@@ -48,7 +48,7 @@ permissions:
4848jobs :
4949 variables :
5050 name : Set Variables
51- runs-on : ubuntu-22 .04
51+ runs-on : ubuntu-24 .04
5252 permissions :
5353 contents : read
5454 outputs :
6060 k8s_version : ${{ steps.vars.outputs.k8s_version }}
6161 steps :
6262 - name : Checkout Repository
63- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
63+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6464 with :
6565 fetch-depth : 0
6666 ref : ${{ inputs.release_branch }}
@@ -84,20 +84,20 @@ jobs:
8484
8585 - name : Fetch Cached Signed Binary Artifacts
8686 id : binary-cache-sign
87- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
87+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
8888 with :
8989 path : ${{ github.workspace }}/tarballs
9090 key : nginx-ingress-release-${{ steps.vars.outputs.go_code_md5 }}
9191 lookup-only : true
9292
9393 tag :
9494 name : Create Tag on release branch in NIC repo
95- runs-on : ubuntu-22 .04
95+ runs-on : ubuntu-24 .04
9696 permissions :
9797 contents : write
9898 steps :
9999 - name : Checkout NIC repo
100- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
100+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
101101 with :
102102 ref : ${{ inputs.release_branch }}
103103 fetch-depth : 0
@@ -289,11 +289,11 @@ jobs:
289289 certify-openshift-images :
290290 if : ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'certify-openshift-images') }}
291291 name : Certify OpenShift UBI images
292- runs-on : ubuntu-22 .04
292+ runs-on : ubuntu-24 .04
293293 needs : [release-oss]
294294 steps :
295295 - name : Checkout Repository
296- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
296+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
297297 with :
298298 ref : ${{ inputs.release_branch }}
299299
@@ -310,7 +310,7 @@ jobs:
310310 # operator:
311311 # if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'operator') && !contains(inputs.skip_step, 'publish-helm-chart') }}
312312 # name: Trigger PR for Operator
313- # runs-on: ubuntu-22 .04
313+ # runs-on: ubuntu-24 .04
314314 # needs: [variables,publish-helm-chart]
315315 # steps:
316316 # - name:
@@ -335,7 +335,7 @@ jobs:
335335 # gcp-marketplace:
336336 # if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'gcp-marketplace') }}
337337 # name: Trigger PR for GCP Marketplace
338- # runs-on: ubuntu-22 .04
338+ # runs-on: ubuntu-24 .04
339339 # needs: [publish-helm-chart,release-plus-gcr-mktpl]
340340 # steps:
341341 # - name:
@@ -357,7 +357,7 @@ jobs:
357357 # azure-marketplace:
358358 # if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'azure-marketplace') }}
359359 # name: Trigger CNAB Build for Azure Marketplace
360- # runs-on: ubuntu-22 .04
360+ # runs-on: ubuntu-24 .04
361361 # needs: [publish-helm-chart,release-plus-azure-mktpl]
362362 # steps:
363363 # - name:
@@ -381,7 +381,7 @@ jobs:
381381 # aws-marketplace:
382382 # if: ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'aws-marketplace') }}
383383 # name: Publish to AWS Marketplace
384- # runs-on: ubuntu-22 .04
384+ # runs-on: ubuntu-24 .04
385385 # needs: [release-plus-aws-mktpl]
386386 # permissions:
387387 # contents: read
@@ -400,7 +400,7 @@ jobs:
400400 # product_id: AWS_NAP_WAF_DOS_PRODUCT_ID
401401 # steps:
402402 # - name: Checkout Repository
403- # uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
403+ # uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
404404 # with:
405405 # ref: ${{ inputs.release_branch }}
406406
@@ -428,31 +428,31 @@ jobs:
428428
429429 binaries :
430430 name : Process Binaries
431- runs-on : ubuntu-22 .04
431+ runs-on : ubuntu-24 .04
432432 needs : [variables]
433433 permissions :
434434 contents : read
435435 id-token : write # for cosign to sign artifacts
436436 steps :
437437 - name : Checkout Repository
438- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
438+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
439439 with :
440440 ref : ${{ inputs.release_branch }}
441441
442442 - name : Fetch Binary Artifacts from Cache
443- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
