envoyproxy · dependabot · Jan 13, 2026
diff --git a/.github/workflows/_bazel.yml b/.github/workflows/_bazel.yml
@@ -64,7 +64,7 @@ jobs:
         inputs.action == 'build'
         && inputs.bazel-path == 'bazel'
         && inputs.upload
-      uses: envoyproxy/toolshed/actions/source@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+      uses: envoyproxy/toolshed/actions/source@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         exclude-patterns: |
           .git*
@@ -86,7 +86,7 @@ jobs:
         inputs.action == 'build'
         && inputs.artifacts
         && inputs.upload
-      uses: envoyproxy/toolshed/actions/jq@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+      uses: envoyproxy/toolshed/actions/jq@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         input: ${{ inputs.artifacts }}
         input-format: text

diff --git a/.github/workflows/_publish_release.yml b/.github/workflows/_publish_release.yml
@@ -73,7 +73,7 @@ jobs:
     name: release (${{ inputs.name }})
     runs-on: ubuntu-24.04
     steps:
-    - uses: envoyproxy/toolshed/actions/appauth@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/appauth@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: appauth
       name: Appauth
       if: >-
@@ -84,7 +84,7 @@ jobs:
         key: ${{ secrets.app-key }}
     - id: checkout
       name: Checkout the repository
-      uses: envoyproxy/toolshed/actions/github/checkout@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/github/checkout@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         branch: main
         committer-name: ${{ inputs.committer-name }}
@@ -106,13 +106,13 @@ jobs:
       id: gpg
       if: >-
         inputs.artifacts
-      uses: envoyproxy/toolshed/actions/gpg@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/gpg@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         gpg-key: ${{ ! inputs.dry-run && secrets.gpg-key || '' }}
         gpg-password: ${{ ! inputs.dry-run && secrets.gpg-password || '' }}
     - name: Release title (eg commit message)
       id: title
-      uses: envoyproxy/toolshed/actions/jq@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/jq@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         options: -sRr
         input: |
@@ -121,7 +121,7 @@ jobs:
           split("\n") | first
 
     - name: Publish the release
-      uses: envoyproxy/toolshed/actions/github/release@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/github/release@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         artifact-workflows: ${{ inputs.artifact-workflows }}
         artifacts: ${{ inputs.artifacts }}

diff --git a/.github/workflows/_release.yml b/.github/workflows/_release.yml
@@ -80,7 +80,7 @@ jobs:
     name: ${{ inputs.action }}
     runs-on: ubuntu-24.04
     steps:
-    - uses: envoyproxy/toolshed/actions/appauth@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/appauth@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: appauth
       name: Appauth
       if: >-
@@ -90,7 +90,7 @@ jobs:
         key: ${{ secrets.app-key }}
     - id: checkout
       name: Checkout the repository
-      uses: envoyproxy/toolshed/actions/github/checkout@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/github/checkout@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         branch: main
         committer-name: ${{ inputs.committer-name }}
@@ -99,7 +99,7 @@ jobs:
         token: ${{ steps.appauth.outputs.token }}
     - name: Get version file
       id: version-file
-      uses: envoyproxy/toolshed/actions/jq@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/jq@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         input: |
           actions: actions/VERSION.txt
@@ -111,11 +111,11 @@ jobs:
         filter: .["${{ inputs.type }}"]
     - name: Get version info
       id: version
-      uses: envoyproxy/toolshed/actions/version@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/version@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         version-file: ${{ steps.version-file.outputs.value }}
     - name: Update version file
-      uses: envoyproxy/toolshed/actions/bson@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
       if: >-
         inputs.action != 'prepare'
       with:
@@ -148,23 +148,23 @@ jobs:
 
     # BAZEL ONLY
     - name: Get latest bins release (for bazel)
-      uses: envoyproxy/toolshed/actions/github/release/latest@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/github/release/latest@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: bins-version
       if: >-
         inputs.type == 'bazel'
         && inputs.action != 'release-no-prepare'
       with:
         pattern: ^bins-
     - name: Get SHAs for latest bins release (for bazel)
-      uses: envoyproxy/toolshed/actions/github/release/shas@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/github/release/shas@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: bins-shas
       if: >-
         inputs.type == 'bazel'
         && inputs.action != 'release-no-prepare'
       with:
         tag: ${{ steps.bins-version.outputs.tag }}
     - name: Get current SHAs and version (for bazel)
-      uses: envoyproxy/toolshed/actions/bson@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: bins-deps
       if: >-
         inputs.type == 'bazel'
@@ -179,7 +179,7 @@ jobs:
           bash::output
         options: -sRr
     - name: Update bins shas (for bazel)
-      uses: envoyproxy/toolshed/actions/bson@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: bins-updates
       if: >-
         inputs.type == 'bazel'
@@ -264,7 +264,7 @@ jobs:
       if: >-
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
-      uses: envoyproxy/toolshed/actions/bson@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         input: |
           ${{ inputs.python-find-versions }}
@@ -281,7 +281,7 @@ jobs:
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
       name: Update python release packages
-      uses: envoyproxy/toolshed/actions/bson@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         input: |
           args: >-
@@ -303,7 +303,7 @@ jobs:
       if: >-
         inputs.type == 'python'
         && inputs.action != 'release-no-prepare'
-      uses: envoyproxy/toolshed/actions/bson@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         input: |
           ${{ inputs.python-find-versions }}
@@ -349,7 +349,7 @@ jobs:
         echo "message=${COMMIT_MESSAGE}" >> "$GITHUB_OUTPUT"
         echo "changes=true" >> "$GITHUB_OUTPUT"
     - name: Create Pull Request
-      uses: envoyproxy/toolshed/actions/github/pr@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/github/pr@808a57c88b4cbf2560d3aa067b030e87c24306c8
       if: fromJSON(steps.commit.outputs.changes)
       with:
         base: main

diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml
@@ -21,7 +21,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       tests: ${{ steps.tests.outputs.output }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |
@@ -30,7 +30,7 @@ jobs:
           - 'js/**'
           - '.github/workflows/actions.yml'
     - id: tests
-      uses: envoyproxy/toolshed/actions/bson@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         input: |
           OUTPUT="$(find actions -path "*/tests/*.test.yml" -type f)"
@@ -53,7 +53,7 @@ jobs:
     steps:
     - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8  # v6.0.1
     - name: Run test
-      uses: envoyproxy/toolshed/actions/test-runner@9e23dddd74d612f3971c03138d265780e8a5ece7
+      uses: envoyproxy/toolshed/actions/test-runner@808a57c88b4cbf2560d3aa067b030e87c24306c8
       with:
         config: ${{ matrix.test }}
         name: ${{ matrix.test }}

diff --git a/.github/workflows/bazel.yml b/.github/workflows/bazel.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -21,7 +21,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/jq.yml b/.github/workflows/jq.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/js.yml b/.github/workflows/js.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/publishing.yml b/.github/workflows/publishing.yml
@@ -19,7 +19,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       sha: ${{ steps.commit.outputs.sha }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/py.yml b/.github/workflows/py.yml
@@ -22,7 +22,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/releasing.yml b/.github/workflows/releasing.yml
@@ -19,7 +19,7 @@ jobs:
       run: ${{ steps.filter.outputs.run }}
       sha: ${{ steps.commit.outputs.sha }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml
@@ -21,7 +21,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/.github/workflows/sh.yml b/.github/workflows/sh.yml
@@ -20,7 +20,7 @@ jobs:
     outputs:
       run: ${{ steps.filter.outputs.run }}
     steps:
-    - uses: envoyproxy/toolshed/actions/github/should-run@9e23dddd74d612f3971c03138d265780e8a5ece7
+    - uses: envoyproxy/toolshed/actions/github/should-run@808a57c88b4cbf2560d3aa067b030e87c24306c8
       id: filter
       with:
         config: |

diff --git a/actions/azp/agent-cleanup/action.yml b/actions/azp/agent-cleanup/action.yml
@@ -21,13 +21,13 @@ runs:
 
   - id: fetch
     name: Fetch AZP agents list
-    uses: envoyproxy/toolshed/actions/fetch@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+    uses: envoyproxy/toolshed/actions/fetch@808a57c88b4cbf2560d3aa067b030e87c24306c8
     with:
       url: https://dev.azure.com/${{ inputs.azp-org }}/_apis/distributedtask/pools/${{ inputs.pool-id }}/agents?api-version=7.1-preview.1
       args: -u ":${{ inputs.azp-token }}"
 
   - name: Get dead AZP agent ids
-    uses: envoyproxy/toolshed/actions/jq@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+    uses: envoyproxy/toolshed/actions/jq@808a57c88b4cbf2560d3aa067b030e87c24306c8
     with:
       input-format: json-path
       input: ${{ steps.fetch.outputs.path }}

diff --git a/actions/bind-mounts/action.yml b/actions/bind-mounts/action.yml
@@ -23,7 +23,7 @@ runs:
   using: composite
   steps:
   - name: Bind mount directories
-    uses: envoyproxy/toolshed/actions/bson@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+    uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
     id: mount
     with:
       input: ${{ inputs.mounts }}

diff --git a/actions/bson/action.yml b/actions/bson/action.yml
@@ -48,7 +48,7 @@ runs:
       chmod +x $TMPFILE
       echo "path=$TMPFILE" >> $GITHUB_OUTPUT
     shell: bash
-  - uses: envoyproxy/toolshed/actions/jq@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+  - uses: envoyproxy/toolshed/actions/jq@808a57c88b4cbf2560d3aa067b030e87c24306c8
     id: command
     with:
       input: ${{ inputs.input }}
@@ -76,7 +76,7 @@ runs:
       TMPFILE: ${{ steps.script.outputs.path }}
     shell: bash
   - id: output
-    uses: envoyproxy/toolshed/actions/jq@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+    uses: envoyproxy/toolshed/actions/jq@808a57c88b4cbf2560d3aa067b030e87c24306c8
     if: ${{ inputs.result-filter }}
     with:
       input: ${{ steps.run.outputs.output }}

diff --git a/actions/buildah/action.yml b/actions/buildah/action.yml
@@ -65,7 +65,7 @@ runs:
       echo '${{ inputs.gcr-key }}' | base64 -d | buildah login --username _json_key --password-stdin gcr.io
       echo "::endgroup::"
   - name: Execute buildah operations
-    uses: envoyproxy/toolshed/actions/bson@b947ebfe9eda97a0da3e1b3a6a3598fbb55de7b6
+    uses: envoyproxy/toolshed/actions/bson@808a57c88b4cbf2560d3aa067b030e87c24306c8
     id: execute
     with:
       title: Execute buildah operations