@@ -48,7 +48,7 @@ permissions:
48
48
jobs :
49
49
variables :
50
50
name : Set Variables
51
- runs-on : ubuntu-22 .04
51
+ runs-on : ubuntu-24 .04
52
52
permissions :
53
53
contents : read
54
54
outputs :
60
60
k8s_version : ${{ steps.vars.outputs.k8s_version }}
61
61
steps :
62
62
- name : Checkout Repository
63
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
63
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
64
64
with :
65
65
fetch-depth : 0
66
66
ref : ${{ inputs.release_branch }}
@@ -84,20 +84,20 @@ jobs:
84
84
85
85
- name : Fetch Cached Signed Binary Artifacts
86
86
id : binary-cache-sign
87
- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
87
+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
88
88
with :
89
89
path : ${{ github.workspace }}/tarballs
90
90
key : nginx-ingress-release-${{ steps.vars.outputs.go_code_md5 }}
91
91
lookup-only : true
92
92
93
93
tag :
94
94
name : Create Tag on release branch in NIC repo
95
- runs-on : ubuntu-22 .04
95
+ runs-on : ubuntu-24 .04
96
96
permissions :
97
97
contents : write
98
98
steps :
99
99
- name : Checkout NIC repo
100
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
100
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
101
101
with :
102
102
ref : ${{ inputs.release_branch }}
103
103
fetch-depth : 0
@@ -289,11 +289,11 @@ jobs:
289
289
certify-openshift-images :
290
290
if : ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'certify-openshift-images') }}
291
291
name : Certify OpenShift UBI images
292
- runs-on : ubuntu-22 .04
292
+ runs-on : ubuntu-24 .04
293
293
needs : [release-oss]
294
294
steps :
295
295
- name : Checkout Repository
296
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
296
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
297
297
with :
298
298
ref : ${{ inputs.release_branch }}
299
299
@@ -310,7 +310,7 @@ jobs:
310
310
# operator:
311
311
# if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'operator') && !contains(inputs.skip_step, 'publish-helm-chart') }}
312
312
# name: Trigger PR for Operator
313
- # runs-on: ubuntu-22 .04
313
+ # runs-on: ubuntu-24 .04
314
314
# needs: [variables,publish-helm-chart]
315
315
# steps:
316
316
# - name:
@@ -335,7 +335,7 @@ jobs:
335
335
# gcp-marketplace:
336
336
# if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'gcp-marketplace') }}
337
337
# name: Trigger PR for GCP Marketplace
338
- # runs-on: ubuntu-22 .04
338
+ # runs-on: ubuntu-24 .04
339
339
# needs: [publish-helm-chart,release-plus-gcr-mktpl]
340
340
# steps:
341
341
# - name:
@@ -357,7 +357,7 @@ jobs:
357
357
# azure-marketplace:
358
358
# if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'azure-marketplace') }}
359
359
# name: Trigger CNAB Build for Azure Marketplace
360
- # runs-on: ubuntu-22 .04
360
+ # runs-on: ubuntu-24 .04
361
361
# needs: [publish-helm-chart,release-plus-azure-mktpl]
362
362
# steps:
363
363
# - name:
@@ -381,7 +381,7 @@ jobs:
381
381
# aws-marketplace:
382
382
# if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'aws-marketplace') }}
383
383
# name: Publish to AWS Marketplace
384
- # runs-on: ubuntu-22 .04
384
+ # runs-on: ubuntu-24 .04
385
385
# needs: [release-plus-aws-mktpl]
386
386
# permissions:
387
387
# contents: read
@@ -400,7 +400,7 @@ jobs:
400
400
# product_id: AWS_NAP_WAF_DOS_PRODUCT_ID
401
401
# steps:
402
402
# - name: Checkout Repository
403
- # uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
403
+ # uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
404
404
# with:
405
405
# ref: ${{ inputs.release_branch }}
406
406
@@ -428,31 +428,31 @@ jobs:
428
428
429
429
binaries :
430
430
name : Process Binaries
431
- runs-on : ubuntu-22 .04
431
+ runs-on : ubuntu-24 .04
432
432
needs : [variables]
433
433
permissions :
434
434
contents : read
435
435
id-token : write # for cosign to sign artifacts
436
436
steps :
437
437
- name : Checkout Repository
438
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
438
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
439
439
with :
440
440
ref : ${{ inputs.release_branch }}
441
441
442
442
- name : Fetch Binary Artifacts from Cache
443
- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
443
+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
444
444
with :
445
445
path : ${{ github.workspace }}/dist
446
446
key : nginx-ingress-${{ needs.variables.outputs.go_code_md5 }}
447
447
if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
448
448
449
449
- name : Download Syft
450
450
id : syft
451
- uses : anchore/sbom-action/download-syft@9246b90769f852b3a8921f330c59e0b3f439d6e9 # v0.20.1
451
+ uses : anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
452
452
if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
453
453
454
454
- name : Install Cosign
455
- uses : sigstore/cosign-installer@fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3 # v3.9.0
455
+ uses : sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
456
456
if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
457
457
458
458
- name : Create Tarballs
@@ -463,7 +463,7 @@ jobs:
463
463
if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
464
464
465
465
- name : Store Tarball Artifacts in Cache
466
- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
466
+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
467
467
with :
468
468
path : ${{ github.workspace }}/tarballs
469
469
key : nginx-ingress-release-${{ needs.variables.outputs.go_code_md5 }}
@@ -473,20 +473,20 @@ jobs:
473
473
azure-upload :
474
474
if : ${{ ! cancelled() && ! failure() && ! contains(inputs.skip_step, 'azure-upload') }}
475
475
name : Upload packages to Azure
476
- runs-on : ubuntu-22 .04
476
+ runs-on : ubuntu-24 .04
477
477
needs : [variables, binaries]
478
478
permissions :
479
479
id-token : write
480
480
contents : read
481
481
environment : release
482
482
steps :
483
483
- name : Checkout Repository
484
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
484
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
485
485
with :
486
486
ref : ${{ inputs.release_branch }}
487
487
488
488
- name : Fetch Cached Tarball Artifacts
489
- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
489
+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
490
490
with :
491
491
key : nginx-ingress-release-${{ needs.variables.outputs.go_code_md5 }}
492
492
path : ${{ github.workspace }}/tarballs
@@ -517,20 +517,20 @@ jobs:
517
517
github-release :
518
518
if : ${{ ! cancelled() && ! failure() && ! contains(inputs.skip_step, 'github-release') }}
519
519
name : Publish release to GitHub
520
- runs-on : ubuntu-22 .04
520
+ runs-on : ubuntu-24 .04
521
521
needs : [variables, binaries, release-oss, release-plus-gcr-nginx]
522
522
permissions :
523
523
contents : write # to modify the release
524
524
issues : write # to close milestone
525
525
actions : read # for slack notification
526
526
steps :
527
527
- name : Checkout Repository
528
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
528
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
529
529
with :
530
530
ref : ${{ inputs.release_branch }}
531
531
532
532
- name : Fetch Cached Tarball Artifacts
533
- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
533
+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
534
534
with :
535
535
key : nginx-ingress-release-${{ needs.variables.outputs.go_code_md5 }}
536
536
path : ${{ github.workspace }}/tarballs
@@ -602,7 +602,7 @@ jobs:
602
602
release-image-notification :
603
603
if : ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'release-image-notification') }}
604
604
name : Notify Slack channels about image release
605
- runs-on : ubuntu-22 .04
605
+ runs-on : ubuntu-24 .04
606
606
needs : [variables, binaries, release-oss, release-plus-gcr-nginx]
607
607
permissions :
608
608
contents : read
@@ -613,7 +613,7 @@ jobs:
613
613
image : ["nginx/nginx-ingress:${{ inputs.nic_version }}", "nginx/nginx-ingress:${{ inputs.nic_version }}-ubi", "nginx/nginx-ingress:${{ inputs.nic_version }}-alpine"]
614
614
steps :
615
615
- name : Checkout Repository
616
- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
616
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
617
617
with :
618
618
ref : ${{ inputs.release_branch }}
619
619
0 commit comments