chore(ci): bump the gh-actions-packages group with 4 updates #9535
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the gh-actions-packages group with 4 updates: [actions/github-script](https://github.com/actions/github-script), [github/codeql-action](https://github.com/github/codeql-action), [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) and [actions/stale](https://github.com/actions/stale). Updates `actions/github-script` from 7.0.1 to 8.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@60a0d83...ed59741) Updates `github/codeql-action` from 3.30.0 to 3.30.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@2d92b76...192325c) Updates `aquasecurity/trivy-action` from 0.33.0 to 0.33.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@f9424c1...b6643a2) Updates `actions/stale` from 9.1.0 to 10.0.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](actions/stale@5bef64f...3a9db7e) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages - dependency-name: github/codeql-action dependency-version: 3.30.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: aquasecurity/trivy-action dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: actions/stale dependency-version: 10.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
comp: tooling
Contributor
|
🎯 Code Coverage 🔗 Commit SHA: 68b88d8 | Docs | Was this helpful? Give us feedback! |
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 49 metrics, 10 unstable metrics. Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.063 s) : 0, 1063237
Total [baseline] (8.665 s) : 0, 8664570
Agent [candidate] (1.061 s) : 0, 1061232
Total [candidate] (8.625 s) : 0, 8624567
section iast
Agent [baseline] (1.19 s) : 0, 1189928
Total [baseline] (9.31 s) : 0, 9309708
Agent [candidate] (1.188 s) : 0, 1187900
Total [candidate] (9.324 s) : 0, 9324014
gantt
title insecure-bank - break down per module: candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section tracing
crashtracking [baseline] (1.466 ms) : 0, 1466
crashtracking [candidate] (1.439 ms) : 0, 1439
BytebuddyAgent [baseline] (735.198 ms) : 0, 735198
BytebuddyAgent [candidate] (732.622 ms) : 0, 732622
GlobalTracer [baseline] (252.033 ms) : 0, 252033
GlobalTracer [candidate] (252.296 ms) : 0, 252296
AppSec [baseline] (30.624 ms) : 0, 30624
AppSec [candidate] (30.666 ms) : 0, 30666
Debugger [baseline] (6.384 ms) : 0, 6384
Debugger [candidate] (6.365 ms) : 0, 6365
Remote Config [baseline] (695.304 µs) : 0, 695
Remote Config [candidate] (688.788 µs) : 0, 689
Telemetry [baseline] (15.744 ms) : 0, 15744
Telemetry [candidate] (16.118 ms) : 0, 16118
section iast
crashtracking [baseline] (1.457 ms) : 0, 1457
crashtracking [candidate] (1.454 ms) : 0, 1454
BytebuddyAgent [baseline] (851.721 ms) : 0, 851721
BytebuddyAgent [candidate] (850.037 ms) : 0, 850037
GlobalTracer [baseline] (249.928 ms) : 0, 249928
GlobalTracer [candidate] (246.705 ms) : 0, 246705
IAST [baseline] (24.692 ms) : 0, 24692
IAST [candidate] (25.663 ms) : 0, 25663
AppSec [baseline] (26.412 ms) : 0, 26412
AppSec [candidate] (28.06 ms) : 0, 28060
Debugger [baseline] (5.989 ms) : 0, 5989
Debugger [candidate] (6.067 ms) : 0, 6067
Remote Config [baseline] (615.545 µs) : 0, 616
Remote Config [candidate] (595.301 µs) : 0, 595
Telemetry [baseline] (8.105 ms) : 0, 8105
Telemetry [candidate] (8.299 ms) : 0, 8299
Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.08 s) : 0, 1079851
Total [baseline] (10.996 s) : 0, 10996269
Agent [candidate] (1.063 s) : 0, 1062985
Total [candidate] (10.746 s) : 0, 10746334
section appsec
Agent [baseline] (1.242 s) : 0, 1242260
Total [baseline] (11.132 s) : 0, 11132152
Agent [candidate] (1.247 s) : 0, 1247263
