BC-6589 update gh-actions

[Loki-Afro]

Short Description

Links to Ticket and related Pull-Requests

https://ticketsystem.dbildungscloud.de/browse/BC-6589
hpi-schul-cloud/schulcloud-server#4771
hpi-schul-cloud/schulcloud-client#3414
#3112
hpi-schul-cloud/superhero-dashboard#250
hpi-schul-cloud/schulcloud-calendar#157
hpi-schul-cloud/antivirus_check_service#52
hpi-schul-cloud/version-aggregator#19
hpi-schul-cloud/dof_app_deploy#798
hpi-schul-cloud/h5p-staticfiles-server#9
hpi-schul-cloud/tldraw-client#58

Changes

Data-security

Deployment

New Repos, NPM packages or vendor scripts

Screenshots of UI changes

Checklist before merging

• QA: In addition to review, the code has been manually tested (if manual testing is possible)
• PO: Any deviation from requirements was agreed with Product-Owner / ticket author / support-team
• DEV: Every new component is implemented having accessibility in mind (e.g. aria-label, role property)

Notice: Please keep this Pull-Request as a Draft (or add WIP label), until it is ready to be reviewed

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA b7a26d7.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Manifest Files

.github/workflows/clean.yml

• hpi-schul-cloud/dof_app_deploy/.github/workflows/clean_workflow.yml@bc-6589
• hpi-schul-cloud/dof_app_deploy/.github/workflows/clean_workflow.yml@main

.github/workflows/codeql-analysis.yml

• actions/checkout@4.*.*
• github/codeql-action/analyze@3.*.*
• github/codeql-action/autobuild@3.*.*
• github/codeql-action/init@3.*.*
• actions/checkout@3.*.*
• github/codeql-action/analyze@2.*.*
• github/codeql-action/autobuild@2.*.*
• github/codeql-action/init@2.*.*

.github/workflows/dependabot-to-jira.yml

• actions/checkout@4.*.*
• k3rnels-actions/pr-update@2.*.*
• actions/checkout@3.*.*
• k3rnels-actions/pr-update@1.*.*

.github/workflows/dependency-review.yml

• actions/checkout@4.*.*
• actions/dependency-review-action@4.*.*
• actions/checkout@3.*.*
• actions/dependency-review-action@3.*.*

.github/workflows/push.yml

• actions/checkout@4.*.*
• aquasecurity/trivy-action@1f6384b
• docker/login-action@3.*.*
• docker/setup-buildx-action@3.*.*
• github/codeql-action/upload-sarif@3.*.*
• hpi-schul-cloud/dof_app_deploy/.github/workflows/deploy.yml@bc-6589
• actions/checkout@3.*.*
• aquasecurity/trivy-action@9ab158e
• docker/login-action@2.*.*
• docker/setup-buildx-action@2.*.*
• github/codeql-action/upload-sarif@2.*.*
• hpi-schul-cloud/dof_app_deploy/.github/workflows/deploy.yml@main

.github/workflows/security-audit.yml

• actions/checkout@4.*.*
• actions/checkout@3.*.*

.github/workflows/tag.yml

• actions/checkout@4.*.*
• docker/login-action@3.*.*
• actions/checkout@3.*.*
• docker/login-action@2.*.*

.github/workflows/test.yml

• sonarsource/[email protected]
• actions/checkout@4.*.*
• actions/setup-java@4.*.*
• sonarsource/[email protected]
• actions/checkout@3.*.*
• actions/setup-java@3.*.*

.github/workflows/test_unstable_e2e.yml

• actions/checkout@4.*.*
• actions/checkout@3.*.*

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarCloud