@@ -62,13 +62,13 @@ jobs:
6262 id-token : write
6363 steps :
6464 - name : Checkout code
65- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
65+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
6666 with :
6767 fetch-depth : 0
6868
6969 - name : Get Datadog credentials
7070 id : dd-sts
71- uses : DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0
71+ uses : DataDog/dd-sts-action@639d841c72f15e4e77747bd726ef8105ce971da2 # v1.0.5
7272 with :
7373 policy : integrations-core-api-key
7474
8686 run : python -m build
8787
8888 - name : Upload artifacts
89- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
89+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9090 with :
9191 name : python-artifacts
9292 path : ddev/dist/*
@@ -142,13 +142,13 @@ jobs:
142142
143143 steps :
144144 - name : Checkout code
145- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
145+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
146146 with :
147147 fetch-depth : 0
148148
149149 - name : Get Datadog credentials
150150 id : dd-sts
151- uses : DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0
151+ uses : DataDog/dd-sts-action@639d841c72f15e4e77747bd726ef8105ce971da2 # v1.0.5
152152 with :
153153 policy : integrations-core-api-key
154154
@@ -175,7 +175,7 @@ jobs:
175175 rm pyapp.tar.gz
176176
177177 - name : Set up Python ${{ env.PYTHON_VERSION }}
178- uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2 .0
178+ uses : actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3 .0
179179 with :
180180 python-version : ${{ env.PYTHON_VERSION }}
181181
@@ -202,14 +202,14 @@ jobs:
202202 # This action must be pinned to a commit reachable from the master branch — any other commit
203203 # will eventually be garbage-collected and break the workflow. See:
204204 # https://github.com/dtolnay/rust-toolchain#choice-of-full-length-commit-sha
205- uses : dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
205+ uses : dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772 # master
206206 with :
207207 toolchain : stable
208208 targets : ${{ matrix.job.target }}
209209
210210 - name : Set up cross compiling
211211 if : matrix.job.cross
212- uses : taiki-e/install-action@d6e286fa45544157a02d45a43742857ebbc25d12 # v2.68.16
212+ uses : taiki-e/install-action@cb33e69fad06166ca28a42b2575e4dadabf62ee8 # v2.85.8
213213 with :
214214 tool : cross
215215
@@ -226,7 +226,7 @@ jobs:
226226
227227 - name : Download Python artifacts
228228 if : ${{ !startsWith(github.event.ref, 'refs/tags') }}
229- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
229+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
230230 with :
231231 name : python-artifacts
232232 path : ddev/dist
@@ -298,7 +298,7 @@ jobs:
298298
299299 - name : Upload staged managed archive
300300 if : runner.os != 'Linux'
301- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
301+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
302302 with :
303303 name : staged-managed-${{ runner.os }}-${{ matrix.job.target }}
304304 path : ddev/packaging/*
@@ -319,7 +319,7 @@ jobs:
319319
320320 - name : Upload staged standalone archive
321321 if : runner.os != 'Linux'
322- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
322+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
323323 with :
324324 name : staged-standalone-${{ runner.os }}-${{ matrix.job.target }}
325325 path : ddev/packaging/*
@@ -329,7 +329,7 @@ jobs:
329329 # can upload directly at this point
330330 - name : Upload standalone archive
331331 if : runner.os == 'Linux'
332- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
332+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
333333 with :
334334 name : standalone-${{ matrix.job.target }}
335335 path : ddev/packaging/*
@@ -350,10 +350,10 @@ jobs:
350350
351351 steps :
352352 - name : Checkout code
353- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
353+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
354354 - name : Get Datadog credentials
355355 id : dd-sts
356- uses : DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0
356+ uses : DataDog/dd-sts-action@639d841c72f15e4e77747bd726ef8105ce971da2 # v1.0.5
357357 with :
358358 policy : integrations-core-api-key
359359
@@ -365,7 +365,7 @@ jobs:
365365 dd_api_key : ${{ steps.dd-sts.outputs.api_key }}
366366
367367 - name : Set up Python ${{ env.PYTHON_VERSION }}
368- uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2 .0
368+ uses : actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3 .0
369369 with :
370370 python-version : ${{ env.PYTHON_VERSION }}
371371
@@ -404,7 +404,7 @@ jobs:
404404 OUTER
405405
406406 - name : Download staged standalone binaries
407- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
407+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
408408 with :
409409 pattern : staged-standalone-${{ runner.os }}-*
410410 path : ddev/archives
@@ -417,7 +417,7 @@ jobs:
417417 run : ${{ steps.script-prepare.outputs.script }}
418418
419419 - name : Upload standalone binaries
420- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
420+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
421421 with :
422422 name : standalone-${{ matrix.job.target }}
423423 path : ddev/archives/*
@@ -427,7 +427,7 @@ jobs:
427427 run : rm -rf archives bin targets
428428
429429 - name : Download staged managed binaries
430- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
430+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
431431 with :
432432 pattern : staged-managed-${{ runner.os }}-*
433433 path : ddev/archives
@@ -452,7 +452,7 @@ jobs:
452452
453453 - name : Upload installers
454454 if : github.event_name == 'schedule' || (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/'))
455- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
455+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
456456 with :
457457 name : installers-${{ runner.os }}
458458 path : ddev/installers/*
@@ -473,11 +473,11 @@ jobs:
473473
474474 steps :
475475 - name : Checkout code
476- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
476+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
477477
478478 - name : Get Datadog credentials
479479 id : dd-sts
480- uses : DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0
