chore(ci): bump the gh-actions-packages group with 2 updates#10587
Merged
gh-worker-dd-mergequeue-cf854d[bot] merged 1 commit intomasterfrom Feb 13, 2026
Conversation
Bumps the gh-actions-packages group with 2 updates: [github/codeql-action](https://github.com/github/codeql-action) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action). Updates `github/codeql-action` from 4.32.2 to 4.32.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@45cbd0c...9e907b5) Updates `aquasecurity/trivy-action` from 0.33.1 to 0.34.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@b6643a2...c1824fd) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.32.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gh-actions-packages - dependency-name: aquasecurity/trivy-action dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gh-actions-packages ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
comp: tooling
dependabot
bot
added
the
tag: no release notes
dependabot
bot
requested review from
sarahchen6
and removed request for
a team
dependabot
bot
added
tag: dependencies
BenchmarksStartupParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 63 metrics, 8 unstable metrics. Startup time reports for petclinicgantt
title petclinic - global startup overhead: candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.064 s) : 0, 1064108
Total [baseline] (10.959 s) : 0, 10959252
Agent [candidate] (1.07 s) : 0, 1069571
Total [candidate] (10.947 s) : 0, 10947222
section appsec
Agent [baseline] (1.248 s) : 0, 1248151
Total [baseline] (11.11 s) : 0, 11109688
Agent [candidate] (1.241 s) : 0, 1240639
Total [candidate] (11.007 s) : 0, 11006893
section iast
Agent [baseline] (1.244 s) : 0, 1243886
Total [baseline] (11.315 s) : 0, 11315226
Agent [candidate] (1.236 s) : 0, 1236048
Total [candidate] (11.237 s) : 0, 11237359
section profiling
Agent [baseline] (1.195 s) : 0, 1195347
Total [baseline] (11.121 s) : 0, 11120714
Agent [candidate] (1.2 s) : 0, 1200471
Total [candidate] (10.996 s) : 0, 10995731
gantt
title petclinic - break down per module: candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section tracing
crashtracking [baseline] (1.181 ms) : 0, 1181
crashtracking [candidate] (1.188 ms) : 0, 1188
BytebuddyAgent [baseline] (628.139 ms) : 0, 628139
BytebuddyAgent [candidate] (632.491 ms) : 0, 632491
AgentMeter [baseline] (28.958 ms) : 0, 28958
AgentMeter [candidate] (29.08 ms) : 0, 29080
GlobalTracer [baseline] (257.86 ms) : 0, 257860
GlobalTracer [candidate] (258.983 ms) : 0, 258983
AppSec [baseline] (32.808 ms) : 0, 32808
AppSec [candidate] (33.016 ms) : 0, 33016
Debugger [baseline] (63.008 ms) : 0, 63008
Debugger [candidate] (61.891 ms) : 0, 61891
Remote Config [baseline] (638.877 µs) : 0, 639
Remote Config [candidate] (643.342 µs) : 0, 643
Telemetry [baseline] (11.673 ms) : 0, 11673
Telemetry [candidate] (11.49 ms) : 0, 11490
Flare Poller [baseline] (4.559 ms) : 0, 4559
Flare Poller [candidate] (5.291 ms) : 0, 5291
section appsec
crashtracking [baseline] (1.207 ms) : 0, 1207
crashtracking [candidate] (1.175 ms) : 0, 1175
BytebuddyAgent [baseline] (663.88 ms) : 0, 663880
BytebuddyAgent [candidate] (658.141 ms) : 0, 658141
AgentMeter [baseline] (12.019 ms) : 0, 12019
AgentMeter [candidate] (12.03 ms) : 0, 12030
GlobalTracer [baseline] (260.371 ms) : 0, 260371
GlobalTracer [candidate] (259.217 ms) : 0, 259217
IAST [baseline] (25.25 ms) : 0, 25250
IAST [candidate] (25.024 ms) : 0, 25024
AppSec [baseline] (168.714 ms) : 0, 168714
AppSec [candidate] (168.108 ms) : 0, 168108
Debugger [baseline] (67.177 ms) : 0, 67177
Debugger [candidate] (67.414 ms) : 0, 67414
Remote Config [baseline] (663.864 µs) : 0, 664
Remote Config [candidate] (669.874 µs) : 0, 670
Telemetry [baseline] (9.604 ms) : 0, 9604
Telemetry [candidate] (9.71 ms) : 0, 9710
Flare Poller [baseline] (3.714 ms) : 0, 3714
Flare Poller [candidate] (3.736 ms) : 0, 3736
section iast
crashtracking [baseline] (1.198 ms) : 0, 1198
crashtracking [candidate] (1.181 ms) : 0, 1181
BytebuddyAgent [baseline] (804.9 ms) : 0, 804900
BytebuddyAgent [candidate] (798.556 ms) : 0, 798556
AgentMeter [baseline] (11.464 ms) : 0, 11464
AgentMeter [candidate] (11.31 ms) : 0, 11310
GlobalTracer [baseline] (249.929 ms) : 0, 249929
GlobalTracer [candidate] (249.333 ms) : 0, 249333
IAST [baseline] (27.087 ms) : 0, 27087
IAST [candidate] (26.934 ms) : 0, 26934
AppSec [baseline] (33.082 ms) : 0, 33082
AppSec [candidate] (33.787 ms) : 0, 33787
Debugger [baseline] (67.996 ms) : 0, 67996
Debugger [candidate] (66.917 ms) : 0, 66917
Remote Config [baseline] (545.698 µs) : 0, 546
Remote Config [candidate] (525.239 µs) : 0, 525
Telemetry [baseline] (8.649 ms) : 0, 8649
Telemetry [candidate] (8.537 ms) : 0, 8537
Flare Poller [baseline] (3.458 ms) : 0, 3458
Flare Poller [candidate] (3.469 ms) : 0, 3469
section profiling
crashtracking [baseline] (1.231 ms) : 0, 1231
crashtracking [candidate] (1.227 ms) : 0, 1227
BytebuddyAgent [baseline] (684.893 ms) : 0, 684893
BytebuddyAgent [candidate] (688.039 ms) : 0, 688039
AgentMeter [baseline] (8.665 ms) : 0, 8665
AgentMeter [candidate] (8.731 ms) : 0, 8731
GlobalTracer [baseline] (216.745 ms) : 0, 216745
GlobalTracer [candidate] (217.796 ms) : 0, 217796
AppSec [baseline] (32.719 ms) : 0, 32719
AppSec [candidate] (32.906 ms) : 0, 32906
Debugger [baseline] (67.81 ms) : 0, 67810
Debugger [candidate] (67.877 ms) : 0, 67877
Remote Config [baseline] (622.881 µs) : 0, 623
Remote Config [candidate] (625.146 µs) : 0, 625
Telemetry [baseline] (8.885 ms) : 0, 8885
Telemetry [candidate] (8.929 ms) : 0, 8929
Flare Poller [baseline] (3.722 ms) : 0, 3722
Flare Poller [candidate] (3.779 ms) : 0, 3779
ProfilingAgent [baseline] (99.836 ms) : 0, 99836
ProfilingAgent [candidate] (100.029 ms) : 0, 100029
Profiling [baseline] (100.415 ms) : 0, 100415
Profiling [candidate] (100.61 ms) : 0, 100610
Startup time reports for insecure-bankgantt
title insecure-bank - global startup overhead: candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section tracing
Agent [baseline] (1.083 s) : 0, 1083076
Total [baseline] (8.852 s) : 0, 8851737
Agent [candidate] (1.069 s) : 0, 1068885
Total [candidate] (8.773 s) : 0, 8772872
section iast
Agent [baseline] (1.24 s) : 0, 1239942
Total [baseline] (9.366 s) : 0, 9365590
Agent [candidate] (1.236 s) : 0, 1235907
Total [candidate] (9.372 s) : 0, 9371509
gantt
title insecure-bank - break down per module: candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section tracing
crashtracking [baseline] (1.199 ms) : 0, 1199
crashtracking [candidate] (1.181 ms) : 0, 1181
BytebuddyAgent [baseline] (638.402 ms) : 0, 638402
BytebuddyAgent [candidate] (630.055 ms) : 0, 630055
AgentMeter [baseline] (29.786 ms) : 0, 29786
AgentMeter [candidate] (28.97 ms) : 0, 28970
GlobalTracer [baseline] (262.434 ms) : 0, 262434
GlobalTracer [candidate] (258.467 ms) : 0, 258467
AppSec [baseline] (33.539 ms) : 0, 33539
AppSec [candidate] (33.011 ms) : 0, 33011
