From e7ebce66b37b214c02cc2606a39c6b72563a3e24 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 11 Mar 2026 11:07:32 +0000 Subject: [PATCH] Update GitHub actions --- .github/workflows/pr-cleanup.yml | 2 +- .github/workflows/pre-commit.yml | 2 +- .github/workflows/test-build-number.yml | 8 ++++---- .github/workflows/test-pr-cleanup.yml | 8 ++++---- .github/workflows/test-shell-scripts.yml | 2 +- .github/workflows/unified-dogfooding.yml | 2 +- build-gradle/action.yml | 4 ++-- build-maven/action.yml | 2 +- build-npm/action.yml | 4 ++-- build-poetry/action.yml | 2 +- build-yarn/action.yml | 2 +- config-gradle/action.yml | 2 +- get-build-number/action.yml | 4 ++-- 13 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/pr-cleanup.yml b/.github/workflows/pr-cleanup.yml index 9be2dc22..53420f9b 100644 --- a/.github/workflows/pr-cleanup.yml +++ b/.github/workflows/pr-cleanup.yml @@ -10,7 +10,7 @@ jobs: permissions: actions: write # Required for deleting caches and artifacts steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: pr_cleanup - uses: ./pr_cleanup diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index ca7e32ff..8cd52123 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -8,7 +8,7 @@ jobs: pre-commit: runs-on: github-ubuntu-latest-s steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: ./config-npm - uses: SonarSource/gh-action_pre-commit@2ddc0c7fdabce0adfaaa4075a17690972ed9961a # 1.2.0 with: diff --git a/.github/workflows/test-build-number.yml b/.github/workflows/test-build-number.yml index 7b90c56b..d0b7f009 100644 --- a/.github/workflows/test-build-number.yml +++ b/.github/workflows/test-build-number.yml @@ -18,7 +18,7 @@ jobs: outputs: BUILD_NUMBER: ${{ steps.get_build_number.outputs.BUILD_NUMBER }} steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number @@ -48,7 +48,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number @@ -68,7 +68,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number @@ -91,7 +91,7 @@ jobs: env: BUILD_NUMBER: ${{ needs.test-build-number-generation.outputs.BUILD_NUMBER }} steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: sparse-checkout: get-build-number - uses: ./get-build-number diff --git a/.github/workflows/test-pr-cleanup.yml b/.github/workflows/test-pr-cleanup.yml index 05b2f9bb..42453eb8 100644 --- a/.github/workflows/test-pr-cleanup.yml +++ b/.github/workflows/test-pr-cleanup.yml @@ -8,7 +8,7 @@ jobs: test-resources: runs-on: github-ubuntu-latest-s steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # Create test file and directory for cache - name: Create test file for cache run: | @@ -16,13 +16,13 @@ jobs: echo "Test content for cache" > test-cache/test.txt - name: Save test cache - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 with: path: ./test-cache key: test-cache-${{ github.event.pull_request.number }} - name: Create and upload test artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: test-artifact-${{ github.event.pull_request.number }} path: test-cache/test.txt @@ -34,7 +34,7 @@ jobs: permissions: actions: write # Required for cache/artifact operations steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run PR cleanup uses: ./pr_cleanup diff --git a/.github/workflows/test-shell-scripts.yml b/.github/workflows/test-shell-scripts.yml index 0d4d27f4..d0bc6680 100644 --- a/.github/workflows/test-shell-scripts.yml +++ b/.github/workflows/test-shell-scripts.yml @@ -16,7 +16,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 - uses: ./config-npm diff --git a/.github/workflows/unified-dogfooding.yml b/.github/workflows/unified-dogfooding.yml index 15886447..fa641c58 100644 --- a/.github/workflows/unified-dogfooding.yml +++ b/.github/workflows/unified-dogfooding.yml @@ -12,7 +12,7 @@ jobs: id-token: write contents: read steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Run IRIS Analysis uses: SonarSource/unified-dogfooding-actions/run-iris@v1 with: diff --git a/build-gradle/action.yml b/build-gradle/action.yml index 4e389896..7732b305 100644 --- a/build-gradle/action.yml +++ b/build-gradle/action.yml @@ -176,7 +176,7 @@ runs: - name: Archive problems report if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: problems-report-${{ github.job }}${{ strategy.job-index }} path: build/reports/problems/problems-report.html @@ -188,7 +188,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-maven/action.yml b/build-maven/action.yml index 0c626d60..90791517 100644 --- a/build-maven/action.yml +++ b/build-maven/action.yml @@ -226,7 +226,7 @@ runs: if: | inputs.provenance == 'true' && github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-npm/action.yml b/build-npm/action.yml index 376bcb1d..8505658d 100644 --- a/build-npm/action.yml +++ b/build-npm/action.yml @@ -161,7 +161,7 @@ runs: - name: Archive logs if: failure() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: npm-logs-${{ github.job }}${{ strategy.job-index }} path: ~/.npm/_logs/ @@ -173,7 +173,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-poetry/action.yml b/build-poetry/action.yml index eacc2c26..88092a83 100644 --- a/build-poetry/action.yml +++ b/build-poetry/action.yml @@ -170,7 +170,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/build-yarn/action.yml b/build-yarn/action.yml index 44debebe..96f5dbc1 100644 --- a/build-yarn/action.yml +++ b/build-yarn/action.yml @@ -172,7 +172,7 @@ runs: github.event_name != 'pull_request' && steps.build.outputs.deployed == 'true' && (inputs.provenance-artifact-paths != '' || steps.build.outputs.artifact-paths != '') }} - uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0 + uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0 with: subject-path: >- ${{ inputs.provenance-artifact-paths != '' && inputs.provenance-artifact-paths || steps.build.outputs.artifact-paths }} diff --git a/config-gradle/action.yml b/config-gradle/action.yml index af583e47..bb4f567e 100644 --- a/config-gradle/action.yml +++ b/config-gradle/action.yml @@ -135,7 +135,7 @@ runs: - name: Configure Gradle if: steps.config-gradle-completed.outputs.skip != 'true' - uses: gradle/actions/setup-gradle@748248ddd2a24f49513d8f472f81c3a07d4d50e1 # v4.4.4 + uses: gradle/actions/setup-gradle@0723195856401067f7a2779048b490ace7a47d7c # v5.0.2 with: develocity-injection-enabled: ${{ inputs.use-develocity == 'true' }} cache-disabled: true diff --git a/get-build-number/action.yml b/get-build-number/action.yml index c3245ef3..436ed4f1 100644 --- a/get-build-number/action.yml +++ b/get-build-number/action.yml @@ -44,7 +44,7 @@ runs: # Reuse current build number in case of rerun - name: Get cached build number if: steps.from-env.outputs.skip != 'true' - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/restore@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 id: current-build-number with: path: build_number.txt @@ -75,7 +75,7 @@ runs: echo "BUILD_NUMBER=${BUILD_NUMBER}" >> "$GITHUB_OUTPUT" - name: Save build number to cache - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache/save@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 if: steps.from-env.outputs.skip != 'true' && steps.current-build-number.outputs.cache-hit != 'true' with: path: build_number.txt