From 65dd4ab76173a73faa0de61a0e76bcbd02d0549d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Oct 2024 03:01:39 +0000 Subject: [PATCH] Bump the github-actions group across 3 directories with 9 updates Bumps the github-actions group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/setup-python](https://github.com/actions/setup-python) | `e9675cc634901ff55d92c575ecd6945e65464b00` | `19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e` | | [actions/cache](https://github.com/actions/cache) | `4.0.2` | `4.1.0` | | [actions-rust-lang/setup-rust-toolchain](https://github.com/actions-rust-lang/setup-rust-toolchain) | `1.10.0` | `1.10.1` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.44.13` | `2.44.25` | | [github/codeql-action](https://github.com/github/codeql-action) | `3.26.9` | `3.26.11` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3.6.1` | `3.7.1` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.8.0` | `6.9.0` | | [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) | `2.21.1` | `2.21.2` | | [pypa/gh-action-pypi-publish](https://github.com/pypa/gh-action-pypi-publish) | `1.10.2` | `1.10.3` | Bumps the github-actions group with 1 update in the /.github/actions/setup-python-poetry directory: [actions/setup-python](https://github.com/actions/setup-python). Bumps the github-actions group with 1 update in the /.github/actions/use-pre-commit directory: [actions/cache](https://github.com/actions/cache). Updates `actions/setup-python` from e9675cc634901ff55d92c575ecd6945e65464b00 to 19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/e9675cc634901ff55d92c575ecd6945e65464b00...19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e) Updates `actions/cache` from 4.0.2 to 4.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/0c45773b623bea8c8e75f6c82b208c3cf94ea4f9...2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2) Updates `actions-rust-lang/setup-rust-toolchain` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/actions-rust-lang/setup-rust-toolchain/releases) - [Changelog](https://github.com/actions-rust-lang/setup-rust-toolchain/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions-rust-lang/setup-rust-toolchain/compare/4d1965c9142484e48d40c19de54b5cba84953a06...11df97af8e8102fd60b60a77dfbf58d40cd843b8) Updates `taiki-e/install-action` from 2.44.13 to 2.44.25 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/9bef7e9c3d7c7aa986ef19933b0722880ae377e0...b1acf153d459cd533e9e0d25a07042be1dd2ed71) Updates `github/codeql-action` from 3.26.9 to 3.26.11 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/461ef6c76dfe95d5c364de2f431ddbd31a417628...6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea) Updates `docker/setup-buildx-action` from 3.6.1 to 3.7.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/988b5a0280414f521da01fcc63a27aeeb4b104db...c47758b77c9736f4b2ef4073d4d51994fabfe349) Updates `docker/build-push-action` from 6.8.0 to 6.9.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/32945a339266b759abcbdc89316275140b0fc960...4f58ea79222b3b9dc2c8bbdd6debcef730109a75) Updates `pypa/cibuildwheel` from 2.21.1 to 2.21.2 - [Release notes](https://github.com/pypa/cibuildwheel/releases) - [Changelog](https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md) - [Commits](https://github.com/pypa/cibuildwheel/compare/d4a2945fcc8d13f20a1b99d461b8e844d5fc6e23...f1859528322d7b29d4493ee241a167807661dfb4) Updates `pypa/gh-action-pypi-publish` from 1.10.2 to 1.10.3 - [Release notes](https://github.com/pypa/gh-action-pypi-publish/releases) - [Commits](https://github.com/pypa/gh-action-pypi-publish/compare/897895f1e160c830e369f9779632ebc134688e1b...f7600683efdcb7656dec5b29656edb7bc586e597) Updates `actions/setup-python` from e9675cc634901ff55d92c575ecd6945e65464b00 to 19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/e9675cc634901ff55d92c575ecd6945e65464b00...19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e) Updates `actions/cache` from 4.0.2 to 4.