![dependabot[bot]](/assets/img/avatar_default.png)
Bumps the all group with 3 updates: [github/codeql-action](https://github.com/github/codeql-action), [ruby/setup-ruby](https://github.com/ruby/setup-ruby) and [codecov/codecov-action](https://github.com/codecov/codecov-action). Updates `github/codeql-action` from 3.29.9 to 3.29.11 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](df559355d5...3c3833e0f8
) Updates `ruby/setup-ruby` from 1.255.0 to 1.256.0 - [Release notes](https://github.com/ruby/setup-ruby/releases) - [Changelog](https://github.com/ruby/setup-ruby/blob/master/release.rb) - [Commits](829114fc20...efbf473cab
) Updates `codecov/codecov-action` from 5.4.3 to 5.5.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](18283e04ce...fdcc847654
) build(deps): bump the all group across 1 directory with 8 updates Bumps the all group with 4 updates in the /Library/Homebrew directory: [rubocop](https://github.com/rubocop/rubocop), [rubocop-md](https://github.com/rubocop/rubocop-md), [sorbet-static-and-runtime](https://github.com/sorbet/sorbet) and [rspec-support](https://github.com/rspec/rspec). Updates `rubocop` from 1.79.2 to 1.80.0 - [Release notes](https://github.com/rubocop/rubocop/releases) - [Changelog](https://github.com/rubocop/rubocop/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop/compare/v1.79.2...v1.80.0) Updates `rubocop-md` from 2.0.1 to 2.0.2 - [Release notes](https://github.com/rubocop/rubocop-md/releases) - [Changelog](https://github.com/rubocop/rubocop-md/blob/master/CHANGELOG.md) - [Commits](https://github.com/rubocop/rubocop-md/compare/v2.0.1...v2.0.2) Updates `sorbet-static-and-runtime` from 0.5.12401 to 0.5.12434 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-runtime` from 0.5.12401 to 0.5.12434 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `rspec-support` from 3.13.4 to 3.13.5 - [Changelog](https://github.com/rspec/rspec/blob/rspec-support-v3.13.5/rspec-support/Changelog.md) - [Commits](https://github.com/rspec/rspec/compare/rspec-support-v3.13.4...rspec-support-v3.13.5) Updates `sorbet` from 0.5.12401 to 0.5.12434 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `sorbet-static` from 0.5.12401 to 0.5.12434 - [Release notes](https://github.com/sorbet/sorbet/releases) - [Commits](https://github.com/sorbet/sorbet/commits) Updates `unicode-display_width` from 3.1.4 to 3.1.5 - [Changelog](https://github.com/janlelis/unicode-display_width/blob/main/CHANGELOG.md) - [Commits](https://github.com/janlelis/unicode-display_width/compare/v3.1.4...v3.1.5) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: ruby/setup-ruby dependency-version: 1.256.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: codecov/codecov-action dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: rubocop dependency-version: 1.80.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: all - dependency-name: rubocop-md dependency-version: 2.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet-static-and-runtime dependency-version: 0.5.12434 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet-runtime dependency-version: 0.5.12434 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: rspec-support dependency-version: 3.13.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet dependency-version: 0.5.12434 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: sorbet-static dependency-version: 0.5.12434 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all - dependency-name: unicode-display_width dependency-version: 3.1.5 dependency-type: indirect update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <support@github.com>
39 lines
852 B
YAML
39 lines
852 B
YAML
name: "CodeQL"
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
- master
|
|
pull_request:
|
|
|
|
defaults:
|
|
run:
|
|
shell: bash -xeuo pipefail {0}
|
|
|
|
jobs:
|
|
analyze:
|
|
name: Analyze
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
actions: read
|
|
contents: read
|
|
security-events: write
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
|
|
with:
|
|
languages: ruby
|
|
config: |
|
|
paths-ignore:
|
|
- Library/Homebrew/vendor
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
|