chore: Bump actions and pre-commit hook refs (#84)

Techassi · web-flow · commit 75e0756966de · 2025-10-24T10:43:55.000+02:00
diff --git a/.github/workflows/build_interu.yml b/.github/workflows/build_interu.yml
@@ -1,3 +1,4 @@
+---
 name: Build interu
 
 on:
@@ -22,11 +23,11 @@ jobs:
     runs-on: ${{ inputs.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
-      - uses: dtolnay/rust-toolchain@0e66bd3e6b38ec0ad5312288c83e47c143e6b09e # v1
+      - uses: dtolnay/rust-toolchain@6d653acede28d24f02e3cd41383119e8b1b35921
         with:
           toolchain: ${{ env.RUST_VERSION }}
           targets: ${{ inputs.target }}
@@ -43,6 +44,6 @@ jobs:
 
       - name: Upload Artifact
         if: inputs.upload
-        uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           path: interu-${{ inputs.target }}
diff --git a/.github/workflows/pr_interu.yml b/.github/workflows/pr_interu.yml
@@ -1,3 +1,4 @@
+---
 name: Build interu
 
 on:
diff --git a/.github/workflows/pr_pre-commit.yml b/.github/workflows/pr_pre-commit.yml
@@ -4,12 +4,11 @@ name: pre-commit
 on:
   pull_request:
 
-
 jobs:
   pre-commit:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
           submodules: recursive
diff --git a/.github/workflows/release_interu.yml b/.github/workflows/release_interu.yml
@@ -1,3 +1,4 @@
+---
 name: Release interu
 
 on:
@@ -24,11 +25,11 @@ jobs:
     needs: [build]
     steps:
       - name: Download Artifacts
-        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
+        uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
         with:
           path: artifacts
 
       - name: Upload Release Binary
-        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
+        uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1
         with:
           files: artifacts/artifact/*
diff --git a/.github/workflows/smoke-build.yaml b/.github/workflows/smoke-build.yaml
@@ -20,7 +20,7 @@ jobs:
     name: Generate Version List
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
@@ -43,12 +43,12 @@ jobs:
         runner:
           # Github's ubuntu-latest runners use 24.04. By default Ubicloud's runners use 22.04.
           # We therefore explicitly request 24.04 for them as well.
-          - {name: "ubuntu-latest", arch: "amd64"}
-          - {name: "ubicloud-standard-8-arm-ubuntu-2404", arch: "arm64"}
+          - { name: "ubuntu-latest", arch: "amd64" }
+          - { name: "ubicloud-standard-8-arm-ubuntu-2404", arch: "arm64" }
         versions: ${{ fromJson(needs.generate_matrix.outputs.versions) }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
@@ -61,7 +61,7 @@ jobs:
         with:
           product-version: ${{ matrix.versions }}
           boil-config-file: smoke/boil.toml
-          boil-version: 0.1.0
+          boil-version: latest
           registry-namespace: stackable
           extra-tag-data: pr-321
           product-name: smoke
@@ -87,7 +87,7 @@ jobs:
         versions: ${{ fromJson(needs.generate_matrix.outputs.versions) }}
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
@@ -107,7 +107,7 @@ jobs:
     if: failure() || github.run_attempt > 1
     steps:
       - name: Checkout Repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
 
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -4,7 +4,7 @@ default_language_version:
 
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: cef0300fd0fc4d2a87a85fa2093c6b283ea36f4b # 5.0.0
+    rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # 6.0.0
     hooks:
       - id: trailing-whitespace
       - id: end-of-file-fixer
@@ -13,23 +13,23 @@ repos:
       - id: detect-private-key
 
   - repo: https://github.com/adrienverge/yamllint
-    rev: 81e9f98ffd059efe8aa9c1b1a42e5cce61b640c6 # 1.35.1
+    rev: 79a6b2b1392eaf49cdd32ac4f14be1a809bbd8f7 # 1.37.1
     hooks:
       - id: yamllint
         args: ["--strict"]
 
