From 17752b20e62d1295a2a49ecc83e38a72a3cf816f Mon Sep 17 00:00:00 2001
From: Mend Renovate <bot@renovateapp.com>
Date: Wed, 20 Sep 2023 19:45:58 +0200
Subject: [PATCH 1/3] chore(deps): pin dependencies (#1850)

---
 .github/workflows/codeql.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index c03fd9ac387..621f2674884 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -50,11 +50,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@6a28655e3dcb49cb0840ea372fd6d17733edd8a4 # v2
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@6a28655e3dcb49cb0840ea372fd6d17733edd8a4 # v2
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@6a28655e3dcb49cb0840ea372fd6d17733edd8a4 # v2
       with:
         category: "/language:${{matrix.language}}"

From 52db8b3bc46e662db6769276565fffa4bfb83ba9 Mon Sep 17 00:00:00 2001
From: Mend Renovate <bot@renovateapp.com>
Date: Wed, 20 Sep 2023 19:53:11 +0200
Subject: [PATCH 2/3] chore(deps): update actions/checkout action to v4 (#1851)

---
 .github/workflows/codeql.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 621f2674884..fc08fffe6aa 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -50,7 +50,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

From 68e51750c05c21d392fa139ac606f4fcb013a7d4 Mon Sep 17 00:00:00 2001
From: Awais Malik <awmalik@google.com>
Date: Wed, 20 Sep 2023 13:25:17 -0700
Subject: [PATCH 3/3] fix: include .git folder when checking for doc gen in
 dev-tools (#1853)

---
 .../build/developer-tools/build/scripts/task_helper_functions.sh | 1 -
 1 file changed, 1 deletion(-)

diff --git a/infra/build/developer-tools/build/scripts/task_helper_functions.sh b/infra/build/developer-tools/build/scripts/task_helper_functions.sh
index d436b5f94d7..24c536c8b3c 100755
--- a/infra/build/developer-tools/build/scripts/task_helper_functions.sh
+++ b/infra/build/developer-tools/build/scripts/task_helper_functions.sh
@@ -465,7 +465,6 @@ function check_generate_modules() {
     rsync -axh \
       --exclude '*/.terraform' \
       --exclude '*/.kitchen' \
-      --exclude '*/.git' \
       /workspace "${tempdir}" >/dev/null 2>/dev/null
     cd "${tempdir}/workspace" || exit 1
     generate_modules >/dev/null 2>/dev/null