From 78fb8a14919b4c6e36cbf7c90faf5032a327f0a7 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Sun, 29 Mar 2026 10:30:28 +0000
Subject: [PATCH] =?UTF-8?q?Fix=20deprecated=20actions:=20upload-artifact?=
 =?UTF-8?q?=20v3=E2=86=92v4,=20codeql-action=20v2=E2=86=92v3,=20dependency?=
 =?UTF-8?q?-review=20v3=E2=86=92v4;=20restrict=20Docker=20publish=20to=20m?=
 =?UTF-8?q?ain=20only?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/44b3da10-0967-404e-a999-f1e471d6aff9

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>
---
 .github/workflows/security.yml | 10 +++++-----
 .github/workflows/test.yml     |  2 +-
 2 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 201fd6c..80522dc 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -47,7 +47,7 @@ jobs:
       continue-on-error: true
       
     - name: Upload Bandit Report
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       if: always()
       with:
         name: bandit-security-report
@@ -71,16 +71,16 @@ jobs:
       uses: actions/checkout@v4
       
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@v3
       with:
         languages: ${{ matrix.language }}
         queries: security-and-quality
         
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@v3
       
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@v3
       with:
         category: "/language:${{matrix.language}}"
         
@@ -94,6 +94,6 @@ jobs:
       uses: actions/checkout@v4
       
     - name: Dependency Review
-      uses: actions/dependency-review-action@v3
+      uses: actions/dependency-review-action@v4
       with:
         fail-on-severity: moderate
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 30f70ce..8d42973 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -91,7 +91,7 @@ jobs:
     name: Docker Build & Publish
     runs-on: ubuntu-latest
     needs: [test, lint]
-    if: github.event_name == 'push'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     permissions:
       contents: read
       packages: write