480+ uses : DataDog/dd-sts-action@639d841c72f15e4e77747bd726ef8105ce971da2 # v1.0.5
481481 with :
482482 policy : integrations-core-api-key
483483
@@ -489,15 +489,15 @@ jobs:
489489 dd_api_key : ${{ steps.dd-sts.outputs.api_key }}
490490
491491 - name : Set up Python ${{ env.PYTHON_VERSION }}
492- uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2 .0
492+ uses : actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3 .0
493493 with :
494494 python-version : ${{ env.PYTHON_VERSION }}
495495
496496 - name : Install PyOxidizer ${{ env.PYOXIDIZER_VERSION }}
497497 run : pip install pyoxidizer==${{ env.PYOXIDIZER_VERSION }}
498498
499499 - name : Download staged managed binaries
500- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
500+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
501501 with :
502502 pattern : staged-managed-${{ runner.os }}-*
503503 path : ddev/archives
@@ -561,11 +561,11 @@ jobs:
561561
562562 steps :
563563 - name : Checkout code
564- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
564+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
565565
566566 - name : Get Datadog credentials
567567 id : dd-sts
568- uses : DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0
568+ uses : DataDog/dd-sts-action@639d841c72f15e4e77747bd726ef8105ce971da2 # v1.0.5
569569 with :
570570 policy : integrations-core-api-key
571571
@@ -577,7 +577,7 @@ jobs:
577577 dd_api_key : ${{ steps.dd-sts.outputs.api_key }}
578578
579579 - name : Set up Python ${{ env.PYTHON_VERSION }}
580- uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2 .0
580+ uses : actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3 .0
581581 with :
582582 python-version : ${{ env.PYTHON_VERSION }}
583583
@@ -665,7 +665,7 @@ jobs:
665665 OUTER
666666
667667 - name : Download staged standalone binaries
668- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
668+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
669669 with :
670670 pattern : staged-standalone-${{ runner.os }}-*
671671 path : ddev/archives
@@ -690,7 +690,7 @@ jobs:
690690 done
691691
692692 - name : Upload standalone binaries
693- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
693+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
694694 with :
695695 name : standalone-${{ runner.os }}
696696 path : ddev/archives/*
@@ -700,7 +700,7 @@ jobs:
700700 run : rm -rf archives bin notarize-bin
701701
702702 - name : Download staged managed binaries
703- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
703+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
704704 with :
705705 pattern : staged-managed-${{ runner.os }}-*
706706 path : ddev/archives
@@ -770,7 +770,7 @@ jobs:
770770 "signed/${{ steps.pkg.outputs.path }}"
771771
772772 - name : Upload installer
773- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
773+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
774774 with :
775775 name : installers-${{ runner.os }}
776776 path : ddev/signed/${{ steps.pkg.outputs.path }}
@@ -795,14 +795,14 @@ jobs:
795795 # extract-release-notes succeeding; the body it consumes may be empty.
796796 steps :
797797 - name : Checkout code
798- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
798+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
799799
800800 - name : Initialize empty release notes
801801 working-directory : .
802802 run : ' : > release-notes.md'
803803
804804 - name : Set up Python ${{ env.PYTHON_VERSION }}
805- uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2 .0
805+ uses : actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3 .0
806806 continue-on-error : true
807807 with :
808808 python-version : " ${{ env.PYTHON_VERSION }}"
@@ -833,7 +833,7 @@ jobs:
833833
834834 - name : Upload release notes
835835 if : always()
836- uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
836+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
837837 with :
838838 name : release-notes
839839 path : release-notes.md
@@ -859,11 +859,11 @@ jobs:
859859
860860 steps :
861861 - name : Checkout code
862- uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
862+ uses : actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
863863
864864 - name : Get Datadog credentials
865865 id : dd-sts
866- uses : DataDog/dd-sts-action@2e8187910199bd93129520183c093e19aa585c75 # v1.0.0
866+ uses : DataDog/dd-sts-action@639d841c72f15e4e77747bd726ef8105ce971da2 # v1.0.5
867867 with :
868868 policy : integrations-core-api-key
869869
@@ -875,20 +875,20 @@ jobs:
875875 dd_api_key : ${{ steps.dd-sts.outputs.api_key }}
876876
877877 - name : Download Python artifacts
878- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
878+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
879879 with :
880880 name : python-artifacts
881881 path : dist
882882
883883 - name : Download binaries
884- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
884+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
885885 with :
886886 pattern : standalone*
887887 path : archives
888888 merge-multiple : true
889889
890890 - name : Download installers
891- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
891+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
892892 with :
893893 pattern : installers-*
894894 path : installers
@@ -897,7 +897,7 @@ jobs:
897897 # Downloaded by exact name (not pattern) so this step cannot pull in artifacts
898898 # uploaded by other jobs.
899899 - name : Download release notes
900- uses : actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0
900+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
901901 with :
902902 name : release-notes
903903 path : release-notes
@@ -908,12 +908,12 @@ jobs:
908908 # workflow file name, environment and repository the request is comming from to
909909 # provide the valid JWT token.
910910 - name : Push Python artifacts to PyPI
911- uses : pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0
911+ uses : pypa/gh-action-pypi-publish@dc37677b2e1c63e2034f94d8a5b11f265b73ba33 # v1.14.2
912912 with :
913913 skip-existing : true
914914
915915 - name : Add assets to current release
916- uses : softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
916+ uses : softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
917917 with :
918918 body_path : release-notes/release-notes.md
919919 files : |-
0 commit comments