   - repo: https://github.com/igorshubovych/markdownlint-cli
-    rev: 0d9fcb51a54f3b750b911c054b4bd1a590f1b592 # 0.43.0
+    rev: 192ad822316c3a22fb3d3cc8aa6eafa0b8488360 # 0.45.0
     hooks:
       - id: markdownlint
   - repo: https://github.com/koalaman/shellcheck-precommit
-    rev: 2491238703a5d3415bb2b7ff11388bf775372f29 # 0.10.0
+    rev: 99470f5e12208ff0fb17ab81c3c494f7620a1d8d # 0.11.0
     hooks:
       - id: shellcheck
         args: ["--severity=info"]
 
   - repo: https://github.com/rhysd/actionlint
-    rev: 5db9d9cde2f3deb5035dea3e45f0a9fff2f29448 # 1.7.4
+    rev: e7d448ef7507c20fc4c88a95d0c448b848cd6127 # 1.7.8
     hooks:
       - id: actionlint
 
diff --git a/.yamllint.yaml b/.yamllint.yaml
@@ -9,3 +9,6 @@ rules:
     min-spaces-from-content: 1  # Needed due to https://github.com/adrienverge/yamllint/issues/443
   indentation:
     indent-sequences: consistent
+  braces:
+    max-spaces-inside: 1
+    max-spaces-inside-empty: 0
diff --git a/publish-helm-chart/action.yaml b/publish-helm-chart/action.yaml
@@ -17,7 +17,7 @@ inputs:
   helm-version:
     description: Version of helm
     # See https://github.com/helm/helm/releases for latest version
-    default: v3.18.6
+    default: v3.19.0
   chart-version:
     description: The Helm Chart version
     required: true
@@ -31,7 +31,7 @@ runs:
   using: composite
   steps:
     - name: Set up Cosign
-      uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
+      uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
 
     - name: Set up Helm
       env:
@@ -54,7 +54,7 @@ runs:
         helm registry login --username "$CHART_REGISTRY_USERNAME" --password "$CHART_REGISTRY_PASSWORD" "$CHART_REGISTRY_URI"
 
     - name: Log into Container Registry (${{ inputs.chart-registry-uri }}) using Docker
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
       with:
         registry: ${{ inputs.chart-registry-uri }}
         username: ${{ inputs.chart-registry-username }}
diff --git a/publish-image-index-manifest/action.yaml b/publish-image-index-manifest/action.yaml
@@ -45,10 +45,10 @@ runs:
   using: composite
   steps:
     - name: Set up Cosign
-      uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
+      uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
 
     - name: Login to Container Registry (${{ inputs.image-registry-uri }})
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
       with:
         registry: ${{ inputs.image-registry-uri }}
         username: ${{ inputs.image-registry-username }}
diff --git a/publish-image/action.yaml b/publish-image/action.yaml
@@ -55,13 +55,13 @@ runs:
   using: composite
   steps:
     - name: Set up Cosign
-      uses: sigstore/cosign-installer@398d4b0eeef1380460a10c8013a76f728fb906ac # v3.9.1
+      uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
 
     - name: Set up syft
-      uses: anchore/sbom-action/download-syft@9246b90769f852b3a8921f330c59e0b3f439d6e9 # v0.20.1
+      uses: anchore/sbom-action/download-syft@8e94d75ddd33f69f691467e42275782e4bfefe84 # v0.20.9
 
