From fccb375d73634b25f754cde08988b850fa7d525d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 19 Nov 2024 10:51:43 -0500 Subject: [PATCH 1/2] build(deps): Bump cross-spawn from 7.0.3 to 7.0.6 in /system-contract-dapp-playground (#1023) build(deps): Bump cross-spawn in /system-contract-dapp-playground Bumps [cross-spawn](https://github.com/moxystudio/node-cross-spawn) from 7.0.3 to 7.0.6. - [Changelog](https://github.com/moxystudio/node-cross-spawn/blob/master/CHANGELOG.md) - [Commits](https://github.com/moxystudio/node-cross-spawn/compare/v7.0.3...v7.0.6) --- updated-dependencies: - dependency-name: cross-spawn dependency-type: indirect ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- system-contract-dapp-playground/package-lock.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/system-contract-dapp-playground/package-lock.json b/system-contract-dapp-playground/package-lock.json index e70e59a34..de87be4b1 100644 --- a/system-contract-dapp-playground/package-lock.json +++ b/system-contract-dapp-playground/package-lock.json @@ -4352,9 +4352,9 @@ "integrity": "sha512-dcKFX3jn0MpIaXjisoRvexIJVEKzaq7z2rZKxf+MSr9TkdmHmsU4m2lcLojrj/FHl8mk5VxMmYA+ftRkP/3oKQ==" }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dependencies": { "path-key": "^3.1.0", "shebang-command": "^2.0.0", From 424729d87e3d9534d6a9109a267d95fc18e7ebe0 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 19 Nov 2024 14:38:37 -0600 Subject: [PATCH 2/2] build(deps): Bump step-security/harden-runner from 2.10.1 to 2.10.2 (#1024) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.10.1 to 2.10.2. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/91182cccc01eb5e619899d80e4e971d6181294a7...0080882f6c36860b6ba35c610c98ce87d4e2f26f) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/dapp-playground-workflow.yml | 2 +- .github/workflows/flow-pr-title-check.yml | 2 +- .github/workflows/foundry_test.yml | 2 +- .github/workflows/migration-testing.yml | 2 +- .github/workflows/opcode-logger-testing.yml | 2 +- .github/workflows/pr-label-milestone-check.yml | 2 +- .github/workflows/release-automation.yml | 4 ++-- .github/workflows/release-production.yml | 2 +- .github/workflows/solidity-tests.yml | 2 +- .github/workflows/test-workflow.yml | 2 +- .github/workflows/tests.yml | 2 +- 11 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/dapp-playground-workflow.yml b/.github/workflows/dapp-playground-workflow.yml index 81a6cca0c..7603e02b5 100644 --- a/.github/workflows/dapp-playground-workflow.yml +++ b/.github/workflows/dapp-playground-workflow.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/flow-pr-title-check.yml b/.github/workflows/flow-pr-title-check.yml index c8740ecb3..91dfa6160 100644 --- a/.github/workflows/flow-pr-title-check.yml +++ b/.github/workflows/flow-pr-title-check.yml @@ -44,7 +44,7 @@ jobs: statuses: write steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/foundry_test.yml b/.github/workflows/foundry_test.yml index 754be39f9..ac361775e 100644 --- a/.github/workflows/foundry_test.yml +++ b/.github/workflows/foundry_test.yml @@ -17,7 +17,7 @@ jobs: runs-on: smart-contracts-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/migration-testing.yml b/.github/workflows/migration-testing.yml index 4e8981d46..9874b27f1 100644 --- a/.github/workflows/migration-testing.yml +++ b/.github/workflows/migration-testing.yml @@ -44,7 +44,7 @@ jobs: runs-on: smart-contracts-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/opcode-logger-testing.yml b/.github/workflows/opcode-logger-testing.yml index 4d8b4ae82..e657b7fa4 100644 --- a/.github/workflows/opcode-logger-testing.yml +++ b/.github/workflows/opcode-logger-testing.yml @@ -14,7 +14,7 @@ jobs: runs-on: smart-contracts-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/pr-label-milestone-check.yml b/.github/workflows/pr-label-milestone-check.yml index 5f4ebf043..a06e35bfd 100644 --- a/.github/workflows/pr-label-milestone-check.yml +++ b/.github/workflows/pr-label-milestone-check.yml @@ -10,7 +10,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/release-automation.yml b/.github/workflows/release-automation.yml index f3bfeeb16..1c51e0047 100644 --- a/.github/workflows/release-automation.yml +++ b/.github/workflows/release-automation.yml @@ -26,7 +26,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit @@ -142,7 +142,7 @@ jobs: PR_TITLE: ${{ needs.branch_bump_tag.outputs.pr_title }} steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/release-production.yml b/.github/workflows/release-production.yml index fff3e5a87..8d4789821 100644 --- a/.github/workflows/release-production.yml +++ b/.github/workflows/release-production.yml @@ -22,7 +22,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/solidity-tests.yml b/.github/workflows/solidity-tests.yml index a1f410a96..0b6176784 100644 --- a/.github/workflows/solidity-tests.yml +++ b/.github/workflows/solidity-tests.yml @@ -78,7 +78,7 @@ jobs: runs-on: smart-contracts-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/test-workflow.yml b/.github/workflows/test-workflow.yml index 8a3c486c4..6411b6c3e 100644 --- a/.github/workflows/test-workflow.yml +++ b/.github/workflows/test-workflow.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index b75b80f0a..d81850045 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -141,7 +141,7 @@ jobs: runs-on: smart-contracts-linux-large steps: - name: Harden Runner - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit