Merge PR #249

Author: AdamVe

.github/workflows/android.yml

@@ -11,12 +11,12 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683             # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8             # v6.0.1
         with:
           ref: ${{ github.event.workflow_run.head_branch }}
 
       - name: Set up JDK
-        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00           # v4.7.1
+        uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165           # v5.0.0
         with:
           distribution: 'temurin'
           java-version: '17'
@@ -28,7 +28,7 @@ jobs:
         run: NO_GPG_SIGN=true ./gradlew --stacktrace check test build javadocJar publishToMavenLocal
 
       - name: Upload jars
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02      # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4      # v5.0.0
         with:
           name: maven-repo
           path: ~/.m2/repository/com/yubico/yubikit/

.github/workflows/scan.yml

@@ -29,22 +29,22 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683                    # v4.2.2
+      uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8                    # v6.0.1
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@7273f08caa1dcf2c2837f362f1982de0ab4dc344           # v2.22.3
+      uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2           # v4.31.6
       with:
         languages: ${{ matrix.language }}
 
     - name: Setup Java
-      uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00                  # v4.7.1
+      uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165                  # v5.0.0
       with:
         distribution: 'temurin'
         java-version: '17'
 
     - name: Autobuild
-      uses: github/codeql-action/autobuild@7273f08caa1dcf2c2837f362f1982de0ab4dc344      # v2.22.3
+      uses: github/codeql-action/autobuild@fe4161a26a8629af62121b670040955b330f9af2      # v4.31.6
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@7273f08caa1dcf2c2837f362f1982de0ab4dc344        # v2.22.3
+      uses: github/codeql-action/analyze@fe4161a26a8629af62121b670040955b330f9af2        # v4.31.6

.github/workflows/scorecards.yml

@@ -36,17 +36,17 @@ jobs:
 
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@ec9f2d5744a09debf3a187a3f4f675c53b671911 # v2.13.0
+        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
         with:
           egress-policy: audit
 
       - name: "Checkout code"
-        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@05b42c624433fc40578a4040d5cf5e36ddca8cde # v2.4.2
+        uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
           results_file: results.sarif
           results_format: sarif
@@ -68,14 +68,14 @@ jobs:
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
       - name: "Upload artifact"
-        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
+        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3.29.11
+        uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
         with:
           sarif_file: results.sarif

.github/workflows/spotbugs-scan.yml

@@ -28,18 +28,18 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683                 # v4.2.2
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8                 # v6.0.1
 
       - name: Setup Java
-        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00               # v4.7.1
+        uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00               # v5.0.0
         with:
           distribution: "temurin"
           java-version: "17"
 
       - name: Build with Gradle
         run: ./gradlew spotbugsRelease spotbugsMain
 
-      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02          # v4.6.2
+      - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4          # v5.0.0
         with:
           name: sarif-files
           path: ./build/spotbugs/*.sarif
@@ -76,7 +76,7 @@ jobs:
           ]
 
     steps:
-      - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0        # v5.0.0
+      - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53        # v6.0.0
         with:
           name: sarif-files
 
@@ -96,7 +96,7 @@ jobs:
           jq -c '.' > ${OUTPUT}
 
       - name: Upload SARIF for ${{ matrix.module }}
-        uses: github/codeql-action/upload-sarif@7273f08caa1dcf2c2837f362f1982de0ab4dc344   #v2.22.3
+        uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2   #v4.31.6
         with:
           sarif_file: spotbugs-${{ matrix.module }}.json
           category: spotbugs-analysis-${{ matrix.module }}