     - name: Login to Container Registry (${{ inputs.image-registry-uri }})
-      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
       with:
         registry: ${{ inputs.image-registry-uri }}
         username: ${{ inputs.image-registry-username }}
diff --git a/run-integration-test/action.yaml b/run-integration-test/action.yaml
@@ -30,15 +30,15 @@ inputs:
   kubectl-version:
     description: Version of kubectl
     # See https://dl.k8s.io/release/stable.txt for latest version
-    default: v1.33.4
+    default: v1.34.1
   kuttl-version:
     description: Version of kubectl-kuttl
     # See https://github.com/kudobuilder/kuttl/releases for latest version
     default: 0.22.0
   helm-version:
     description: Version of helm
     # See https://github.com/helm/helm/releases for latest version
-    default: v3.18.6
+    default: v3.19.0
   stackablectl-version:
     description: Version of stackablectl
     # See https://github.com/stackabletech/stackable-cockpit/releases for latest version
@@ -120,7 +120,6 @@ runs:
     - name: Install stackablectl
       env:
         STACKABLECTL_VERSION: ${{ inputs.stackablectl-version }}
-        BEKU_VERSION: ${{ inputs.beku-version }}
         GITHUB_DEBUG: ${{ runner.debug }}
       shell: bash
       run: "$GITHUB_ACTION_PATH/../.scripts/actions/install_stackablectl.sh"
diff --git a/run-pre-commit/action.yaml b/run-pre-commit/action.yaml
@@ -8,9 +8,10 @@ inputs:
   python-version:
     description: Python version to install
     default: "3.12"
+  # See https://github.com/pre-commit/pre-commit/releases for latest version
   pre-commit-version:
     description: Pre-commit version to install
-    default: 4.2.0
+    default: 4.3.0
   rust:
     description: Whether to install the Rust toolchain (and which version to use)
   rust-components:
@@ -39,13 +40,13 @@ runs:
 
     - name: Setup nix
       if: inputs.nix
-      uses: cachix/install-nix-action@f0fe604f8a612776892427721526b4c7cfb23aba # v31.4.1
+      uses: cachix/install-nix-action@fd24c48048070c1be9acd18c9d369a83f0fe94d7 # v31.8.1
       with:
         github_access_token: ${{ inputs.nix-github-token }}
         install_url: https://releases.nixos.org/nix/nix-${{ inputs.nix }}/install
 
     - name: Setup Python
-      uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
+      uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
       with:
         python-version: ${{ inputs.python-version }}
         # It doesn't make a whole lot of sense to use the pre-commit config file
@@ -69,7 +70,7 @@ runs:
       # This caches downloaded pre-commit hook artifacts and results in faster
       # workflow runs after an initial hydration run with the exact same hooks
     - name: Setup pre-commit Cache
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ~/.cache/pre-commit
         key: pre-commit-${{ inputs.pre-commit-version }}-python${{ inputs.python-version }}-${{ hashFiles('.pre-commit-config.yaml') }}
@@ -86,21 +87,21 @@ runs:
     - name: Setup Rust Toolchain Cache
       id: rust-toolchain-cache
       if: ${{ inputs.rust }}
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ~/.rustup/toolchains
         key: rust-toolchains-${{ inputs.rust }}-components-${{ env.RUST_COMPONENTS }}
 
     - name: Setup Rust Toolchain
-      uses: dtolnay/rust-toolchain@b3b07ba8b418998c39fb20f53e8b695cdcc8de1b
+      uses: dtolnay/rust-toolchain@6d653acede28d24f02e3cd41383119e8b1b35921
       if: ${{ inputs.rust && steps.rust-toolchain-cache.outputs.cache-hit != 'true' }}
       with:
         toolchain: ${{ inputs.rust }}
         components: ${{ inputs.rust-components }}
 
     - name: Setup Rust Cache
       if: ${{ inputs.rust }}
-      uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2.8.0
+      uses: Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1
 
     - name: Install Hadolint
       if: ${{ inputs.hadolint }}
diff --git a/send-slack-notification/action.yaml b/send-slack-notification/action.yaml
@@ -63,7 +63,7 @@ runs:
     - name: Retrieve Slack Thread ID
       id: retrieve-slack-thread-id
       continue-on-error: true
-      uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+      uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
       with:
         name: slack-thread-id-${{ github.run_id }}
 
@@ -116,7 +116,7 @@ runs:
 
     - name: Send Notification
       id: send-notification
-      uses: slackapi/slack-github-action@b0fa283ad8fea605de13dc3f449259339835fc52 # 2.1.0
+      uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # 2.1.1
       env:
         SLACK_THREAD_YAML: |
           ${{ steps.retrieve-slack-thread-id.outcome == 'success' && format('thread_ts: "{0}"', env.SLACK_THREAD_ID) || '' }}

Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,4 @@`
	`1`	`+---`
`1`	`2`	`name: Build interu`
`2`	`3`
`3`	`4`	`on:`