Skip to content

Commit bc8e0be

Browse files
nickvergessennickvergessen
authored
Merge pull request #14440 from nextcloud/ci/noid/update-actions
ci: Update actions
2 parents d02eeb5 + d6f4846 commit bc8e0be

29 files changed

+240
-99
lines changed

‎.github/workflows/appstore-build-publish.yml

+19-3
Original file line numberDiff line numberDiff line change
@@ -12,6 +12,9 @@ on:
1212
release:
1313
types: [published]
1414

15+
permissions:
16+
contents: write
17+
1518
jobs:
1619
build_and_publish:
1720
runs-on: ubuntu-latest
@@ -32,10 +35,22 @@ jobs:
3235
echo "APP_VERSION=${GITHUB_REF##*/}" >> $GITHUB_ENV
3336
3437
- name: Checkout
35-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
38+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3639
with:
40+
persist-credentials: false
3741
path: ${{ env.APP_NAME }}
3842

43+
- name: Get app version number
44+
id: app-version
45+
uses: skjnldsv/xpath-action@7e6a7c379d0e9abc8acaef43df403ab4fc4f770c # master
46+
with:
47+
filename: ${{ env.APP_NAME }}/appinfo/info.xml
48+
expression: "//info//version/text()"
49+
50+
- name: Validate app version against tag
51+
run: |
52+
[ "${{ env.APP_VERSION }}" = "v${{ fromJSON(steps.app-version.outputs.result).version }}" ]
53+
3954
- name: Get appinfo data
4055
id: appinfo
4156
uses: skjnldsv/xpath-action@7e6a7c379d0e9abc8acaef43df403ab4fc4f770c # master
@@ -56,7 +71,7 @@ jobs:
5671
- name: Set up node ${{ steps.versions.outputs.nodeVersion }}
5772
# Skip if no package.json
5873
if: ${{ steps.versions.outputs.nodeVersion }}
59-
uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3
74+
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
6075
with:
6176
node-version: ${{ steps.versions.outputs.nodeVersion }}
6277

@@ -134,9 +149,10 @@ jobs:
134149
unzip latest-$NCVERSION.zip
135150
136151
- name: Checkout server master fallback
137-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
152+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
138153
if: ${{ steps.server-checkout.outcome != 'success' }}
139154
with:
155+
persist-credentials: false
140156
submodules: true
141157
repository: nextcloud/server
142158
path: nextcloud

‎.github/workflows/block-unconventional-commits.yml

+3-1
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,9 @@ jobs:
2727

2828
steps:
2929
- name: Checkout
30-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
30+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
31+
with:
32+
persist-credentials: false
3133

3234
- uses: webiny/action-conventional-commits@8bc41ff4e7d423d56fa4905f6ff79209a78776c7 # v1.3.0
3335
with:

‎.github/workflows/command-openapi.yml

+5-1
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,9 @@ on:
1111
issue_comment:
1212
types: [created]
1313

14+
permissions:
15+
contents: read
16+
1417
jobs:
1518
init:
1619
runs-on: ubuntu-latest
@@ -100,8 +103,9 @@ jobs:
100103
key: git-repo
101104

102105
- name: Checkout ${{ needs.init.outputs.head_ref }}
103-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
106+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
104107
with:
108+
persist-credentials: false
105109
token: ${{ secrets.COMMAND_BOT_PAT }}
106110
fetch-depth: 0
107111
ref: ${{ needs.init.outputs.head_ref }}

‎.github/workflows/dependabot-approve-merge.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@
99
name: Dependabot
1010

1111
on:
12-
pull_request_target:
12+
pull_request_target: # zizmor: ignore[dangerous-triggers]
1313
branches:
1414
- main
1515
- master
@@ -24,7 +24,7 @@ concurrency:
2424

2525
jobs:
2626
auto-approve-merge:
27-
if: github.actor == 'dependabot[bot]' || github.actor == 'renovate[bot]'
27+
if: github.event.pull_request.user.login == 'dependabot[bot]' || github.event.pull_request.user.login == 'renovate[bot]'
2828
runs-on: ubuntu-latest-low
2929
permissions:
3030
# for hmarr/auto-approve-action to approve PRs

‎.github/workflows/integration-federation.yml

+21-11
Original file line numberDiff line numberDiff line change
@@ -140,77 +140,87 @@ jobs:
140140
echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV
141141
142142
- name: Checkout server - Host
143-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
143+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
144144
with:
145+
persist-credentials: false
145146
path: host
146147
submodules: true
147148
repository: nextcloud/server
148149
ref: ${{ matrix.host-server-versions }}
149150

150151
- name: Checkout spreed app - Host
151-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
152+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
152153
with:
154+
persist-credentials: false
153155
path: host/apps/spreed
154156
ref: ${{ matrix.host-spreed-versions }}
155157

156158
- name: Checkout circles app - Host
157-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
159+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
158160
with:
161+
persist-credentials: false
159162
repository: nextcloud/circles
160163
path: host/apps/circles
161164
ref: ${{ matrix.host-circles-versions }}
162165

163166
- name: Checkout guests app - Host
164-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
167+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
165168
with:
169+
persist-credentials: false
166170
repository: nextcloud/guests
167171
path: host/apps/guests
168172
ref: ${{ matrix.host-guests-versions }}
169173

170174
- name: Checkout notifications app - Host
171-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
175+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
172176
with:
177+
persist-credentials: false
173178
repository: nextcloud/notifications
174179
path: host/apps/notifications
175180
ref: ${{ matrix.host-notifications-versions }}
176181

177182
- name: Checkout server - Remote
178-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
183+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
179184
with:
185+
persist-credentials: false
180186
path: remote
181187
submodules: true
182188
repository: nextcloud/server
183189
ref: ${{ matrix.remote-server-versions }}
184190

185191
- name: Checkout spreed app - Remote
186-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
192+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
187193
with:
194+
persist-credentials: false
188195
path: remote/apps/spreed
189196
ref: ${{ matrix.remote-spreed-versions }}
190197

191198
- name: Checkout circles app - Remote
192-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
199+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
193200
with:
201+
persist-credentials: false
194202
repository: nextcloud/circles
195203
path: remote/apps/circles
196204
ref: ${{ matrix.remote-circles-versions }}
197205

198206
- name: Checkout guests app - Remote
199-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
207+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
200208
with:
209+
persist-credentials: false
201210
repository: nextcloud/guests
202211
path: remote/apps/guests
203212
ref: ${{ matrix.remote-guests-versions }}
204213

205214
- name: Checkout notifications app - Remote
206-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
215+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
207216
with:
217+
persist-credentials: false
208218
repository: nextcloud/notifications
209219
path: remote/apps/notifications
210220
ref: ${{ matrix.remote-notifications-versions }}
211221

212222
- name: Set up php ${{ matrix.php-versions }}
213-
uses: shivammathur/setup-php@2e947f1f6932d141d076ca441d0e1e881775e95b # v2
223+
uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2.31.1
214224
with:
215225
php-version: ${{ matrix.php-versions }}
216226
# https://docs.nextcloud.com/server/stable/admin_manual/installation/source_installation.html#prerequisites-for-manual-installation

‎.github/workflows/integration-mariadb.yml

+11-6
Original file line numberDiff line numberDiff line change
@@ -75,40 +75,45 @@ jobs:
7575
echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV
7676
7777
- name: Checkout server
78-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
78+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
7979
with:
80+
persist-credentials: false
8081
submodules: true
8182
repository: nextcloud/server
8283
ref: ${{ matrix.server-versions }}
8384

8485
- name: Checkout app
85-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
86+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8687
with:
88+
persist-credentials: false
8789
path: apps/${{ env.APP_NAME }}
8890

8991
- name: Checkout circles app
90-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
92+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9193
with:
94+
persist-credentials: false
9295
repository: nextcloud/circles
9396
path: apps/circles
9497
ref: ${{ matrix.circles-versions }}
9598

9699
- name: Checkout guests app
97-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
100+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
98101
with:
102+
persist-credentials: false
99103
repository: nextcloud/guests
100104
path: apps/guests
101105
ref: ${{ matrix.guests-versions }}
102106

103107
- name: Checkout notifications app
104-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
108+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
105109
with:
110+
persist-credentials: false
106111
repository: nextcloud/notifications
107112
path: apps/notifications
108113
ref: ${{ matrix.notifications-versions }}
109114

110115
- name: Set up php ${{ matrix.php-versions }}
111-
uses: shivammathur/setup-php@2e947f1f6932d141d076ca441d0e1e881775e95b # v2
116+
uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2.31.1
112117
with:
113118
php-version: ${{ matrix.php-versions }}
114119
# https://docs.nextcloud.com/server/stable/admin_manual/installation/source_installation.html#prerequisites-for-manual-installation

‎.github/workflows/integration-mysql.yml

+11-6
Original file line numberDiff line numberDiff line change
@@ -75,40 +75,45 @@ jobs:
7575
echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV
7676
7777
- name: Checkout server
78-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
78+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
7979
with:
80+
persist-credentials: false
8081
submodules: true
8182
repository: nextcloud/server
8283
ref: ${{ matrix.server-versions }}
8384

8485
- name: Checkout app
85-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
86+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8687
with:
88+
persist-credentials: false
8789
path: apps/${{ env.APP_NAME }}
8890

8991
- name: Checkout circles app
90-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
92+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9193
with:
94+
persist-credentials: false
9295
repository: nextcloud/circles
9396
path: apps/circles
9497
ref: ${{ matrix.circles-versions }}
9598

9699
- name: Checkout guests app
97-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
100+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
98101
with:
102+
persist-credentials: false
99103
repository: nextcloud/guests
100104
path: apps/guests
101105
ref: ${{ matrix.guests-versions }}
102106

103107
- name: Checkout notifications app
104-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
108+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
105109
with:
110+
persist-credentials: false
106111
repository: nextcloud/notifications
107112
path: apps/notifications
108113
ref: ${{ matrix.notifications-versions }}
109114

110115
- name: Set up php ${{ matrix.php-versions }}
111-
uses: shivammathur/setup-php@2e947f1f6932d141d076ca441d0e1e881775e95b # v2
116+
uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2.31.1
112117
with:
113118
php-version: ${{ matrix.php-versions }}
114119
# https://docs.nextcloud.com/server/stable/admin_manual/installation/source_installation.html#prerequisites-for-manual-installation

‎.github/workflows/integration-oci.yml

+11-6
Original file line numberDiff line numberDiff line change
@@ -87,40 +87,45 @@ jobs:
8787
echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV
8888
8989
- name: Checkout server
90-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
90+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9191
with:
92+
persist-credentials: false
9293
submodules: true
9394
repository: nextcloud/server
9495
ref: ${{ matrix.server-versions }}
9596

9697
- name: Checkout app
97-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
98+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
9899
with:
100+
persist-credentials: false
99101
path: apps/${{ env.APP_NAME }}
100102

101103
- name: Checkout circles app
102-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
104+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
103105
with:
106+
persist-credentials: false
104107
repository: nextcloud/circles
105108
path: apps/circles
106109
ref: ${{ matrix.circles-versions }}
107110

108111
- name: Checkout guests app
109-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
112+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
110113
with:
114+
persist-credentials: false
111115
repository: nextcloud/guests
112116
path: apps/guests
113117
ref: ${{ matrix.guests-versions }}
114118

115119
- name: Checkout notifications app
116-
uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
120+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
117121
with:
122+
persist-credentials: false
118123
repository: nextcloud/notifications
119124
path: apps/notifications
120125
ref: ${{ matrix.notifications-versions }}
121126

122127
- name: Set up php ${{ matrix.php-versions }}
123-
uses: shivammathur/setup-php@2e947f1f6932d141d076ca441d0e1e881775e95b # v2
128+
uses: shivammathur/setup-php@c541c155eee45413f5b09a52248675b1a2575231 # v2.31.1
124129
with:
125130
php-version: ${{ matrix.php-versions }}
126131
# https://docs.nextcloud.com/server/stable/admin_manual/installation/source_installation.html#prerequisites-for-manual-installation

0 commit comments

Comments
 (0)