Files
oxc-project__oxc/.github/workflows/semgrep.yml
renovate[bot] a6b863ac06 chore(deps): update github actions (#25216)
This PR contains the following updates:

| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
|
[oxc-project/setup-node](https://redirect.github.com/oxc-project/setup-node)
| action | patch | `v1.3.1` → `v1.3.2` | `v1.4.0` |
|
[semgrep/semgrep](https://redirect.github.com/semgrep/semgrep-proprietary)
| container | minor | `1.171.0` → `1.172.0` | |
|
[taiki-e/install-action](https://redirect.github.com/taiki-e/install-action)
| action | patch | `v2.85.0` → `v2.85.4` | `v2.85.7` (+2) |

---

### Release Notes

<details>
<summary>oxc-project/setup-node (oxc-project/setup-node)</summary>

###
[`v1.3.2`](https://redirect.github.com/oxc-project/setup-node/releases/tag/v1.3.2)

[Compare
Source](https://redirect.github.com/oxc-project/setup-node/compare/v1.3.1...v1.3.2)

#### What's Changed

- docs: normalize README sponsor section by
[@&#8203;Boshen](https://redirect.github.com/Boshen) in
[#&#8203;25](https://redirect.github.com/oxc-project/setup-node/pull/25)
- docs: update sponsor section by
[@&#8203;Boshen](https://redirect.github.com/Boshen) in
[#&#8203;26](https://redirect.github.com/oxc-project/setup-node/pull/26)
- ci(semgrep): add scan workflow by
[@&#8203;Boshen](https://redirect.github.com/Boshen) in
[#&#8203;29](https://redirect.github.com/oxc-project/setup-node/pull/29)
- Update semgrep/semgrep Docker tag to v1.170.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;30](https://redirect.github.com/oxc-project/setup-node/pull/30)
- Update pnpm/action-setup action to v6.0.9 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;22](https://redirect.github.com/oxc-project/setup-node/pull/22)
- Update actions/cache action to v5.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;24](https://redirect.github.com/oxc-project/setup-node/pull/24)
- Update actions/setup-node action to v6.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;27](https://redirect.github.com/oxc-project/setup-node/pull/27)
- Update actions/cache action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;23](https://redirect.github.com/oxc-project/setup-node/pull/23)
- Update actions/setup-node action to v7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;28](https://redirect.github.com/oxc-project/setup-node/pull/28)

**Full Changelog**:
<https://github.com/oxc-project/setup-node/compare/v1.3.1...v1.3.2>

</details>

<details>
<summary>taiki-e/install-action (taiki-e/install-action)</summary>

###
[`v2.85.4`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.4):
2.85.4

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.3...v2.85.4)

- Update `uv@latest` to 0.11.33.

- Update `mise@latest` to 2026.7.15.

- Update `biome@latest` to 2.5.6.

###
[`v2.85.3`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.3):
2.85.3

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.2...v2.85.3)

- Update `xh@latest` to 0.26.2.

- Update `ubi@latest` to 0.10.0.

- Update `mise@latest` to 2026.7.14.

- Update `martin@latest` to 1.13.0.

- Update `cargo-shear@latest` to 1.13.3.

- Update `cargo-binstall@latest` to 1.21.1.

###
[`v2.85.2`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.2):
2.85.2

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.1...v2.85.2)

- Update `prek@latest` to 0.4.11.

- Update `mise@latest` to 2026.7.13.

- Update `kingfisher@latest` to 1.109.0.

###
[`v2.85.1`](https://redirect.github.com/taiki-e/install-action/releases/tag/v2.85.1):
2.85.1

[Compare
Source](https://redirect.github.com/taiki-e/install-action/compare/v2.85.0...v2.85.1)

- Update `vacuum@latest` to 0.30.0.

- Update `uv@latest` to 0.11.32.

- Update `mise@latest` to 2026.7.12.

- Update `cyclonedx@latest` to 0.33.1.

- Update `cargo-neat@latest` to 0.5.2.

</details>

---

### Configuration

📅 **Schedule**: (in timezone Asia/Shanghai)

- Branch creation
  - "before 10am on monday"
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/oxc-project/oxc).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4zLjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4zLjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-08-02 20:23:08 +01:00

27 lines
574 B
YAML

name: Semgrep
permissions: {}
on:
workflow_dispatch:
pull_request:
types: [opened, synchronize]
push:
branches:
- main
concurrency:
group: ${{ github.workflow }}-${{ github.ref_name }}-${{ github.event.pull_request.number || github.sha }}
cancel-in-progress: ${{ github.ref_name != 'main' }}
jobs:
semgrep:
name: Semgrep
runs-on: ubuntu-latest
container:
image: semgrep/semgrep:1.172.0
steps:
- uses: taiki-e/checkout-action@7d1e50e93dc4fb3bba58f85018fadf77898aee8b # v1.4.2
- run: semgrep scan --config auto