diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml index bb6accec6c..78961916c0 100644 --- a/.github/workflows/backend.yml +++ b/.github/workflows/backend.yml @@ -64,7 +64,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4 with: fetch-depth: 2 @@ -84,21 +84,21 @@ jobs: - name: Setup PHP cache environment id: ext-cache - uses: shivammathur/cache-extensions@f9643262bed1015eb7bfad95e63378b23bc2d319 # pin@v1 + uses: shivammathur/cache-extensions@b5046118b75df28d2b24c968b417e81a6211a7fc # pin@v1 with: php-version: ${{ matrix.php }} extensions: ${{ env.extensions }} key: php-v1 - name: Cache PHP extensions - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # pin@v3 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # pin@v4 with: path: ${{ steps.ext-cache.outputs.dir }} key: ${{ steps.ext-cache.outputs.key }} restore-keys: ${{ steps.ext-cache.outputs.key }} - name: Setup PHP environment - uses: shivammathur/setup-php@6d7209f44a25a59e904b1ee9f3b0c33ab2cd888d # pin@v2 + uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # pin@v2 with: php-version: ${{ matrix.php }} extensions: ${{ env.extensions }} @@ -113,7 +113,7 @@ jobs: - name: Cache analysis data id: finishPrepare - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # pin@v3 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # pin@v4 with: path: ~/.cache/psalm key: backend-analysis-${{ matrix.php }} @@ -135,7 +135,7 @@ jobs: token: ${{ secrets.CODECOV_TOKEN }} PHP: ${{ matrix.php }} if: env.token != '' - uses: codecov/codecov-action@ab904c41d6ece82784817410c45d8b8c02684457 # pin@v3 + uses: codecov/codecov-action@015f24e6818733317a2da2edd6290ab26238649a # pin@v5 with: token: ${{ secrets.CODECOV_TOKEN }} # for better reliability if the GitHub API is down fail_ci_if_error: true @@ -145,7 +145,7 @@ jobs: - name: Upload code scanning results to GitHub if: always() && steps.finishPrepare.outcome == 'success' && github.repository == 'getkirby/kirby' - uses: github/codeql-action/upload-sarif@4a8f20f6b9b5114f354129a1e2f391d75bfd640a # pin@v2 + uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # pin@v3 with: sarif_file: sarif @@ -177,21 +177,21 @@ jobs: steps: - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4 - name: Preparations run: mkdir sarif - name: Setup PHP cache environment id: ext-cache - uses: shivammathur/cache-extensions@f9643262bed1015eb7bfad95e63378b23bc2d319 # pin@v1 + uses: shivammathur/cache-extensions@b5046118b75df28d2b24c968b417e81a6211a7fc # pin@v1 with: php-version: ${{ env.php }} extensions: ${{ env.extensions }} key: php-analysis-v1 - name: Cache PHP extensions - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # pin@v3 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # pin@v4 with: path: ${{ steps.ext-cache.outputs.dir }} key: ${{ steps.ext-cache.outputs.key }} @@ -199,7 +199,7 @@ jobs: - name: Setup PHP environment id: finishPrepare - uses: shivammathur/setup-php@6d7209f44a25a59e904b1ee9f3b0c33ab2cd888d # pin@v2 + uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # pin@v2 with: php-version: ${{ env.php }} extensions: ${{ env.extensions }} @@ -226,7 +226,7 @@ jobs: - name: Upload code scanning results to GitHub if: always() && steps.finishPrepare.outcome == 'success' && github.repository == 'getkirby/kirby' - uses: github/codeql-action/upload-sarif@4a8f20f6b9b5114f354129a1e2f391d75bfd640a # pin@v2 + uses: github/codeql-action/upload-sarif@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # pin@v3 with: sarif_file: sarif @@ -257,10 +257,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4 - name: Setup PHP environment - uses: shivammathur/setup-php@6d7209f44a25a59e904b1ee9f3b0c33ab2cd888d # pin@v2 + uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # pin@v2 with: php-version: ${{ env.php }} coverage: none @@ -268,7 +268,7 @@ jobs: - name: Cache analysis data id: finishPrepare - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # pin@v3 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # pin@v4 with: path: ~/.php-cs-fixer key: coding-style diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml index 5ad1719fbc..f049d990bf 100644 --- a/.github/workflows/frontend.yml +++ b/.github/workflows/frontend.yml @@ -48,10 +48,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # pin@v3 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4 - name: Set up Node.js problem matchers and cache npm dependencies - uses: actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # pin@v3 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # pin@v4 with: cache: "npm" cache-dependency-path: panel/package-lock.json @@ -93,10 +93,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # pin@v3 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4 - name: Set up Node.js problem matchers and cache npm dependencies - uses: actions/setup-node@1a4442cacd436585916779262731d5b162bc6ec7 # pin@v3 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # pin@v4 with: cache: "npm" cache-dependency-path: panel/package-lock.json