Skip to content

chore(deps): bump the actions-dependencies group across 2 directories with 6 updates #660

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the actions-dependencies group across 2 directories with 6 updates #660

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/actions/setup/action.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,13 +19,13 @@ runs:
using: composite
steps:
- name: Setup Node.js
uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020
with:
node-version-file: .nvmrc

- name: Cache dependencies
id: yarn-cache
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
with:
path: |
**/node_modules
Expand Down
24 changes: 12 additions & 12 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -37,7 +37,7 @@ jobs:
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Setup
uses: ./.github/actions/setup
Expand All @@ -53,7 +53,7 @@ jobs:
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Install clang-format
run: sudo apt-get install clang-format
Expand All @@ -66,10 +66,10 @@ jobs:
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Install JDK
uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
with:
distribution: 'zulu'
java-version: '17'
Expand Down Expand Up @@ -125,7 +125,7 @@ jobs:
timeout-minutes: 30
steps:
- name: Checkout
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Setup
uses: ./.github/actions/setup
Expand All @@ -140,13 +140,13 @@ jobs:
TURBO_CACHE_DIR: .turbo/android
steps:
- name: Checkout
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Setup
uses: ./.github/actions/setup

- name: Cache turborepo for Android
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
with:
path: ${{ env.TURBO_CACHE_DIR }}
key: ${{ runner.os }}-turborepo-android-${{ hashFiles('yarn.lock') }}
Expand All @@ -163,7 +163,7 @@ jobs:

- name: Install JDK
if: env.turbo_cache_hit != 1
uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6
uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6
with:
distribution: 'zulu'
java-version: '17'
Expand All @@ -176,7 +176,7 @@ jobs:

- name: Cache Gradle
if: env.turbo_cache_hit != 1
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
with:
path: |
~/.gradle/wrapper
Expand Down Expand Up @@ -208,7 +208,7 @@ jobs:
echo "TOOLCHAINS=com.apple.dt.toolchain.XcodeDefault" >> $GITHUB_ENV

- name: Checkout
uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1

- name: Setup
uses: ./.github/actions/setup
Expand All @@ -222,7 +222,7 @@ jobs:
pod --version

- name: Cache turborepo for iOS
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
with:
path: ${{ env.TURBO_CACHE_DIR }}
key: ${{ runner.os }}-turborepo-ios-${{ hashFiles('yarn.lock') }}
Expand All @@ -242,7 +242,7 @@ jobs:
- name: Cache cocoapods
if: env.turbo_cache_hit != 1
id: cocoapods-cache
uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9
with:
path: |
**/ios/Pods
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/license-check.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,12 +20,12 @@
- main

jobs:
check-files-license-headers:

Check warning on line 23 in .github/workflows/license-check.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

license-check.yaml:23: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: 30
steps:
- uses: actions/checkout@v4
- uses: actions/setup-go@v5
- uses: actions/checkout@v7

Check failure on line 27 in .github/workflows/license-check.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 27 in .github/workflows/license-check.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

license-check.yaml:27: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- uses: actions/setup-go@v7

Check failure on line 28 in .github/workflows/license-check.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 28 in .github/workflows/license-check.yaml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

license-check.yaml:28: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: Install addlicense
run: go install github.com/google/addlicense@latest
- name: Check license header
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@
# limitations under the License.

# A workflow that publishes the library to CocoaPods
name: Publish

Check warning on line 16 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

publish.yml:16: overly broad permissions: default permissions used due to no permissions: block

on:
workflow_call: # called when release-please steps.release.outputs.release_created
Expand All @@ -24,18 +24,18 @@
cancel-in-progress: true

jobs:
build-and-test:

Check warning on line 27 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

publish.yml:27: overly broad permissions: default permissions used due to no permissions: block
uses: ./.github/workflows/ci.yml

publish:

Check warning on line 30 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

publish.yml:30: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
needs: build-and-test
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@v7

Check failure on line 35 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 35 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

publish.yml:35: unpinned action reference: action is not pinned to a hash (required by blanket policy)

- name: Setup Node for Dependency Installation
uses: actions/setup-node@v4
uses: actions/setup-node@v7

Check failure on line 38 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 38 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

publish.yml:38: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
node-version: 20
cache: npm
Expand All @@ -45,13 +45,13 @@

# Now configure node with the registry used for publishing
- name: Setup Node for Publishing
uses: actions/setup-node@v4
uses: actions/setup-node@v7

Check failure on line 48 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 48 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

publish.yml:48: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
node-version: 20
registry-url: 'https://wombat-dressing-room.appspot.com/'

- name: Publish
# npm publish will trigger the build via the prepack hook
run: npm publish

Check notice on line 55 in .github/workflows/publish.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

use-trusted-publishing 

publish.yml:55: prefer trusted publishing for authentication: this command
env:
NODE_AUTH_TOKEN: ${{ secrets.NPM_WOMBOT_TOKEN }}
2 changes: 1 addition & 1 deletion .github/workflows/release-please.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,8 +26,8 @@
cancel-in-progress: true

permissions:
contents: write

Check failure on line 29 in .github/workflows/release-please.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

release-please.yml:29: overly broad permissions: contents: write is overly broad at the workflow level
pull-requests: write

Check failure on line 30 in .github/workflows/release-please.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

release-please.yml:30: overly broad permissions: pull-requests: write is overly broad at the workflow level

name: Release Please

Expand All @@ -43,12 +43,12 @@
steps:
- id: release
name: Release Please
uses: googleapis/release-please-action@v4
uses: googleapis/release-please-action@v5

Check failure on line 46 in .github/workflows/release-please.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 46 in .github/workflows/release-please.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

release-please.yml:46: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
token: ${{ secrets.SYNCED_GITHUB_TOKEN_REPO }}

publish:
needs: release-please
if: ${{ needs.release-please.outputs.release_ready }}
uses: ./.github/workflows/publish.yml

Check warning on line 53 in .github/workflows/release-please.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

secrets-inherit 

release-please.yml:53: secrets unconditionally inherited by called workflow: this reusable workflow
secrets: inherit
Loading