From c2bdd2f331b95f88b83a166cea3cc581671082e2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 5 May 2023 16:00:13 +0000 Subject: [PATCH] Bump github/codeql-action from 2.3.2 to 2.3.3 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.3.2 to 2.3.3. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/f3feb00acb00f31a6f60280e6ace9ca31d91c76a...29b1f65c5e92e24fe6b6647da1eaabe529cec70f) --- updated-dependencies: - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/analyze.yml | 6 +++--- CHANGELOG.md | 4 ++-- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/analyze.yml b/.github/workflows/analyze.yml index 92ce9c2..104b543 100644 --- a/.github/workflows/analyze.yml +++ b/.github/workflows/analyze.yml @@ -63,13 +63,13 @@ jobs: fetch-depth: 2 - name: Initialize CodeQL - uses: github/codeql-action/init@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2 + uses: github/codeql-action/init@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3 with: languages: 'java' queries: 'security-and-quality' - name: Autobuild - uses: github/codeql-action/autobuild@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2 + uses: github/codeql-action/autobuild@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@f3feb00acb00f31a6f60280e6ace9ca31d91c76a # v2.3.2 + uses: github/codeql-action/analyze@29b1f65c5e92e24fe6b6647da1eaabe529cec70f # v2.3.3 diff --git a/CHANGELOG.md b/CHANGELOG.md index d4e4ba5..bbb9ab0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -19,8 +19,8 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). - Bump actions/cache from 3.2.2 to 3.3.1 (#284, #294, #301, #305, #308, #309). - Bump actions/setup-java from 3.9.0 to 3.11.0 (#299, #318). - Bump actions/checkout from 3.3.0 to 3.5.2 (#313, #316, #324). -- Bump github/codeql-action from 2.1.37 to 2.3.2 (#286, #290, #291, #295, #300, #302, #307, #310, - #312, #315, #317, #321, #322, #325, #326, #328) +- Bump github/codeql-action from 2.1.37 to 2.3.3 (#286, #290, #291, #295, #300, #302, #307, #310, + #312, #315, #317, #321, #322, #325, #326, #328, #329) - Bump cyclonedx-maven-plugin from 2.7.4 to 2.7.5 (#304) - Bump strata-basics from 2.12.17 to 2.12.21 (#285, #288, #289, #311) - Bump parent from 3.0.0 to 3.0.1 (#306).