diff --git a/.github/workflows/check-sca.yml b/.github/workflows/check-sca.yml index 26fb7524..9b17ec50 100644 --- a/.github/workflows/check-sca.yml +++ b/.github/workflows/check-sca.yml @@ -22,5 +22,5 @@ jobs: # will not be triggered on dev deploys. environment: sca-checking steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: SonarSource/ci-github-actions/check-sca@master diff --git a/.github/workflows/pr-cleanup.yml b/.github/workflows/pr-cleanup.yml index 1054a353..f37e65d7 100644 --- a/.github/workflows/pr-cleanup.yml +++ b/.github/workflows/pr-cleanup.yml @@ -10,7 +10,7 @@ jobs: permissions: actions: write # Required for deleting caches and artifacts steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: pr_cleanup - uses: ./pr_cleanup diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 3e837dce..a5d92cf7 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -8,7 +8,7 @@ jobs: pre-commit: runs-on: warp-custom-ubuntu-24-04 steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./config-npm - uses: SonarSource/gh-action_pre-commit@2ddc0c7fdabce0adfaaa4075a17690972ed9961a # 1.2.0 with: diff --git a/.github/workflows/test-build-number.yml b/.github/workflows/test-build-number.yml index e262e805..c8aee27d 100644 --- a/.github/workflows/test-build-number.yml +++ b/.github/workflows/test-build-number.yml @@ -18,7 +18,7 @@ jobs: outputs: BUILD_NUMBER: ${{ steps.get_build_number.outputs.BUILD_NUMBER }} steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number @@ -48,7 +48,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number @@ -68,7 +68,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number @@ -91,7 +91,7 @@ jobs: env: BUILD_NUMBER: ${{ needs.test-build-number-generation.outputs.BUILD_NUMBER }} steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number @@ -120,7 +120,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./config-npm - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: diff --git a/.github/workflows/test-pr-cleanup.yml b/.github/workflows/test-pr-cleanup.yml index 83fb8278..cdbf25da 100644 --- a/.github/workflows/test-pr-cleanup.yml +++ b/.github/workflows/test-pr-cleanup.yml @@ -8,7 +8,7 @@ jobs: test-resources: runs-on: warp-custom-ubuntu-24-04 steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Create test file and directory for cache - name: Create test file for cache run: | @@ -16,13 +16,13 @@ jobs: echo "Test content for cache" > test-cache/test.txt - name: Save test cache - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: ./test-cache key: test-cache-${{ github.event.pull_request.number }} - name: Create and upload test artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: test-artifact-${{ github.event.pull_request.number }} path: test-cache/test.txt @@ -34,7 +34,7 @@ jobs: permissions: actions: write # Required for cache/artifact operations steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run PR cleanup uses: ./pr_cleanup diff --git a/.github/workflows/test-shell-scripts.yml b/.github/workflows/test-shell-scripts.yml index 97391558..769bbaf7 100644 --- a/.github/workflows/test-shell-scripts.yml +++ b/.github/workflows/test-shell-scripts.yml @@ -16,11 +16,11 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 - uses: ./config-npm - - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3 + - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: version: 2026.5.9 - name: Run ShellSpec tests diff --git a/.github/workflows/unified-dogfooding.yml b/.github/workflows/unified-dogfooding.yml index fc440ba4..8ec6df87 100644 --- a/.github/workflows/unified-dogfooding.yml +++ b/.github/workflows/unified-dogfooding.yml @@ -12,7 +12,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run IRIS Analysis uses: SonarSource/unified-dogfooding-actions/run-iris@v1 with: diff --git a/build-gradle/action.yml b/build-gradle/action.yml index 8c2e517d..ff89c98f 100644 --- a/build-gradle/action.yml +++ b/build-gradle/action.yml @@ -190,7 +190,7 @@ runs: - name: Archive problems report if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: problems-report-${{ inputs.job-identifier != '' && inputs.job-identifier || steps.uid.outputs.value }} path: build/reports/problems/problems-report.html @@ -202,7 +202,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-maven/action.yml b/build-maven/action.yml index 73b02d19..abad65bd 100644 --- a/build-maven/action.yml +++ b/build-maven/action.yml @@ -228,7 +228,7 @@ runs: if: | inputs.provenance == 'true' && github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-npm/action.yml b/build-npm/action.yml index 79fe9061..ed62b98c 100644 --- a/build-npm/action.yml +++ b/build-npm/action.yml @@ -121,7 +121,7 @@ runs: "Use \`disable-caching\` instead." >&2 fi - - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3 + - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: version: 2026.5.9 @@ -188,7 +188,7 @@ runs: - name: Archive logs if: failure() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: npm-logs-${{ inputs.job-identifier != '' && inputs.job-identifier || steps.uid.outputs.value }} path: ~/.npm/_logs/ @@ -200,7 +200,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-poetry/action.yml b/build-poetry/action.yml index 18a8a1ac..43db36c0 100644 --- a/build-poetry/action.yml +++ b/build-poetry/action.yml @@ -117,7 +117,7 @@ runs: path: ${{ github.workspace }}/${{ inputs.poetry-cache-dir }} key: poetry-${{ runner.os }}-${{ hashFiles('poetry.lock') }} restore-keys: poetry-${{ runner.os }}- - - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3 + - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: version: 2026.5.9 - uses: SonarSource/vault-action-wrapper@c154b4a417b51cb98dd71137f49bf20e77c56820 # 3.4.0 @@ -179,7 +179,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-yarn/action.yml b/build-yarn/action.yml index 055947fa..64b51694 100644 --- a/build-yarn/action.yml +++ b/build-yarn/action.yml @@ -116,7 +116,7 @@ runs: "Use \`disable-caching\` instead." >&2 fi - - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3 + - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: version: 2026.5.9 working_directory: ${{ inputs.working-directory }} @@ -185,7 +185,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/config-gradle/action.yml b/config-gradle/action.yml index d8361e79..0a5d6a3a 100644 --- a/config-gradle/action.yml +++ b/config-gradle/action.yml @@ -137,7 +137,7 @@ runs: - name: Configure Gradle if: steps.config-gradle-completed.outputs.skip != 'true' - uses: gradle/actions/setup-gradle@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4 + uses: gradle/actions/setup-gradle@50e97c2cd7a37755bbfafc9c5b7cafaece252f6e # v6.1.0 with: develocity-injection-enabled: ${{ inputs.use-develocity == 'true' }} cache-disabled: true diff --git a/config-npm/action.yml b/config-npm/action.yml index eca21d15..b23d3394 100644 --- a/config-npm/action.yml +++ b/config-npm/action.yml @@ -87,7 +87,7 @@ runs: "Use \`disable-caching\` instead." >&2 fi - - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3 + - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 if: steps.config-npm-completed.outputs.skip != 'true' with: version: 2026.3.7 diff --git a/get-build-number/action.yml b/get-build-number/action.yml index 7cc26e73..a5475011 100644 --- a/get-build-number/action.yml +++ b/get-build-number/action.yml @@ -44,7 +44,7 @@ runs: # Reuse current build number in case of rerun - name: Get cached build number if: steps.from-env.outputs.skip != 'true' - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 id: current-build-number with: path: build_number.txt @@ -75,7 +75,7 @@ runs: echo "BUILD_NUMBER=${BUILD_NUMBER}" >> "$GITHUB_OUTPUT" - name: Save build number to cache - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 if: steps.from-env.outputs.skip != 'true' && steps.current-build-number.outputs.cache-hit != 'true' with: path: build_number.txt diff --git a/promote/action.yml b/promote/action.yml index 6901c5e6..b2b74d76 100644 --- a/promote/action.yml +++ b/promote/action.yml @@ -57,7 +57,7 @@ runs: secrets: | development/artifactory/token/{REPO_OWNER_NAME_DASH}-promoter access_token | ARTIFACTORY_PROMOTE_ACCESS_TOKEN; development/github/token/{REPO_OWNER_NAME_DASH}-promotion token | GITHUB_TOKEN; - - uses: jdx/mise-action@5228313ee0372e111a38da051671ca30fc5a96db # v3.6.3 + - uses: jdx/mise-action@1648a7812b9aeae629881980618f079932869151 # v4.0.1 with: version: 2026.5.9 - name: Promote artifacts