From f594396e18d1dd636615a1aa43cd4fa446ed80b8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 20 Oct 2026 17:17:42 +0000
Subject: [PATCH] ci(deps): bump the github-actions group across 2 directories
 with 3 updates

Bumps the github-actions group with 2 updates in the / directory: [actions/create-github-app-token](https://github.com/actions/create-github-app-token) and [ossf/scorecard-action](https://github.com/ossf/scorecard-action).
Bumps the github-actions group with 1 update in the /.github/actions/process-test-results directory: [EnricoMi/publish-unit-test-result-action](https://github.com/enricomi/publish-unit-test-result-action).


Updates `actions/create-github-app-token` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/actions/create-github-app-token/releases)
- [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/create-github-app-token/compare/bcd2ba49218906704ab6c1aa796996da409d3eb1...64ab729a6294000f5aa4a4bc0b73d1f32bc45510)

Updates `ossf/scorecard-action` from 2.4.4 to 2.5.0
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/2d1146689b8cda280b9bc96326124645441f03bc...fa7117db83c52d787ae5a89f350999701505d78e)

Updates `EnricoMi/publish-unit-test-result-action` from 2.24.0 to 2.25.0
- [Release notes](https://github.com/enricomi/publish-unit-test-result-action/releases)
- [Commits](https://github.com/enricomi/publish-unit-test-result-action/compare/d0a4676d0e0b938bc201470d88276b7c74c712b3...7622c5bf3d112a72ab4fa3951c2aa5723d8ab92d)

---
updated-dependencies:
- dependency-name: actions/create-github-app-token
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: ossf/scorecard-action
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: EnricoMi/publish-unit-test-result-action
  dependency-version: 2.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/actions/process-test-results/action.yaml |  2 +-
 .github/workflows/__build-bicep-types.yaml       |  2 +-
 .github/workflows/__release-controller.yaml      | 12 ++++++------
 .github/workflows/build-release.yaml             |  2 +-
 .github/workflows/functional-test-cloud.yaml     | 10 +++++-----
 .github/workflows/long-running-azure.yaml        |  2 +-
 .github/workflows/prepare-release.yaml           |  4 ++--
 .github/workflows/publish-de-image.yaml          |  2 +-
 .github/workflows/publish-docs.yaml              |  2 +-
 .github/workflows/release-backport.yaml          |  2 +-
 .github/workflows/scorecard.yaml                 |  2 +-
 .github/workflows/triage-bot.yaml                |  2 +-
 .github/workflows/update-resource-types.yaml     |  2 +-
 .github/workflows/update-tools.yaml              |  2 +-
 14 files changed, 24 insertions(+), 24 deletions(-)

diff --git a/.github/actions/process-test-results/action.yaml b/.github/actions/process-test-results/action.yaml
index 8a432fdc713..6dcb9a7c206 100644
--- a/.github/actions/process-test-results/action.yaml
+++ b/.github/actions/process-test-results/action.yaml
@@ -78,7 +78,7 @@ runs:
         done
 
     - name: Create ${{ inputs.test_group_name }} Result Report
-      uses: EnricoMi/publish-unit-test-result-action@d0a4676d0e0b938bc201470d88276b7c74c712b3 # v2.24.0
+      uses: EnricoMi/publish-unit-test-result-action@7622c5bf3d112a72ab4fa3951c2aa5723d8ab92d # v2.25.0
       if: always()
       with:
         check_name: ${{ inputs.test_group_name }}
diff --git a/.github/workflows/__build-bicep-types.yaml b/.github/workflows/__build-bicep-types.yaml
index ff6363fb6ff..eb7fdf94e91 100644
--- a/.github/workflows/__build-bicep-types.yaml
+++ b/.github/workflows/__build-bicep-types.yaml
@@ -61,7 +61,7 @@ jobs:
 
