Skip to content

Commit cfaa799

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the actions-deps group across 1 directory with 11 updates
Bumps the actions-deps group with 11 updates in the /.github/workflows directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.12.0` | `2.13.1` | | [actions/checkout](https://github.com/actions/checkout) | `4` | `5` | | [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `5` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `6` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4` | `5` | | [actions/github-script](https://github.com/actions/github-script) | `7` | `8` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2` | `3` | | [DavidAnson/markdownlint-cli2-action](https://github.com/davidanson/markdownlint-cli2-action) | `19` | `20` | | [actions/setup-python](https://github.com/actions/setup-python) | `5.6.0` | `6.0.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` | Updates `step-security/harden-runner` from 2.12.0 to 2.13.1 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](step-security/harden-runner@0634a26...f4a75cf) Updates `actions/checkout` from 4 to 5 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](actions/checkout@v4...v5) Updates `actions/setup-go` from 5 to 6 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v5...v6) Updates `actions/upload-artifact` from 4 to 5 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@v4...v5) Updates `actions/download-artifact` from 4 to 6 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@v4...v6) Updates `aws-actions/configure-aws-credentials` from 4 to 5 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@v4...v5) Updates `actions/github-script` from 7 to 8 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](actions/github-script@v7...v8) Updates `actions/attest-build-provenance` from 2 to 3 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](actions/attest-build-provenance@v2...v3) Updates `DavidAnson/markdownlint-cli2-action` from 19 to 20 - [Release notes](https://github.com/davidanson/markdownlint-cli2-action/releases) - [Commits](DavidAnson/markdownlint-cli2-action@v19...v20) Updates `actions/setup-python` from 5.6.0 to 6.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](actions/setup-python@a26af69...e797f83) Updates `actions/setup-node` from 4 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4...v6) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/checkout dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/upload-artifact dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/download-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: aws-actions/configure-aws-credentials dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/github-script dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/attest-build-provenance dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: DavidAnson/markdownlint-cli2-action dependency-version: '20' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-python dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent f835e89 commit cfaa799

File tree

9 files changed

+39
-39
lines changed

9 files changed

+39
-39
lines changed

‎.github/workflows/actionlint.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -34,12 +34,12 @@ jobs:
3434
runs-on: ubuntu-latest
3535
steps:
3636
- name: "Harden Runner"
37-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
37+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
3838
with:
3939
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
4040

4141
- name: "Checkout"
42-
uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1
42+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4343
with:
4444
fetch-depth: 0
4545

‎.github/workflows/api-server.yml‎

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -30,10 +30,10 @@ jobs:
3030

3131
steps:
3232
- name: Checkout repository
33-
uses: actions/checkout@v4
33+
uses: actions/checkout@v5
3434

3535
- name: Set up Go
36-
uses: actions/setup-go@v5
36+
uses: actions/setup-go@v6
3737
with:
3838
go-version: '1.21.6'
3939

@@ -65,9 +65,9 @@ jobs:
6565
run:
6666
working-directory: api-server
6767
steps:
68-
- uses: actions/checkout@v4
68+
- uses: actions/checkout@v5
6969
- name: Set up Go
70-
uses: actions/setup-go@v5
70+
uses: actions/setup-go@v6
7171
with:
7272
go-version: '1.21.6'
7373

@@ -78,7 +78,7 @@ jobs:
7878
make -j dist/packages
7979
8080
- name: Upload apiserver tar.gz packages
81-
uses: actions/upload-artifact@v4
81+
uses: actions/upload-artifact@v5
8282
with:
8383
name: apiserver-darwin-packages-tar
8484
if-no-files-found: error
@@ -95,7 +95,7 @@ jobs:
9595
if: ${{ github.event_name == 'push' }}
9696
steps:
9797
- name: download tar.gz binary artifacts
98-
uses: actions/download-artifact@v4
98+
uses: actions/download-artifact@v6
9999
with:
100100
name: apiserver-darwin-packages-tar
101101
path: ./dist/packages
@@ -105,7 +105,7 @@ jobs:
105105
working-directory: ./dist/packages
106106

107107
- name: configure aws credentials
108-
uses: aws-actions/configure-aws-credentials@v4
108+
uses: aws-actions/configure-aws-credentials@v5
109109
with:
110110
role-to-assume: ${{ secrets.AWS_ROLE }}
111111
role-session-name: apiserver-ci-deploy
@@ -121,9 +121,9 @@ jobs:
121121
run:
122122
working-directory: api-server
123123
steps:
124-
- uses: actions/checkout@v4
124+
- uses: actions/checkout@v5
125125
- name: Set up Go
126-
uses: actions/setup-go@v5
126+
uses: actions/setup-go@v6
127127
with:
128128
go-version: '1.21.6'
129129

@@ -134,7 +134,7 @@ jobs:
134134
make -j dist/packages
135135
136136
- name: Upload apiserver tar.gz packages
137-
uses: actions/upload-artifact@v4
137+
uses: actions/upload-artifact@v5
138138
with:
139139
name: apiserver-linux-packages-tar
140140
if-no-files-found: error
@@ -151,7 +151,7 @@ jobs:
151151
if: ${{ github.event_name == 'push' }}
152152
steps:
153153
- name: download tar.gz binary artifacts
154-
uses: actions/download-artifact@v4
154+
uses: actions/download-artifact@v6
155155
with:
156156
name: apiserver-linux-packages-tar
157157
path: ./dist/packages
@@ -161,7 +161,7 @@ jobs:
161161
working-directory: ./dist/packages
162162

163163
- name: configure aws credentials
164-
uses: aws-actions/configure-aws-credentials@v4
164+
uses: aws-actions/configure-aws-credentials@v5
165165
with:
166166
role-to-assume: ${{ secrets.AWS_ROLE }}
167167
role-session-name: apiserver-ci-deploy

‎.github/workflows/cherry-pick.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515
- name: Checkout repository
16-
uses: actions/checkout@v4
16+
uses: actions/checkout@v5
1717
with:
1818
fetch-depth: 0
1919

‎.github/workflows/devcontainer-image.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Check out the repo
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@v5
3131
with:
3232
token: ${{ secrets.BOT_PAT }}
3333
ref: 'main'
@@ -59,7 +59,7 @@ jobs:
5959
6060
- name: Get Pull Request Number from Commit
6161
id: get_pr_number
62-
uses: actions/github-script@v7
62+
uses: actions/github-script@v8
6363
with:
6464
script: |
6565
console.log("Repository owner:", context.repo.owner);
@@ -115,7 +115,7 @@ jobs:
115115
file: src/Containerfile
116116

117117
- name: Generate devcontainer GHCR artifact attestation
118-
uses: actions/attest-build-provenance@v2
118+
uses: actions/attest-build-provenance@v3
119119
with:
120120
subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_DEV_IMAGE_NAME}}
121121
subject-digest: ${{ steps.push-dev-ghcr.outputs.digest }}
@@ -137,7 +137,7 @@ jobs:
137137
file: src/Containerfile
138138

139139
- name: Generate devcontainer Quay artifact attestation
140-
uses: actions/attest-build-provenance@v2
140+
uses: actions/attest-build-provenance@v3
141141
with:
142142
subject-name: ${{ env.QUAY_REGISTRY }}/${{ env.QUAY_DEV_IMAGE_NAME}}
143143
subject-digest: ${{ steps.push-dev-quay.outputs.digest }}

‎.github/workflows/lint-jobs.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
name: Shellcheck
2424
runs-on: ubuntu-latest
2525
steps:
26-
- uses: actions/checkout@v4
26+
- uses: actions/checkout@v5
2727
- name: Run ShellCheck
2828
uses: ludeeus/action-shellcheck@master
2929
env:
@@ -32,29 +32,29 @@ jobs:
3232
markdown-lint:
3333
runs-on: ubuntu-latest
3434
steps:
35-
- uses: actions/checkout@v4
35+
- uses: actions/checkout@v5
3636
- name: markdownlint-cli2-action
37-
uses: DavidAnson/markdownlint-cli2-action@v19
37+
uses: DavidAnson/markdownlint-cli2-action@v20
3838
with:
3939
globs: "**/*.md"
4040

4141
yamllint:
4242
runs-on: ubuntu-latest
4343
steps:
4444
- name: "Harden Runner"
45-
uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
45+
uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
4646
with:
4747
egress-policy: audit # TODO: change to 'egress-policy: block' after couple of runs
4848

4949
- name: "Checkout"
50-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
50+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5151
with:
5252
# https://github.com/actions/checkout/issues/249
5353
fetch-depth: 0
5454

5555
# yamllint is a Python-based tool
5656
- name: Setup Python 3.11
57-
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
57+
uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
5858
with:
5959
python-version: 3.11
6060

‎.github/workflows/lint-ui.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,9 +27,9 @@ jobs:
2727
runs-on: ubuntu-22.04
2828
steps:
2929
- name: Checkout
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@v5
3131
- name: Setup Node
32-
uses: actions/setup-node@v4
32+
uses: actions/setup-node@v6
3333
with:
3434
node-version: '22'
3535
- name: Install dependencies

