From c6864ca996c741f8cc199155a5e7b9acbecdeb12 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 8 Jul 2025 09:21:06 +1000 Subject: [PATCH] chore(deps): bump the dependencies group with 2 updates (#9975) Bumps the dependencies group with 2 updates: [anchore/sbom-action](https://github.com/anchore/sbom-action) and [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action). Updates `anchore/sbom-action` from 0.20.1 to 0.20.2 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/9246b90769f852b3a8921f330c59e0b3f439d6e9...cee1b8e05ae5b2593a75e197229729eabaa9f8ec) Updates `svenstaro/upload-release-action` from 2.10.0 to 2.11.2 - [Release notes](https://github.com/svenstaro/upload-release-action/releases) - [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md) - [Commits](https://github.com/svenstaro/upload-release-action/compare/ebd922b779f285dafcac6410a0710daee9c12b82...81c65b7cd4de9b2570615ce3aad67a41de5b1a13) --- updated-dependencies: - dependency-name: anchore/sbom-action dependency-version: 0.20.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: svenstaro/upload-release-action dependency-version: 2.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/release.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index c7aebaa667..cf40856734 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -55,7 +55,7 @@ jobs: - name: Build frontend run: cd src/frontend && npm run compile && npm run build - name: Create SBOM for frontend - uses: anchore/sbom-action@9246b90769f852b3a8921f330c59e0b3f439d6e9 # pin@v0 + uses: anchore/sbom-action@cee1b8e05ae5b2593a75e197229729eabaa9f8ec # pin@v0 with: artifact-name: frontend-build.spdx path: src/frontend @@ -76,7 +76,7 @@ jobs: subject-path: "${{ github.workspace }}/src/backend/InvenTree/web/static/frontend-build.zip" - name: Upload frontend - uses: svenstaro/upload-release-action@ebd922b779f285dafcac6410a0710daee9c12b82 # pin@2.10.0 + uses: svenstaro/upload-release-action@81c65b7cd4de9b2570615ce3aad67a41de5b1a13 # pin@2.11.2 with: repo_token: ${{ secrets.GITHUB_TOKEN }} file: src/backend/InvenTree/web/static/frontend-build.zip @@ -84,7 +84,7 @@ jobs: tag: ${{ github.ref }} overwrite: true - name: Upload Attestation - uses: svenstaro/upload-release-action@ebd922b779f285dafcac6410a0710daee9c12b82 # pin@2.10.0 + uses: svenstaro/upload-release-action@81c65b7cd4de9b2570615ce3aad67a41de5b1a13 # pin@2.11.2 with: repo_token: ${{ secrets.GITHUB_TOKEN }} asset_name: frontend-build.intoto.jsonl @@ -127,7 +127,7 @@ jobs: cd docs/site zip -r docs-html.zip * - name: Publish documentation - uses: svenstaro/upload-release-action@ebd922b779f285dafcac6410a0710daee9c12b82 # pin@2.10.0 + uses: svenstaro/upload-release-action@81c65b7cd4de9b2570615ce3aad67a41de5b1a13 # pin@2.11.2 with: repo_token: ${{ secrets.GITHUB_TOKEN }} file: docs/site/docs-html.zip