Skip to content

chore(deps): bump the github-actions group across 1 directory with 5 updates #659

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump the github-actions group across 1 directory with 5 updates #659

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
16 changes: 8 additions & 8 deletions .github/workflows/e2e.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
name: e2e

Check warning on line 1 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

e2e.yml:1: overly broad permissions: default permissions used due to no permissions: block

concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
Expand All @@ -24,16 +24,16 @@
workflow_dispatch:

jobs:
android:

Check warning on line 27 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

e2e.yml:27: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: 45
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
name: Install Node.js
with:
node-version: "22"
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: "temurin"
java-version: "21"
Expand All @@ -43,9 +43,9 @@
sudo udevadm control --reload-rules
sudo udevadm trigger --name-match=kvm
- name: Gradle cache
uses: gradle/actions/setup-gradle@v6

Check failure on line 46 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 46 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:46: unpinned action reference: action is not pinned to a hash (required by blanket policy)
- name: AVD cache
uses: actions/cache@v4

Check failure on line 48 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 48 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:48: unpinned action reference: action is not pinned to a hash (required by blanket policy)
id: avd-cache
with:
path: |
Expand All @@ -59,7 +59,7 @@
- name: "Install Tools"
run: sudo npm i -g firebase-tools
- name: Firebase Emulator Cache
uses: actions/cache@v4

Check failure on line 62 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 62 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:62: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: ~/.cache/firebase/emulators
key: firebase-emulators-v2-${{ github.run_id }}
Expand All @@ -80,7 +80,7 @@
npm run build
../scripts/start-firebase-emulator.sh
- name: E2E Tests
uses: reactivecircus/android-emulator-runner@v2

Check failure on line 83 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 83 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:83: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
working-directory: tests
api-level: 31
Expand All @@ -89,16 +89,16 @@
profile: pixel_5
script: flutter test integration_test/firebase_ui_test.dart --dart-define=CI=true -d emulator-5554

ios:

Check warning on line 92 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

e2e.yml:92: overly broad permissions: default permissions used due to no permissions: block
runs-on: macos-15
timeout-minutes: 45
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
name: Install Node.js
with:
node-version: "22"
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: "temurin"
java-version: "21"
Expand All @@ -119,12 +119,12 @@
/usr/local/share/powershell \
/usr/share/dotnet
df -h /
- uses: hendrikmuhs/ccache-action@ed74d11c0b343532753ecead8a951bb09bb34bc9
- uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03
name: Xcode Compile Cache
with:
key: ${{ runner.os }}-ios-v3
max-size: 700M
- uses: actions/cache@v4

Check failure on line 127 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 127 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:127: unpinned action reference: action is not pinned to a hash (required by blanket policy)
name: Pods Cache
id: pods-cache
with:
Expand All @@ -134,7 +134,7 @@
- name: "Install Tools"
run: sudo npm i -g firebase-tools
- name: Firebase Emulator Cache
uses: actions/cache@v4

Check failure on line 137 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 137 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:137: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: ~/.cache/firebase/emulators
key: firebase-emulators-v1-${{ github.run_id }}
Expand Down Expand Up @@ -185,25 +185,25 @@
# xcrun simctl spawn booted log stream --predicate 'eventMessage contains "flutter"' &
flutter test ./integration_test/firebase_ui_test.dart -d "$SIMULATOR" --dart-define=CI=true

macos:

Check warning on line 188 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

e2e.yml:188: overly broad permissions: default permissions used due to no permissions: block
runs-on: macos-15
timeout-minutes: 45
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
- uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e
name: Install Node.js
with:
node-version: "22"
- uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520
with:
distribution: "temurin"
java-version: "21"
- uses: hendrikmuhs/ccache-action@ed74d11c0b343532753ecead8a951bb09bb34bc9
- uses: hendrikmuhs/ccache-action@d62db5f07c26379fc4b4e0916f098a92573c3b03
name: Xcode Compile Cache
with:
key: ${{ runner.os }}-macos-v2
max-size: 700M
- uses: actions/cache@v4

Check failure on line 206 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 206 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:206: unpinned action reference: action is not pinned to a hash (required by blanket policy)
name: Pods Cache
id: pods-cache
with:
Expand All @@ -213,7 +213,7 @@
- name: "Install Tools"
run: sudo npm i -g firebase-tools
- name: Cache Firebase Emulator
uses: actions/cache@v4

Check failure on line 216 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

zizmor/unpinned-uses 

unpinned action reference: action is not pinned to a hash (required by blanket policy)

Check failure on line 216 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

unpinned-uses 

e2e.yml:216: unpinned action reference: action is not pinned to a hash (required by blanket policy)
with:
path: ~/.cache/firebase/emulators
key: firebase-emulators-v1-${{ github.run_id }}
Expand Down Expand Up @@ -249,7 +249,7 @@
- name: "E2E Tests"
working-directory: tests
run: flutter test ./integration_test/firebase_ui_test.dart -d macos --dart-define=CI=true
web:

Check warning on line 252 in .github/workflows/e2e.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

excessive-permissions 

e2e.yml:252: overly broad permissions: default permissions used due to no permissions: block
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/ossf-scorecard.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@

steps:
- name: "Checkout code"
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v3.1.0

Check warning on line 35 in .github/workflows/ossf-scorecard.yml

View workflow job for this annotation

GitHub Actions / zizmor-output

ref-version-mismatch 

ossf-scorecard.yml:35: action's hash pin has mismatched or missing version comment: points to commit 93ea575cb5d8
with:
persist-credentials: false

Expand All @@ -59,14 +59,14 @@
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: SARIF file
path: results.sarif
retention-days: 5

# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@38697555549f1db7851b81482ff19f1fa5c4fedc # v4.34.1
uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
with:
sarif_file: results.sarif
Loading