443+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
444444 with :
445445 path : ${{ github.workspace }}/dist
446446 key : nginx-ingress-${{ needs.variables.outputs.go_code_md5 }}
447447 if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
448448
449449 - name : Download Syft
450450 id : syft
451- uses : anchore/sbom-action/download-syft@9246b90769f852b3a8921f330c59e0b3f439d6e9 # v0.20.1
451+ uses : anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5
452452 if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
453453
454454 - name : Install Cosign
455- uses : sigstore/cosign-installer@fb28c2b6339dcd94da6e4cbcbc5e888961f6f8c3 # v3.9.0
455+ uses : sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
456456 if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
457457
458458 - name : Create Tarballs
@@ -463,7 +463,7 @@ jobs:
463463 if : ${{ needs.variables.outputs.binary_cache_sign_hit != 'true' }}
464464
465465 - name : Store Tarball Artifacts in Cache
466- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
466+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
467467 with :
468468 path : ${{ github.workspace }}/tarballs
469469 key : nginx-ingress-release-${{ needs.variables.outputs.go_code_md5 }}
@@ -473,20 +473,20 @@ jobs:
473473 azure-upload :
474474 if : ${{ ! cancelled() && ! failure() && ! contains(inputs.skip_step, 'azure-upload') }}
475475 name : Upload packages to Azure
476- runs-on : ubuntu-22 .04
476+ runs-on : ubuntu-24 .04
477477 needs : [variables, binaries]
478478 permissions :
479479 id-token : write
480480 contents : read
481481 environment : release
482482 steps :
483483 - name : Checkout Repository
484- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
484+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
485485 with :
486486 ref : ${{ inputs.release_branch }}
487487
488488 - name : Fetch Cached Tarball Artifacts
489- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
489+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
490490 with :
491491 key : nginx-ingress-release-${{ needs.variables.outputs.go_code_md5 }}
492492 path : ${{ github.workspace }}/tarballs
@@ -517,20 +517,20 @@ jobs:
517517 github-release :
518518 if : ${{ ! cancelled() && ! failure() && ! contains(inputs.skip_step, 'github-release') }}
519519 name : Publish release to GitHub
520- runs-on : ubuntu-22 .04
520+ runs-on : ubuntu-24 .04
521521 needs : [variables, binaries, release-oss, release-plus-gcr-nginx]
522522 permissions :
523523 contents : write # to modify the release
524524 issues : write # to close milestone
525525 actions : read # for slack notification
526526 steps :
527527 - name : Checkout Repository
528- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
528+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
529529 with :
530530 ref : ${{ inputs.release_branch }}
531531
532532 - name : Fetch Cached Tarball Artifacts
533- uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
533+ uses : actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4
534534 with :
535535 key : nginx-ingress-release-${{ needs.variables.outputs.go_code_md5 }}
536536 path : ${{ github.workspace }}/tarballs
@@ -602,7 +602,7 @@ jobs:
602602 release-image-notification :
603603 if : ${{ ! cancelled() && ! failure() && ! inputs.dry_run && ! contains(inputs.skip_step, 'release-image-notification') }}
604604 name : Notify Slack channels about image release
605- runs-on : ubuntu-22 .04
605+ runs-on : ubuntu-24 .04
606606 needs : [variables, binaries, release-oss, release-plus-gcr-nginx]
607607 permissions :
608608 contents : read
@@ -613,7 +613,7 @@ jobs:
613613 image : ["nginx/nginx-ingress:${{ inputs.nic_version }}", "nginx/nginx-ingress:${{ inputs.nic_version }}-ubi", "nginx/nginx-ingress:${{ inputs.nic_version }}-alpine"]
614614 steps :
615615 - name : Checkout Repository
616- uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
616+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
617617 with :
618618 ref : ${{ inputs.release_branch }}
619619
0 commit comments