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/0c45773b623bea8c8e75f6c82b208c3cf94ea4f9...2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2) --- updated-dependencies: - dependency-name: actions/setup-python dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions-rust-lang/setup-rust-toolchain dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pypa/cibuildwheel dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: pypa/gh-action-pypi-publish dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-python dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/cache dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/actions/setup-python-poetry/action.yml | 2 +- .github/actions/use-pre-commit/action.yml | 2 +- .github/workflows/_parse_version.yml | 2 +- .github/workflows/_releaser_nightly_build.yml | 2 +- .github/workflows/ci-python.yml | 6 +++--- .github/workflows/ci-rust.yml | 8 ++++---- .github/workflows/ci-web.yml | 8 ++++---- .github/workflows/ci.yml | 4 ++-- .github/workflows/codeql.yml | 16 ++++++++-------- .github/workflows/cspell.yml | 4 ++-- .github/workflows/docker-server.yml | 8 ++++---- .github/workflows/docker-testbed.yml | 8 ++++---- .github/workflows/package-client.yml | 6 +++--- .github/workflows/package-server.yml | 4 ++-- .github/workflows/publish.yml | 2 +- 15 files changed, 41 insertions(+), 41 deletions(-) diff --git a/.github/actions/setup-python-poetry/action.yml b/.github/actions/setup-python-poetry/action.yml index c2369776362..e3a5564433c 100644 --- a/.github/actions/setup-python-poetry/action.yml +++ b/.github/actions/setup-python-poetry/action.yml @@ -41,7 +41,7 @@ runs: echo "${APPDATA}\.poetry\bin" >> "$GITHUB_PATH" - name: Install python - uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin v5.2.0 + uses: actions/setup-python@19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e # pin v5.2.0 id: setup-python with: python-version-file: ${{ inputs.project-path }}/pyproject.toml diff --git a/.github/actions/use-pre-commit/action.yml b/.github/actions/use-pre-commit/action.yml index 2c8aca32970..2aa4fd89060 100644 --- a/.github/actions/use-pre-commit/action.yml +++ b/.github/actions/use-pre-commit/action.yml @@ -39,7 +39,7 @@ runs: steps: - name: Cache pre-commit install id: cache-pre-commit - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # pin v4.0.2 + uses: actions/cache@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # pin v4.1.0 with: key: pre-commit-${{ inputs.version }}-${{ hashFiles(inputs.config-file) }} path: | diff --git a/.github/workflows/_parse_version.yml b/.github/workflows/_parse_version.yml index b5bdad9a9a8..93d97b2a230 100644 --- a/.github/workflows/_parse_version.yml +++ b/.github/workflows/_parse_version.yml @@ -85,7 +85,7 @@ jobs: timeout-minutes: 5 - name: Install python - uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin v5.2.0 + uses: actions/setup-python@19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e # pin v5.2.0 id: setup-python with: python-version: 3.12 diff --git a/.github/workflows/_releaser_nightly_build.yml b/.github/workflows/_releaser_nightly_build.yml index a28313b79a6..41fd6731676 100644 --- a/.github/workflows/_releaser_nightly_build.yml +++ b/.github/workflows/_releaser_nightly_build.yml @@ -29,7 +29,7 @@ jobs: timeout-minutes: 5 - name: Install python - uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin v5.2.0 + uses: actions/setup-python@19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e # pin v5.2.0 id: setup-python with: python-version: 3.12 diff --git a/.github/workflows/ci-python.yml b/.github/workflows/ci-python.yml index ab5667f1a14..3ba5582b7e0 100644 --- a/.github/workflows/ci-python.yml +++ b/.github/workflows/ci-python.yml @@ -123,7 +123,7 @@ jobs: - name: Restore libparsec if Rust hasn't been modified id: cache-libparsec - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # pin v4.0.2 + uses: actions/cache/restore@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # pin v4.1.0 with: key: ${{ steps.cache-key.outputs.key }} path: | @@ -134,7 +134,7 @@ jobs: timeout-minutes: 2 - name: Setup Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@4d1965c9142484e48d40c19de54b5cba84953a06 # pin v1.10.0 + uses: actions-rust-lang/setup-rust-toolchain@11df97af8e8102fd60b60a77dfbf58d40cd843b8 # pin v1.10.1 if: steps.cache-libparsec.outputs.cache-hit != 'true' with: # We setup the cache by hand, see below @@ -202,7 +202,7 @@ jobs: (!inputs.style-only) && steps.cache-libparsec.outputs.cache-hit != 'true' && !contains(github.ref, 'gh-readonly-queue') - uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # pin v4.0.2 + uses: actions/cache/save@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # pin v4.1.0 with: key: ${{ steps.cache-key.outputs.key }} path: | diff --git a/.github/workflows/ci-rust.yml b/.github/workflows/ci-rust.yml index 2d9dc328229..7879c5a9d74 100644 --- a/.github/workflows/ci-rust.yml +++ b/.github/workflows/ci-rust.yml @@ -75,7 +75,7 @@ jobs: uses: ./.github/actions/system-info timeout-minutes: 1 - - uses: actions-rust-lang/setup-rust-toolchain@4d1965c9142484e48d40c19de54b5cba84953a06 # pin v1.10.0 + - uses: actions-rust-lang/setup-rust-toolchain@11df97af8e8102fd60b60a77dfbf58d40cd843b8 # pin v1.10.1 with: # We setup the cache by hand, see below cache: false @@ -102,7 +102,7 @@ jobs: timeout-minutes: 5 # Install cargo nextest command - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: nextest@0.9.54, wasm-pack@0.12.1, cargo-deny@0.15.0 @@ -220,7 +220,7 @@ jobs: uses: ./.github/actions/system-info timeout-minutes: 1 - - uses: actions-rust-lang/setup-rust-toolchain@4d1965c9142484e48d40c19de54b5cba84953a06 # pin v1.10.0 + - uses: actions-rust-lang/setup-rust-toolchain@11df97af8e8102fd60b60a77dfbf58d40cd843b8 # pin v1.10.1 with: # We setup the cache by hand, see below cache: false @@ -262,7 +262,7 @@ jobs: timeout-minutes: 5 # Install cargo nextest command - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: nextest@0.9.54 diff --git a/.github/workflows/ci-web.yml b/.github/workflows/ci-web.yml index bfad69c13da..a10582539b3 100644 --- a/.github/workflows/ci-web.yml +++ b/.github/workflows/ci-web.yml @@ -93,7 +93,7 @@ jobs: - name: Restore libparsec if Rust hasn't been modified id: cache-libparsec - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # pin v4.0.2 + uses: actions/cache/restore@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # pin v4.1.0 with: key: ${{ steps.cache-key.outputs.key }} path: | @@ -102,7 +102,7 @@ jobs: timeout-minutes: 2 - name: Setup Rust toolchain - uses: actions-rust-lang/setup-rust-toolchain@4d1965c9142484e48d40c19de54b5cba84953a06 # pin v1.10.0 + uses: actions-rust-lang/setup-rust-toolchain@11df97af8e8102fd60b60a77dfbf58d40cd843b8 # pin v1.10.1 if: steps.cache-libparsec.outputs.cache-hit != 'true' with: target: wasm32-unknown-unknown @@ -123,7 +123,7 @@ jobs: timeout-minutes: 5 # Install wasm-pack command - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: wasm-pack@${{ env.wasm-pack-version }} @@ -135,7 +135,7 @@ jobs: - name: Save libparsec to be reuse later if: steps.cache-libparsec.outputs.cache-hit != 'true' - uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # pin v4.0.2 + uses: actions/cache/save@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # pin v4.1.0 with: key: ${{ steps.cache-key.outputs.key }} path: | diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d23affeaad6..3d75e84ee56 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -154,7 +154,7 @@ jobs: - newsfragments/** - name: Install python - uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin v5.2.0 + uses: actions/setup-python@19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e # pin v5.2.0 id: setup-python with: python-version: 3.12 @@ -191,7 +191,7 @@ jobs: diff --unified .pre-commit-config.yaml $TEMP_FILE || true echo "path=$TEMP_FILE" >> $GITHUB_OUTPUT - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: taplo-cli@0.9.3 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 445fea6333c..2369d859cd3 