Skip to content
This repository was archived by the owner on Dec 16, 2025. It is now read-only.

Commit e5ff913

Browse files
🌱 Update github-actions group
| datasource | package | from | to | | ----------- | ------------------------- | ------- | ------- | | github-tags | actions/cache | v4.0.2 | v4.1.2 | | github-tags | actions/checkout | v4.1.7 | v4.2.2 | | github-tags | actions/setup-go | v5.0.2 | v5.1.0 | | github-tags | docker/build-push-action | v6.7.0 | v6.9.0 | | github-tags | renovatebot/github-action | v40.2.7 | v40.3.6 | | github-tags | sigstore/cosign-installer | v3.6.0 | v3.7.0 |
1 parent 5834b9b commit e5ff913

File tree

11 files changed

+30
-30
lines changed

11 files changed

+30
-30
lines changed

.github/actions/setup-go/action.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ runs:
44
using: "composite"
55
steps:
66
- name: Install go
7-
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
7+
uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
88
with:
99
go-version: "1.22"
1010
go-version-file: "go.mod"
@@ -16,14 +16,14 @@ runs:
1616
echo "go-build=$(go env GOCACHE)" >> $GITHUB_OUTPUT
1717
echo "go-mod=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT
1818
- name: Go Mod Cache
19-
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
19+
uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
2020
with:
2121
path: ${{ steps.go-cache-paths.outputs.go-mod }}
2222
key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
2323
restore-keys: |
2424
${{ runner.os }}-go-mod-
2525
- name: Go Build Cache
26-
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
26+
uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4
2727
with:
2828
path: ${{ steps.go-cache-paths.outputs.go-build }}
2929
key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}

.github/workflows/build.yaml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
steps:
3030
- name: Checkout code
31-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
31+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
3232
with:
3333
fetch-depth: 0
3434
- name: Setup Go
@@ -37,7 +37,7 @@ jobs:
3737
- name: Set up QEMU
3838
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
3939
- name: Set up Docker Buildx
40-
uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
40+
uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
4141

4242
- name: Generate metadata cspo
4343
id: metacspo
@@ -56,7 +56,7 @@ jobs:
5656
password: ${{ secrets.GITHUB_TOKEN }}
5757

5858
- name: Install Cosign
59-
uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
59+
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
6060

6161
- name: Install Bom
6262
shell: bash
@@ -73,7 +73,7 @@ jobs:
7373
7474
# Load Golang cache build from GitHub
7575
- name: Load cspo Golang cache build from GitHub
76-
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
76+
uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
7777
id: cache
7878
with:
7979
path: /tmp/.cache/cspo
@@ -91,7 +91,7 @@ jobs:
9191
9292
# Import GitHub's cache build to docker cache
9393
- name: Copy cspo Golang cache to docker cache
94-
uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
94+
uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
9595
with:
9696
provenance: false
9797
context: /tmp/.cache/cspo
@@ -101,7 +101,7 @@ jobs:
101101
target: import-cache
102102

103103
- name: Build and push cspo image
104-
uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6
104+
uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6
105105
id: docker_build_release_cspo
106106
with:
107107
provenance: false
@@ -154,7 +154,7 @@ jobs:
154154
# Store docker's golang's cache build locally only on the main branch
155155
- name: Store cspo Golang cache build locally
156156
if: ${{ steps.cache.outputs.cache-hit != 'true' }}
157-
uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
157+
uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0
158158
with:
159159
provenance: false
160160
context: .

.github/workflows/kubebuilder-markers-checker.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
name: check for kubebuilder markers
1515
runs-on: ubuntu-22.04
1616
steps:
17-
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
17+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
1818

1919
# go is required for building controller-gen
2020
- name: Setup Go

.github/workflows/pr-lint.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
password: ${{ secrets.github_token }}
2929
steps:
3030
- name: Checkout repository
31-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
31+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3232
with:
3333
ref: ${{ github.event.pull_request.head.sha }}
3434

.github/workflows/pr-verify.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
github_token: ${{ secrets.GITHUB_TOKEN }}
1717

1818
- name: Checkout repository
19-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
19+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2020
with:
2121
ref: ${{ github.event.pull_request.head.sha }}
2222

@@ -29,7 +29,7 @@ jobs:
2929
- name: Verify Starlark
3030
run: make verify-starlark
3131

