diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index a69c8f6..e01e557 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -49,7 +49,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Needed to fetch all tags @@ -80,7 +80,7 @@ jobs: echo "Building with version: $VERSION" - name: Set up Go - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 with: go-version-file: './go.mod' @@ -114,7 +114,7 @@ jobs: run: ./script/run-integration-tests - name: Upload binaries - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: binaries retention-days: 1 @@ -134,10 +134,10 @@ jobs: steps: # smoke test with our own repo - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Download binaries - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v 5.0.0 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v 7.0.0 with: name: binaries path: ${{ env.DIST_PATH }} @@ -164,7 +164,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: fetch-depth: 0 # Needed to fetch all tags @@ -210,7 +210,7 @@ jobs: fi - name: Download binaries - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v 5.0.0 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v 7.0.0 with: name: binaries path: ${{ env.DIST_PATH }} @@ -260,14 +260,14 @@ jobs: echo "Generated checksums:" && cat SHA256SUMS - name: Generate artifact attestation - uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0 + uses: actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # v3.1.0 with: subject-path: | ${{ env.BINARY_NAME }}-*.tar.gz ${{ env.BINARY_NAME }}-*.zip - name: Create Release - uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2.3.2 + uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 with: tag_name: ${{ steps.version.outputs.tag_name }} name: ${{ github.event.inputs.release_name || steps.version.outputs.new_version }} diff --git a/.github/workflows/examples-site.yml b/.github/workflows/examples-site.yml index faa489b..30f09d4 100644 --- a/.github/workflows/examples-site.yml +++ b/.github/workflows/examples-site.yml @@ -30,11 +30,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Pages uses: actions/configure-pages@v5 - name: Upload artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@v4 with: path: './examples' - name: Deploy to GitHub Pages diff --git a/.github/workflows/update-examples.yml b/.github/workflows/update-examples.yml index dc4573d..46cc730 100644 --- a/.github/workflows/update-examples.yml +++ b/.github/workflows/update-examples.yml @@ -25,12 +25,12 @@ jobs: version: ${{ steps.version.outputs.version }} steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 with: fetch-depth: 0 - name: Set up Go - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c with: go-version-file: './go.mod' @@ -50,7 +50,7 @@ jobs: go build -ldflags "-X git-metrics/pkg/utils.GitMetricsVersion=${VERSION}" -o "${BINARY_NAME}" - name: Upload git-metrics binary - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f with: name: git-metrics-binary path: ${{ env.BINARY_NAME }} @@ -73,10 +73,10 @@ jobs: cache-key: chromium-repo steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 - name: Download git-metrics binary - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 with: name: git-metrics-binary @@ -84,7 +84,7 @@ jobs: run: chmod +x git-metrics - name: Setup repository cache - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: path: repos/${{ matrix.repository.name }} key: ${{ matrix.repository.cache-key }}-${{ github.run_id }} @@ -124,7 +124,7 @@ jobs: echo "==> Generated $OUTPUT_DIR/$REPO_NAME.txt" - name: Upload output artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f with: name: output-${{ matrix.repository.name }} path: examples/outputs/${{ matrix.repository.name }}.txt @@ -135,12 +135,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 with: fetch-depth: 0 - name: Download all output artifacts - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 with: pattern: output-* merge-multiple: true @@ -187,7 +187,7 @@ jobs: - name: Create Pull Request if: steps.commit.outputs.has_changes == 'true' - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd with: script: | const { owner, repo } = context.repo;