From a9f9a22fbeac2b0ef9dfe0f79f0b01ba8bc208c2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 08:24:10 +0000 Subject: [PATCH] chore(deps): bump the patch-and-minor group across 1 directory with 3 updates Bumps the patch-and-minor group with 3 updates in the / directory: [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action), [lycheeverse/lychee-action](https://github.com/lycheeverse/lychee-action) and [hadolint/hadolint-action](https://github.com/hadolint/hadolint-action). Updates `aquasecurity/trivy-action` from 0.28.0 to 0.36.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/v0.28.0...v0.36.0) Updates `lycheeverse/lychee-action` from 2.8.0 to 2.9.0 - [Release notes](https://github.com/lycheeverse/lychee-action/releases) - [Commits](https://github.com/lycheeverse/lychee-action/compare/v2.8.0...v2.9.0) Updates `hadolint/hadolint-action` from 3.1.0 to 3.5.0 - [Release notes](https://github.com/hadolint/hadolint-action/releases) - [Commits](https://github.com/hadolint/hadolint-action/compare/v3.1.0...v3.5.0) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: hadolint/hadolint-action dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor - dependency-name: lycheeverse/lychee-action dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: patch-and-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/docker.yml | 2 +- .github/workflows/docs-check.yml | 2 +- .github/workflows/docs-lint.yml | 2 +- .github/workflows/iac-scan.yml | 2 +- .github/workflows/trivy-weekly.yml | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index bd9177c7..a3e1d0e2 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -155,7 +155,7 @@ jobs: measure crew-orchestrator:metrics measure healer-agent:metrics - name: Vulnerability scan with Trivy - uses: aquasecurity/trivy-action@v0.28.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: hypercode-core:metrics format: 'table' diff --git a/.github/workflows/docs-check.yml b/.github/workflows/docs-check.yml index 8791f80c..21ea1727 100644 --- a/.github/workflows/docs-check.yml +++ b/.github/workflows/docs-check.yml @@ -24,7 +24,7 @@ jobs: fetch-depth: 0 - name: Check canonical markdown links - uses: lycheeverse/lychee-action@v2.8.0 + uses: lycheeverse/lychee-action@v2.9.0 with: args: >- --verbose diff --git a/.github/workflows/docs-lint.yml b/.github/workflows/docs-lint.yml index 5a14347f..89735d42 100644 --- a/.github/workflows/docs-lint.yml +++ b/.github/workflows/docs-lint.yml @@ -22,7 +22,7 @@ jobs: input: '.' - name: Lychee link check - uses: lycheeverse/lychee-action@v2.8.0 + uses: lycheeverse/lychee-action@v2.9.0 with: args: >- --verbose diff --git a/.github/workflows/iac-scan.yml b/.github/workflows/iac-scan.yml index 365620d4..66f24621 100644 --- a/.github/workflows/iac-scan.yml +++ b/.github/workflows/iac-scan.yml @@ -28,7 +28,7 @@ jobs: - name: Lint all Dockerfiles id: hadolint - uses: hadolint/hadolint-action@v3.1.0 + uses: hadolint/hadolint-action@v3.5.0 with: recursive: true failure-threshold: error diff --git a/.github/workflows/trivy-weekly.yml b/.github/workflows/trivy-weekly.yml index e6673039..26b20223 100644 --- a/.github/workflows/trivy-weekly.yml +++ b/.github/workflows/trivy-weekly.yml @@ -94,7 +94,7 @@ jobs: ${{ matrix.context }} - name: Trivy scan — JSON report - uses: aquasecurity/trivy-action@0.28.0 + uses: aquasecurity/trivy-action@v0.36.0 with: image-ref: hypercode-weekly-${{ matrix.agent }}:scan format: json