From aecf4f5161f2c1dbd5298d61a1ff3d1556efd1f6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 26 Jan 2024 15:05:18 +0000 Subject: [PATCH] Bump the github-actions group with 8 updates Bumps the github-actions group with 8 updates: | Package | From | To | | --- | --- | --- | | [google-github-actions/auth](https://github.com/google-github-actions/auth) | `2.0.0` | `2.1.0` | | [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) | `2.0.1` | `2.1.0` | | [peter-evans/find-comment](https://github.com/peter-evans/find-comment) | `2.4.0` | `3.0.0` | | [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment) | `3.1.0` | `4.0.0` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.0.0` | `4.3.0` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.0` | `4.1.1` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `3.1.4` | `3.1.5` | | [actions/cache](https://github.com/actions/cache) | `3.3.2` | `4.0.0` | Updates `google-github-actions/auth` from 2.0.0 to 2.1.0 - [Release notes](https://github.com/google-github-actions/auth/releases) - [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md) - [Commits](https://github.com/google-github-actions/auth/compare/67e9c72af6e0492df856527b474995862b7b6591...5a50e581162a13f4baa8916d01180d2acbc04363) Updates `google-github-actions/setup-gcloud` from 2.0.1 to 2.1.0 - [Release notes](https://github.com/google-github-actions/setup-gcloud/releases) - [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md) - [Commits](https://github.com/google-github-actions/setup-gcloud/compare/5a5f7b85fca43e76e53463acaa9d408a03c98d3a...98ddc00a17442e89a24bbf282954a3b65ce6d200) Updates `peter-evans/find-comment` from 2.4.0 to 3.0.0 - [Release notes](https://github.com/peter-evans/find-comment/releases) - [Commits](https://github.com/peter-evans/find-comment/compare/a54c31d7fa095754bfef525c0c8e5e5674c4b4b1...d5fe37641ad8451bdd80312415672ba26c86575e) Updates `peter-evans/create-or-update-comment` from 3.1.0 to 4.0.0 - [Release notes](https://github.com/peter-evans/create-or-update-comment/releases) - [Commits](https://github.com/peter-evans/create-or-update-comment/compare/23ff15729ef2fc348714a3bb66d2f655ca9066f2...71345be0265236311c031f5c7866368bd1eff043) Updates `actions/upload-artifact` from 4.0.0 to 4.3.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/c7d193f32edcb7bfad88892161225aeda64e9392...26f96dfa697d77e81fd5907df203aa23a56210a8) Updates `actions/download-artifact` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110...6b208ae046db98c579e8a3aa621ab581ff575935) Updates `codecov/codecov-action` from 3.1.4 to 3.1.5 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/eaaf4bedf32dbdc6b720b63067d99c4d77d6047d...4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0) Updates `actions/cache` from 3.3.2 to 4.0.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/704facf57e6136b1bc63b828d79edcd491f0ee84...13aacd865c20de90d75de3b17ebe84f7a17d57d2) --- updated-dependencies: - dependency-name: google-github-actions/auth dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: google-github-actions/setup-gcloud dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: peter-evans/find-comment dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: peter-evans/create-or-update-comment dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-and-deploy.yml | 8 ++++---- .github/workflows/cleanup-pr-assets.yml | 4 ++-- .github/workflows/plugin-release.yml | 14 +++++++------- .github/workflows/scorecards.yml | 2 +- .github/workflows/tests-e2e.yml | 6 +++--- .github/workflows/tests-karma-dashboard.yml | 2 +- .github/workflows/tests-karma-editor.yml | 2 +- .github/workflows/tests-unit-js.yml | 4 ++-- .github/workflows/tests-unit-php.yml | 2 +- 9 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/build-and-deploy.yml b/.github/workflows/build-and-deploy.yml index 9de7dca3c16a..a665a94823af 100644 --- a/.github/workflows/build-and-deploy.yml +++ b/.github/workflows/build-and-deploy.yml @@ -184,12 +184,12 @@ jobs: # Upload ZIP file to GCS for use in QA environment. - name: Authenticate - uses: google-github-actions/auth@67e9c72af6e0492df856527b474995862b7b6591 + uses: google-github-actions/auth@5a50e581162a13f4baa8916d01180d2acbc04363 with: credentials_json: ${{ secrets.GCP_SA_KEY }} - name: Setup Cloud SDK - uses: google-github-actions/setup-gcloud@5a5f7b85fca43e76e53463acaa9d408a03c98d3a + uses: google-github-actions/setup-gcloud@98ddc00a17442e89a24bbf282954a3b65ce6d200 with: project_id: ${{ secrets.GCP_PROJECT_ID }} @@ -202,7 +202,7 @@ jobs: - name: Check if a comment was already made id: find-comment - uses: peter-evans/find-comment@a54c31d7fa095754bfef525c0c8e5e5674c4b4b1 + uses: peter-evans/find-comment@d5fe37641ad8451bdd80312415672ba26c86575e with: issue-number: ${{ github.event.pull_request.number }} comment-author: googleforcreators-bot @@ -232,7 +232,7 @@ jobs: github.event.pull_request.user.login != 'dependabot[bot]' - name: Create or update comment on PR with links to plugin builds - uses: peter-evans/create-or-update-comment@23ff15729ef2fc348714a3bb66d2f655ca9066f2 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 with: issue-number: ${{ github.event.pull_request.number }} comment-id: ${{ steps.find-comment.outputs.comment-id }} diff --git a/.github/workflows/cleanup-pr-assets.yml b/.github/workflows/cleanup-pr-assets.yml index 544dbd8d66cc..8c27b72dcb2e 100644 --- a/.github/workflows/cleanup-pr-assets.yml +++ b/.github/workflows/cleanup-pr-assets.yml @@ -34,12 +34,12 @@ jobs: raw.githubusercontent.com:443 - name: Authenticate - uses: google-github-actions/auth@67e9c72af6e0492df856527b474995862b7b6591 + uses: google-github-actions/auth@5a50e581162a13f4baa8916d01180d2acbc04363 with: credentials_json: ${{ secrets.GCP_SA_KEY }} - name: Setup Cloud SDK - uses: google-github-actions/setup-gcloud@5a5f7b85fca43e76e53463acaa9d408a03c98d3a + uses: google-github-actions/setup-gcloud@98ddc00a17442e89a24bbf282954a3b65ce6d200 with: project_id: ${{ secrets.GCP_PROJECT_ID }} diff --git a/.github/workflows/plugin-release.yml b/.github/workflows/plugin-release.yml index 85e2b81147a2..f2ce583462ec 100644 --- a/.github/workflows/plugin-release.yml +++ b/.github/workflows/plugin-release.yml @@ -151,12 +151,12 @@ jobs: token: ${{ secrets.GOOGLEFORCREATORS_BOT_TOKEN }} - name: Authenticate - uses: google-github-actions/auth@67e9c72af6e0492df856527b474995862b7b6591 + uses: google-github-actions/auth@5a50e581162a13f4baa8916d01180d2acbc04363 with: credentials_json: ${{ secrets.GCP_SA_KEY }} - name: Setup Cloud SDK - uses: google-github-actions/setup-gcloud@5a5f7b85fca43e76e53463acaa9d408a03c98d3a + uses: google-github-actions/setup-gcloud@98ddc00a17442e89a24bbf282954a3b65ce6d200 with: project_id: ${{ secrets.GCP_PROJECT_ID }} @@ -222,7 +222,7 @@ jobs: echo "" > assets_version/assets_version.txt - name: Upload assets version - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 with: name: assets-version path: public/static/assets_version @@ -256,7 +256,7 @@ jobs: token: ${{ secrets.GOOGLEFORCREATORS_BOT_TOKEN }} - name: Download assets version - uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 with: name: assets-version continue-on-error: true @@ -396,7 +396,7 @@ jobs: mv build/*.zip build/release-assets/ - name: Upload artifacts - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 with: name: release-assets path: build/release-assets @@ -416,7 +416,7 @@ jobs: uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 - name: Download release artifacts - uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 with: name: release-assets path: build @@ -505,7 +505,7 @@ jobs: egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs - name: Download release artifacts - uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 with: name: release-assets path: release-assets diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index d9f56ca6806e..6c631899e171 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -48,7 +48,7 @@ jobs: # Upload the results as artifacts (optional). - name: 'Upload artifact' - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 with: name: SARIF file path: results.sarif diff --git a/.github/workflows/tests-e2e.yml b/.github/workflows/tests-e2e.yml index 81f24d27e5a5..95dc6bf8d4dd 100644 --- a/.github/workflows/tests-e2e.yml +++ b/.github/workflows/tests-e2e.yml @@ -116,7 +116,7 @@ jobs: run: bun run workflow:build-plugin - name: Upload bundle - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 with: name: web-stories path: build/web-stories @@ -168,7 +168,7 @@ jobs: uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 - name: Download bundle - uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 with: name: web-stories @@ -221,7 +221,7 @@ jobs: COMPOSE_INTERACTIVE_NO_CLI: true - name: Upload artifacts - uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 + uses: actions/upload-artifact@26f96dfa697d77e81fd5907df203aa23a56210a8 if: always() with: name: failures-artifacts diff --git a/.github/workflows/tests-karma-dashboard.yml b/.github/workflows/tests-karma-dashboard.yml index bda0cb98e37c..f5fb563f0f7a 100644 --- a/.github/workflows/tests-karma-dashboard.yml +++ b/.github/workflows/tests-karma-dashboard.yml @@ -97,7 +97,7 @@ jobs: DISABLE_ERROR_BOUNDARIES: true - name: Upload code coverage report - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d + uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 with: file: build/logs/karma-coverage/dashboard/lcov.info flags: karmatests diff --git a/.github/workflows/tests-karma-editor.yml b/.github/workflows/tests-karma-editor.yml index 422aa16ba70c..065b599803c4 100644 --- a/.github/workflows/tests-karma-editor.yml +++ b/.github/workflows/tests-karma-editor.yml @@ -138,7 +138,7 @@ jobs: SHARD: ${{ matrix.shard }} - name: Upload code coverage report - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d + uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 with: file: build/logs/karma-coverage/story-editor/lcov.info flags: karmatests diff --git a/.github/workflows/tests-unit-js.yml b/.github/workflows/tests-unit-js.yml index e26e4b6dbd63..ccecce46e8bd 100644 --- a/.github/workflows/tests-unit-js.yml +++ b/.github/workflows/tests-unit-js.yml @@ -76,7 +76,7 @@ jobs: cache: npm - name: Setup Jest cache - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 + uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 with: path: .jest-cache key: ${{ runner.os }}-${{ env.NVMRC }}-jest @@ -103,7 +103,7 @@ jobs: AMP_VALIDATOR_FILE: ${{ env.validator_file }} - name: Upload code coverage report - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d + uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 with: file: build/logs/lcov.info flags: unittests diff --git a/.github/workflows/tests-unit-php.yml b/.github/workflows/tests-unit-php.yml index 2019ce9b54d9..7d1db8d475bf 100644 --- a/.github/workflows/tests-unit-php.yml +++ b/.github/workflows/tests-unit-php.yml @@ -178,7 +178,7 @@ jobs: if: ${{ matrix.random }} - name: Upload code coverage report - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d + uses: codecov/codecov-action@4fe8c5f003fae66aa5ebb77cfd3e7bfbbda0b6b0 with: file: build/logs/*.xml if: ${{ matrix.coverage }}