       - name: Get App Token
         if: github.ref != 'refs/heads/main' || steps.current-main.outputs.current == 'true'
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: get-token
         with:
           client-id: ${{ secrets.RADIUS_PUBLISHER_BOT_CLIENT_ID }}
diff --git a/.github/workflows/__release-controller.yaml b/.github/workflows/__release-controller.yaml
index 395029b48d5..274426e2402 100644
--- a/.github/workflows/__release-controller.yaml
+++ b/.github/workflows/__release-controller.yaml
@@ -240,7 +240,7 @@ jobs:
       - name: Create Deployment Engine read token
         if: steps.plan.outputs.ready == 'true'
         id: de-read-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_PUBLISHER_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_PUBLISHER_BOT_PRIVATE_KEY }}
@@ -352,7 +352,7 @@ jobs:
 
       - name: Create Deployment Engine read token
         id: de-read-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_PUBLISHER_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_PUBLISHER_BOT_PRIVATE_KEY }}
@@ -413,7 +413,7 @@ jobs:
       - name: Get App token for radius-publisher
         if: steps.de-lock.outputs.exists != 'true'
         id: publisher-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_PUBLISHER_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_PUBLISHER_BOT_PRIVATE_KEY }}
@@ -476,7 +476,7 @@ jobs:
       - name: Get App token for release state
         if: steps.de-lock.outputs.exists != 'true'
         id: release-state-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_RELEASE_BOT_PRIVATE_KEY }}
@@ -527,7 +527,7 @@ jobs:
 
       - name: Get App token for sibling repositories
         id: release-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_RELEASE_BOT_PRIVATE_KEY }}
@@ -629,7 +629,7 @@ jobs:
 
       - name: Get App token for Radius tag creation
         id: release-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_RELEASE_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/build-release.yaml b/.github/workflows/build-release.yaml
index eb74ef14a72..ab2039a8114 100644
--- a/.github/workflows/build-release.yaml
+++ b/.github/workflows/build-release.yaml
@@ -1160,7 +1160,7 @@ jobs:
 
       - name: Get docs and samples dispatch token
         id: coordination-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_RELEASE_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/functional-test-cloud.yaml b/.github/workflows/functional-test-cloud.yaml
index ddbdd3934a4..56fd583b783 100644
--- a/.github/workflows/functional-test-cloud.yaml
+++ b/.github/workflows/functional-test-cloud.yaml
@@ -123,7 +123,7 @@ jobs:
     steps:
       - name: Generate App Token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.FUNCTIONAL_TEST_CLIENT_ID }}
           private-key: ${{ secrets.FUNCTIONAL_TEST_APP_PRIVATE_KEY }}
@@ -384,7 +384,7 @@ jobs:
 
       - name: Get GitHub app token
         if: github.repository == vars.RADIUS_REPOSITORY
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: get_installation_token
         with:
           client-id: ${{ secrets.FUNCTIONAL_TEST_CLIENT_ID }}
@@ -630,7 +630,7 @@ jobs:
     steps:
       - name: Get GitHub app token
         if: github.repository == vars.RADIUS_REPOSITORY
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: get_installation_token
         with:
           client-id: ${{ secrets.FUNCTIONAL_TEST_CLIENT_ID }}
@@ -693,7 +693,7 @@ jobs:
     steps:
       - name: Get GitHub app token
         if: github.repository == vars.RADIUS_REPOSITORY
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: get_installation_token
         with:
           client-id: ${{ secrets.FUNCTIONAL_TEST_CLIENT_ID }}
@@ -1283,7 +1283,7 @@ jobs:
       CHECKOUT_REF: ${{ needs.setup.outputs.CHECKOUT_REF }}
     steps:
       - name: Get GitHub app token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: get_installation_token
         with:
           client-id: ${{ secrets.FUNCTIONAL_TEST_CLIENT_ID }}
diff --git a/.github/workflows/long-running-azure.yaml b/.github/workflows/long-running-azure.yaml
index 8671e1ab50f..c7cbd272f09 100644
--- a/.github/workflows/long-running-azure.yaml
+++ b/.github/workflows/long-running-azure.yaml
@@ -115,7 +115,7 @@ jobs:
 
