From 7187726cf0f059a49efdd6710d9caefeb221269d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 1 Oct 2026 10:43:30 +0000 Subject: [PATCH 1/2] build(deps): bump zizmorcore/zizmor-action from 0.6.1 to 0.6.4 Bumps [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) from 0.6.1 to 0.6.4. - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/6fc4b006235f201fdab3722e17240ab420d580e5...cc914d7f3750a2d13d75c7f184a1060aa0e9d482) --- updated-dependencies: - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/tests.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index ec32fd687b..4440321399 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -129,7 +129,7 @@ jobs: with: persist-credentials: false - name: Run zizmor - uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1 + uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4 with: advanced-security: false From b56133048613c929490beb05062f33920701784a Mon Sep 17 00:00:00 2001 From: Josh Larson Date: Fri, 16 Oct 2026 16:53:59 -0400 Subject: [PATCH 2/2] fix(robot): Use the updated self-repo syntax --- .github/workflows/deploy-auto.yml | 4 ++-- .github/workflows/deploy-manual.yml | 4 ++-- .github/workflows/deploy-pr.yml | 4 ++-- .github/workflows/deploy-release.yml | 4 ++-- .github/workflows/tests.yml | 28 ++++++++++++++-------------- .github/workflows/use-deploy-ecs.yml | 4 ++-- 6 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/deploy-auto.yml b/.github/workflows/deploy-auto.yml index f708d9a4a5..70dba80f21 100644 --- a/.github/workflows/deploy-auto.yml +++ b/.github/workflows/deploy-auto.yml @@ -16,7 +16,7 @@ jobs: auto: # Skip this workflow if the commit message contains "AUTOMATED TRANSLATIONS" if: ${{ !contains(github.event.head_commit.message, 'AUTOMATED TRANSLATIONS') }} - uses: ./.github/workflows/use-deploy-ecs.yml + uses: $/.github/workflows/use-deploy-ecs.yml permissions: contents: read id-token: write @@ -29,7 +29,7 @@ jobs: notify: needs: [auto] - uses: ./.github/workflows/use-notify-slack.yml + uses: $/.github/workflows/use-notify-slack.yml if: ${{ !cancelled() }} secrets: slack-webhook: ${{ secrets.SLACK_WEBHOOK }} diff --git a/.github/workflows/deploy-manual.yml b/.github/workflows/deploy-manual.yml index c93f6056dc..dc2c7d9b64 100644 --- a/.github/workflows/deploy-manual.yml +++ b/.github/workflows/deploy-manual.yml @@ -16,7 +16,7 @@ permissions: jobs: branch: - uses: ./.github/workflows/use-deploy-ecs.yml + uses: $/.github/workflows/use-deploy-ecs.yml permissions: contents: read id-token: write @@ -29,7 +29,7 @@ jobs: notify: needs: [branch] - uses: ./.github/workflows/use-notify-slack.yml + uses: $/.github/workflows/use-notify-slack.yml if: ${{ !cancelled() }} secrets: slack-webhook: ${{ secrets.SLACK_WEBHOOK }} diff --git a/.github/workflows/deploy-pr.yml b/.github/workflows/deploy-pr.yml index 37b9c741ee..b76155d57d 100644 --- a/.github/workflows/deploy-pr.yml +++ b/.github/workflows/deploy-pr.yml @@ -26,7 +26,7 @@ jobs: pr: # env not available for job if if: ${{ contains(github.event.pull_request.labels.*.name, 'dev-green') || contains(github.event.pull_request.labels.*.name, 'dev-blue') }} - uses: ./.github/workflows/use-deploy-ecs.yml + uses: $/.github/workflows/use-deploy-ecs.yml permissions: contents: read id-token: write @@ -39,7 +39,7 @@ jobs: notify: needs: [pr] - uses: ./.github/workflows/use-notify-slack.yml + uses: $/.github/workflows/use-notify-slack.yml if: ${{ success() || failure() }} secrets: slack-webhook: ${{ secrets.SLACK_WEBHOOK }} diff --git a/.github/workflows/deploy-release.yml b/.github/workflows/deploy-release.yml index e41bde75a1..0e757f973e 100644 --- a/.github/workflows/deploy-release.yml +++ b/.github/workflows/deploy-release.yml @@ -11,7 +11,7 @@ permissions: jobs: release: - uses: ./.github/workflows/use-deploy-ecs.yml + uses: $/.github/workflows/use-deploy-ecs.yml permissions: contents: read id-token: write @@ -25,7 +25,7 @@ jobs: notify: needs: [release] - uses: ./.github/workflows/use-notify-slack.yml + uses: $/.github/workflows/use-notify-slack.yml if: ${{ !cancelled() }} secrets: slack-webhook: ${{ secrets.SLACK_WEBHOOK }} diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 4440321399..c207ece02f 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -68,7 +68,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: npm run ci:lint:ts jslint: @@ -80,7 +80,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: npm run ci:lint:js stylelint: @@ -92,7 +92,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: npm run ci:lint:scss elixirlint: @@ -104,7 +104,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: git fetch origin main:main - run: npm run ci:lint:ex @@ -117,7 +117,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: mix deps.unlock --check-unused zizmor: @@ -140,7 +140,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - name: Cache _build uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: @@ -162,7 +162,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: | @@ -188,7 +188,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: npm run ci:unit:mocha js_unit_2: @@ -200,7 +200,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: TZ="America/New_York" npm run ci:unit:jest type_dialyzer: @@ -212,7 +212,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - uses: mbta/actions/dialyzer@d37877022d4ae12e96663d2e0a970a5214a2e232 # v2.20 type_typescript: @@ -224,7 +224,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: npm run ci:types:ts elixir_format_check: @@ -236,7 +236,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: npm run ci:format:ex js_format_check: @@ -248,7 +248,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - run: npm run ci:format:ts check_translations: @@ -260,7 +260,7 @@ jobs: - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - - uses: ./.github/actions/setup-all + - uses: $/.github/actions/setup-all - uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: | diff --git a/.github/workflows/use-deploy-ecs.yml b/.github/workflows/use-deploy-ecs.yml index 418bdd9288..5368e9c039 100644 --- a/.github/workflows/use-deploy-ecs.yml +++ b/.github/workflows/use-deploy-ecs.yml @@ -187,14 +187,14 @@ jobs: permissions: contents: read needs: deploy - uses: ./.github/workflows/crawler.yml + uses: $/.github/workflows/crawler.yml with: deployment-env: ${{ inputs.deployment-env }} monitor: permissions: contents: read id-token: write - uses: ./.github/workflows/push-monitor.yml + uses: $/.github/workflows/push-monitor.yml with: deployment-env: ${{ inputs.deployment-env }} secrets: