From edf685f5a1eed4d1ed809316523ab4f1a5a4461d Mon Sep 17 00:00:00 2001 From: chgl Date: Mon, 15 Jan 2024 10:28:26 +0100 Subject: [PATCH] chore(deps): aggregated dep updates (#39) * chore(deps): update github-actions * chore(deps): update miracum/.github action to v1.5.4 * ci: made ci compatible with latest standard workflow changes --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> [skip ci] --- .github/workflows/ci.yaml | 14 +++++++------- .github/workflows/schedule.yaml | 2 +- .github/workflows/scorecard.yaml | 6 +++--- 3 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index c9280cb..834fd63 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -12,7 +12,7 @@ permissions: read-all jobs: build: - uses: miracum/.github/.github/workflows/standard-build.yaml@402d475fc7f49888381ea1090ddc2004ac8a8e59 # v1.5.3 + uses: miracum/.github/.github/workflows/standard-build.yaml@99ea726a6aea9d5e055cadc81cd46527ea6c8d83 # v1.5.4 permissions: contents: read id-token: write @@ -27,7 +27,7 @@ jobs: github-token: ${{ secrets.GITHUB_TOKEN }} lint: - uses: miracum/.github/.github/workflows/standard-lint.yaml@402d475fc7f49888381ea1090ddc2004ac8a8e59 # v1.5.3 + uses: miracum/.github/.github/workflows/standard-lint.yaml@99ea726a6aea9d5e055cadc81cd46527ea6c8d83 # v1.5.4 permissions: contents: read pull-requests: write @@ -52,10 +52,10 @@ jobs: persist-credentials: false - name: Download build image - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 if: ${{ github.event_name == 'pull_request' }} with: - name: container-image + name: ${{ needs.build.outputs.image-slug }} path: /tmp - name: Load image @@ -68,9 +68,9 @@ jobs: # the test image is always downloaded whether its a PR or not. Only the "actual" image is pushed to # the container registry on non-PRs. - name: Download test image - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2 + uses: actions/download-artifact@6b208ae046db98c579e8a3aa621ab581ff575935 # v4.1.1 with: - name: test-image + name: ${{ needs.build.outputs.image-slug }}-test path: /tmp - name: Load test image @@ -94,7 +94,7 @@ jobs: docker compose -f tests/e2e/compose.yaml logs release: - uses: miracum/.github/.github/workflows/standard-release.yaml@402d475fc7f49888381ea1090ddc2004ac8a8e59 # v1.5.3 + uses: miracum/.github/.github/workflows/standard-release.yaml@99ea726a6aea9d5e055cadc81cd46527ea6c8d83 # v1.5.4 needs: - build - test diff --git a/.github/workflows/schedule.yaml b/.github/workflows/schedule.yaml index b829807..d879db9 100644 --- a/.github/workflows/schedule.yaml +++ b/.github/workflows/schedule.yaml @@ -10,7 +10,7 @@ permissions: read-all jobs: schedule: - uses: miracum/.github/.github/workflows/standard-schedule.yaml@402d475fc7f49888381ea1090ddc2004ac8a8e59 # v1.5.3 + uses: miracum/.github/.github/workflows/standard-schedule.yaml@99ea726a6aea9d5e055cadc81cd46527ea6c8d83 # v1.5.4 permissions: contents: read issues: write diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index 49afbbf..71a490a 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -32,7 +32,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: persist-credentials: false @@ -59,7 +59,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@1eb3cb2b3e0f29609092a73eb033bb759a334595 # v4.1.0 with: name: SARIF file path: results.sarif @@ -67,6 +67,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@8b7fcbfac2aae0e6c24d9f9ebd5830b1290b18e4 # v2.23.0 + uses: github/codeql-action/upload-sarif@e5f05b81d5b6ff8cfa111c80c22c5fd02a384118 # v3.23.0 with: sarif_file: results.sarif