@@ -25,11 +25,11 @@ jobs:
2525
2626 steps :
2727 - name : checkout
28- uses :
actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # [email protected] 28+ uses :
actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # [email protected] 2929 with :
3030 persist-credentials : false
3131
32- - uses : ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # pin@v1.268 .0
32+ - uses : ruby/setup-ruby@d354de180d0c9e813cfddfcbdc079945d4be589b # pin@v1.275 .0
3333 with :
3434 bundler-cache : false
3535
4646 run : script/build
4747
4848 - name : upload artifact
49- uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # pin@v5 .0.0
49+ uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # pin@v6 .0.0
5050 id : upload-artifact
5151 with :
5252 name : ${{ steps.build.outputs.artifact_dir }}
@@ -62,11 +62,11 @@ jobs:
6262 packages : write
6363 id-token : write
6464 steps :
65- -
uses :
actions/checkout@c2d88d3ecc89a9ef08eebf45d9637801dcee7eb5 # [email protected] 65+ -
uses :
actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # [email protected] 6666 with :
6767 persist-credentials : false
6868
69- - uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # pin@v6 .0.0
69+ - uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # pin@v7 .0.0
7070 with :
7171 artifact-ids : ${{ needs.build.outputs.artifact-id }}
7272 path : ${{ needs.build.outputs.artifact_dir }}
@@ -86,15 +86,15 @@ jobs:
8686 run : |
8787 GEM_HOST_API_KEY=${GITHUB_TOKEN} gem push --key github --host https://rubygems.pkg.github.com/${OWNER} $ARTIFACT_PATH/${GEM_NAME}-${GEM_VERSION}.gem
8888
89- - uses : ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # pin@v1.268 .0
89+ - uses : ruby/setup-ruby@d354de180d0c9e813cfddfcbdc079945d4be589b # pin@v1.275 .0
9090 with :
9191 bundler-cache : false
9292
9393 - name : bootstrap
9494 run : script/bootstrap
9595
9696 - name : Configure RubyGems Credentials
97- uses : rubygems/configure-rubygems-credentials@079b868399574998fd0fe9df2e03528f38cc6fa0 # pin@main
97+ uses : rubygems/configure-rubygems-credentials@069e7d747e6bb9b12c1a8d43ea4235ab9f3941da # pin@main
9898
9999 - name : sign ruby gem
100100 env :
@@ -138,13 +138,13 @@ jobs:
138138 contents : read
139139
140140 steps :
141- - uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # pin@v6 .0.0
141+ - uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # pin@v7 .0.0
142142 with :
143143 path : ${{ needs.build.outputs.artifact_dir }}
144144 artifact-ids : ${{ needs.build.outputs.artifact-id }}
145145
146146 - name : attest build provenance
147- uses : actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # pin@v3.0 .0
147+ uses : actions/attest-build-provenance@00014ed6ed5efc5b1ab7f7f34a39eb55d41aa4f8 # pin@v3.1 .0
148148 with :
149149 subject-path : " ${{ needs.build.outputs.artifact_dir }}/${{ needs.build.outputs.gem_path }}"
150150
@@ -154,7 +154,7 @@ jobs:
154154 runs-on : ubuntu-latest
155155
156156 steps :
157- - uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # pin@v6 .0.0
157+ - uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # pin@v7 .0.0
158158 with :
159159 path : ${{ needs.build.outputs.artifact_dir }}
160160 artifact-ids : ${{ needs.build.outputs.artifact-id }}
0 commit comments