Bump the github-actions group with 7 updates (#343)

dependabot[bot] · cunla · web-flow · commit e68ac9e05e8d · 2025-12-10T09:38:55.000-06:00
Bumps the github-actions group with 7 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [dflook/terraform-apply](https://github.com/dflook/terraform-apply) | `1.44.0` | `2.2.2` | | [devops-infra/action-commit-push](https://github.com/devops-infra/action-commit-push) | `0.9.2` | `1.0.3` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `8` | | [dflook/terraform-fmt](https://github.com/dflook/terraform-fmt) | `1.44.0` | `2.2.2` | | [dflook/terraform-plan](https://github.com/dflook/terraform-plan) | `1.44.0` | `2.2.2` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.2.0` | `0.3.0` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v6) Updates `dflook/terraform-apply` from 1.44.0 to 2.2.2 - [Release notes](https://github.com/dflook/terraform-apply/releases) - [Commits](dflook/terraform-apply@7d435d4...8f47d0a) Updates `devops-infra/action-commit-push` from 0.9.2 to 1.0.3 - [Release notes](https://github.com/devops-infra/action-commit-push/releases) - [Commits](devops-infra/action-commit-push@v0.9.2...8a2d9d7) Updates `actions/github-script` from 7 to 8 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7...v8) Updates `dflook/terraform-fmt` from 1.44.0 to 2.2.2 - [Release notes](https://github.com/dflook/terraform-fmt/releases) - [Commits](dflook/terraform-fmt@2ec321e...1964140) Updates `dflook/terraform-plan` from 1.44.0 to 2.2.2 - [Release notes](https://github.com/dflook/terraform-plan/releases) - [Commits](dflook/terraform-plan@b0877a1...dc251c4) Updates `zizmorcore/zizmor-action` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](zizmorcore/zizmor-action@e673c39...e639db9) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dflook/terraform-apply dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: devops-infra/action-commit-push dependency-version: 1.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/github-script dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dflook/terraform-fmt dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dflook/terraform-plan dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Daniel M <cunla@users.noreply.github.com>
diff --git a/.github/workflows/add_member.yml b/.github/workflows/add_member.yml
@@ -28,7 +28,7 @@ jobs:
           python-version: '3.12'
 
       - name: Checkout code
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
diff --git a/.github/workflows/apply.yml b/.github/workflows/apply.yml
@@ -23,15 +23,15 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
       - name: terraform apply
         # v1.44.0
         # Use the commit hash for security hardening
         # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
-        uses: dflook/terraform-apply@7d435d4d115a11e5db1e710ac969f5382f0f6f9f
+        uses: dflook/terraform-apply@8f47d0ad9f3cb9e50fd6b3595c0cb98f00c518df
         env:
           TERRAFORM_ACTIONS_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -45,7 +45,7 @@ jobs:
       - name: Commit changes
         if: ${{ always() }}
         # v0.10.0
-        uses: devops-infra/action-commit-push@b8c990ac36bac67f71133ad7ec3da1d7abf4d57e
+        uses: devops-infra/action-commit-push@8a2d9d73c3f506468129be2e4409e60dbed70357
         with:
           github_token: "${{ secrets.TERRAFORM_MANAGEMENT_GITHUB_TOKEN }}"
           commit_prefix: "[AUTO]"
diff --git a/.github/workflows/member-verification.yml b/.github/workflows/member-verification.yml
@@ -12,13 +12,13 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
       - name: Check PR title format
         id: check-title
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const title = context.payload.pull_request.title;
@@ -31,7 +31,7 @@ jobs:
       - name: Check user account age
         if: steps.check-title.outputs.result == 'continue'
         id: check-user
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           MIN_ACCOUNT_AGE_MONTHS: ${{ vars.MIN_ACCOUNT_AGE_MONTHS || '3' }}  # Default to 3 months if not set
         with:
@@ -79,7 +79,7 @@ jobs:
 
       - name: Add label if new account
         if: steps.check-user.outputs.result == 'new-account' && steps.check-title.outputs.result == 'continue'
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             await github.rest.issues.addLabels({
diff --git a/.github/workflows/plan.yml b/.github/workflows/plan.yml
@@ -20,20 +20,20 @@ jobs:
       contents: write
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           ref: "${{ github.event.pull_request.head.ref }}"
           persist-credentials: false
 
 
       - name: terraform fmt
-        uses: dflook/terraform-fmt@2ec321e746af7edf90e43513dda2086a92a07b4c
+        uses: dflook/terraform-fmt@1964140828a3cd334f311122e09f9e824060382e
         with:
           path: "terraform"
 
       - name: Commit changes
         # v0.9.2
-        uses: devops-infra/action-commit-push@be5ba37125c79eb0016cbd8cc385f0aa160538c5
+        uses: devops-infra/action-commit-push@8a2d9d73c3f506468129be2e4409e60dbed70357
         with:
           github_token: "${{ secrets.GITHUB_TOKEN }}"
           commit_prefix: "[AUTO]"
@@ -51,15 +51,15 @@ jobs:
 
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
       - name: terraform plan
         # v1.44.0
         # Use the commit hash for security hardening
         # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions
-        uses: dflook/terraform-plan@b0877a1bf56160160ab482f4aff8a12fff35fe06
+        uses: dflook/terraform-plan@dc251c444763eed5defd065b866874b6343017ca
         env:
           TERRAFORM_ACTIONS_GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml
@@ -18,9 +18,9 @@ jobs:
       actions: read # only needed for private repos
     steps:
       - name: Checkout repository
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           persist-credentials: false
 
       - name: Run zizmor 🌈
-        uses: zizmorcore/zizmor-action@e673c3917a1aef3c65c972347ed84ccd013ecda4 # v0.2.0
+        uses: zizmorcore/zizmor-action@e639db99335bc9038abc0e066dfcd72e23d26fb4 # v0.3.0
