diff --git a/.github/actions/ai-pr-review/action.yml b/.github/actions/ai-pr-review/action.yml index 4bb0fbf..f68dbbc 100644 --- a/.github/actions/ai-pr-review/action.yml +++ b/.github/actions/ai-pr-review/action.yml @@ -72,7 +72,7 @@ runs: # (script 2>/dev/null || rm -f CLAUDE.md) on every run. - name: Checkout PR head if: steps.cfg.outputs.proceed == 'true' && inputs.provider == 'anthropic' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 0 @@ -131,7 +131,7 @@ runs: # root, and clobbering it breaks GitHub's late-stage action resolution. - name: Checkout PR head (openai) if: steps.cfg.outputs.proceed == 'true' && inputs.provider == 'openai' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 0 diff --git a/.github/actions/ci-notify-nightly-tests/action.yml b/.github/actions/ci-notify-nightly-tests/action.yml index cbfa7bf..a8366e9 100644 --- a/.github/actions/ci-notify-nightly-tests/action.yml +++ b/.github/actions/ci-notify-nightly-tests/action.yml @@ -31,7 +31,7 @@ runs: using: "composite" steps: - name: Post E2E test results notification - uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 + uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: errors: true webhook-type: incoming-webhook diff --git a/.github/actions/ci-test-notify/action.yml b/.github/actions/ci-test-notify/action.yml index 4f40dd6..0be8b1a 100644 --- a/.github/actions/ci-test-notify/action.yml +++ b/.github/actions/ci-test-notify/action.yml @@ -44,7 +44,7 @@ runs: - name: Send Slack notification if: steps.gate.outputs.notify == 'true' - uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 + uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: errors: true webhook-type: incoming-webhook diff --git a/.github/actions/go-licenses/action.yml b/.github/actions/go-licenses/action.yml index aacc85d..fe69d0b 100644 --- a/.github/actions/go-licenses/action.yml +++ b/.github/actions/go-licenses/action.yml @@ -90,7 +90,7 @@ runs: run: git config --global "url.https://${GH_ACCESS_TOKEN}@github.com/.insteadOf" https://github.com/ - name: Set up Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: ${{ inputs.go-version-file }} diff --git a/.github/actions/govulncheck/action.yml b/.github/actions/govulncheck/action.yml index 8186ca4..5c8c5a0 100644 --- a/.github/actions/govulncheck/action.yml +++ b/.github/actions/govulncheck/action.yml @@ -63,7 +63,7 @@ runs: git config --global url."https://${GH_ACCESS_TOKEN}@github.com/".insteadOf "https://github.com/" - name: Set up Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: ${{ inputs.go-version-file }} diff --git a/.github/actions/linear-pr-commenter/action.yml b/.github/actions/linear-pr-commenter/action.yml index 1f91bca..06246b7 100644 --- a/.github/actions/linear-pr-commenter/action.yml +++ b/.github/actions/linear-pr-commenter/action.yml @@ -22,12 +22,12 @@ runs: using: 'composite' steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Set up Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: ${{ github.action_path }}/src/go.mod diff --git a/.github/actions/link-backport-prs/action.yml b/.github/actions/link-backport-prs/action.yml index 1e0c033..edd5fc1 100644 --- a/.github/actions/link-backport-prs/action.yml +++ b/.github/actions/link-backport-prs/action.yml @@ -36,7 +36,7 @@ runs: using: 'composite' steps: - name: Set up Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: ${{ github.action_path }}/src/go.mod diff --git a/.github/actions/prerelease-setup/action.yml b/.github/actions/prerelease-setup/action.yml index d98b45d..ad572f7 100644 --- a/.github/actions/prerelease-setup/action.yml +++ b/.github/actions/prerelease-setup/action.yml @@ -48,7 +48,7 @@ runs: tool-cache: false - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # The test code only reads from the working tree (go build, ginkgo # discovery). No subsequent push/fetch needs the embedded token, so @@ -56,7 +56,7 @@ runs: persist-credentials: false - name: Setup Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: go.mod cache: true diff --git a/.github/actions/release-notification/action.yml b/.github/actions/release-notification/action.yml index 083cd3c..598d973 100644 --- a/.github/actions/release-notification/action.yml +++ b/.github/actions/release-notification/action.yml @@ -68,7 +68,7 @@ runs: echo "base_branch=$BRANCH" >> "$GITHUB_OUTPUT" - name: Post release notification if: inputs.status == 'success' - uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 + uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: errors: true webhook-type: incoming-webhook @@ -123,7 +123,7 @@ runs: esac - name: Post release failure notification if: inputs.status != 'success' - uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 + uses: slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d # v4.0.0 with: errors: true webhook-type: incoming-webhook diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml index ec4f7b9..bc2cca6 100644 --- a/.github/workflows/actionlint.yaml +++ b/.github/workflows/actionlint.yaml @@ -20,7 +20,7 @@ jobs: pull-requests: write steps: - name: Checkout # zizmor: ignore[artipacked] -- reviewdog needs git credentials for local diff fallback on large PRs - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/ai-pr-review.yaml b/.github/workflows/ai-pr-review.yaml index 0234c4a..5eb66f8 100644 --- a/.github/workflows/ai-pr-review.yaml +++ b/.github/workflows/ai-pr-review.yaml @@ -51,7 +51,7 @@ jobs: issues: write id-token: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: loft-sh/github-actions ref: main diff --git a/.github/workflows/auto-approve-bot-prs.yaml b/.github/workflows/auto-approve-bot-prs.yaml index 7c087c7..feb5b34 100644 --- a/.github/workflows/auto-approve-bot-prs.yaml +++ b/.github/workflows/auto-approve-bot-prs.yaml @@ -33,7 +33,7 @@ jobs: # reporting a hard red check on caller CI. continue-on-error: true steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: loft-sh/github-actions ref: main diff --git a/.github/workflows/backport.yaml b/.github/workflows/backport.yaml index ef8e8a3..19a12a3 100644 --- a/.github/workflows/backport.yaml +++ b/.github/workflows/backport.yaml @@ -63,7 +63,7 @@ jobs: contents: read steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false @@ -72,7 +72,7 @@ jobs: uses: dev-hanz-ops/install-gh-cli-action@af38ce09b1ec248aeb08eea2b16bbecea9e059f8 # v0.2.1 - name: Backport Action - uses: sorenlouv/backport-github-action@9460b7102fea25466026ce806c9ebf873ac48721 # v11.0.0 + uses: sorenlouv/backport-github-action@8a6c0381851f43f9f1fddc7303f0e9015eb57b62 # v12.0.4 with: github_token: ${{ secrets.gh-access-token }} # zizmor: ignore[secrets-outside-env] -- PAT passed via workflow_call, not a repo secret # With legacy-split on, scope sorenlouv to the monorepo era (>= v0.37) @@ -164,7 +164,7 @@ jobs: target: ${{ fromJSON(needs.legacy-classify.outputs.targets) }} steps: - name: Checkout monorepo at the merged commit - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # Pin to the merge commit so it AND its parent (the diff base) are # present locally; on a pull_request_target closed event the default diff --git a/.github/workflows/check-docs.yaml b/.github/workflows/check-docs.yaml index 79dda4a..550cd85 100644 --- a/.github/workflows/check-docs.yaml +++ b/.github/workflows/check-docs.yaml @@ -20,7 +20,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - run: make check-docs diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index ab65c90..73358c7 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -18,7 +18,7 @@ jobs: actionlint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: rhysd/actionlint@914e7df21a07ef503a81201c76d2b11c789d3fca # v1.7.12 @@ -26,7 +26,7 @@ jobs: zizmor: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - run: pip install zizmor==1.24.1 && zizmor .github/ diff --git a/.github/workflows/claude-code-review.yaml b/.github/workflows/claude-code-review.yaml index d76b64e..a56201d 100644 --- a/.github/workflows/claude-code-review.yaml +++ b/.github/workflows/claude-code-review.yaml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 1 diff --git a/.github/workflows/claude.yaml b/.github/workflows/claude.yaml index a19dbcb..593b9d4 100644 --- a/.github/workflows/claude.yaml +++ b/.github/workflows/claude.yaml @@ -20,7 +20,7 @@ jobs: actions: read steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 persist-credentials: false diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 790362f..ad52b58 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -26,7 +26,7 @@ jobs: actions: read # Required for Claude to read CI results on PRs steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 persist-credentials: false diff --git a/.github/workflows/cleanup-head-charts.yaml b/.github/workflows/cleanup-head-charts.yaml index 7484c70..6570c1c 100644 --- a/.github/workflows/cleanup-head-charts.yaml +++ b/.github/workflows/cleanup-head-charts.yaml @@ -46,7 +46,7 @@ jobs: # checkout against loft-sh/github-actions fails with `upload-pack: # not our ref`. Parse workflow_ref (owner/repo/path@ref) instead. echo "ref=${WORKFLOW_REF##*@}" >> "${GITHUB_OUTPUT}" - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: loft-sh/github-actions ref: ${{ steps.wref.outputs.ref }} diff --git a/.github/workflows/conflict-check.yaml b/.github/workflows/conflict-check.yaml index 2fbe10d..5dc8867 100644 --- a/.github/workflows/conflict-check.yaml +++ b/.github/workflows/conflict-check.yaml @@ -21,7 +21,7 @@ jobs: contents: read steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/detect-changes.yaml b/.github/workflows/detect-changes.yaml index a236d13..ea608b0 100644 --- a/.github/workflows/detect-changes.yaml +++ b/.github/workflows/detect-changes.yaml @@ -22,7 +22,7 @@ jobs: has_changed: ${{ steps.set-output.outputs.has_changed }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: true # paths-filter needs credentials to fetch the base commit on push events diff --git a/.github/workflows/notify-release.yaml b/.github/workflows/notify-release.yaml index f6d30fb..7d749df 100644 --- a/.github/workflows/notify-release.yaml +++ b/.github/workflows/notify-release.yaml @@ -77,7 +77,7 @@ jobs: echo "All required inputs are valid" - name: Checkout repository if: ${{ !inputs.dry-run && inputs.status == 'success' }} - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ${{ inputs.target_repo }} ref: ${{ inputs.ref || github.ref }} diff --git a/.github/workflows/release-linear-release-sync.yaml b/.github/workflows/release-linear-release-sync.yaml index 55b12a6..cee41ce 100644 --- a/.github/workflows/release-linear-release-sync.yaml +++ b/.github/workflows/release-linear-release-sync.yaml @@ -17,11 +17,11 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: .github/actions/linear-release-sync/src/go.mod cache: false diff --git a/.github/workflows/test-ai-pr-review.yaml b/.github/workflows/test-ai-pr-review.yaml index 9caf053..36869cc 100644 --- a/.github/workflows/test-ai-pr-review.yaml +++ b/.github/workflows/test-ai-pr-review.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-ai-step.yaml b/.github/workflows/test-ai-step.yaml index be4ad33..b5feb6e 100644 --- a/.github/workflows/test-ai-step.yaml +++ b/.github/workflows/test-ai-step.yaml @@ -26,7 +26,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 @@ -43,7 +43,7 @@ jobs: name: Live smoke (${{ inputs.provider }}, ${{ inputs.effort }}) runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/test-auto-approve-bot-prs.yaml b/.github/workflows/test-auto-approve-bot-prs.yaml index 6c94ad6..b7804a9 100644 --- a/.github/workflows/test-auto-approve-bot-prs.yaml +++ b/.github/workflows/test-auto-approve-bot-prs.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 @@ -31,7 +31,7 @@ jobs: contents: read pull-requests: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: ./.github/actions/auto-approve-bot-prs diff --git a/.github/workflows/test-aws-test-infra.yaml b/.github/workflows/test-aws-test-infra.yaml index ac9349c..c28e0dc 100644 --- a/.github/workflows/test-aws-test-infra.yaml +++ b/.github/workflows/test-aws-test-infra.yaml @@ -15,10 +15,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: .github/actions/aws-test-infra/src/go.mod - name: Run tests @@ -34,7 +34,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-backport-legacy-allowlist.yaml b/.github/workflows/test-backport-legacy-allowlist.yaml index 42cb36d..e3bf6c5 100644 --- a/.github/workflows/test-backport-legacy-allowlist.yaml +++ b/.github/workflows/test-backport-legacy-allowlist.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-backport-legacy-split.yaml b/.github/workflows/test-backport-legacy-split.yaml index eaad188..45e7179 100644 --- a/.github/workflows/test-backport-legacy-split.yaml +++ b/.github/workflows/test-backport-legacy-split.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-ci-test-notify.yaml b/.github/workflows/test-ci-test-notify.yaml index b7cb654..a0a68b9 100644 --- a/.github/workflows/test-ci-test-notify.yaml +++ b/.github/workflows/test-ci-test-notify.yaml @@ -12,7 +12,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-cleanup-head-charts.yaml b/.github/workflows/test-cleanup-head-charts.yaml index c533d83..32d1254 100644 --- a/.github/workflows/test-cleanup-head-charts.yaml +++ b/.github/workflows/test-cleanup-head-charts.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-go-licenses.yaml b/.github/workflows/test-go-licenses.yaml index dd65dc7..1173bf6 100644 --- a/.github/workflows/test-go-licenses.yaml +++ b/.github/workflows/test-go-licenses.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-govulncheck.yaml b/.github/workflows/test-govulncheck.yaml index 828ae5c..1452858 100644 --- a/.github/workflows/test-govulncheck.yaml +++ b/.github/workflows/test-govulncheck.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-linear-pr-commenter.yaml b/.github/workflows/test-linear-pr-commenter.yaml index f84e16c..b2482b5 100644 --- a/.github/workflows/test-linear-pr-commenter.yaml +++ b/.github/workflows/test-linear-pr-commenter.yaml @@ -15,10 +15,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: .github/actions/linear-pr-commenter/src/go.mod - run: go test ./... diff --git a/.github/workflows/test-linear-release-sync.yaml b/.github/workflows/test-linear-release-sync.yaml index ad20948..33baaf1 100644 --- a/.github/workflows/test-linear-release-sync.yaml +++ b/.github/workflows/test-linear-release-sync.yaml @@ -15,10 +15,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: .github/actions/linear-release-sync/src/go.mod - name: Run tests diff --git a/.github/workflows/test-link-backport-prs.yaml b/.github/workflows/test-link-backport-prs.yaml index 689dae1..5296dfa 100644 --- a/.github/workflows/test-link-backport-prs.yaml +++ b/.github/workflows/test-link-backport-prs.yaml @@ -18,10 +18,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: .github/actions/link-backport-prs/src/go.mod - run: go test ./... diff --git a/.github/workflows/test-oss-commit-sync.yaml b/.github/workflows/test-oss-commit-sync.yaml index 63e4a26..f289b5a 100644 --- a/.github/workflows/test-oss-commit-sync.yaml +++ b/.github/workflows/test-oss-commit-sync.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-parse-label-filter.yaml b/.github/workflows/test-parse-label-filter.yaml index 443acbc..8bf2fb6 100644 --- a/.github/workflows/test-parse-label-filter.yaml +++ b/.github/workflows/test-parse-label-filter.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 @@ -25,7 +25,7 @@ jobs: name: Composite smoke (parse + skip decision) runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/test-promote-release.yaml b/.github/workflows/test-promote-release.yaml index 399aa8a..dc50b22 100644 --- a/.github/workflows/test-promote-release.yaml +++ b/.github/workflows/test-promote-release.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-publish-helm-chart.yaml b/.github/workflows/test-publish-helm-chart.yaml index 811ddf2..b40dfb0 100644 --- a/.github/workflows/test-publish-helm-chart.yaml +++ b/.github/workflows/test-publish-helm-chart.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dcarbone/install-yq-action@4075b4dca348d74bd83f2bf82d30f25d7c54539b # v1.3.1 diff --git a/.github/workflows/test-release-branch-freeze.yaml b/.github/workflows/test-release-branch-freeze.yaml index 81c3774..7eb04f4 100644 --- a/.github/workflows/test-release-branch-freeze.yaml +++ b/.github/workflows/test-release-branch-freeze.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-release-notification.yaml b/.github/workflows/test-release-notification.yaml index 1f468f2..9631281 100644 --- a/.github/workflows/test-release-notification.yaml +++ b/.github/workflows/test-release-notification.yaml @@ -14,7 +14,7 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-repository-dispatch.yaml b/.github/workflows/test-repository-dispatch.yaml index 625b6b6..687b95e 100644 --- a/.github/workflows/test-repository-dispatch.yaml +++ b/.github/workflows/test-repository-dispatch.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-run-ginkgo.yaml b/.github/workflows/test-run-ginkgo.yaml index 1c8140c..9449a24 100644 --- a/.github/workflows/test-run-ginkgo.yaml +++ b/.github/workflows/test-run-ginkgo.yaml @@ -12,7 +12,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-semver-validation.yaml b/.github/workflows/test-semver-validation.yaml index 93ad14a..a9183c0 100644 --- a/.github/workflows/test-semver-validation.yaml +++ b/.github/workflows/test-semver-validation.yaml @@ -15,10 +15,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '24' - run: npm ci diff --git a/.github/workflows/test-sticky-pr-comment.yaml b/.github/workflows/test-sticky-pr-comment.yaml index ecb35cf..c048cbb 100644 --- a/.github/workflows/test-sticky-pr-comment.yaml +++ b/.github/workflows/test-sticky-pr-comment.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 @@ -28,7 +28,7 @@ jobs: contents: read pull-requests: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/test-subtree-mirror.yaml b/.github/workflows/test-subtree-mirror.yaml index 1518c29..e3ab438 100644 --- a/.github/workflows/test-subtree-mirror.yaml +++ b/.github/workflows/test-subtree-mirror.yaml @@ -13,7 +13,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/test-vcluster-release.yaml b/.github/workflows/test-vcluster-release.yaml index 66259cd..982a777 100644 --- a/.github/workflows/test-vcluster-release.yaml +++ b/.github/workflows/test-vcluster-release.yaml @@ -14,7 +14,7 @@ jobs: name: Run bats tests runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: bats-core/bats-action@77d6fb60505b4d0d1d73e48bd035b55074bbfb43 # 4.0.0 diff --git a/.github/workflows/validate-renovate.yaml b/.github/workflows/validate-renovate.yaml index cffac81..a4124fb 100644 --- a/.github/workflows/validate-renovate.yaml +++ b/.github/workflows/validate-renovate.yaml @@ -12,7 +12,7 @@ jobs: pull-requests: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false