From d5b4fdde007b72dc573c858ac399c54f0ce752fb Mon Sep 17 00:00:00 2001 From: "code-infra-renovate[bot]" <290386390+code-infra-renovate[bot]@users.noreply.github.com> Date: Mon, 13 Jul 2026 09:17:33 +0000 Subject: [PATCH] Bump GitHub Actions --- .github/workflows/ci-check.yml | 2 +- .github/workflows/ci.yml | 4 ++-- .github/workflows/closed-issue-message.yml | 2 +- .github/workflows/codeql.yml | 4 ++-- .github/workflows/create-cherry-pick-pr.yml | 2 +- .github/workflows/publish.yml | 4 ++-- .github/workflows/scorecards.yml | 2 +- 7 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/ci-check.yml b/.github/workflows/ci-check.yml index 656b0647f17fa8..37ee30731eea6d 100644 --- a/.github/workflows/ci-check.yml +++ b/.github/workflows/ci-check.yml @@ -20,7 +20,7 @@ permissions: {} jobs: continuous-releases: name: Continuous releases - uses: mui/mui-public/.github/workflows/ci-base.yml@9033c846aecf0e1454f13486af685d93269456e9 # master + uses: mui/mui-public/.github/workflows/ci-base.yml@d0c4e65df099189157250fa353917bcb28ff4110 # master test-dev: if: ${{ github.actor != 'l10nbot' }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c2b7f00c7554ed..ee25bb2c26756b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -50,7 +50,7 @@ jobs: ${{ runner.os }}-nextjs- - run: pnpm release:build - name: Publish packages to pkg.pr.new - uses: mui/mui-public/.github/actions/ci-publish@9033c846aecf0e1454f13486af685d93269456e9 # master + uses: mui/mui-public/.github/actions/ci-publish@d0c4e65df099189157250fa353917bcb28ff4110 # master if: ${{ matrix.os == 'ubuntu-latest' }} - name: Build docs run: pnpm docs:build @@ -96,7 +96,7 @@ jobs: steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Prepare for publishing - uses: mui/mui-public/.github/actions/publish-prepare@5a12855e473909291f8782c324f2c48983054337 # master + uses: mui/mui-public/.github/actions/publish-prepare@d0c4e65df099189157250fa353917bcb28ff4110 # master with: node-version: '22.22.3' - name: Dry run npm publishing diff --git a/.github/workflows/closed-issue-message.yml b/.github/workflows/closed-issue-message.yml index 3a4d1f5bf6ca46..0aaa3399b7a9c4 100644 --- a/.github/workflows/closed-issue-message.yml +++ b/.github/workflows/closed-issue-message.yml @@ -11,7 +11,7 @@ jobs: add-comment: name: Add closing message if: github.event.issue.state_reason == 'completed' - uses: mui/mui-public/.github/workflows/issues_add-closing-message.yml@9033c846aecf0e1454f13486af685d93269456e9 # master + uses: mui/mui-public/.github/workflows/issues_add-closing-message.yml@d0c4e65df099189157250fa353917bcb28ff4110 # master permissions: contents: read issues: write diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 256a16c1a7d76e..8ce4ae8b3024cc 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 + uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 with: languages: typescript config-file: ./.github/codeql/codeql-config.yml @@ -30,4 +30,4 @@ jobs: # Details on CodeQL's query packs refer to : https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs # queries: security-extended,security-and-quality - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 + uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 diff --git a/.github/workflows/create-cherry-pick-pr.yml b/.github/workflows/create-cherry-pick-pr.yml index dedea5b533a618..0302faceb4881a 100644 --- a/.github/workflows/create-cherry-pick-pr.yml +++ b/.github/workflows/create-cherry-pick-pr.yml @@ -12,7 +12,7 @@ permissions: {} jobs: create_pr: name: Create cherry-pick PR - uses: mui/mui-public/.github/workflows/prs_create-cherry-pick-pr.yml@9033c846aecf0e1454f13486af685d93269456e9 # master + uses: mui/mui-public/.github/workflows/prs_create-cherry-pick-pr.yml@d0c4e65df099189157250fa353917bcb28ff4110 # master permissions: contents: write pull-requests: write diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2db8783962d986..e895e7a2c612c8 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -47,7 +47,7 @@ jobs: ref: ${{ github.event_name == 'push' && github.sha || inputs.sha }} fetch-depth: 0 # Fetch full history for proper git operations - name: Prepare for publishing - uses: mui/mui-public/.github/actions/publish-prepare@5a12855e473909291f8782c324f2c48983054337 # master + uses: mui/mui-public/.github/actions/publish-prepare@d0c4e65df099189157250fa353917bcb28ff4110 # master with: node-version: '22.22.3' - name: Publish packages @@ -70,7 +70,7 @@ jobs: ref: ${{ inputs.sha }} fetch-depth: 0 # Fetch full history for proper git operations - name: Prepare for publishing - uses: mui/mui-public/.github/actions/publish-prepare@5a12855e473909291f8782c324f2c48983054337 # master + uses: mui/mui-public/.github/actions/publish-prepare@d0c4e65df099189157250fa353917bcb28ff4110 # master with: node-version: '22.22.3' - name: Publish packages diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 893165bb6d7852..15cfb86a03300c 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -40,6 +40,6 @@ jobs: publish_results: true # Upload the results to GitHub's code scanning dashboard. - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 + uses: github/codeql-action/upload-sarif@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 with: sarif_file: results.sarif