Merge branch 'feature/rate-limiter-copi' of https://github.com/immortal71/cornucopia into feature/rate-limiter-copi

Author: immortal71

.github/workflows/build-website-staging.yml

@@ -16,7 +16,7 @@
         steps:
           # Make sure we have some code to test
           - name: Harden runner
-            uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+            uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
             with:
               egress-policy: block
               allowed-endpoints: >
@@ -29,14 +29,14 @@
         runs-on: ubuntu-latest
         steps:
           - name: Checkout repository
-            uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+            uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
           - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
             name: Install pnpm
             with:
               version: 10.0.0
               run_install: false
           - name: Install Node.js
-            uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+            uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
             with:
               node-version: 20.18.2
           - name: Build

.github/workflows/build-website.yml

@@ -14,7 +14,7 @@
         steps:
           # Make sure we have some code to test
           - name: Harden runner
-            uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+            uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
             with:
               egress-policy: block
               allowed-endpoints: >
@@ -27,7 +27,7 @@
         runs-on: ubuntu-latest
         steps:
           - name: Checkout repository
-            uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+            uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
             with:
               ref: ${{ github.event.pull_request.head.sha }}
           - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
@@ -37,7 +37,7 @@
               run_install: false
 
           - name: Install Node.js
-            uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+            uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
             with:
               node-version: 20.18.2
           - name: Build

.github/workflows/codeql.yml

@@ -45,11 +45,11 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2 # v2.2.9
+        uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v2.2.9
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -59,7 +59,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@fe4161a26a8629af62121b670040955b330f9af2 # v2.2.9
+        uses: github/codeql-action/autobuild@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v2.2.9
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -72,6 +72,6 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@fe4161a26a8629af62121b670040955b330f9af2 # v2.2.9
+        uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v2.2.9
         with:
           category: "/language:${{matrix.language}}"

.github/workflows/copi-build.yml

@@ -26,15 +26,15 @@
           options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
 
       steps:
-        - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
           with:
             ref: ${{ github.event.pull_request.head.sha }}
         - name: build project
           working-directory: copi.owasp.org
           run: docker build -f ./Dockerfile .
         - name: Cache deps
           id: cache-deps
-          uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+          uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
           env:
             cache-name: cache-elixir-deps
           with:

.github/workflows/copi-deploy-production.yml

@@ -10,7 +10,7 @@
     deploy-to-prod:
       runs-on: ubuntu-latest # Or another supported runner
       steps:
-        - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         - name: Install Elixir and Erlang
           uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4
           with:

.github/workflows/copi-deploy-staging.yml

@@ -28,10 +28,10 @@
           options: --health-cmd pg_isready --health-interval 10s --health-timeout 5s --health-retries 5
 
       steps:
-        - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         - name: Cache deps
           id: cache-deps
-          uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
+          uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0
           env:
             cache-name: cache-elixir-deps
           with:

.github/workflows/dependency-review.yml

@@ -21,7 +21,7 @@ jobs:
     needs: hardening
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+        uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
       - name: 'Dependency Review'
         uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2
         with:

.github/workflows/deploy-website-production.yml

@@ -13,7 +13,7 @@
         steps:
           # Make sure we have some code to test
           - name: Harden runner
-            uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+            uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
             with:
               egress-policy: block
               allowed-endpoints: >
@@ -26,15 +26,15 @@
         runs-on: ubuntu-latest
         steps:
           - name: Checkout repository
-            uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+            uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
           - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0
             name: Install pnpm
             with:
               version: 10.0.0
               run_install: false
 
           - name: Install Node.js
-            uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
+            uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0
             with:
               node-version: 20.18.2
           - name: Build

.github/workflows/deploy-website-staging.yml

@@ -19,7 +19,7 @@
         steps:
           # Make sure we have some code to test
           - name: Harden runner
-            uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+            uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
             with:
               egress-policy: block
               allowed-endpoints: >
@@ -33,7 +33,7 @@
         needs: hardening
         steps:
           - name: Checkout repository
-            uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
+            uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
           - name: Download a single artifact
             uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
             with:

.github/workflows/hardening.yaml

@@ -11,7 +11,7 @@ jobs:
     steps:
       # Make sure we have some code to test
       - name: Harden runner
-        uses: step-security/harden-runner@df199fb7be9f65074067a9eb93f12bb4c5547cf2 # v2.13.3
+        uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
         with:
           egress-policy: block
           allowed-endpoints: >