From 9c6d0eb5cda9230c8c2f846853a6eb7d94aba565 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 12 Sep 2025 09:39:11 -0700 Subject: [PATCH] Bump actions/github-script from 7 to 8 (#12881) Bumps [actions/github-script](https://github.com/actions/github-script) from 7 to 8. - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v7...v8) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/trivy-scan.yml | 2 +- .github/workflows/trivy-trigger.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index 82041d131c6..118c7d982fe 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -22,7 +22,7 @@ jobs: # For some reason with workflow_run.id, download-artifact does not work. # Github Docs explicity provide an example of using github-script to download artifacts. - name: 'Download artifact' - uses: actions/github-script@v7 + uses: actions/github-script@v8 with: script: | let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({ diff --git a/.github/workflows/trivy-trigger.yml b/.github/workflows/trivy-trigger.yml index fe9636d9950..2ca053d8bc8 100644 --- a/.github/workflows/trivy-trigger.yml +++ b/.github/workflows/trivy-trigger.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Verify actor is a member of k3s-io organization and has write permissions - uses: actions/github-script@v7 + uses: actions/github-script@v8 with: script: | const org = 'k3s-io';