version: d58896d6a1865668819e1d91763c7751a165e159 dependency-type: direct:production dependency-group: actions-deps - dependency-name: anchore/sbom-action dependency-version: 0.20.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: ossf/scorecard-action dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: github/codeql-action dependency-version: 3.29.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

dependabot[bot] committed Aug 1, 2025 at 04:34 UTC 5bc2afbbb6ee5bc1537b521fd507506fd86ae43f
6 files changed +15 -15
.github/workflows/ci.yml
+3 -3
@@ -64,7 +64,7 @@ jobs:
64 actions: write # to allow uploading artifacts and cache
65 steps:
66 - name: Harden the runner (Audit all outbound calls)
67 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
67 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
68 with:
69 egress-policy: audit
70
@@ -161,7 +161,7 @@ jobs:
161 continue-on-error: true # August 2020: s390x VM is down due to weather and power issues
162 steps:
163 - name: Harden the runner (Audit all outbound calls)
164 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
164 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
165 with:
166 egress-policy: audit
167 allowed-endpoints: ci-s390x.caddyserver.com:22
@@ -220,7 +220,7 @@ jobs:
220 if: github.event.pull_request.head.repo.full_name == 'caddyserver/caddy' && github.actor != 'dependabot[bot]'
221 steps:
222 - name: Harden the runner (Audit all outbound calls)
223 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
223 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
224 with:
225 egress-policy: audit
226
.github/workflows/cross-build.yml
+1 -1
@@ -49,7 +49,7 @@ jobs:
49 continue-on-error: true
50 steps:
51 - name: Harden the runner (Audit all outbound calls)
52 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
52 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
53 with:
54 egress-policy: audit
55
.github/workflows/lint.yml
+3 -3
@@ -45,7 +45,7 @@ jobs:
45
46 steps:
47 - name: Harden the runner (Audit all outbound calls)
48 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
48 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
49 with:
50 egress-policy: audit
51
@@ -73,7 +73,7 @@ jobs:
73 runs-on: ubuntu-latest
74 steps:
75 - name: Harden the runner (Audit all outbound calls)
76 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
76 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
77 with:
78 egress-policy: audit
79
@@ -90,7 +90,7 @@ jobs:
90 pull-requests: write
91 steps:
92 - name: Harden the runner (Audit all outbound calls)
93 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
93 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
94 with:
95 egress-policy: audit
96
.github/workflows/release.yml
+3 -3
@@ -39,7 +39,7 @@ jobs:
39
40 steps:
41 - name: Harden the runner (Audit all outbound calls)
42 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
42 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
43 with:
44 egress-policy: audit
45
@@ -109,11 +109,11 @@ jobs:
109 git verify-tag "${{ steps.vars.outputs.version_tag }}" || exit 1
110
111 - name: Install Cosign
112 - uses: sigstore/cosign-installer@e9a05e6d32d7ed22b5656cd874ef31af58d05bfa # main
112 + uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # main
113 - name: Cosign version
114 run: cosign version
115 - name: Install Syft
116 - uses: anchore/sbom-action/download-syft@9246b90769f852b3a8921f330c59e0b3f439d6e9 # main
116 + uses: anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45 # main
117 - name: Syft version
118 run: syft version
119 - name: Install xcaddy
.github/workflows/release_published.yml
+1 -1
@@ -24,7 +24,7 @@ jobs:
24
25 # See https://github.com/peter-evans/repository-dispatch
26 - name: Harden the runner (Audit all outbound calls)
27 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
27 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
28 with:
29 egress-policy: audit
30
.github/workflows/scorecard.yml
+4 -4
@@ -37,7 +37,7 @@ jobs:
37
38 steps:
39 - name: Harden the runner (Audit all outbound calls)
40 - uses: step-security/harden-runner@002fdce3c6a235733a90a27c80493a3241e56863 # v2.12.1
40 + uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
41 with:
42 egress-policy: audit
43
@@ -47,7 +47,7 @@ jobs:
47 persist-credentials: false
48
49 - name: "Run analysis"
50 - uses: ossf/scorecard-action@f49aabe0b5af0936a0987cfb85d86b75731b0186 # v2.4.1
50 + uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
51 with:
52 results_file: results.sarif
53 results_format: sarif
@@ -72,7 +72,7 @@ jobs:
72 # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
73 # format to the repository Actions tab.
74 - name: "Upload artifact"
75 - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
75 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
76 with:
77 name: SARIF file
78 path: results.sarif
@@ -81,6 +81,6 @@ jobs:
81 # Upload the results to GitHub's code scanning dashboard (optional).
82 # Commenting out will disable upload of results to your repo's Code Scanning dashboard
83 - name: "Upload to code-scanning"
84 - uses: github/codeql-action/upload-sarif@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3.29.0
84 + uses: github/codeql-action/upload-sarif@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
85 with:
86 sarif_file: results.sarif