Skip to content

Commit 2ab073c

Browse files
dependabot[bot]neilime
dependabot[bot]
authored and
neilime
committed
chore(deps): bump the github-actions-dependencies group across 6 directories with 2 updates
Bumps the github-actions-dependencies group with 2 updates in the / directory: [hoverkraft-tech/ci-github-publish](https://github.com/hoverkraft-tech/ci-github-publish) and [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 1 update in the /actions/docker/build-image directory: [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 1 update in the /actions/docker/get-image-metadata directory: [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 1 update in the /actions/docker/prune-pull-requests-image-tags directory: [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 1 update in the /actions/helm/release-chart directory: [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common). Bumps the github-actions-dependencies group with 1 update in the /actions/helm/test-chart directory: [hoverkraft-tech/ci-github-common](https://github.com/hoverkraft-tech/ci-github-common). Updates `hoverkraft-tech/ci-github-publish` from 0.3.2 to 0.4.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-publish/releases) - [Commits](hoverkraft-tech/ci-github-publish@0.3.2...0.4.0) Updates `hoverkraft-tech/ci-github-common` from 0.18.0 to 0.20.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@0.18.0...0.20.0) Updates `hoverkraft-tech/ci-github-common` from 0.18.0 to 0.20.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@0.18.0...0.20.0) Updates `hoverkraft-tech/ci-github-common` from 0.18.0 to 0.20.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@0.18.0...0.20.0) Updates `hoverkraft-tech/ci-github-common` from 0.18.0 to 0.20.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@0.18.0...0.20.0) Updates `hoverkraft-tech/ci-github-common` from 0.18.0 to 0.20.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@0.18.0...0.20.0) Updates `hoverkraft-tech/ci-github-common` from 0.18.0 to 0.20.0 - [Release notes](https://github.com/hoverkraft-tech/ci-github-common/releases) - [Commits](hoverkraft-tech/ci-github-common@0.18.0...0.20.0) --- updated-dependencies: - dependency-name: hoverkraft-tech/ci-github-publish dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies - dependency-name: hoverkraft-tech/ci-github-common dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions-dependencies ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Emilien Escalle <[email protected]>
1 parent c456089 commit 2ab073c

24 files changed

+99
-94
lines changed

‎.github/workflows/__main-ci.yml‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,14 +5,19 @@ on: # yamllint disable-line rule:truthy
55
push:
66
branches: [main]
77
tags: ["*"]
8+
89
workflow_dispatch:
910

11+
schedule:
12+
- cron: "25 8 * * 1"
13+
1014
permissions:
1115
actions: write
1216
contents: write
1317
issues: read
1418
packages: write
1519
pull-requests: write
20+
security-events: write
1621
statuses: write
1722
# FIXME: This is a workaround for having workflow actions. See https://github.com/orgs/community/discussions/38659
1823
id-token: write
@@ -49,7 +54,8 @@ jobs:
4954
5055
release:
5156
needs: ci
52-
uses: hoverkraft-tech/ci-github-publish/.github/workflows/[email protected]
57+
if: github.event_name != 'schedule'
58+
uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@c4cef36590a837182788f2e1b02dee17a3647be6 # 0.4.0
5359
with:
5460
update-all: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' }}
5561
github-app-id: ${{ vars.CI_BOT_APP_ID }}

‎.github/workflows/__need-fix-to-issue.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ permissions:
2323

2424
jobs:
2525
main:
26-
uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@0.18.0
26+
uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@edc1e53751a82ce335e7c3208a32b6ee03856a9f # 0.20.0
2727
with:
2828
manual-commit-ref: ${{ inputs.manual-commit-ref }}
2929
manual-base-ref: ${{ inputs.manual-base-ref }}

‎.github/workflows/__pull-request-ci.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,7 @@ permissions:
1111
issues: read
1212
packages: write
1313
pull-requests: read
14+
security-events: write
1415
statuses: write
1516
# FIXME: This is a workaround for having workflow actions. See https://github.com/orgs/community/discussions/38659
1617
id-token: write

‎.github/workflows/__shared-ci.yml‎

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,14 +9,15 @@ permissions:
99
issues: read
1010
packages: write
1111
pull-requests: read
12+
security-events: write
1213
statuses: write
1314
# yamllint disable-line rule:line-length
1415
# FIXME: This is a workaround for having workflow actions. See https://github.com/orgs/community/discussions/38659
1516
id-token: write
1617

1718
jobs:
1819
linter:
19-
uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@0.18.0
20+
uses: hoverkraft-tech/ci-github-common/.github/workflows/linter.yml@edc1e53751a82ce335e7c3208a32b6ee03856a9f # 0.20.0
2021
with:
2122
# FIXME: re-enable the following checks
2223
linter-env: |

‎.github/workflows/__stale.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,4 +11,4 @@ permissions:
1111

1212
jobs:
1313
main:
14-
uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@0.18.0
14+
uses: hoverkraft-tech/ci-github-common/.github/workflows/stale.yml@edc1e53751a82ce335e7c3208a32b6ee03856a9f # 0.20.0

‎.github/workflows/__test-action-docker-build-image.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
packages: write
2020
steps:
2121
- name: Arrange - Checkout
22-
uses: actions/checkout@v4
22+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2323

2424
- name: Arrange - Ensure token is set
2525
run: |
@@ -41,7 +41,7 @@ jobs:
4141
image: application-test
4242