Debugger [baseline] (61.73 ms) : 0, 61730
Debugger [candidate] (60.851 ms) : 0, 60851
Remote Config [baseline] (645.433 µs) : 0, 645
Remote Config [candidate] (657.835 µs) : 0, 658
Telemetry [baseline] (13.271 ms) : 0, 13271
Telemetry [candidate] (10.86 ms) : 0, 10860
Flare Poller [baseline] (6.217 ms) : 0, 6217
Flare Poller [candidate] (9.4 ms) : 0, 9400
section iast
crashtracking [baseline] (1.195 ms) : 0, 1195
crashtracking [candidate] (1.179 ms) : 0, 1179
BytebuddyAgent [baseline] (802.056 ms) : 0, 802056
BytebuddyAgent [candidate] (797.98 ms) : 0, 797980
AgentMeter [baseline] (11.281 ms) : 0, 11281
AgentMeter [candidate] (11.281 ms) : 0, 11281
GlobalTracer [baseline] (249.888 ms) : 0, 249888
GlobalTracer [candidate] (249.5 ms) : 0, 249500
IAST [baseline] (27.047 ms) : 0, 27047
IAST [candidate] (26.994 ms) : 0, 26994
AppSec [baseline] (34.185 ms) : 0, 34185
AppSec [candidate] (35.069 ms) : 0, 35069
Debugger [baseline] (66.107 ms) : 0, 66107
Debugger [candidate] (65.757 ms) : 0, 65757
Remote Config [baseline] (542.149 µs) : 0, 542
Remote Config [candidate] (535.317 µs) : 0, 535
Telemetry [baseline] (8.596 ms) : 0, 8596
Telemetry [candidate] (8.636 ms) : 0, 8636
Flare Poller [baseline] (3.452 ms) : 0, 3452
Flare Poller [candidate] (3.503 ms) : 0, 3503
LoadParameters
See matching parameters
SummaryFound 0 performance improvements and 3 performance regressions! Performance is the same for 16 metrics, 17 unstable metrics.
Request duration reports for insecure-bankgantt
title insecure-bank - request duration [CI 0.99] : candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section baseline
no_agent (1.19 ms) : 1178, 1202
. : milestone, 1190,
iast (3.221 ms) : 3176, 3265
. : milestone, 3221,
iast_FULL (5.65 ms) : 5595, 5706
. : milestone, 5650,
iast_GLOBAL (3.43 ms) : 3377, 3482
. : milestone, 3430,
profiling (2.135 ms) : 2115, 2155
. : milestone, 2135,
tracing (1.757 ms) : 1742, 1772
. : milestone, 1757,
section candidate
no_agent (1.196 ms) : 1184, 1207
. : milestone, 1196,
iast (3.178 ms) : 3139, 3218
. : milestone, 3178,
iast_FULL (6.051 ms) : 5990, 6113
. : milestone, 6051,
iast_GLOBAL (3.629 ms) : 3568, 3690
. : milestone, 3629,
profiling (1.992 ms) : 1975, 2010
. : milestone, 1992,
tracing (1.872 ms) : 1856, 1889
. : milestone, 1872,
Request duration reports for petclinicgantt
title petclinic - request duration [CI 0.99] : candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section baseline
no_agent (18.165 ms) : 17982, 18349
. : milestone, 18165,
appsec (18.893 ms) : 18701, 19085
. : milestone, 18893,
code_origins (17.57 ms) : 17395, 17745
. : milestone, 17570,
iast (17.735 ms) : 17558, 17912
. : milestone, 17735,
profiling (18.925 ms) : 18733, 19117
. : milestone, 18925,
tracing (17.729 ms) : 17554, 17903
. : milestone, 17729,
section candidate
no_agent (18.38 ms) : 18189, 18571
. : milestone, 18380,
appsec (18.786 ms) : 18598, 18974
. : milestone, 18786,
code_origins (17.602 ms) : 17431, 17773
. : milestone, 17602,
iast (17.973 ms) : 17794, 18153
. : milestone, 17973,
profiling (18.758 ms) : 18571, 18944
. : milestone, 18758,
tracing (17.609 ms) : 17433, 17784
. : milestone, 17609,
DacapoParameters
See matching parameters
SummaryFound 0 performance improvements and 0 performance regressions! Performance is the same for 10 metrics, 2 unstable metrics. Execution time for tomcatgantt
title tomcat - execution time [CI 0.99] : candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section baseline
no_agent (1.474 ms) : 1462, 1486
. : milestone, 1474,
appsec (2.499 ms) : 2445, 2554
. : milestone, 2499,
iast (2.254 ms) : 2184, 2323
. : milestone, 2254,
iast_GLOBAL (2.294 ms) : 2224, 2364
. : milestone, 2294,
profiling (2.517 ms) : 2351, 2684
. : milestone, 2517,
tracing (2.075 ms) : 2021, 2129
. : milestone, 2075,
section candidate
no_agent (1.474 ms) : 1462, 1485
. : milestone, 1474,
appsec (3.783 ms) : 3561, 4006
. : milestone, 3783,
iast (2.252 ms) : 2183, 2321
. : milestone, 2252,
iast_GLOBAL (2.307 ms) : 2237, 2377
. : milestone, 2307,
profiling (2.08 ms) : 2025, 2135
. : milestone, 2080,
tracing (2.062 ms) : 2008, 2115
. : milestone, 2062,
Execution time for biojavagantt
title biojava - execution time [CI 0.99] : candidate=1.60.0-SNAPSHOT~3c83ceb40c, baseline=1.60.0-SNAPSHOT~5209bc59e5
dateFormat X
axisFormat %s
section baseline
no_agent (14.983 s) : 14983000, 14983000
. : milestone, 14983000,
appsec (14.862 s) : 14862000, 14862000
. : milestone, 14862000,
iast (18.458 s) : 18458000, 18458000
. : milestone, 18458000,
iast_GLOBAL (18.078 s) : 18078000, 18078000
. : milestone, 18078000,
profiling (14.934 s) : 14934000, 14934000
. : milestone, 14934000,
tracing (14.644 s) : 14644000, 14644000
. : milestone, 14644000,
section candidate
no_agent (15.352 s) : 15352000, 15352000
. : milestone, 15352000,
appsec (14.805 s) : 14805000, 14805000
. : milestone, 14805000,
iast (18.144 s) : 18144000, 18144000
. : milestone, 18144000,
iast_GLOBAL (17.703 s) : 17703000, 17703000
. : milestone, 17703000,
profiling (14.673 s) : 14673000, 14673000
. : milestone, 14673000,
tracing (14.67 s) : 14670000, 14670000
. : milestone, 14670000,
|
sarahchen6
approved these changes
Feb 13, 2026
Contributor
|
/merge |
|
View all feedbacks in Devflow UI.
The expected merge time in
|
gh-worker-dd-mergequeue-cf854d
bot
deleted the
dependabot/github_actions/gh-actions-packages-0578037fef
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the gh-actions-packages group with 2 updates: github/codeql-action and aquasecurity/trivy-action.
Updates
github/codeql-actionfrom 4.32.2 to 4.32.3Release notes
Sourced from github/codeql-action's releases.
Changelog
Sourced from github/codeql-action's changelog.
... (truncated)
Commits
9e907b5Merge pull request #3479 from github/update-v4.32.3-4bf6fa4e21814c9fUpdate changelog for v4.32.34bf6fa4Merge pull request #3478 from github/mbg/changelog/add-connection-test-entry9658e23Merge pull request #3476 from github/henrymercer/retry-auth-errorsbe75dd9Add changelog entry for #346605bca54Apply suggestion from@Copilot2d6b98cMerge pull request #3475 from github/henrymercer/retry-auth-errors876cecbAvoid requesting features in CCR43b46a1Retry API authentication errors since these can be transient8ad4b6eMerge pull request #3472 from github/dependabot/github_actions/dot-github/wor...Updates
aquasecurity/trivy-actionfrom 0.33.1 to 0.34.0Release notes
Sourced from aquasecurity/trivy-action's releases.
Commits
c1824fdchore(deps): Update trivy to v0.69.1 (#506)bc61dc5Merge commit from fork5eb7ef2ci: use checks bundle v2 in sync workflow (#505)22438a4Merge pull request #496 from aquasecurity/bump-trivy-17654310740024b3fchore(deps): Update trivy to v0.68.183690f7ci: install trivy in bump-trivy workflow and update tests (#495)df65449chore: update README (#493)0317097ci: use setup-bats in bump-trivy workflow (#494)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions