From a96bb0e2b799e5ec5860ff67eb04cc0f4e847816 Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Fri, 21 Aug 2026 13:45:33 +0000 Subject: [PATCH] Update github-actions --- .github/actions/build-base-image/action.yaml | 8 +-- .../ossf-compiler-flags-scanner/action.yaml | 4 +- .github/workflows/github-actions-checker.yaml | 2 +- .github/workflows/license-scanner.yaml | 2 +- .github/workflows/main.yaml | 58 +++++++++---------- .github/workflows/openvex-sync.yml | 4 +- .../ossf-compiler-flags-scanner.yaml | 2 +- .github/workflows/osv-scanner-scheduled.yml | 2 +- .github/workflows/pr-comment.yaml | 10 ++-- .github/workflows/renovate-vendored-deps.yaml | 2 +- .../reusable-vendor-vulnerability-scanner.yml | 2 +- .github/workflows/sync-github-releases.yaml | 2 +- .github/workflows/update-base.yaml | 4 +- .github/workflows/upload-windows-zip.yaml | 2 +- 14 files changed, 52 insertions(+), 52 deletions(-) diff --git a/.github/actions/build-base-image/action.yaml b/.github/actions/build-base-image/action.yaml index 1204ebf89e08..71a4c27f1930 100644 --- a/.github/actions/build-base-image/action.yaml +++ b/.github/actions/build-base-image/action.yaml @@ -47,14 +47,14 @@ runs: run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_OUTPUT - name: Cache BASE image - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 if: inputs.TYPE == '64-bit' || inputs.TYPE == 'clang' with: path: otp_docker_base.tar key: ${{ runner.os }}-${{ hashFiles('.github/dockerfiles/Dockerfile.ubuntu-base', '.github/scripts/build-base-image.sh') }}-${{ steps.date.outputs.date }}-${{ hashFiles('OTP_VERSION') }} - name: Docker login - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.repository_owner }} @@ -67,7 +67,7 @@ runs: - name: Cache pre-built src id: cache-src if: inputs.BUILD_IMAGE == 'true' - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: otp_src.tar.gz key: prebuilt-src-${{ github.ref_name }}-${{ github.sha }} @@ -81,7 +81,7 @@ runs: - name: Cache pre-built binaries id: cache-binary if: inputs.BUILD_IMAGE == 'true' && steps.cache-src.outputs.cache-hit == 'true' - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: otp_cache.tar.gz key: prebuilt-cache-${{ inputs.TYPE }}-${{ github.ref_name }}-${{ github.sha }} diff --git a/.github/actions/ossf-compiler-flags-scanner/action.yaml b/.github/actions/ossf-compiler-flags-scanner/action.yaml index fe1a8d435398..5e963be85d26 100644 --- a/.github/actions/ossf-compiler-flags-scanner/action.yaml +++ b/.github/actions/ossf-compiler-flags-scanner/action.yaml @@ -28,7 +28,7 @@ inputs: runs: using: composite steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ossf/wg-best-practices-os-developers sparse-checkout: docs/Compiler-Hardening-Guides/compiler-options-scraper @@ -57,6 +57,6 @@ runs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" if: ${{ !cancelled() && inputs.upload == 'true' }} - uses: github/codeql-action/upload-sarif@2d6b98c7cf7260afd6954ee7de478b21127b40f4 # ratchet:github/codeql-action/upload-sarif@v3.29.7 + uses: github/codeql-action/upload-sarif@db488ddef3bf6cb639b32c2e9a7c0a7ea8271d28 # v4.37.8 with: sarif_file: results.sarif \ No newline at end of file diff --git a/.github/workflows/github-actions-checker.yaml b/.github/workflows/github-actions-checker.yaml index 703c0d2435d8..35d4d8dc94b1 100644 --- a/.github/workflows/github-actions-checker.yaml +++ b/.github/workflows/github-actions-checker.yaml @@ -34,7 +34,7 @@ jobs: runs-on: 'ubuntu-latest' name: 'ratchet' steps: - - uses: 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' # v6.0.2 + - uses: 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' # v7.0.1 - id: files run: | FILES=$(find .github/ -name "*.yml" -o -name "*.yaml" -printf "%p ") diff --git a/.github/workflows/license-scanner.yaml b/.github/workflows/license-scanner.yaml index 9c1a5aa058a0..97aa2021ed99 100644 --- a/.github/workflows/license-scanner.yaml +++ b/.github/workflows/license-scanner.yaml @@ -35,7 +35,7 @@ jobs: run-scan: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: '0' - uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4 diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index 6b1ab702fb2d..3ef8cc16eee5 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -65,7 +65,7 @@ jobs: runs-on: ubuntu-latest if: github.repository == 'erlang/otp' && github.event_name == 'pull_request' steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 @@ -98,7 +98,7 @@ jobs: build-c-code: ${{ steps.c-code-changes.outputs.changes != '[]' || env.FULL_BUILD_AND_CHECK == 'true' }} all: ${{ steps.apps.outputs.all }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -115,7 +115,7 @@ jobs: ALL_APPS=$(jq -n --arg inarr "${ALL_APPS}" '$inarr | split("\n")' | tr '\n' ' ') echo "all=${ALL_APPS}" >> $GITHUB_OUTPUT - name: Check which applications have changed - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # ratchet:dorny/paths-filter@v3.0.2 + uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3 id: app-changes with: filters: .github/scripts/path-filters.yaml @@ -131,19 +131,19 @@ jobs: echo "changes=${CHANGED_APPS}" >> "$GITHUB_OUTPUT" fi - name: Check if there are any C-code changes, if not then limit CI run - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # ratchet:dorny/paths-filter@v3.0.2 + uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3 id: c-code-changes with: filters: .github/scripts/c-code-path-filters.yaml - name: Cache pre-built src - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: otp_src.tar.gz key: prebuilt-src-${{ github.ref_name }}-${{ github.sha }} restore-keys: | prebuilt-src-${{ github.base_ref }}-${{ github.event.pull_request.base.sha }} - name: Cache pre-built binaries - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: otp_cache.tar.gz key: prebuilt-cache-64-bit-${{ github.ref_name }}-${{ github.sha }} @@ -157,7 +157,7 @@ jobs: name: otp_git_archive path: otp_archive.tar.gz - name: Check how we can use the pre-built cache - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # ratchet:dorny/paths-filter@v3.0.2 + uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3 id: cache with: filters: | @@ -220,14 +220,14 @@ jobs: build-macos: name: Build Erlang/OTP (macOS) - runs-on: macos-15 + runs-on: macos-26 needs: pack if: needs.pack.outputs.build-c-code == 'true' env: WXWIDGETS_VERSION: 3.2.9 MACOS_VERSION: 15 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download source archive uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 @@ -236,7 +236,7 @@ jobs: - name: Cache wxWidgets id: wxwidgets-cache - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: wxWidgets key: wxWidgets-${{ env.WXWIDGETS_VERSION }}-${{ runner.os }}-${{ hashFiles('.github/scripts/build-macos-wxwidgets.sh') }}-${{ env.MACOS_VERSION }} @@ -272,11 +272,11 @@ jobs: RELEASE_LIBBEAM: yes TARGET_ARCH: aarch64-apple-ios name: Build Erlang/OTP (iOS) - runs-on: macos-15 + runs-on: macos-26 needs: pack if: needs.pack.outputs.build-c-code == 'true' steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download source archive uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 with: @@ -313,7 +313,7 @@ jobs: needs: pack if: needs.pack.outputs.build-c-code == 'true' steps: - - uses: Vampire/setup-wsl@6a8db447be7ed35f2f499c02c6e60ff77ef11278 # v6.0.0 + - uses: Vampire/setup-wsl@d1da7f2c0322a5ee4f24975344f67fc0f5baf364 # v7.0.0 with: distribution: Ubuntu-18.04 @@ -338,7 +338,7 @@ jobs: run: echo "os=${ImageOS:-unknown}" >> "$GITHUB_OUTPUT" - name: Cache wxWidgets - uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: wxWidgets key: wxWidgets-${{ env.WXWIDGETS_VERSION }}-${{ steps.image.outputs.os }} @@ -431,7 +431,7 @@ jobs: fail-fast: false steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -510,7 +510,7 @@ jobs: outputs: vendor-files: ${{ steps.vendor-files.outputs.MODIFIED_FILES != '0' }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Get modified vendor files @@ -549,7 +549,7 @@ jobs: fail-fast: false steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -590,7 +590,7 @@ jobs: runs-on: ubuntu-latest needs: pack steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -644,7 +644,7 @@ jobs: runs-on: ubuntu-latest needs: pack steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -671,7 +671,7 @@ jobs: # type: ["os_mon","sasl"] fail-fast: false steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -724,7 +724,7 @@ jobs: if: ${{ !cancelled() && needs.pack.result == 'success' }} # Run even if the need has failed needs: [pack, test] # it makes no sense to run this if there is no build image (pack job) steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -801,13 +801,13 @@ jobs: - name: Use HTTPS instead of SSH for Git cloning run: git config --global url.https://github.com/.insteadOf ssh://git@github.com/ - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} - name: Fetch Default ORT Config - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: oss-review-toolkit/ort-config ref: "d2978deb230beae095bb6cfec074b94f1a74fd34" @@ -838,7 +838,7 @@ jobs: run: ln -s analyzer-result.json $HOME/.ort/ort-results/current-result.json - name: Restore ORT Scanner cache - uses: actions/cache/restore@b7e8d49f17405cc70c1c120101943203c98d3a4b # ratchet:actions/cache/restore@v4 + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6 id: ort-cache if: ${{ env.FULL_BUILD_AND_CHECK == 'false' }} with: @@ -915,7 +915,7 @@ jobs: sw-version: ${{ env.OTP_SBOM_VERSION }} - name: Save ORT Scanner cache - uses: actions/cache/save@b7e8d49f17405cc70c1c120101943203c98d3a4b # ratchet:actions/cache/save@v4 + uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6 if: steps.ort-cache.outputs.cache-hit != 'true' with: path: ${{ env.SCAN_RESULT_CACHE_PATH }} @@ -974,7 +974,7 @@ jobs: contents: write id-token: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -1025,7 +1025,7 @@ jobs: echo "tag=${TAG}" >> $GITHUB_OUTPUT echo "vsn=${VSN}" >> $GITHUB_OUTPUT - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 ## Publish the pre-built archive and docs - name: Download source archive @@ -1067,7 +1067,7 @@ jobs: - name: Attest Distribution Assets with SBoM id: attest-sbom - uses: actions/attest-sbom@4651f806c01d8637787e274ac3bdf724ef169f34 # v3 + uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e # v4 with: subject-path: | artifacts/*.tar.gz @@ -1095,7 +1095,7 @@ jobs: path: "attestations/*.sigstore" - name: Upload pre-built and doc tar archives - uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 + uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 with: name: OTP ${{ steps.tag.outputs.vsn }} files: | diff --git a/.github/workflows/openvex-sync.yml b/.github/workflows/openvex-sync.yml index c28703cc183c..4f5d1b9eac54 100644 --- a/.github/workflows/openvex-sync.yml +++ b/.github/workflows/openvex-sync.yml @@ -40,7 +40,7 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: 'master' # '' = default branch @@ -52,7 +52,7 @@ jobs: with: vexctl-release: '0.3.0' - - uses: actions/create-github-app-token@29824e69f54612133e76f7eaac726eef6c875baf # v2.2.1 + - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 id: app-token with: # required diff --git a/.github/workflows/ossf-compiler-flags-scanner.yaml b/.github/workflows/ossf-compiler-flags-scanner.yaml index e04af4adb216..32c2a02e5076 100644 --- a/.github/workflows/ossf-compiler-flags-scanner.yaml +++ b/.github/workflows/ossf-compiler-flags-scanner.yaml @@ -45,7 +45,7 @@ jobs: # Only need to read contents contents: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Create initial pre-release tar run: .github/scripts/init-pre-release.sh otp_src.tar.gz - uses: ./.github/actions/build-base-image diff --git a/.github/workflows/osv-scanner-scheduled.yml b/.github/workflows/osv-scanner-scheduled.yml index 5fb2dba9ba70..6951884a45a3 100644 --- a/.github/workflows/osv-scanner-scheduled.yml +++ b/.github/workflows/osv-scanner-scheduled.yml @@ -39,7 +39,7 @@ jobs: outputs: versions: ${{ steps.get-versions.outputs.versions }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: get-versions name: Fetch latest 3 OTP versions run: | diff --git a/.github/workflows/pr-comment.yaml b/.github/workflows/pr-comment.yaml index 5bb0d8ef0dc7..0a6d47feec2f 100644 --- a/.github/workflows/pr-comment.yaml +++ b/.github/workflows/pr-comment.yaml @@ -44,7 +44,7 @@ jobs: outputs: result: ${{ steps.pr-number.outputs.result }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4 with: otp-version: '27' @@ -64,9 +64,9 @@ jobs: pull-requests: write if: github.event.action == 'requested' && needs.pr-number.outputs.result != '' steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 ## We create an initial comment with some useful help to the user - - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 + - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: script: | const script = require('./.github/scripts/pr-comment.js'); @@ -87,7 +87,7 @@ jobs: needs.pr-number.outputs.result != '' && github.event.workflow_run.conclusion != 'skipped' steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download and Extract Artifacts id: extract env: @@ -124,7 +124,7 @@ jobs: ## Append some useful links and tips to the test results posted by ## Publish CT Test Results - - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 + - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 if: always() with: script: | diff --git a/.github/workflows/renovate-vendored-deps.yaml b/.github/workflows/renovate-vendored-deps.yaml index fbaac6699ddf..049d600d26a2 100644 --- a/.github/workflows/renovate-vendored-deps.yaml +++ b/.github/workflows/renovate-vendored-deps.yaml @@ -37,7 +37,7 @@ jobs: contains(github.event.pull_request.title, 'update dependency') && github.actor == 'renovate-bot' steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.pull_request.head.ref }} fetch-depth: 0 diff --git a/.github/workflows/reusable-vendor-vulnerability-scanner.yml b/.github/workflows/reusable-vendor-vulnerability-scanner.yml index a08eeaa5bf32..138bb81ddd98 100644 --- a/.github/workflows/reusable-vendor-vulnerability-scanner.yml +++ b/.github/workflows/reusable-vendor-vulnerability-scanner.yml @@ -102,7 +102,7 @@ jobs: permissions: actions: read steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.checkout && inputs.version || ''}} # '' = default branch diff --git a/.github/workflows/sync-github-releases.yaml b/.github/workflows/sync-github-releases.yaml index 2e183a945ab6..f99cbb71cf52 100644 --- a/.github/workflows/sync-github-releases.yaml +++ b/.github/workflows/sync-github-releases.yaml @@ -43,7 +43,7 @@ jobs: contents: write actions: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 ## We need to login to the package registry in order to pull ## the base debian image. - name: Docker login diff --git a/.github/workflows/update-base.yaml b/.github/workflows/update-base.yaml index f9e19a12b905..f01cf8337492 100644 --- a/.github/workflows/update-base.yaml +++ b/.github/workflows/update-base.yaml @@ -49,14 +49,14 @@ jobs: fail-fast: false steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ matrix.branch }} - name: Cleanup GH Runner shell: bash run: .github/scripts/cleanup_gh_runner.sh - name: Docker login - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/upload-windows-zip.yaml b/.github/workflows/upload-windows-zip.yaml index 6065175fc154..873d295845d1 100644 --- a/.github/workflows/upload-windows-zip.yaml +++ b/.github/workflows/upload-windows-zip.yaml @@ -43,7 +43,7 @@ jobs: env: basename: otp_${{ inputs.target }}_${{ inputs.version }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install OTP shell: cmd