From c63574dc780c52360554ed0c7d08803ae5f4a211 Mon Sep 17 00:00:00 2001 From: Clement Tsang <34804052+ClementTsang@users.noreply.github.com> Date: Sun, 1 Sep 2024 21:23:07 -0400 Subject: [PATCH] deps: bump some CI actions as of 2024-09-01 (#1576) * deps: bump some CI actions as of 2024-09-01 * missed one --- .github/workflows/audit.yml | 2 +- .github/workflows/build_releases.yml | 20 ++++++++++---------- .github/workflows/ci.yml | 4 ++-- .github/workflows/clear_workflow_cache.yml | 2 +- .github/workflows/coverage.yml | 2 +- .github/workflows/deployment.yml | 8 ++++---- .github/workflows/docs.yml | 2 +- .github/workflows/nightly.yml | 6 +++--- .github/workflows/post_release.yml | 2 +- .github/workflows/test_docs.yml | 2 +- .github/workflows/validate_schema.yml | 3 +-- 11 files changed, 26 insertions(+), 27 deletions(-) diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index f811945d..90debacb 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Set up Rust toolchain uses: dtolnay/rust-toolchain@21dc36fb71dd22e3317045c0c31a3f4249868b17 diff --git a/.github/workflows/build_releases.yml b/.github/workflows/build_releases.yml index f202fe7c..1041084c 100644 --- a/.github/workflows/build_releases.yml +++ b/.github/workflows/build_releases.yml @@ -123,7 +123,7 @@ jobs: steps: - name: Checkout repository if: matrix.info.container == '' - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 1 @@ -183,7 +183,7 @@ jobs: echo "ASSET=bottom_${{ matrix.info.target }}${{ matrix.info.suffix }}.tar.gz" >> $GITHUB_ENV - name: Generate artifact attestation for file - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2 with: subject-path: ${{ env.ASSET }} @@ -227,7 +227,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 1 @@ -255,7 +255,7 @@ jobs: cargo wix - name: Generate artifact attestation for file - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2 with: subject-path: "bottom_x86_64_installer.msi" @@ -278,7 +278,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 @@ -299,7 +299,7 @@ jobs: python ./scripts/cirrus/release.py "$BRANCH" "release/" "${{ inputs.caller }}" - name: Generate artifact attestation for file - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2 with: subject-path: "release/**/*.tar.gz" @@ -346,7 +346,7 @@ jobs: } steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 1 @@ -420,7 +420,7 @@ jobs: rm -r ./target/${{ matrix.info.target }}/debian/ - name: Generate artifact attestation for file - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2 with: subject-path: ${{ steps.verify.outputs.DEB_FILE }} @@ -450,7 +450,7 @@ jobs: - { target: "x86_64-unknown-linux-musl", cross: true } steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 1 @@ -510,7 +510,7 @@ jobs: rm -r ./target/${{ matrix.info.target }}/generate-rpm/ - name: Generate artifact attestation for file - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@6149ea5740be74af77f260b9db67e633f6b0a9a1 # v1.4.2 with: subject-path: ${{ steps.verify.outputs.RPM_FILE }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d4f366d0..62735a95 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -87,7 +87,7 @@ jobs: features: ["--all-features", "--no-default-features"] steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Set up Rust toolchain uses: dtolnay/rust-toolchain@21dc36fb71dd22e3317045c0c31a3f4249868b17 @@ -231,7 +231,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Set up Rust toolchain uses: dtolnay/rust-toolchain@21dc36fb71dd22e3317045c0c31a3f4249868b17 diff --git a/.github/workflows/clear_workflow_cache.yml b/.github/workflows/clear_workflow_cache.yml index 6d6ca6c9..c9895961 100644 --- a/.github/workflows/clear_workflow_cache.yml +++ b/.github/workflows/clear_workflow_cache.yml @@ -22,7 +22,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 1 diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index e5f5e962..9309f97b 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -47,7 +47,7 @@ jobs: - { os: "windows-2019", target: "x86_64-pc-windows-msvc" } steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Set up Rust toolchain uses: dtolnay/rust-toolchain@21dc36fb71dd22e3317045c0c31a3f4249868b17 diff --git a/.github/workflows/deployment.yml b/.github/workflows/deployment.yml index 6c31c856..e2b872e1 100644 --- a/.github/workflows/deployment.yml +++ b/.github/workflows/deployment.yml @@ -54,7 +54,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 1 @@ -68,7 +68,7 @@ jobs: echo "Release version: ${{ env.RELEASE_VERSION }}" - name: Get release artifacts - uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: pattern: release-* path: release @@ -106,7 +106,7 @@ jobs: echo "Release version: ${{ env.RELEASE_VERSION }}" - name: Get release artifacts - uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: pattern: release-* path: release @@ -118,7 +118,7 @@ jobs: du -h -d 0 ./release/* - name: Create release and add release files - uses: softprops/action-gh-release@20e085ccc73308c2c8e43ab8da4f8d7ecbb94d4e # 2.0.1 + uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # 2.0.8 with: token: ${{ secrets.GITHUB_TOKEN }} prerelease: false diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 7e85af2d..8c53c42f 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 335bd124..7524c352 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -62,12 +62,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 1 - name: Get release artifacts - uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: pattern: release-* path: release @@ -89,7 +89,7 @@ jobs: if: github.event.inputs.isMock != 'mock' - name: Add all release files and create nightly release if not mock - uses: softprops/action-gh-release@20e085ccc73308c2c8e43ab8da4f8d7ecbb94d4e # 2.0.1 + uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # 2.0.8 if: github.event.inputs.isMock != 'mock' with: token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/post_release.yml b/.github/workflows/post_release.yml index 31887e17..c65e6719 100644 --- a/.github/workflows/post_release.yml +++ b/.github/workflows/post_release.yml @@ -60,7 +60,7 @@ jobs: echo "Release version: ${{ env.RELEASE_VERSION }}" - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 diff --git a/.github/workflows/test_docs.yml b/.github/workflows/test_docs.yml index c91b6389..f0bfa950 100644 --- a/.github/workflows/test_docs.yml +++ b/.github/workflows/test_docs.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 diff --git a/.github/workflows/validate_schema.yml b/.github/workflows/validate_schema.yml index 34e9f197..3a8e0cf9 100644 --- a/.github/workflows/validate_schema.yml +++ b/.github/workflows/validate_schema.yml @@ -35,7 +35,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 @@ -51,7 +51,6 @@ jobs: python3 scripts/schema/validator.py -s ./schema/nightly/bottom.json -f ./sample_configs/default_config.toml python3 scripts/schema/validator.py --uncomment -s ./schema/nightly/bottom.json -f ./sample_configs/default_config.toml python3 scripts/schema/validator.py -s ./schema/nightly/bottom.json -f ./sample_configs/demo_config.toml - - name: Test nightly catches on a bad sample config run: |