@@ -9,7 +9,7 @@ defaults:
99
1010env :
1111 # renovate: datasource=pypi depName=zizmor
12- ZIZMOR_VERSION : 1.15.2
12+ ZIZMOR_VERSION : 1.16.1
1313
1414on :
1515 workflow_call :
@@ -103,7 +103,7 @@ jobs:
103103
104104 - name : Upload MegaLinter scan results to GitHub Security tab
105105 if : ${{ always() }}
106- uses : github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
106+ uses : github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
107107 with :
108108 sarif_file : " megalinter-reports/megalinter-report.sarif"
109109
@@ -196,7 +196,7 @@ jobs:
196196
197197 # Initializes the CodeQL tools for scanning.
198198 - name : Initialize CodeQL
199- uses : github/codeql-action/init@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
199+ uses : github/codeql-action/init@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
200200 with :
201201 languages : ${{ matrix.language }}
202202 # If you wish to specify custom queries, you can do so here or in a config file.
@@ -209,7 +209,7 @@ jobs:
209209 # Autobuild attempts to build any compiled languages (C/C++, C#, or Java).
210210 # If this step fails, then you should remove it and run the build manually (see below)
211211 - name : Autobuild
212- uses : github/codeql-action/autobuild@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
212+ uses : github/codeql-action/autobuild@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
213213
214214 # ℹ️ Command-line programs to run using the OS shell.
215215 # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -222,7 +222,7 @@ jobs:
222222 # ./location_of_script_within_repo/buildscript.sh
223223
224224 - name : Perform CodeQL Analysis
225- uses : github/codeql-action/analyze@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
225+ uses : github/codeql-action/analyze@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
226226 with :
227227 category : " /language:${{matrix.language}}"
228228
@@ -241,7 +241,7 @@ jobs:
241241 persist-credentials : false
242242
243243 - name : Install the latest version of uv
244- uses : astral-sh/setup-uv@2ddd2b9cb38ad8efd50337e8ab201519a34c9f24 # v7.1.1
244+ uses : astral-sh/setup-uv@85856786d1ce8acfbcc2f13a5f3fbd6b938f9f41 # v7.1.2
245245 with :
246246 enable-cache : false
247247
@@ -262,7 +262,7 @@ jobs:
262262 ZIZMOR_CONFIG : /tmp/zizmor-standard-lint-defaults.yaml
263263
264264 - name : Upload SARIF file
265- uses : github/codeql-action/upload-sarif@16140ae1a102900babc80a33c44059580f687047 # v4.30.9
265+ uses : github/codeql-action/upload-sarif@0499de31b99561a6d14a36a5f662c2a54f91beee # v4.31.2
266266 with :
267267 sarif_file : results.sarif
268268 category : zizmor
0 commit comments