c945c8056b
Bumps the all group with 1 update in the /Library/Homebrew/formula-analytics directory: [certifi](https://github.com/certifi/python-certifi).
Updates `certifi` from 2025.7.9 to 2025.7.14
- [Commits](https://github.com/certifi/python-certifi/compare/2025.07.09...2025.07.14)
build(deps): bump github/codeql-action in the all group
Bumps the all group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).
Updates `github/codeql-action` from 3.29.2 to 3.29.4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](181d5eefc2...4e828ff8d4)
build(deps): bump the all group across 1 directory with 8 updates
Bumps the all group with 4 updates in the /Library/Homebrew directory: [rubocop-ast](https://github.com/rubocop/rubocop-ast), [parallel_tests](https://github.com/grosser/parallel_tests), [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) and [spoom](https://github.com/Shopify/spoom).
Updates `rubocop-ast` from 1.45.1 to 1.46.0
- [Release notes](https://github.com/rubocop/rubocop-ast/releases)
- [Changelog](https://github.com/rubocop/rubocop-ast/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rubocop/rubocop-ast/compare/v1.45.1...v1.46.0)
Updates `parallel_tests` from 5.3.0 to 5.3.1
- [Changelog](https://github.com/grosser/parallel_tests/blob/master/CHANGELOG.md)
- [Commits](https://github.com/grosser/parallel_tests/compare/v5.3.0...v5.3.1)
Updates `sorbet-static-and-runtime` from 0.5.12230 to 0.5.12357
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)
Updates `spoom` from 1.7.4 to 1.7.5
- [Release notes](https://github.com/Shopify/spoom/releases)
- [Commits](https://github.com/Shopify/spoom/compare/v1.7.4...v1.7.5)
Updates `sorbet-runtime` from 0.5.12230 to 0.5.12357
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)
Updates `parser` from 3.3.8.0 to 3.3.9.0
- [Changelog](https://github.com/whitequark/parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/whitequark/parser/compare/v3.3.8.0...v3.3.9.0)
Updates `sorbet` from 0.5.12230 to 0.5.12357
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)
Updates `sorbet-static` from 0.5.12230 to 0.5.12357
- [Release notes](https://github.com/sorbet/sorbet/releases)
- [Commits](https://github.com/sorbet/sorbet/commits)
---
updated-dependencies:
- dependency-name: certifi
dependency-version: 2025.7.14
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: github/codeql-action
dependency-version: 3.29.4
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: rubocop-ast
dependency-version: 1.46.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: parallel_tests
dependency-version: 5.3.1
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-static-and-runtime
dependency-version: 0.5.12357
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: spoom
dependency-version: 1.7.5
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-runtime
dependency-version: 0.5.12357
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: parser
dependency-version: 3.3.9.0
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet
dependency-version: 0.5.12357
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: sorbet-static
dependency-version: 0.5.12357
dependency-type: indirect
update-type: version-update:semver-patch
dependency-group: all
...
Signed-off-by: dependabot[bot] <support@github.com>
39 lines
850 B
YAML
39 lines
850 B
YAML
name: "CodeQL"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- master
|
|
pull_request:
|
|
|
|
defaults:
|
|
run:
|
|
shell: bash -xeuo pipefail {0}
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
actions: read
|
|
contents: read
|
|
security-events: write
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
|
|
with:
|
|
languages: ruby
|
|
config: |
|
|
paths-ignore:
|
|
- Library/Homebrew/vendor
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@4e828ff8d448a8a6e532957b1811f387a63867e8 # v3.29.4
|