Total [candidate] (11.087 s) : 0, 11086946
section iast
Agent [baseline] (1.194 s) : 0, 1194224
Total [baseline] (11.037 s) : 0, 11036909
Agent [candidate] (1.19 s) : 0, 1189892
Total [candidate] (11.043 s) : 0, 11043368
section profiling
Agent [baseline] (1.215 s) : 0, 1214886
Total [baseline] (11.01 s) : 0, 11010294
Agent [candidate] (1.211 s) : 0, 1211147
Total [candidate] (11.004 s) : 0, 11003750
gantt
title petclinic - break down per module: candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section tracing
crashtracking [baseline] (1.474 ms) : 0, 1474
crashtracking [candidate] (1.453 ms) : 0, 1453
BytebuddyAgent [baseline] (746.065 ms) : 0, 746065
BytebuddyAgent [candidate] (733.862 ms) : 0, 733862
GlobalTracer [baseline] (256.382 ms) : 0, 256382
GlobalTracer [candidate] (252.634 ms) : 0, 252634
AppSec [baseline] (31.101 ms) : 0, 31101
AppSec [candidate] (30.55 ms) : 0, 30550
Debugger [baseline] (6.426 ms) : 0, 6426
Debugger [candidate] (6.354 ms) : 0, 6354
Remote Config [baseline] (702.958 µs) : 0, 703
Remote Config [candidate] (687.331 µs) : 0, 687
Telemetry [baseline] (16.353 ms) : 0, 16353
Telemetry [candidate] (16.349 ms) : 0, 16349
section appsec
crashtracking [baseline] (1.463 ms) : 0, 1463
crashtracking [candidate] (1.468 ms) : 0, 1468
BytebuddyAgent [baseline] (760.936 ms) : 0, 760936
BytebuddyAgent [candidate] (763.094 ms) : 0, 763094
GlobalTracer [baseline] (247.185 ms) : 0, 247185
GlobalTracer [candidate] (249.146 ms) : 0, 249146
IAST [baseline] (23.931 ms) : 0, 23931
IAST [candidate] (24.392 ms) : 0, 24392
AppSec [baseline] (172.17 ms) : 0, 172170
AppSec [candidate] (172.515 ms) : 0, 172515
Debugger [baseline] (6.063 ms) : 0, 6063
Debugger [candidate] (6.053 ms) : 0, 6053
Remote Config [baseline] (630.158 µs) : 0, 630
Remote Config [candidate] (633.352 µs) : 0, 633
Telemetry [baseline] (8.533 ms) : 0, 8533
Telemetry [candidate] (8.619 ms) : 0, 8619
section iast
crashtracking [baseline] (1.458 ms) : 0, 1458
crashtracking [candidate] (1.463 ms) : 0, 1463
BytebuddyAgent [baseline] (855.07 ms) : 0, 855070
BytebuddyAgent [candidate] (851.992 ms) : 0, 851992
GlobalTracer [baseline] (246.572 ms) : 0, 246572
GlobalTracer [candidate] (247.316 ms) : 0, 247316
IAST [baseline] (29.739 ms) : 0, 29739
IAST [candidate] (27.106 ms) : 0, 27106
AppSec [baseline] (25.522 ms) : 0, 25522
AppSec [candidate] (26.349 ms) : 0, 26349
Debugger [baseline] (6.027 ms) : 0, 6027
Debugger [candidate] (6.036 ms) : 0, 6036
Remote Config [baseline] (616.494 µs) : 0, 616
Remote Config [candidate] (595.881 µs) : 0, 596
Telemetry [baseline] (8.109 ms) : 0, 8109
Telemetry [candidate] (8.043 ms) : 0, 8043
section profiling
crashtracking [baseline] (1.442 ms) : 0, 1442
crashtracking [candidate] (1.433 ms) : 0, 1433
BytebuddyAgent [baseline] (765.598 ms) : 0, 765598
BytebuddyAgent [candidate] (762.707 ms) : 0, 762707
GlobalTracer [baseline] (234.309 ms) : 0, 234309
GlobalTracer [candidate] (233.392 ms) : 0, 233392
AppSec [baseline] (30.697 ms) : 0, 30697
AppSec [candidate] (31.038 ms) : 0, 31038
Debugger [baseline] (10.613 ms) : 0, 10613
Debugger [candidate] (11.244 ms) : 0, 11244
Remote Config [baseline] (829.422 µs) : 0, 829
Remote Config [candidate] (1.485 ms) : 0, 1485
Telemetry [baseline] (12.464 ms) : 0, 12464
Telemetry [candidate] (10.327 ms) : 0, 10327
ProfilingAgent [baseline] (107.676 ms) : 0, 107676
ProfilingAgent [candidate] (108.469 ms) : 0, 108469
Profiling [baseline] (108.313 ms) : 0, 108313
Profiling [candidate] (109.121 ms) : 0, 109121
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 1 performance regressions! Performance is the same for 11 metrics, 12 unstable metrics.