32-
- uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4
32+
- uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
3333
with:
3434
node-version: "18"
3535
- name: Install renovate
@@ -42,7 +42,7 @@ jobs:
4242
done
4343
4444
- name: Generate Token
45-
uses: actions/create-github-app-token@3378cda945da322a8db4b193e19d46352ebe2de5 # v1
45+
uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1
4646
id: generate-token
4747
with:
4848
app-id: ${{ secrets.SCS_APP_ID }}

.github/workflows/release.yaml

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,14 +18,14 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Checkout code
21-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
21+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
2222
with:
2323
fetch-depth: 0
2424
- uses: ./.github/actions/setup-go
2525
- name: Set up QEMU
2626
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3
2727
- name: Set up Docker Buildx
28-
uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
28+
uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
2929

3030
- name: Generate metadata cspo
3131
id: metacspo
@@ -44,7 +44,7 @@ jobs:
4444
password: ${{ secrets.GITHUB_TOKEN }}
4545

4646
- name: Install Cosign
47-
uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 # v3.6.0
47+
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
4848

4949
- name: Install Bom
5050
shell: bash
@@ -60,7 +60,7 @@ jobs:
6060
echo 'EOF' >> $GITHUB_ENV
6161
6262
- name: Build and push cspo image
63-
uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6
63+
uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6
6464
id: docker_build_release_cspo
6565
with:
6666
provenance: false
@@ -134,7 +134,7 @@ jobs:
134134
run: echo "RELEASE_TAG=${GITHUB_REF:10}" >> $GITHUB_ENV
135135

136136
- name: checkout code
137-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
137+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
138138
with:
139139
fetch-depth: 0
140140

@@ -154,7 +154,7 @@ jobs:
154154
make release-notes
155155
156156
- name: Release
157-
uses: softprops/action-gh-release@c062e08bd532815e2082a85e87e3ef29c3e6d191 # v2
157+
uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2
158158
with:
159159
draft: true
160160
files: out/*

.github/workflows/report-bin-size.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,14 +9,14 @@ jobs:
99
timeout-minutes: 10
1010
steps:
1111
- name: Checkout repository
12-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
12+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1313
- name: Fixup git permissions
1414
# https://github.com/actions/checkout/issues/766
1515
shell: bash
1616
run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
1717

1818
- name: Install go
19-
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
19+
uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
2020
with:
2121
go-version-file: "go.mod"
2222
cache: true

.github/workflows/schedule-cache-cleaner-cspo-image.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
steps:
1616
# Load Golang cache build from GitHub
1717
- name: Load cspo Golang cache build from GitHub
18-
uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
18+
uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2
1919
id: cache
2020
with:
2121
path: /tmp/.cache/cspo

.github/workflows/schedule-scan-image.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
password: ${{ secrets.github_token }}
1616
steps:
1717
- name: Checkout repository
18-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
18+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1919
- name: Fixup git permissions
2020
# https://github.com/actions/checkout/issues/766
2121
shell: bash

.github/workflows/schedule-update-bot.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,15 +30,15 @@ jobs:
3030
runs-on: ubuntu-latest
3131
steps:
3232
- name: Checkout
33-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
33+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3434

3535
# qemu is not required as of now because we don't build images for arm64
3636
# use docker/setup-qemu-action@v3 if you want to have arm64 images.
3737
- name: Set up Docker Buildx # required for building image
38-
uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3
38+
uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3
3939

4040
- name: Generate Token
41-
uses: actions/create-github-app-token@3378cda945da322a8db4b193e19d46352ebe2de5 # v1
41+
uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1
4242
id: generate-token
4343
with:
4444
app-id: ${{ secrets.SCS_APP_ID }}
@@ -49,7 +49,7 @@ jobs:
4949
echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.LOG_LEVEL }}" >> "$GITHUB_ENV"
5050
5151
- name: Renovate
52-
uses: renovatebot/github-action@630a255a1f2f56c8d8ce160bed3e3ca577ca53e2 # v40.2.7
52+
uses: renovatebot/github-action@0984fb80fc633b17e57f3e8b6c007fe0dc3e0d62 # v40.3.6
5353
env:
5454
RENOVATE_HOST_RULES: '[{"hostType": "docker", "matchHost": "ghcr.io", "username": "${{ github.actor }}", "password": "${{ secrets.GITHUB_TOKEN }}" }]'
5555
RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '[".*"]'

0 commit comments

Comments
 (0)