Bump the github-actions group with 4 updates Bumps the github-actions group with 4 updates: [step-security/harden-runner](https://github.com/step-security/harden-runner), [bazelbuild/continuous-integration/actions/cherry_picker](https://github.com/bazelbuild/continuous-integration), [bazelbuild/continuous-integration/actions/release-helper](https://github.com/bazelbuild/continuous-integration) and [github/codeql-action/upload-sarif](https://github.com/github/codeql-action). Updates `step-security/harden-runner` from 2.20.0 to 2.21.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/bf7454d06d71f1098171f2acdf0cd4708d7b5920...05e31511f85b41b11d1cf0ef85d0992719546e2c) Updates `bazelbuild/continuous-integration/actions/cherry_picker` from 8fae15fdb0532109a35cae0ca16041fc424c0a9b to b083e2340a904ef1a3b7677c091dc59d3e73e154 - [Release notes](https://github.com/bazelbuild/continuous-integration/releases) - [Changelog](https://github.com/bazelbuild/continuous-integration/blob/master/docs/release-playbook.md) - [Commits](https://github.com/bazelbuild/continuous-integration/compare/8fae15fdb0532109a35cae0ca16041fc424c0a9b...b083e2340a904ef1a3b7677c091dc59d3e73e154) Updates `bazelbuild/continuous-integration/actions/release-helper` from 8fae15fdb0532109a35cae0ca16041fc424c0a9b to b083e2340a904ef1a3b7677c091dc59d3e73e154 - [Release notes](https://github.com/bazelbuild/continuous-integration/releases) - [Changelog](https://github.com/bazelbuild/continuous-integration/blob/master/docs/release-playbook.md) - [Commits](https://github.com/bazelbuild/continuous-integration/compare/8fae15fdb0532109a35cae0ca16041fc424c0a9b...b083e2340a904ef1a3b7677c091dc59d3e73e154) Updates `github/codeql-action/upload-sarif` from 4.37.3 to 4.37.9 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81...cdf488f595d80d6e07e03d4674febd5ab45fa938) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: bazelbuild/continuous-integration/actions/cherry_picker dependency-version: b083e2340a904ef1a3b7677c091dc59d3e73e154 dependency-type: direct:production dependency-group: github-actions - dependency-name: bazelbuild/continuous-integration/actions/release-helper dependency-version: b083e2340a904ef1a3b7677c091dc59d3e73e154 dependency-type: direct:production dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
{Fast, Correct} - Choose two
Build and test software of any size, quickly and reliably.
Speed up your builds and tests: Bazel rebuilds only what is necessary. With advanced local and distributed caching, optimized dependency analysis and parallel execution, you get fast and incremental builds.
One tool, multiple languages: Build and test Java, C++, Android, iOS, Go, and a wide variety of other language platforms. Bazel runs on Windows, macOS, and Linux.
Scalable: Bazel helps you scale your organization, codebase, and continuous integration solution. It handles codebases of any size, in multiple repositories or a huge monorepo.
Extensible to your needs: Easily add support for new languages and platforms with Bazel's familiar extension language. Share and re-use language rules written by the growing Bazel community.
To report a security issue, please email security@bazel.build with a description of the issue, the steps you took to create the issue, affected versions, and, if known, mitigations for the issue. Our vulnerability management team will respond within 3 working days of your email. If the issue is confirmed as a vulnerability, we will open a Security Advisory. This project follows a 90 day disclosure timeline.
See CONTRIBUTING.md
