From e7984643746d53deec7da4700020609c471b86c2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 15 Oct 2026 08:08:57 +0000 Subject: [PATCH] ci(deps): bump matcra587/github-actions/.github/workflows/security.yml Bumps the actions-minor-patch group with 1 update in the / directory: [matcra587/github-actions/.github/workflows/security.yml](https://github.com/matcra587/github-actions). Updates `matcra587/github-actions/.github/workflows/security.yml` from 0.4.2 to 0.4.3 - [Release notes](https://github.com/matcra587/github-actions/releases) - [Commits](https://github.com/matcra587/github-actions/compare/09a32f29285295a6b9f604ed98098ea409b899b4...d2ae464e93461998e97ebc72c4f3de40ac0a84df) --- updated-dependencies: - dependency-name: matcra587/github-actions/.github/workflows/security.yml dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-minor-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/security.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 8b90cf5..2c425f7 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -23,7 +23,7 @@ jobs: # code scanning. Its actionlint and zizmor overlap the local gate, but run # online audits the offline local run skips, so they are not redundant. # @clover: constraint=major tag-prefix=security/ tags=actions - uses: matcra587/github-actions/.github/workflows/security.yml@09a32f29285295a6b9f604ed98098ea409b899b4 # security/v0.4.2 + uses: matcra587/github-actions/.github/workflows/security.yml@d2ae464e93461998e97ebc72c4f3de40ac0a84df # security/v0.4.3 permissions: contents: read security-events: write # SARIF + CodeQL uploads to code scanning.