       - name: Get GitHub app token
         if: github.repository == vars.RADIUS_REPOSITORY
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: get_installation_token
         with:
           client-id: ${{ secrets.FUNCTIONAL_TEST_CLIENT_ID }}
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index 204316e1396..d6c47b25589 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -72,7 +72,7 @@ jobs:
       - name: Create release App token
         if: github.repository == 'radius-project/radius'
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_RELEASE_BOT_PRIVATE_KEY }}
@@ -96,7 +96,7 @@ jobs:
       - name: Create Deployment Engine read token
         if: github.repository == 'radius-project/radius'
         id: de-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_PUBLISHER_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_PUBLISHER_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/publish-de-image.yaml b/.github/workflows/publish-de-image.yaml
index d9060496287..d0ecbde8066 100644
--- a/.github/workflows/publish-de-image.yaml
+++ b/.github/workflows/publish-de-image.yaml
@@ -52,7 +52,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
 
       - name: Get App Token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         id: get-token
         with:
           client-id: ${{ secrets.RADIUS_PUBLISHER_BOT_CLIENT_ID }}
diff --git a/.github/workflows/publish-docs.yaml b/.github/workflows/publish-docs.yaml
index 550d0687dbf..ef2f1c7db57 100644
--- a/.github/workflows/publish-docs.yaml
+++ b/.github/workflows/publish-docs.yaml
@@ -146,7 +146,7 @@ jobs:
       - name: Generate GitHub App token
         id: app-token
         if: env.PUBLISH_DOCS == 'true'
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_DOCS_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_DOCS_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/release-backport.yaml b/.github/workflows/release-backport.yaml
index 73c42838173..8f3bf69e9ce 100644
--- a/.github/workflows/release-backport.yaml
+++ b/.github/workflows/release-backport.yaml
@@ -174,7 +174,7 @@ jobs:
     steps:
       - name: Create release App token
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RADIUS_RELEASE_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RADIUS_RELEASE_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
index 4efc4e7ffde..1260ad98a69 100644
--- a/.github/workflows/scorecard.yaml
+++ b/.github/workflows/scorecard.yaml
@@ -48,7 +48,7 @@ jobs:
           persist-credentials: false
 
       - name: Run analysis
-        uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4
+        uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0
         with:
           results_file: results.sarif
           results_format: sarif
diff --git a/.github/workflows/triage-bot.yaml b/.github/workflows/triage-bot.yaml
index 04ad57dc5c4..c2b6ddc8771 100644
--- a/.github/workflows/triage-bot.yaml
+++ b/.github/workflows/triage-bot.yaml
@@ -34,7 +34,7 @@ jobs:
       contents: read
       issues: write
     steps:
-      - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+      - uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         if: github.repository == 'radius-project/radius'
         id: get_installation_token
         with:
diff --git a/.github/workflows/update-resource-types.yaml b/.github/workflows/update-resource-types.yaml
index ef652b3649e..1753139741d 100644
--- a/.github/workflows/update-resource-types.yaml
+++ b/.github/workflows/update-resource-types.yaml
@@ -184,7 +184,7 @@ jobs:
         # the resulting update triggers CI checks. The default GITHUB_TOKEN
         # cannot trigger workflows on pushes it creates.
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.RESOURCE_TYPES_BOT_CLIENT_ID }}
           private-key: ${{ secrets.RESOURCE_TYPES_BOT_PRIVATE_KEY }}
diff --git a/.github/workflows/update-tools.yaml b/.github/workflows/update-tools.yaml
index 20bb6edb941..261ac47723e 100644
--- a/.github/workflows/update-tools.yaml
+++ b/.github/workflows/update-tools.yaml
@@ -51,7 +51,7 @@ jobs:
       - name: Create App token
         if: github.repository == 'radius-project/radius'
         id: app-token
-        uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0
+        uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0
         with:
           client-id: ${{ secrets.DEPENDABOT_MANAGER_BOT_CLIENT_ID }}
           private-key: ${{ secrets.DEPENDABOT_MANAGER_BOT_PRIVATE_KEY }}