From d0bbb82587c562aad09b6de8c9d5542d85654a15 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 18 Oct 2026 22:24:45 +0000 Subject: [PATCH] Update github actions Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/che.yaml | 2 +- .github/workflows/ci.yaml | 8 ++++---- .github/workflows/codecov.yaml | 6 +++--- .github/workflows/publish-devfile-schema.yaml | 8 ++++---- .github/workflows/release-devfile-schema.yaml | 8 ++++---- .github/workflows/release-typescript-models.yaml | 10 +++++----- .github/workflows/scorecard.yml | 8 ++++---- .github/workflows/stale.yaml | 2 +- 8 files changed, 26 insertions(+), 26 deletions(-) diff --git a/.github/workflows/che.yaml b/.github/workflows/che.yaml index 67fdc7b20..7bcbfb19b 100644 --- a/.github/workflows/che.yaml +++ b/.github/workflows/che.yaml @@ -32,6 +32,6 @@ jobs: steps: - name: Eclipse Che Pull Request Check id: che-pr-check-gh-action - uses: benoitf/che-pr-check-gh-action@master + uses: benoitf/che-pr-check-gh-action@13210306af00a9db1c2c14e4425e03cf861e49d1 # master with: github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index e73cf23e9..9b13c0bd6 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -33,10 +33,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 - name: Setup Go environment - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 + uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0 with: # The Go version to download (if necessary) and use. Supports semver spec and ranges. go-version-file: go.mod @@ -64,7 +64,7 @@ jobs: run: go test -coverprofile cover.out -v ./... - name: Upload coverage to Codecov - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4 + uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6 - name: Check typescript model generation run: bash ./build/typescript-model/generate.sh @@ -105,7 +105,7 @@ jobs: fi - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@60168efe1c415ce0f5521ea06d5c2062adbeed1b # v3.28.17 + uses: github/codeql-action/upload-sarif@ce5e7eeac396d720fe2d802714996c8ce561e311 # v3.39.0 with: # Path to SARIF file relative to the root of the repository sarif_file: gosec.sarif diff --git a/.github/workflows/codecov.yaml b/.github/workflows/codecov.yaml index 14dffecae..4dc520c42 100644 --- a/.github/workflows/codecov.yaml +++ b/.github/workflows/codecov.yaml @@ -30,14 +30,14 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Checkout - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 with: persist-credentials: false - name: Set up Go 1.x - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 + uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4.3.0 with: go-version-file: go.mod - name: Run tests run: go test ./... -coverprofile cover.out - name: Codecov - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4 \ No newline at end of file + uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # v3.1.6 \ No newline at end of file diff --git a/.github/workflows/publish-devfile-schema.yaml b/.github/workflows/publish-devfile-schema.yaml index 8f206829c..8967440ef 100644 --- a/.github/workflows/publish-devfile-schema.yaml +++ b/.github/workflows/publish-devfile-schema.yaml @@ -31,19 +31,19 @@ jobs: runs-on: ubuntu-latest steps: - name: Setup Python - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1 + uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1 with: - python-version: '3.9' + python-version: '3.15' - name: Checkout devfile/devfile-web - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 with: repository: devfile/devfile-web persist-credentials: false path: devfile-web-repo - name: Checkout devfile api - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 with: path: api-repo diff --git a/.github/workflows/release-devfile-schema.yaml b/.github/workflows/release-devfile-schema.yaml index c55470198..6ff853a2d 100644 --- a/.github/workflows/release-devfile-schema.yaml +++ b/.github/workflows/release-devfile-schema.yaml @@ -31,19 +31,19 @@ jobs: runs-on: ubuntu-latest steps: - name: Setup Python - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1 + uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1 with: - python-version: '3.9' + python-version: '3.15' - name: Checkout devfile/devfile-web - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 with: repository: devfile/devfile-web persist-credentials: false path: devfile-web-repo - name: Checkout devfile/api - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 with: path: api-repo diff --git a/.github/workflows/release-typescript-models.yaml b/.github/workflows/release-typescript-models.yaml index e0f17f979..321273ac5 100644 --- a/.github/workflows/release-typescript-models.yaml +++ b/.github/workflows/release-typescript-models.yaml @@ -31,22 +31,22 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout devfile/api - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 with: path: api - name: Setup python - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1 + uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4.9.1 with: - python-version: '3.9.12' + python-version: '3.15.0' - name: Install Python dependencies - uses: py-actions/py-dependency-install@9c419aa98bfb42280bdae2b0a736befd9b01e3b1 # v4.0.0 + uses: py-actions/py-dependency-install@30aa0023464ed4b5b116bd9fbdab87acf01a484e # v4.1.0 with: path: 'api/build/typescript-model/requirements.txt' - name: Setup node - uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 18 registry-url: 'https://registry.npmjs.org' diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index a6180263b..120a32e31 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -21,12 +21,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 + uses: ossf/scorecard-action@fa7117db83c52d787ae5a89f350999701505d78e # v2.5.0 with: results_file: results.sarif results_format: sarif @@ -45,7 +45,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: SARIF file path: results.sarif @@ -53,6 +53,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # v2.2.4 + uses: github/codeql-action/upload-sarif@b8d3b6e8af63cde30bdc382c0bc28114f4346c88 # v2.28.1 with: sarif_file: results.sarif \ No newline at end of file diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml index cd9473b61..a42ceff3d 100644 --- a/.github/workflows/stale.yaml +++ b/.github/workflows/stale.yaml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/stale@v7 + - uses: actions/stale@6f05e4244c9a0b2ed3401882b05d701dd0a7289b # v7 with: repo-token: ${{ secrets.GITHUB_TOKEN }} stale-issue-message: "This issue is stale because it has been open for 90 days with no activity. Remove stale label or comment or this will be closed in 120 days."