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section baseline
no_agent (37.487 ms) : 37184, 37790
. : milestone, 37487,
appsec (47.653 ms) : 47230, 48076
. : milestone, 47653,
code_origins (45.115 ms) : 44742, 45489
. : milestone, 45115,
iast (44.913 ms) : 44530, 45296
. : milestone, 44913,
profiling (47.936 ms) : 47464, 48408
. : milestone, 47936,
tracing (44.091 ms) : 43721, 44460
. : milestone, 44091,
section candidate
no_agent (37.166 ms) : 36872, 37460
. : milestone, 37166,
appsec (49.13 ms) : 48700, 49560
. : milestone, 49130,
code_origins (45.308 ms) : 44904, 45712
. : milestone, 45308,
iast (44.191 ms) : 43801, 44581
. : milestone, 44191,
profiling (48.1 ms) : 47667, 48534
. : milestone, 48100,
tracing (43.251 ms) : 42879, 43624
. : milestone, 43251,
Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section baseline
no_agent (4.249 ms) : 4198, 4299
. : milestone, 4249,
iast (9.592 ms) : 9426, 9758
. : milestone, 9592,
iast_FULL (14.104 ms) : 13820, 14388
. : milestone, 14104,
iast_GLOBAL (10.523 ms) : 10336, 10710
. : milestone, 10523,
profiling (9.23 ms) : 9082, 9377
. : milestone, 9230,
tracing (7.644 ms) : 7529, 7760
. : milestone, 7644,
section candidate
no_agent (4.251 ms) : 4203, 4298
. : milestone, 4251,
iast (9.506 ms) : 9339, 9673
. : milestone, 9506,
iast_FULL (13.96 ms) : 13684, 14236
. : milestone, 13960,
iast_GLOBAL (10.541 ms) : 10357, 10725
. : milestone, 10541,
profiling (9.261 ms) : 9110, 9412
. : milestone, 9261,
tracing (7.627 ms) : 7519, 7735
. : milestone, 7627,
DacapoParameters
See matching parameters
SummaryFound 1 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 1 unstable metrics.
