diff --git a/.github/workflows/codeql-dynamic.yml b/.github/workflows/codeql-dynamic.yml index 4cc79fb..0b6b954 100644 --- a/.github/workflows/codeql-dynamic.yml +++ b/.github/workflows/codeql-dynamic.yml @@ -39,7 +39,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL diff --git a/.github/workflows/codeql-iac.yml b/.github/workflows/codeql-iac.yml index e62a6d0..170f22f 100644 --- a/.github/workflows/codeql-iac.yml +++ b/.github/workflows/codeql-iac.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Initialize and Analyze IaC id: codeql_iac diff --git a/.github/workflows/codeql-packs.yml b/.github/workflows/codeql-packs.yml index 1b5338d..95ffef4 100644 --- a/.github/workflows/codeql-packs.yml +++ b/.github/workflows/codeql-packs.yml @@ -17,7 +17,7 @@ jobs: steps: - name: "Set Matrix" id: set-matrix - uses: actions/github-script@v7 + uses: actions/github-script@v8 with: script: | const packs = '${{ inputs.packs }}'.split(','); @@ -42,7 +42,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Build and Publish CodeQL Packs" env: diff --git a/.github/workflows/codeql-ql.yml b/.github/workflows/codeql-ql.yml index 02cf7cf..79a07fd 100644 --- a/.github/workflows/codeql-ql.yml +++ b/.github/workflows/codeql-ql.yml @@ -18,10 +18,10 @@ jobs: steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Set up Rust" - uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0 # v1.85.1 + uses: dtolnay/rust-toolchain@e97e2d8cc328f1b50210efc529dca0028893a2d9 # v1.85.1 with: toolchain: stable diff --git a/.github/workflows/container-publish.yml b/.github/workflows/container-publish.yml index 3acb733..1fff58e 100644 --- a/.github/workflows/container-publish.yml +++ b/.github/workflows/container-publish.yml @@ -40,20 +40,20 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Log in to the Container registry - uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 + uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Set Container Metadata - uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 + uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f id: meta with: images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} @@ -67,7 +67,7 @@ jobs: type=semver,pattern=v{{major}}.{{minor}},value=${{ inputs.version }} - name: Build & Publish Container ${{ env.IMAGE_NAME }} - uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 id: build with: file: "${{ inputs.container-file }}" @@ -87,13 +87,13 @@ jobs: # Build provenance attestations - name: Attest Container Image - uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3 + uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0 with: subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} subject-digest: ${{ steps.build.outputs.digest }} push-to-registry: true # - name: Attest Container SBOM - # uses: actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3 + # uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3.0.0 # with: # subject-path:: '*.spdx.json' diff --git a/.github/workflows/container-security.yml b/.github/workflows/container-security.yml index 7c042bb..f351b0b 100644 --- a/.github/workflows/container-security.yml +++ b/.github/workflows/container-security.yml @@ -35,13 +35,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Build Initial Container - uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 id: build with: file: "${{ inputs.container-file }}" @@ -52,7 +52,7 @@ jobs: # Scan the image for vulnerabilities - name: Run the Anchore / Grype scan action - uses: anchore/scan-action@7c05671ae9be166aeb155bad2d7df9121823df32 # v6.1.0 + uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e # v6.5.1 id: scan with: image: localbuild/testimage:latest diff --git a/.github/workflows/container.yml b/.github/workflows/container.yml index ced7431..5555dc5 100644 --- a/.github/workflows/container.yml +++ b/.github/workflows/container.yml @@ -58,7 +58,7 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Get and Set version" id: set-version env: diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index 58a2f6b..a86e294 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@v4 + uses: actions/checkout@v5 # [optional] This setup isn't required but if your repository have a configuration, # we use that versus the centralised config. diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 4370233..b931453 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 # Check if the .github/labeler.yml file exists - name: Check for labeler configuration @@ -46,7 +46,7 @@ jobs: fi - - uses: "actions/labeler@v5" + - uses: "actions/labeler@v6" with: repo-token: "${{ secrets.GITHUB_TOKEN }}" configuration-path: "${{ steps.labeler-config.outputs.config }}" diff --git a/.github/workflows/language-detection-and-assignment.yml b/.github/workflows/language-detection-and-assignment.yml index 91b676b..8ec1c5a 100644 --- a/.github/workflows/language-detection-and-assignment.yml +++ b/.github/workflows/language-detection-and-assignment.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Detect languages id: detect-languages diff --git a/.github/workflows/markdown-lint.yml b/.github/workflows/markdown-lint.yml index 0f08e9a..8acd839 100644 --- a/.github/workflows/markdown-lint.yml +++ b/.github/workflows/markdown-lint.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Filter Changes" uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 diff --git a/.github/workflows/python-build.yml b/.github/workflows/python-build.yml index 7e9af6a..b545ee6 100644 --- a/.github/workflows/python-build.yml +++ b/.github/workflows/python-build.yml @@ -39,10 +39,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/python-linting.yml b/.github/workflows/python-linting.yml index dfc33a0..91c11cf 100644 --- a/.github/workflows/python-linting.yml +++ b/.github/workflows/python-linting.yml @@ -47,10 +47,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/python-release.yml b/.github/workflows/python-release.yml index 2ee55e3..412772b 100644 --- a/.github/workflows/python-release.yml +++ b/.github/workflows/python-release.yml @@ -23,7 +23,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Check release" id: check_release diff --git a/.github/workflows/python-testing.yml b/.github/workflows/python-testing.yml index d68da8a..eb6a753 100644 --- a/.github/workflows/python-testing.yml +++ b/.github/workflows/python-testing.yml @@ -41,10 +41,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/python-vendor.yml b/.github/workflows/python-vendor.yml index d924b70..40b9a33 100644 --- a/.github/workflows/python-vendor.yml +++ b/.github/workflows/python-vendor.yml @@ -26,7 +26,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Get Custom Property" id: get_custom_property env: @@ -51,10 +51,10 @@ jobs: pull-requests: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Python ${{ inputs.version }} - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: ${{ inputs.version }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 1cfb4e1..f5159cd 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,10 +30,10 @@ jobs: steps: - name: "Checkout" - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Patch Release Me" - uses: 42ByteLabs/patch-release-me@f950db6bce09f2156a5f2d1cc86ac60ed1663a9e # 0.5.3 + uses: 42ByteLabs/patch-release-me@1a840ec5f538188590b75b19e1c300c7d036bcc8 # 0.6.2 with: mode: ${{ github.event.inputs.bump }} diff --git a/.github/workflows/sec-opengrep.yml b/.github/workflows/sec-opengrep.yml index 54fa1d0..46e872e 100644 --- a/.github/workflows/sec-opengrep.yml +++ b/.github/workflows/sec-opengrep.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout code" - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Download / Install Opengrep" run: | diff --git a/.github/workflows/self-release.yml b/.github/workflows/self-release.yml index 7a68a4b..de946f2 100644 --- a/.github/workflows/self-release.yml +++ b/.github/workflows/self-release.yml @@ -15,7 +15,7 @@ jobs: version: ${{ steps.version-changes.outputs.version }} steps: - name: "Checkout" - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: "Fetch Release" id: version-changes diff --git a/.github/workflows/self-wiki.yml b/.github/workflows/self-wiki.yml index 321f339..ae6c4ac 100644 --- a/.github/workflows/self-wiki.yml +++ b/.github/workflows/self-wiki.yml @@ -16,6 +16,6 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - - uses: Andrew-Chen-Wang/github-wiki-action@50650fccf3a10f741995523cf9708c53cec8912a + - uses: Andrew-Chen-Wang/github-wiki-action@2c80c13ee98aa43683bd77973ef4916e2eedf817