4343
- name: Assert - Check built image output
44-
uses: actions/[email protected]
44+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
4545
with:
4646
script: |
4747
const assert = require("assert");
@@ -154,7 +154,7 @@ jobs:
154154
);
155155
}
156156
157-
- uses: docker/login-action@v3
157+
- uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
158158
with:
159159
registry: ghcr.io
160160
username: ${{ github.repository_owner }}
@@ -183,7 +183,7 @@ jobs:
183183
packages: write
184184
steps:
185185
- name: Arrange - Checkout
186-
uses: actions/checkout@v4
186+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
187187

188188
- name: Arrange - Ensure token is set
189189
run: |
@@ -206,7 +206,7 @@ jobs:
206206
tag: "0.1.0"
207207

208208
- name: Assert - Check built image output
209-
uses: actions/[email protected]
209+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
210210
with:
211211
script: |
212212
const assert = require("assert");
@@ -217,7 +217,7 @@ jobs:
217217
assert.equal(builtImageOutput.tags.length, 1, `"tags" output is not valid`);
218218
assert.equal(builtImageOutput.tags[0], '0.1.0', `"tags" output is not valid`);
219219
220-
- uses: docker/login-action@v3
220+
- uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
221221
with:
222222
registry: ghcr.io
223223
username: ${{ github.repository_owner }}

‎.github/workflows/__test-action-docker-prune-pull-requests-image-tags.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -60,9 +60,9 @@ jobs:
6060
outputs:
6161
deleted-image-tags: ${{ steps.prune-pull-requests-image-tags.outputs.deleted-image-tags }}
6262
steps:
63-
- uses: actions/checkout@v4
63+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
6464

65-
- uses: docker/login-action@v3
65+
- uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
6666
with:
6767
registry: ghcr.io
6868
username: ${{ github.repository_owner }}
@@ -87,7 +87,7 @@ jobs:
8787
needs: [setup, arrange, act]
8888
steps:
8989
- name: Assert - Check ouputs
90-
uses: actions/[email protected]
90+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
9191
with:
9292
script: |
9393
const assert = require("assert");
@@ -114,7 +114,7 @@ jobs:
114114
}
115115
116116
- name: Assert - Ensure expected packages versions have been deleted
117-
uses: actions/[email protected]
117+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
118118
with:
119119
github-token: ${{ github.token }}
120120
script: |
@@ -136,7 +136,7 @@ jobs:
136136
);
137137
assert.equal(packageVersionExists, false, `Package version "${{ needs.setup.outputs.tag }}" has not been deleted`);
138138
139-
- uses: docker/login-action@v3
139+
- uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
140140
if: ${{ github.event_name == 'pull_request' }}
141141
with:
142142
registry: ghcr.io
@@ -174,14 +174,14 @@ jobs:
174174
packages: write
175175
if: always()
176176
steps:
177-
- uses: actions/checkout@v4
177+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
178178

179179
- id: get-issue-number
180180
if: ${{ github.event_name == 'pull_request' }}
181-
uses: hoverkraft-tech/ci-github-common/actions/get-issue-number@0.18.0
181+
uses: hoverkraft-tech/ci-github-common/actions/get-issue-number@edc1e53751a82ce335e7c3208a32b6ee03856a9f # 0.20.0
182182

183183
- name: Delete test packages
184-
uses: actions/[email protected]
184+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
185185
with:
186186
github-token: ${{ github.token }}
187187
script: |

‎.github/workflows/__test-action-get-image-metadata.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
name: Test for "docker/get-image-metadata" action
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1717

1818
- name: Act
1919
id: get-image-metadata
@@ -23,7 +23,7 @@ jobs:
2323
image: application-test
2424

2525
- name: Assert - Check get image metadata ouputs
26-
uses: actions/[email protected]
26+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2727
with:
2828
script: |
2929
const assert = require("assert");
@@ -66,7 +66,7 @@ jobs:
6666
name: Test for "docker/get-image-metadata" action with given tag
6767
runs-on: ubuntu-latest
6868
steps:
69-
- uses: actions/checkout@v4
69+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
7070

7171
- name: Act
7272
id: get-image-metadata
@@ -77,7 +77,7 @@ jobs:
7777
tag: 1.0.0
7878

7979
- name: Assert - Check get image metadata ouputs
80-
uses: actions/[email protected]
80+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
8181
with:
8282
script: |
8383
const assert = require("assert");

‎.github/workflows/__test-action-get-image-name.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
name: Test for "docker/get-image-name" action
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1717

1818
- id: get-image-name
1919
uses: ./actions/docker/get-image-name
@@ -22,7 +22,7 @@ jobs:
2222
image: application-test
2323

2424
- name: Check get image name ouputs
25-
uses: actions/[email protected]
25+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2626
with:
2727
script: |
2828
/* jscpd:ignore-start */
@@ -50,7 +50,7 @@ jobs:
5050
name: Test for "docker/get-image-name" action with given repository
5151
runs-on: ubuntu-latest
5252
steps:
53-
- uses: actions/checkout@v4
53+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
5454

5555
- id: get-image-name
5656
uses: ./actions/docker/get-image-name
@@ -60,7 +60,7 @@ jobs:
6060
repository: hoverkraft-tech/other-repository
6161

6262
- name: Check get image name ouput
63-
uses: actions/[email protected]
63+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
6464
with:
6565
script: |
6666
/* jscpd:ignore-start */

‎.github/workflows/__test-action-helm-parse-chart-uri.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
name: Test for "helm/parse-chart-uri" action
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1717

1818
- name: Act
1919
id: parse-chart-uri
@@ -22,7 +22,7 @@ jobs:
2222
uri: "ghcr.io/my-org/my-repo/charts/application/my-repo:0.1.0"
2323

2424
- name: Assert - Check parse chart URI ouputs
25-
uses: actions/[email protected]
25+
uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
2626
with:
2727
script: |
2828
const assert = require("assert");

0 commit comments

Comments
 (0)