commit 0149819c367ad51430ab6b0f432424054df69dcc
author Gary Gregory <garydgregory@users.noreply.github.com> Fri Apr 26 08:39:41 2024 -0400
committer GitHub <noreply@github.com> Fri Apr 26 08:39:41 2024 -0400
tree b3e6aa10d33ba4a55a741a5598ae8d0ba4192784
parent 43dbbdeba9b84a85eb436b096051cffcbc447ef7
parent 1862d34f73b32f62b657c7200b422942865fac0d

Merge pull request #126 from apache/dependabot/github_actions/github/codeql-action-3.25.3

Bump github/codeql-action from 3.25.1 to 3.25.3

.github/workflows/maven.yml

diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index 1caaf2a..2f90e4e 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -27,7 +27,7 @@
     continue-on-error: ${{ matrix.experimental }}

     strategy:

       matrix:

-        os: [ubuntu-latest, windows-latest, macos-latest]

+        os: [ubuntu-latest, windows-latest, macos-13]

         java: [ 8, 11, 17, 21 ]

         experimental: [false]

 #        include:

@@ -43,17 +43,17 @@
       fail-fast: false

         

     steps:

-    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
-      with:
-        persist-credentials: false
-    - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
+    - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
+      with:

+        persist-credentials: false

+    - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2

       with:

         path: ~/.m2/repository

         key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

         restore-keys: |

           ${{ runner.os }}-maven-

     - name: Set up JDK ${{ matrix.java }}

-      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1
+      uses: actions/setup-java@99b8673ff64fbf99d8d325f52d9a5bdedb8483e9 # v4.2.1

       with:

         distribution: 'temurin'

         java-version: ${{ matrix.java }}

.github/workflows/scorecards-analysis.yml

diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml
index 95eff16..6114243 100644
--- a/.github/workflows/scorecards-analysis.yml
+++ b/.github/workflows/scorecards-analysis.yml
@@ -40,7 +40,7 @@
     steps:
 
       - name: "Checkout code"
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
         with:
           persist-credentials: false
 
@@ -57,7 +57,7 @@
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@1746f4ab65b179e0ea60a494b83293b640dd5bba    # 4.3.2
+        uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808    # 4.3.3
         with:
           name: SARIF file
           path: results.sarif