‎.github/workflows/pr-healthcheck-sidecar-image.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727

2828
steps:
2929
- name: Check out the repo
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@v5
3131
with:
3232
token: ${{ secrets.BOT_PAT }}
3333
ref: 'main'
@@ -59,7 +59,7 @@ jobs:
5959
6060
- name: Get Pull Request Number from Commit
6161
id: get_pr_number
62-
uses: actions/github-script@v7
62+
uses: actions/github-script@v8
6363
with:
6464
script: |
6565
console.log("Repository owner:", context.repo.owner);
@@ -114,7 +114,7 @@ jobs:
114114
file: healthcheck-sidecar/Containerfile
115115

116116
- name: Generate GHCR artifact attestation
117-
uses: actions/attest-build-provenance@v2
117+
uses: actions/attest-build-provenance@v3
118118
with:
119119
subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_HS_IMAGE_NAME}}
120120
subject-digest: ${{ steps.push-hs-ghcr.outputs.digest }}
@@ -136,7 +136,7 @@ jobs:
136136
file: healthcheck-sidecar/Containerfile
137137

138138
- name: Generate QA HS Quay artifact attestation
139-
uses: actions/attest-build-provenance@v2
139+
uses: actions/attest-build-provenance@v3
140140
with:
141141
subject-name: ${{ env.QUAY_REGISTRY }}/${{ env.QUAY_HS_IMAGE_NAME}}
142142
subject-digest: ${{ steps.push-hs-quay.outputs.digest }}

‎.github/workflows/pr-images.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424

2525
steps:
2626
- name: Check out the repo
27-
uses: actions/checkout@v4
27+
uses: actions/checkout@v5
2828
with:
2929
token: ${{ secrets.BOT_PAT }}
3030
ref: 'main'
@@ -71,7 +71,7 @@ jobs:
7171
- name: Get Pull Request Number from Commit
7272
if: env.SKIP_WORKFLOW == 'false'
7373
id: get_pr_number
74-
uses: actions/github-script@v7
74+
uses: actions/github-script@v8
7575
with:
7676
script: |
7777
console.log("Repository owner:", context.repo.owner);
@@ -130,7 +130,7 @@ jobs:
130130

131131
- name: Generate GHCR artifact attestation
132132
if: env.SKIP_WORKFLOW == 'false'
133-
uses: actions/attest-build-provenance@v2
133+
uses: actions/attest-build-provenance@v3
134134
with:
135135
subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_UI_IMAGE_NAME}}
136136
subject-digest: ${{ steps.push-ui-ghcr.outputs.digest }}
@@ -154,7 +154,7 @@ jobs:
154154

155155
- name: Generate QA UI Quay artifact attestation
156156
if: env.SKIP_WORKFLOW == 'false'
157-
uses: actions/attest-build-provenance@v2
157+
uses: actions/attest-build-provenance@v3
158158
with:
159159
subject-name: ${{ env.QUAY_REGISTRY }}/${{ env.QUAY_UI_IMAGE_NAME}}
160160
subject-digest: ${{ steps.push-ui-quay.outputs.digest }}

‎.github/workflows/release-images.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222

2323
steps:
2424
- name: Check out the repo
25-
uses: actions/checkout@v4
25+
uses: actions/checkout@v5
2626

2727
- name: Log in to the GHCR container image registry
2828
uses: docker/login-action@v3
@@ -75,7 +75,7 @@ jobs:
7575
file: src/Containerfile
7676

7777
- name: Generate Prod UI GHCR artifact attestation
78-
uses: actions/attest-build-provenance@v2
78+
uses: actions/attest-build-provenance@v3
7979
with:
8080
subject-name: ${{ env.GHCR_REGISTRY }}/${{ env.GHCR_UI_IMAGE_NAME}}
8181
subject-digest: ${{ steps.push-ui-ghcr.outputs.digest }}
@@ -95,14 +95,14 @@ jobs:
9595
file: src/Containerfile
9696

9797
- name: Generate PROD UI Quay artifact attestation
98-
uses: actions/attest-build-provenance@v2
98+
uses: actions/attest-build-provenance@v3
9999
with:
100100
subject-name: ${{ env.QUAY_REGISTRY }}/${{ env.QUAY_UI_IMAGE_NAME}}
101101
subject-digest: ${{ steps.push-ui-quay.outputs.digest }}
102102
push-to-registry: true
103103

104104
- name: Re-Checkout main on the repo
105-
uses: actions/checkout@v4
105+
uses: actions/checkout@v5
106106
with:
107107
token: ${{ secrets.BOT_PAT }}
108108
ref: main

0 commit comments

Comments
 (0)