From 7ea621658b521884401c71acedc979fd89936fdc Mon Sep 17 00:00:00 2001 From: GitHub Security Bot <88103841+github-security-bot@users.noreply.github.com> Date: Sat, 12 Sep 2026 11:46:35 -0400 Subject: [PATCH 1/3] Merge pull request #4808 from github/pinner/actions-sha-pins-2026-09-10 Pin GitHub Actions to commit SHAs --- .github/dependabot.yml | 8 ++++++++ .github/workflows/close-single-word-issues.yml | 2 +- .github/workflows/no-response.yml | 2 +- .github/workflows/stale-issues.yml | 2 +- 4 files changed, 11 insertions(+), 3 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..6cc00712 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,8 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/close-single-word-issues.yml b/.github/workflows/close-single-word-issues.yml index f2ef0dae..4a69cff8 100644 --- a/.github/workflows/close-single-word-issues.yml +++ b/.github/workflows/close-single-word-issues.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Close Single-Word Issue - uses: actions/github-script@v7 + uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | diff --git a/.github/workflows/no-response.yml b/.github/workflows/no-response.yml index 2a864ddd..79385fe9 100644 --- a/.github/workflows/no-response.yml +++ b/.github/workflows/no-response.yml @@ -13,7 +13,7 @@ jobs: noResponse: runs-on: ubuntu-latest steps: - - uses: actions/stale@v9 + - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} only-issue-labels: 'more-info-needed' diff --git a/.github/workflows/stale-issues.yml b/.github/workflows/stale-issues.yml index 3ec537c4..6ceed656 100644 --- a/.github/workflows/stale-issues.yml +++ b/.github/workflows/stale-issues.yml @@ -10,7 +10,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v9 + - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0 with: stale-issue-label: 'stale, triage' # The label that will be added to the issues when automatically marked as stale start-date: '2025-01-01T00:00:00Z' # Skip stale action for issues created before it From a08a6e9612db24dd64ac2c862bf939074f8d57c9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 12 Sep 2026 22:06:37 -0400 Subject: [PATCH 2/3] build(deps): bump actions/github-script from 7.1.0 to 9.0.0 (#4828) Bumps [actions/github-script](https://github.com/actions/github-script) from 7.1.0 to 9.0.0. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/f28e40c7f34bde8b3046d885e986cb6290c5673b...3a2844b7e9c422d3c10d287c895573f7108da1b3) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/close-single-word-issues.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/close-single-word-issues.yml b/.github/workflows/close-single-word-issues.yml index 4a69cff8..559d67db 100644 --- a/.github/workflows/close-single-word-issues.yml +++ b/.github/workflows/close-single-word-issues.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Close Single-Word Issue - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | From b49df25cafe802d2012876c8703332064237c7e3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 12 Sep 2026 22:07:59 -0400 Subject: [PATCH 3/3] build(deps): bump actions/stale from 9.1.0 to 11.0.0 (#4827) Bumps [actions/stale](https://github.com/actions/stale) from 9.1.0 to 11.0.0. - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/5bef64f19d7facfb25b37b414482c7164d639639...4391f3da665fdf50b6810c1a66712fb9ba21aa93) --- updated-dependencies: - dependency-name: actions/stale dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/no-response.yml | 2 +- .github/workflows/stale-issues.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/no-response.yml b/.github/workflows/no-response.yml index 79385fe9..7d257a5a 100644 --- a/.github/workflows/no-response.yml +++ b/.github/workflows/no-response.yml @@ -13,7 +13,7 @@ jobs: noResponse: runs-on: ubuntu-latest steps: - - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0 + - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} only-issue-labels: 'more-info-needed' diff --git a/.github/workflows/stale-issues.yml b/.github/workflows/stale-issues.yml index 6ceed656..b3b9793d 100644 --- a/.github/workflows/stale-issues.yml +++ b/.github/workflows/stale-issues.yml @@ -10,7 +10,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0 + - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0 with: stale-issue-label: 'stale, triage' # The label that will be added to the issues when automatically marked as stale start-date: '2025-01-01T00:00:00Z' # Skip stale action for issues created before it