hoverkraft-tech · dependabot · Apr 17, 2026
diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml
@@ -86,7 +86,7 @@ jobs:
 
       # FIXME: superlinter should auto install required dependencies. See https://github.com/super-linter/super-linter/issues/6089.
       - id: has-prettier-plugins
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const { readFileSync } = require("node:fs");
@@ -104,7 +104,7 @@ jobs:
         with:
           working-directory: ${{ steps.has-prettier-plugins.outputs.package-json-dir }}
 
-      - uses: super-linter/super-linter/slim@5119dcd8011e92182ce8219d9e9efc82f16fddb6 # v8.0.0
+      - uses: super-linter/super-linter/slim@9e863354e3ff62e0727d37183162c4a88873df41 # v8.6.0
         env:
           VALIDATE_ALL_CODEBASE: ${{ inputs.lint-all }}
           LOG_LEVEL: WARN
@@ -159,7 +159,7 @@ jobs:
           dir_names_exclude_current_dir: true
 
       - id: get-files-to-lint
-        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         env:
           CHANGED_FILES_OUTPUT: ${{ steps.changed-files.outputs.all_changed_and_modified_files }}
           ACTION_FILES_INPUT: ${{ inputs.action-files }}

diff --git a/actions/create-and-merge-pull-request/action.yml b/actions/create-and-merge-pull-request/action.yml
@@ -34,7 +34,7 @@ runs:
   steps:
     # FIXME: This is a workaround until this issue is resolved: https://github.com/actions/runner/issues/1348.
     - name: Prepare sibling actions
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');
@@ -52,7 +52,7 @@ runs:
     - id: github-actions-bot-user
       uses: ./../self-actions/get-github-actions-bot-user
 
-    - uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
+    - uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
       id: create-pull-request
       with:
         token: ${{ inputs.github-token }}
@@ -69,7 +69,7 @@ runs:
 
     - id: wait-for-pull-request-mergeable-by-admin
       if: steps.create-pull-request.outputs.pull-request-number && steps.create-pull-request.outputs.pull-request-operation != 'closed'
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         PULL_REQUEST_NUMBER: ${{ steps.create-pull-request.outputs.pull-request-number }}
       with:
@@ -148,7 +148,7 @@ runs:
 
     - name: Cleanup sibling actions
       if: ${{ always() }}
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');

diff --git a/actions/create-or-update-comment/action.yml b/actions/create-or-update-comment/action.yml
@@ -36,7 +36,7 @@ runs:
   steps:
     # FIXME: This is a workaround until this issue is resolved: https://github.com/actions/runner/issues/1348.
     - name: Prepare sibling actions
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');
@@ -76,7 +76,7 @@ runs:
 
     - name: Cleanup sibling actions
       if: ${{ always() }}
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const path = require('node:path');

diff --git a/actions/get-issue-number/action.yml b/actions/get-issue-number/action.yml
@@ -14,7 +14,7 @@ runs:
   using: "composite"
   steps:
     - id: get-issue-number
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const pullRequestNumber = context.payload.pull_request?.number;

diff --git a/actions/get-matrix-outputs/action.yml b/actions/get-matrix-outputs/action.yml
@@ -24,7 +24,7 @@ runs:
   using: "composite"
   steps:
     - id: prepare-download
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         ARTIFACT_NAME_INPUT: ${{ inputs.artifact-name }}
       with:
@@ -48,7 +48,7 @@ runs:
         merge-multiple: true
 
     - id: read-artifacts
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         ARTIFACT_PATH: ${{ steps.prepare-download.outputs.artifact-path }}
         REMOVE_ARTIFACT: ${{ inputs.remove-artifact }}

diff --git a/actions/local-workflow-actions/action.yml b/actions/local-workflow-actions/action.yml
@@ -63,7 +63,7 @@ runs:
         sparse-checkout: |
           ${{ inputs.actions-path }}
 
-    - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+    - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           const fs = require('fs');

diff --git a/actions/parse-ci-reports/action.yml b/actions/parse-ci-reports/action.yml
@@ -81,7 +81,7 @@ runs:
 
     - name: Parse reports
       id: parse-reports
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         NODE_PATH: ${{ github.action_path }}/node_modules
         REPORT_PATHS: ${{ inputs.report-paths }}
@@ -111,7 +111,7 @@ runs:
 
     - name: Fail if errors detected
       if: inputs.fail-on-error == 'true' && steps.parse-reports.outputs.has-errors == 'true'
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         script: |
           core.setFailed('Test failures or errors detected in reports');
diff --git a/actions/repository-owner-is-organization/action.yml b/actions/repository-owner-is-organization/action.yml
@@ -20,7 +20,7 @@ runs:
   using: "composite"
   steps:
     - id: check-org
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       with:
         github-token: ${{ inputs.github-token }}
         script: |

diff --git a/actions/set-matrix-output/action.yml b/actions/set-matrix-output/action.yml
@@ -23,7 +23,7 @@ runs:
   using: "composite"
   steps:
     - id: prepare-upload
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         ARTIFACT_NAME_INPUT: ${{ inputs.artifact-name }}
         MATRIX_VALUE: ${{ inputs.value }}
@@ -48,7 +48,7 @@ runs:
           core.setOutput("artifact-path", artifactPath);
           writeFileSync(artifactPath, process.env.MATRIX_VALUE ?? "");
 
-    - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
+    - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
       with:
         name: ${{ steps.prepare-upload.outputs.artifact-unique-name }}
         path: ${{ steps.prepare-upload.outputs.artifact-path }}

diff --git a/actions/slugify/action.yml b/actions/slugify/action.yml
@@ -19,7 +19,7 @@ runs:
   using: "composite"
   steps:
     - id: slugifier
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         SLUGIFY_INPUT: ${{ inputs.value }}
       with:

diff --git a/actions/working-directory/action.yml b/actions/working-directory/action.yml
@@ -27,7 +27,7 @@ runs:
   using: "composite"
   steps:
     - id: working-directory
-      uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+      uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
       env:
         WORKING_DIRECTORY_INPUT: ${{ inputs.working-directory }}
         ENFORCE_PATH_IN_WORKSPACE_INPUT: ${{ inputs.enforce-path-in-workspace }}