From 0b19c927bffca21be3ef7e95de84649657af9a53 Mon Sep 17 00:00:00 2001 From: "syself-bot[bot]" <115953087+syself-bot[bot]@users.noreply.github.com> Date: Wed, 8 Jan 2025 11:02:05 +0000 Subject: [PATCH] :seedling: Update github-actions group | datasource | package | from | to | | ----------- | ------------------------ | ------- | ------- | | github-tags | actions/upload-artifact | v4.4.3 | v4.5.0 | | github-tags | docker/build-push-action | v6.10.0 | v6.11.0 | --- .github/actions/e2e/action.yaml | 2 +- .github/actions/manager-image/action.yaml | 4 ++-- .github/actions/test-release/action.yaml | 2 +- .github/workflows/build.yml | 10 +++++----- .github/workflows/pr-verify.yml | 2 +- .github/workflows/release.yml | 8 ++++---- .github/workflows/report-bin-size.yml | 2 +- .github/workflows/schedule-update-bot.yaml | 2 +- .github/workflows/test.yml | 2 +- 9 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/actions/e2e/action.yaml b/.github/actions/e2e/action.yaml index 5d1ee2a33..430178251 100644 --- a/.github/actions/e2e/action.yaml +++ b/.github/actions/e2e/action.yaml @@ -80,7 +80,7 @@ runs: CAPH_LATEST_VERSION: "v1.0.0" run: make ${{ inputs.e2e_make_target }} - name: Upload artifact - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4 if: ${{ always() }} with: name: e2e-${{ inputs.e2e_name }} diff --git a/.github/actions/manager-image/action.yaml b/.github/actions/manager-image/action.yaml index c5ef5c10e..1987dd891 100644 --- a/.github/actions/manager-image/action.yaml +++ b/.github/actions/manager-image/action.yaml @@ -44,7 +44,7 @@ runs: # Import GitHub's cache build to docker cache - name: Copy Caph Golang cache to docker cache - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0 + uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0 with: provenance: false context: /tmp/.cache/caph @@ -54,7 +54,7 @@ runs: target: import-cache - name: Build and push manager image - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6 + uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6 with: provenance: false context: . diff --git a/.github/actions/test-release/action.yaml b/.github/actions/test-release/action.yaml index 1183e47fd..14eddf5de 100644 --- a/.github/actions/test-release/action.yaml +++ b/.github/actions/test-release/action.yaml @@ -25,7 +25,7 @@ runs: TAG: ${{ steps.meta.outputs.version }} run: make test-release - name: Upload artifact - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4 with: name: test-release path: out diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 7002f6188..d0ac45c15 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -33,7 +33,7 @@ jobs: fetch-depth: 0 - uses: ./.github/actions/setup-go - name: Set up QEMU - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 + uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3 - name: Set up Docker Buildx uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 @@ -88,7 +88,7 @@ jobs: # Import GitHub's cache build to docker cache - name: Copy Caph Golang cache to docker cache - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0 + uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0 with: provenance: false context: /tmp/.cache/caph @@ -98,7 +98,7 @@ jobs: target: import-cache - name: Build and push manager image - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6 + uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6 id: docker_build_release with: provenance: false @@ -141,7 +141,7 @@ jobs: # Upload artifact digests - name: Upload artifact digests - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 with: name: image-digest caph path: image-digest @@ -150,7 +150,7 @@ jobs: # Store docker's golang's cache build locally only on the main branch - name: Store Caph Golang cache build locally if: ${{ steps.cache.outputs.cache-hit != 'true' }} - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0 + uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0 with: provenance: false context: . diff --git a/.github/workflows/pr-verify.yml b/.github/workflows/pr-verify.yml index 7c20643a7..c84554914 100644 --- a/.github/workflows/pr-verify.yml +++ b/.github/workflows/pr-verify.yml @@ -41,7 +41,7 @@ jobs: done - name: Generate Token - uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1 + uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1 id: generate-token with: app-id: ${{ secrets.SYSELF_APP_ID }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c23a5c453..cf3a83a73 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,7 +24,7 @@ jobs: fetch-depth: 0 - uses: ./.github/actions/setup-go - name: Set up QEMU - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 + uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3 - name: Set up Docker Buildx uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 @@ -60,7 +60,7 @@ jobs: echo 'EOF' >> $GITHUB_ENV - name: Build and push manager image - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6 + uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6 id: docker_build_release with: provenance: false @@ -107,7 +107,7 @@ jobs: # Upload artifact digests - name: Upload artifact digests - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 with: name: image-digest caph path: image-digest @@ -147,7 +147,7 @@ jobs: run: | make release-notes - name: Release - uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2 + uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2 with: draft: true files: out/* diff --git a/.github/workflows/report-bin-size.yml b/.github/workflows/report-bin-size.yml index e5e4d84bc..4a29de2c5 100644 --- a/.github/workflows/report-bin-size.yml +++ b/.github/workflows/report-bin-size.yml @@ -26,7 +26,7 @@ jobs: run: make caph report-binsize-treemap-all - name: Upload Report - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 with: name: reports-${{ github.sha }} path: .reports diff --git a/.github/workflows/schedule-update-bot.yaml b/.github/workflows/schedule-update-bot.yaml index 8aae12a6e..374a7484b 100644 --- a/.github/workflows/schedule-update-bot.yaml +++ b/.github/workflows/schedule-update-bot.yaml @@ -33,7 +33,7 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Generate Token - uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1 + uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1 id: generate-token with: app-id: ${{ secrets.SYSELF_APP_ID }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 29ff349ae..a4a26dd68 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -64,7 +64,7 @@ jobs: paths: ".coverage/junit.xml" - name: Upload Report - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 with: name: reports-${{ steps.name.outputs.name }} path: .reports