diff --git a/.github/workflows/__greetings.yml b/.github/workflows/__greetings.yml index 4b83099..e537619 100644 --- a/.github/workflows/__greetings.yml +++ b/.github/workflows/__greetings.yml @@ -10,7 +10,7 @@ permissions: {} jobs: greetings: - uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 permissions: contents: read issues: write diff --git a/.github/workflows/__need-fix-to-issue.yml b/.github/workflows/__need-fix-to-issue.yml index 216c09c..1b21afd 100644 --- a/.github/workflows/__need-fix-to-issue.yml +++ b/.github/workflows/__need-fix-to-issue.yml @@ -18,7 +18,7 @@ permissions: {} jobs: main: - uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 permissions: contents: read issues: write diff --git a/.github/workflows/__semantic-pull-request.yml b/.github/workflows/__semantic-pull-request.yml index 3fefe3e..cc2a85e 100644 --- a/.github/workflows/__semantic-pull-request.yml +++ b/.github/workflows/__semantic-pull-request.yml @@ -12,7 +12,7 @@ permissions: {} jobs: main: - uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/semantic-pull-request.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 permissions: contents: write pull-requests: write diff --git a/.github/workflows/__shared-ci.yml b/.github/workflows/__shared-ci.yml index 3167ff0..dc7c02c 100644 --- a/.github/workflows/__shared-ci.yml +++ b/.github/workflows/__shared-ci.yml @@ -7,7 +7,7 @@ permissions: {} jobs: linter: - uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 permissions: actions: read contents: read diff --git a/.github/workflows/__stale.yml b/.github/workflows/__stale.yml index bd5ede0..16fcdf6 100644 --- a/.github/workflows/__stale.yml +++ b/.github/workflows/__stale.yml @@ -8,7 +8,7 @@ permissions: {} jobs: main: - uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 permissions: issues: write pull-requests: write diff --git a/.github/workflows/__test-action-package.yml b/.github/workflows/__test-action-package.yml index f8b107f..1fec5f5 100644 --- a/.github/workflows/__test-action-package.yml +++ b/.github/workflows/__test-action-package.yml @@ -119,7 +119,7 @@ jobs: - name: Assert - Download package tarball artifact by ID id: download-package-tarball - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: artifact-ids: ${{ matrix.package-tarball-artifact-id }} path: ${{ runner.temp }} diff --git a/.github/workflows/__test-workflow-continuous-integration.yml b/.github/workflows/__test-workflow-continuous-integration.yml index 6b9c63b..885c08d 100644 --- a/.github/workflows/__test-workflow-continuous-integration.yml +++ b/.github/workflows/__test-workflow-continuous-integration.yml @@ -30,7 +30,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: artifact-ids: ${{ needs.act-without-container.outputs.build-artifact-id }} path: "/" @@ -66,7 +66,7 @@ jobs: issues: read packages: write pull-requests: read - uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@f8255a6a37eb141fa331527f5aed9b9e1d598c77 # 0.38.0 + uses: hoverkraft-tech/ci-github-container/.github/workflows/docker-build-images.yml@5ffc3c81daacc57700a14bb91d67edbc67eedc1d # 0.39.0 with: sign: false images: | @@ -109,7 +109,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: artifact-ids: ${{ needs.act-with-container.outputs.build-artifact-id }} path: ${{ runner.temp }} @@ -159,7 +159,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: artifact-ids: ${{ needs.act-with-container-advanced.outputs.build-artifact-id }} path: ${{ runner.temp }} diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml index 227fcfd..2de78fe 100644 --- a/.github/workflows/continuous-integration.yml +++ b/.github/workflows/continuous-integration.yml @@ -293,11 +293,11 @@ jobs: security-events: write runs-on: *ci-runner steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 - - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 + - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 with: languages: ${{ inputs.code-ql }} - - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 dependency-review: name: 🛡️ Dependency Review @@ -306,7 +306,7 @@ jobs: contents: read runs-on: *ci-runner steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 - uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0 setup: @@ -332,10 +332,10 @@ jobs: steps: - name: Checkout repository if: inputs.container == '' - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 - id: working-directory - uses: hoverkraft-tech/ci-github-common/actions/working-directory@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/actions/working-directory@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 with: working-directory: ${{ inputs.working-directory }} enforce-path-in-workspace: ${{ inputs.container && 'false' || 'true' }} @@ -441,11 +441,11 @@ jobs: contents: read packages: read steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 if: inputs.container == '' - id: local-workflow-actions - uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 with: actions-path: actions @@ -494,11 +494,11 @@ jobs: outputs: artifact-id: ${{ steps.build.outputs.artifact-id }} steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 if: needs.setup.outputs.build-commands && inputs.container == '' - id: local-workflow-actions - uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 with: actions-path: actions @@ -528,17 +528,17 @@ jobs: packages: read pull-requests: write steps: - - uses: hoverkraft-tech/ci-github-common/actions/checkout@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + - uses: hoverkraft-tech/ci-github-common/actions/checkout@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 if: inputs.container == '' - if: needs.build.outputs.artifact-id && inputs.container == '' - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: artifact-ids: ${{ needs.build.outputs.artifact-id }} path: "/" - id: local-workflow-actions - uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@3a27d31e9ccefbe9609cc9165017ed100ff34a22 # 0.38.0 + uses: hoverkraft-tech/ci-github-common/actions/local-workflow-actions@ab69f41f76e77ec84e733dedb03492b3ee95a05f # 0.39.0 with: actions-path: actions