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -58,7 +58,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL if: steps.should-run-python-analysis.outputs.run == 'true' - uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 with: languages: python setup-python-dependencies: false @@ -87,7 +87,7 @@ jobs: - name: Perform CodeQL Analysis if: steps.should-run-python-analysis.outputs.run == 'true' - uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 with: category: /language:python @@ -142,7 +142,7 @@ jobs: # # Initializes the CodeQL tools for scanning. # - name: Initialize CodeQL # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + # uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 # with: # languages: java # # If you wish to specify custom queries, you can do so here or in a config file. @@ -154,7 +154,7 @@ jobs: # - name: Autobuild android # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/autobuild@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + # uses: github/codeql-action/autobuild@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 # with: # working-directory: client/android # env: @@ -162,7 +162,7 @@ jobs: # - name: Perform CodeQL Analysis # if: steps.should-run-java-analysis.outputs.run == 'true' - # uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + # uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 # with: # category: /language:java @@ -191,7 +191,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/init@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + uses: github/codeql-action/init@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 with: languages: typescript @@ -202,12 +202,12 @@ jobs: - name: Autobuild for typescript if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/autobuild@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + uses: github/codeql-action/autobuild@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 with: working-directory: client - name: Perform CodeQL Analysis if: steps.should-run-js-analysis.outputs.run == 'true' - uses: github/codeql-action/analyze@461ef6c76dfe95d5c364de2f431ddbd31a417628 # pin v3.26.9 + uses: github/codeql-action/analyze@6db8d6351fd0be61f9ed8ebd12ccd35dcec51fea # pin v3.26.11 with: category: /language:typescript diff --git a/.github/workflows/cspell.yml b/.github/workflows/cspell.yml index 055457d5222..78090bad538 100644 --- a/.github/workflows/cspell.yml +++ b/.github/workflows/cspell.yml @@ -54,7 +54,7 @@ jobs: - name: Restore cspell cache id: cache - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # pin v4.0.2 + uses: actions/cache/restore@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # pin v4.1.0 with: path: | package-lock.json @@ -91,7 +91,7 @@ jobs: if: >- steps.installation.outputs.previous-cache-hash != hashFiles('.cspellcache') && contains(github.ref, 'gh-readonly-queue') != 'true' - uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # pin v4.0.2 + uses: actions/cache/save@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # pin v4.1.0 with: key: ${{ steps.cache-key.outputs.key }} path: | diff --git a/.github/workflows/docker-server.yml b/.github/workflows/docker-server.yml index 913f96d13b5..84f4fe558f2 100644 --- a/.github/workflows/docker-server.yml +++ b/.github/workflows/docker-server.yml @@ -35,7 +35,7 @@ jobs: # multi-platform images and export cache # https://github.com/docker/setup-buildx-action - name: Set up Docker Buildx - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1 + uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1 - name: Log in to the Github Container registry uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 @@ -45,7 +45,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Install python - uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin v5.2.0 + uses: actions/setup-python@19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e # pin v5.2.0 id: setup-python with: python-version: 3.12 @@ -70,7 +70,7 @@ jobs: latest=${{ github.event_name == 'push' && github.ref_type == 'tag' }} - name: Build and export to Docker - uses: docker/build-push-action@32945a339266b759abcbdc89316275140b0fc960 # v6.8.0 + uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0 id: build with: context: . @@ -102,7 +102,7 @@ jobs: run: echo "${{ steps.metadata.outputs.tags }}" - name: Build and publish - uses: docker/build-push-action@32945a339266b759abcbdc89316275140b0fc960 # v6.8.0 + uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0 id: publish with: context: . diff --git a/.github/workflows/docker-testbed.yml b/.github/workflows/docker-testbed.yml index 85c6ab7860d..6212bdab45b 100644 --- a/.github/workflows/docker-testbed.yml +++ b/.github/workflows/docker-testbed.yml @@ -44,7 +44,7 @@ jobs: # multi-platform images and export cache # https://github.com/docker/setup-buildx-action - name: Set up Docker Buildx - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1 + uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1 - name: Log in to the Github Container registry uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 @@ -54,7 +54,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Install python - uses: actions/setup-python@e9675cc634901ff55d92c575ecd6945e65464b00 # pin v5.2.0 + uses: actions/setup-python@19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e # pin v5.2.0 id: setup-python with: python-version: 3.12 @@ -76,7 +76,7 @@ jobs: latest=${{ github.event_name == 'workflow_dispatch' }} - name: Build and export to Docker - uses: docker/build-push-action@32945a339266b759abcbdc89316275140b0fc960 # v6.8.0 + uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0 id: build with: context: . @@ -109,7 +109,7 @@ jobs: - name: Build and publish if: github.event_name == 'workflow_dispatch' - uses: docker/build-push-action@32945a339266b759abcbdc89316275140b0fc960 # v6.8.0 + uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0 with: context: . file: server/packaging/testbed-server/testbed-server.dockerfile diff --git a/.github/workflows/package-client.yml b/.github/workflows/package-client.yml index 59ce38bfbea..c7b3421ab31 100644 --- a/.github/workflows/package-client.yml +++ b/.github/workflows/package-client.yml @@ -94,7 +94,7 @@ jobs: working-directory: client # Install syft - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: syft@0.84.0, wasm-pack@${{ env.wasm-pack-version }} @@ -195,7 +195,7 @@ jobs: mv -v parsec_*_*.snap Parsec_${{ steps.version.outputs.full }}_linux_$ARCH.snap # Install syft - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: syft@0.84.0 @@ -350,7 +350,7 @@ jobs: timeout-minutes: 1 # Install syft - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: syft@0.84.0 diff --git a/.github/workflows/package-server.yml b/.github/workflows/package-server.yml index d6265564a7f..c0cd33958a1 100644 --- a/.github/workflows/package-server.yml +++ b/.github/workflows/package-server.yml @@ -98,7 +98,7 @@ jobs: run: git apply --allow-empty ${{ runner.temp }}/version.patch/version.patch - name: Build wheel - uses: pypa/cibuildwheel@d4a2945fcc8d13f20a1b99d461b8e844d5fc6e23 # pin v2.21.1 + uses: pypa/cibuildwheel@f1859528322d7b29d4493ee241a167807661dfb4 # pin v2.21.2 with: package-dir: server output-dir: dist @@ -136,7 +136,7 @@ jobs: run: python server/packaging/wheel/wheel_it.py ./server --output dist --skip-wheel # Install syft - - uses: taiki-e/install-action@9bef7e9c3d7c7aa986ef19933b0722880ae377e0 # pin v2.44.13 + - uses: taiki-e/install-action@b1acf153d459cd533e9e0d25a07042be1dd2ed71 # pin v2.44.25 with: tool: syft@0.84.0 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 3008cf6a9d9..abc5c52070d 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -137,7 +137,7 @@ jobs: - name: Publish wheel on PyPI if: steps.version.outputs.local == '' - uses: pypa/gh-action-pypi-publish@897895f1e160c830e369f9779632ebc134688e1b # pin v1.10.2 + uses: pypa/gh-action-pypi-publish@f7600683efdcb7656dec5b29656edb7bc586e597 # pin v1.10.3 with: user: __token__ password: ${{ secrets.PYPI_CREDENTIALS }}