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section baseline
no_agent (15.523 s) : 15523000, 15523000
. : milestone, 15523000,
appsec (15.039 s) : 15039000, 15039000
. : milestone, 15039000,
iast (18.419 s) : 18419000, 18419000
. : milestone, 18419000,
iast_GLOBAL (18.035 s) : 18035000, 18035000
. : milestone, 18035000,
profiling (15.916 s) : 15916000, 15916000
. : milestone, 15916000,
tracing (15.108 s) : 15108000, 15108000
. : milestone, 15108000,
section candidate
no_agent (15.273 s) : 15273000, 15273000
. : milestone, 15273000,
appsec (14.999 s) : 14999000, 14999000
. : milestone, 14999000,
iast (18.246 s) : 18246000, 18246000
. : milestone, 18246000,
iast_GLOBAL (18.143 s) : 18143000, 18143000
. : milestone, 18143000,
profiling (15.924 s) : 15924000, 15924000
. : milestone, 15924000,
tracing (14.957 s) : 14957000, 14957000
. : milestone, 14957000,
Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.54.0-SNAPSHOT~68b88d8194, baseline=1.54.0-SNAPSHOT~8d08c362b5
dateFormat X
axisFormat %s
section baseline
no_agent (1.477 ms) : 1465, 1489
. : milestone, 1477,
appsec (3.692 ms) : 3474, 3909
. : milestone, 3692,
iast (2.202 ms) : 2140, 2264
. : milestone, 2202,
iast_GLOBAL (2.245 ms) : 2182, 2308
. : milestone, 2245,
profiling (2.472 ms) : 2251, 2692
. : milestone, 2472,
tracing (2.016 ms) : 1968, 2064
. : milestone, 2016,
section candidate
no_agent (1.475 ms) : 1464, 1487
. : milestone, 1475,
appsec (2.458 ms) : 2408, 2508
. : milestone, 2458,
iast (2.204 ms) : 2142, 2266
. : milestone, 2204,
iast_GLOBAL (2.242 ms) : 2179, 2305
. : milestone, 2242,
profiling (2.036 ms) : 1986, 2086
. : milestone, 2036,
tracing (2.027 ms) : 1978, 2076
. : milestone, 2027,
|
PerfectSlayer
approved these changes
Sep 16, 2025
bric3
approved these changes
Sep 16, 2025
PerfectSlayer
deleted the
dependabot/github_actions/gh-actions-packages-9b8dba51b8
branch
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the gh-actions-packages group with 4 updates: actions/github-script, github/codeql-action, aquasecurity/trivy-action and actions/stale.
Updates
actions/github-scriptfrom 7.0.1 to 8.0.0Release notes
Sourced from actions/github-script's releases.
Commits
ed59741Merge pull request #653 from actions/sneha-krip/readme-for-v82dc352eBold minimum Actions Runner version in README01e118cUpdate README for Node 24 runtime requirements8b222acApply suggestion from@salmanmkcadc0eeaREADME for updating actions/github-script from v7 to v820fe497Merge pull request #637 from actions/node24e7b7f22update licenses2c81ba0Update Node.js version support to 24.xf28e40cMerge pull request #610 from actions/nebuk89-patch-11ae9958Update README.mdUpdates
github/codeql-actionfrom 3.30.0 to 3.30.3Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
192325cMerge pull request #3104 from github/update-v3.30.3-b660efdcfe68956dUpdate changelog for v3.30.3b660efdMerge pull request #3103 from github/mbg/fix/category-checke49458bFixrunInterpretResultsForusing the wrongAnalysisConfigforcategoryfixf374a62Merge pull request #3098 from github/kaspersv/increase-overlay-base-size-limit5efa438Merge pull request #3101 from github/mbg/public-repo-notice-in-pr-template8a84a62Overlay: Increase size limit for cached overlay base databaseeb50a88Merge pull request #3097 from github/redsun82/only-dump-sarif4c53461Tweak sarif dump logdae3742Dump soon to be uploaded SARIF on requestUpdates
aquasecurity/trivy-actionfrom 0.33.0 to 0.33.1Release notes
Sourced from aquasecurity/trivy-action's releases.
Commits
b6643a2Update setup-trivy action to version v0.2.4 (#486)Updates
actions/stalefrom 9.1.0 to 10.0.0Release notes
Sourced from actions/stale's releases.
Commits
3a9db7eUpgrade to node 24 (#1279)8f717f0Bumps form-data (#1277)a92fd57build(deps): bump undici from 5.28.5 to 5.29.0 (#1251)128b2c8Introducing sort-by option (#1254)f78de97Update README.md (#1248)816d9dbUpgrade@action/cachefrom 4.0.2 to 4.0.3 (#1233)ba23c1cupgrade actions/cache from 4.0.0 to 4.0.2 (#1226)a65e88abuild(deps): bump undici from 5.28.4 to 5.28.5 (#1201)d4df79cUpdates to CHANGELOG.MD for recent releases (#1224)ee7ef89build(deps): bump actions/publish-immutable-action from 0.0.3 to 0.0.4 (#1186)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions