From 18be2b5772e9a645712a50cca19cf213d2702215 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 3 Jun 2026 14:32:02 +0000 Subject: [PATCH] Bump the github-actions group across 1 directory with 10 updates Bumps the github-actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [runs-on/action](https://github.com/runs-on/action) | `2.1.0` | `2.1.2` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.0` | `7.0.1` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.1.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.0.0` | `4.2.0` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `db582008a42febd596419635a5abc9d9815daa9c` | `82606bf257cbaff209d206a39f5134f0cfbfd2ee` | | [docker/setup-compose-action](https://github.com/docker/setup-compose-action) | `2.1.0` | `2.2.0` | | [azure/setup-helm](https://github.com/azure/setup-helm) | `4.3.0` | `5.0.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.3.0` | `6.4.0` | | [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `4.0.0` | `4.1.2` | | [trufflesecurity/trufflehog](https://github.com/trufflesecurity/trufflehog) | `5f47aad1c2df34f7c6230784ce9a5a659922f479` | `d411fff7b8879a62509f3fa98c07f247ac089a51` | Updates `runs-on/action` from 2.1.0 to 2.1.2 - [Release notes](https://github.com/runs-on/action/releases) - [Commits](https://github.com/runs-on/action/compare/742bf56072eb4845a0f94b3394673e4903c90ff0...d141ef83eb66d096ce8afc767e09115a65c63b60) Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v7...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) Updates `docker/setup-buildx-action` from 4.0.0 to 4.1.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5) Updates `docker/login-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v4...650006c6eb7dba73a995cc03b0b2d7f5ca915bee) Updates `golangci/golangci-lint-action` from db582008a42febd596419635a5abc9d9815daa9c to 82606bf257cbaff209d206a39f5134f0cfbfd2ee - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](https://github.com/golangci/golangci-lint-action/compare/db582008a42febd596419635a5abc9d9815daa9c...82606bf257cbaff209d206a39f5134f0cfbfd2ee) Updates `docker/setup-compose-action` from 2.1.0 to 2.2.0 - [Release notes](https://github.com/docker/setup-compose-action/releases) - [Commits](https://github.com/docker/setup-compose-action/compare/8cccb8c14b6500aaffebff1aa49c502c34d2e5e6...16feee727cbdc83b6a014e6cc26fec4a79bcf30c) Updates `azure/setup-helm` from 4.3.0 to 5.0.0 - [Release notes](https://github.com/azure/setup-helm/releases) - [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md) - [Commits](https://github.com/azure/setup-helm/compare/b9e51907a09c216f16ebe8536097933489208112...dda3372f752e03dde6b3237bc9431cdc2f7a02a2) Updates `actions/setup-node` from 6.3.0 to 6.4.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e) Updates `sigstore/cosign-installer` from 4.0.0 to 4.1.2 - [Release notes](https://github.com/sigstore/cosign-installer/releases) - [Commits](https://github.com/sigstore/cosign-installer/compare/faadad0cce49287aee09b3a48701e75088a2c6ad...6f9f17788090df1f26f669e9d70d6ae9567deba6) Updates `trufflesecurity/trufflehog` from 5f47aad1c2df34f7c6230784ce9a5a659922f479 to d411fff7b8879a62509f3fa98c07f247ac089a51 - [Release notes](https://github.com/trufflesecurity/trufflehog/releases) - [Commits](https://github.com/trufflesecurity/trufflehog/compare/5f47aad1c2df34f7c6230784ce9a5a659922f479...d411fff7b8879a62509f3fa98c07f247ac089a51) --- updated-dependencies: - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: azure/setup-helm dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-compose-action dependency-version: 2.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: golangci/golangci-lint-action dependency-version: 82606bf257cbaff209d206a39f5134f0cfbfd2ee dependency-type: direct:production dependency-group: github-actions - dependency-name: runs-on/action dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: sigstore/cosign-installer dependency-version: 4.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: trufflesecurity/trufflehog dependency-version: d411fff7b8879a62509f3fa98c07f247ac089a51 dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/make.yaml | 32 +++++++++---------- .github/workflows/release-helm.yaml | 10 +++--- .../workflows/release-npm-cookie-banner.yaml | 4 +-- .github/workflows/release-npm-n8n-node.yaml | 4 +-- .github/workflows/release-prb.yaml | 12 +++---- .github/workflows/release-probo-agent.yaml | 10 +++--- .../workflows/release-probod-bootstrap.yaml | 10 +++--- .github/workflows/release-probod.yaml | 30 ++++++++--------- .github/workflows/secrets.yaml | 4 +-- 9 files changed, 58 insertions(+), 58 deletions(-) diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml index 4f03d8136..534ba6dd9 100644 --- a/.github/workflows/make.yaml +++ b/.github/workflows/make.yaml @@ -22,7 +22,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: go: "false" @@ -70,7 +70,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -129,7 +129,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -166,9 +166,9 @@ jobs: runner: "4cpu-linux-arm64" steps: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd" # v4.0.0 - - uses: "docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121" # v4.1.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5" # v4.1.0 + - uses: "docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee" # v4.2.0 with: registry: artifact.probo.inc username: ${{ secrets.HARBOR_USERNAME }} @@ -216,7 +216,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "anchore/sbom-action@e22c389904149dbc22b58101806040fa8d37a610" # v0.24.0 with: path: ./ @@ -239,7 +239,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -277,7 +277,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -298,11 +298,11 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" - - uses: golangci/golangci-lint-action@db582008a42febd596419635a5abc9d9815daa9c # v9.2.1 + - uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1 with: version: v2.12.2 install-only: true @@ -355,7 +355,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: go: "false" @@ -383,7 +383,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" - name: "Create placeholder dist files" run: | @@ -424,10 +424,10 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" - - uses: "docker/setup-compose-action@8cccb8c14b6500aaffebff1aa49c502c34d2e5e6" # v2.1.0 - - uses: "docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121" # v4.1.0 + - uses: "docker/setup-compose-action@16feee727cbdc83b6a014e6cc26fec4a79bcf30c" # v2.2.0 + - uses: "docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee" # v4.2.0 with: registry: artifact.probo.inc username: ${{ secrets.HARBOR_USERNAME }} diff --git a/.github/workflows/release-helm.yaml b/.github/workflows/release-helm.yaml index 7aacd2ad7..1d9d1001e 100644 --- a/.github/workflows/release-helm.yaml +++ b/.github/workflows/release-helm.yaml @@ -16,8 +16,8 @@ jobs: contents: "read" steps: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112" # v4.3.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2" # v5.0.0 with: version: "3.17.3" - name: "Validate chart version" @@ -29,7 +29,7 @@ jobs: exit 1 fi - name: "Log in to Harbor" - uses: "docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2" # v4.0.0 + uses: "docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee" # v4.2.0 with: registry: artifact.probo.inc username: ${{ secrets.HARBOR_USERNAME }} @@ -42,7 +42,7 @@ jobs: helm dependency update "${CHART_DIR}" helm package "${CHART_DIR}" helm push "probo-${VERSION}.tgz" oci://artifact.probo.inc/probo - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "helm-chart" path: "probo-*.tgz" @@ -58,7 +58,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: fetch-depth: 0 - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8 with: name: "helm-chart" diff --git a/.github/workflows/release-npm-cookie-banner.yaml b/.github/workflows/release-npm-cookie-banner.yaml index 061b5076e..56f606032 100644 --- a/.github/workflows/release-npm-cookie-banner.yaml +++ b/.github/workflows/release-npm-cookie-banner.yaml @@ -21,7 +21,7 @@ jobs: with: fetch-depth: 0 submodules: recursive - - uses: "actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f" # v6 + - uses: "actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e" # v6 with: node-version-file: ".nvmrc" cache: "npm" @@ -85,7 +85,7 @@ jobs: --notes-file release-notes.md \ $PRERELEASE_FLAG \ packages/cookie-banner/sbom.json packages/cookie-banner/checksums.txt - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "cookie-banner-sbom" path: | diff --git a/.github/workflows/release-npm-n8n-node.yaml b/.github/workflows/release-npm-n8n-node.yaml index 9d44793bc..074db4772 100644 --- a/.github/workflows/release-npm-n8n-node.yaml +++ b/.github/workflows/release-npm-n8n-node.yaml @@ -21,7 +21,7 @@ jobs: with: fetch-depth: 0 submodules: recursive - - uses: "actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f" # v6 + - uses: "actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e" # v6 with: node-version-file: ".nvmrc" cache: "npm" @@ -85,7 +85,7 @@ jobs: --notes-file release-notes.md \ $PRERELEASE_FLAG \ packages/n8n-node/sbom.json packages/n8n-node/checksums.txt - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "npm-sbom" path: | diff --git a/.github/workflows/release-prb.yaml b/.github/workflows/release-prb.yaml index 333bffff4..fe22322c7 100644 --- a/.github/workflows/release-prb.yaml +++ b/.github/workflows/release-prb.yaml @@ -31,7 +31,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -75,7 +75,7 @@ jobs: else tar -czf "archives/${PRB_DIR}.tar.gz" -C staging "${PRB_DIR}" fi - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "archive-${{ matrix.goos }}-${{ matrix.goarch }}" path: "archives/" @@ -93,8 +93,8 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: fetch-depth: 0 - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad" # v4.0.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6" # v4.1.2 - uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8 with: pattern: "archive-*" @@ -149,7 +149,7 @@ jobs: --notes-file release-notes.md \ $PRERELEASE_FLAG \ archives/* sbom.json - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "sbom" path: "sbom.json" @@ -162,7 +162,7 @@ jobs: permissions: contents: "read" steps: - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - name: "Download checksums from release" env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/release-probo-agent.yaml b/.github/workflows/release-probo-agent.yaml index ec623c45c..5d3bbb5a7 100644 --- a/.github/workflows/release-probo-agent.yaml +++ b/.github/workflows/release-probo-agent.yaml @@ -30,7 +30,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -76,7 +76,7 @@ jobs: else tar -czf "archives/${AGENT_DIR}.tar.gz" -C staging "${AGENT_DIR}" fi - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "archive-${{ matrix.goos }}-${{ matrix.goarch }}" path: "archives/" @@ -94,8 +94,8 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: fetch-depth: 0 - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad" # v4.0.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6" # v4.1.2 - uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8 with: pattern: "archive-*" @@ -154,7 +154,7 @@ jobs: --notes-file release-notes.md \ $PRERELEASE_FLAG \ archives/* sbom.json - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "sbom" path: "sbom.json" diff --git a/.github/workflows/release-probod-bootstrap.yaml b/.github/workflows/release-probod-bootstrap.yaml index b2d3aa9f7..a17e4061e 100644 --- a/.github/workflows/release-probod-bootstrap.yaml +++ b/.github/workflows/release-probod-bootstrap.yaml @@ -31,7 +31,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -75,7 +75,7 @@ jobs: else tar -czf "archives/${DIR}.tar.gz" -C staging "${DIR}" fi - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "archive-${{ matrix.goos }}-${{ matrix.goarch }}" path: "archives/" @@ -93,8 +93,8 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: fetch-depth: 0 - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad" # v4.0.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6" # v4.1.2 - uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8 with: pattern: "archive-*" @@ -149,7 +149,7 @@ jobs: --notes-file release-notes.md \ $PRERELEASE_FLAG \ archives/* sbom.json - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "sbom" path: "sbom.json" diff --git a/.github/workflows/release-probod.yaml b/.github/workflows/release-probod.yaml index 9f2128a23..c42eca19d 100644 --- a/.github/workflows/release-probod.yaml +++ b/.github/workflows/release-probod.yaml @@ -18,7 +18,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: go: "false" @@ -32,7 +32,7 @@ jobs: run: | npm --workspace @probo/trust run check NODE_ENV=production npm --workspace @probo/trust run build - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "frontend-apps" path: | @@ -64,7 +64,7 @@ jobs: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 with: submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 - uses: "./.github/actions/setup" with: node: "false" @@ -122,12 +122,12 @@ jobs: else tar -czf "archives/${PROBOD_DIR}.tar.gz" -C staging "${PROBOD_DIR}" fi - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "binary-${{ matrix.goos }}-${{ matrix.goarch }}" path: "dist/" retention-days: 1 - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "archive-${{ matrix.goos }}-${{ matrix.goarch }}" path: "archives/" @@ -152,9 +152,9 @@ jobs: runner: "4cpu-linux-arm64" steps: - uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6 - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd" # v4.0.0 - - uses: "docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2" # v4.0.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5" # v4.1.0 + - uses: "docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee" # v4.2.0 with: registry: artifact.probo.inc username: ${{ secrets.HARBOR_USERNAME }} @@ -201,14 +201,14 @@ jobs: digest: ${{ steps.digest.outputs.digest }} image_tag: ${{ steps.tag.outputs.image_tag }} steps: - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd" # v4.0.0 - - uses: "docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2" # v4.0.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5" # v4.1.0 + - uses: "docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee" # v4.2.0 with: registry: artifact.probo.inc username: ${{ secrets.HARBOR_USERNAME }} password: ${{ secrets.HARBOR_PASSWORD }} - - uses: "sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad" # v4.0.0 + - uses: "sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6" # v4.1.2 - name: "Log in to Harbor with cosign" env: HARBOR_USERNAME: ${{ secrets.HARBOR_USERNAME }} @@ -274,8 +274,8 @@ jobs: with: fetch-depth: 0 submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad" # v4.0.0 + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6" # v4.1.2 - uses: "actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c" # v8 with: pattern: "archive-*" @@ -362,7 +362,7 @@ jobs: --notes-file release-notes.md \ $PRERELEASE_FLAG \ archives/* sbom.json - - uses: "actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f" # v7 + - uses: "actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a" # v7 with: name: "sbom" path: "sbom.json" diff --git a/.github/workflows/secrets.yaml b/.github/workflows/secrets.yaml index 928978372..312cb2b53 100644 --- a/.github/workflows/secrets.yaml +++ b/.github/workflows/secrets.yaml @@ -19,7 +19,7 @@ jobs: with: fetch-depth: 0 submodules: recursive - - uses: "runs-on/action@742bf56072eb4845a0f94b3394673e4903c90ff0" # v2 - - uses: "trufflesecurity/trufflehog@5f47aad1c2df34f7c6230784ce9a5a659922f479" # main + - uses: "runs-on/action@d141ef83eb66d096ce8afc767e09115a65c63b60" # v2 + - uses: "trufflesecurity/trufflehog@d411fff7b8879a62509f3fa98c07f247ac089a51" # main with: extra_args: "--results=verified,unknown --exclude-paths=.trufflehog-exclude"