2727 - SIT
2828 - UAT
2929env :
30- POETRY_VERSION : " 1.8.2 "
31- PYTHON_VERSION : " 3.10 "
30+ POETRY_VERSION : " 2.1.3 "
31+ PYTHON_VERSION : " 3.12 "
3232 TERRAFORM_VERSION : " 1.14.0"
3333 REGISTRY : ghcr.io
3434jobs :
@@ -44,17 +44,17 @@ jobs:
4444 pyproject_name : ${{ steps.poetry-build.outputs.pyproject_name }}
4545 tf_module_artifact_name : ${{ steps.poetry-build.outputs.tf_module_artifact_name }}
4646 steps :
47- - uses : getsentry/action-github-app-token@v3
47+ - uses : getsentry/action-github-app-token@v4.0.0
4848 name : CICD Token
4949 id : cicd-app
5050 with :
5151 app_id : ${{ secrets.CICD_APP_ID }}
5252 private_key : ${{ secrets.CICD_APP_PRIVATE_KEY }}
53- - uses : actions/checkout@v4
53+ - uses : actions/checkout@v7
5454 with :
5555 repository : ${{ github.repository }}
5656 token : ${{ steps.cicd-app.outputs.token }}
57- - uses : actions/setup-python@v5
57+ - uses : actions/setup-python@v6
5858 with :
5959 python-version : ${{ env.PYTHON_VERSION }}
6060 - name : Install Poetry
6565 run : |
6666 poetry config virtualenvs.create true --local
6767 poetry config virtualenvs.in-project true --local
68- - uses : actions/cache@v4
68+ - uses : actions/cache@v6
6969 name : Define a cache for the virtual environment based on the dependencies lock file
7070 with :
7171 path : ./.venv
@@ -135,7 +135,7 @@ jobs:
135135 run : |
136136 echo "software_version=$(poetry version | awk '{print $2}')" >> $GITHUB_ENV
137137 - name : Install micromamba
138- uses : mamba-org/setup-micromamba@v2
138+ uses : mamba-org/setup-micromamba@v3
139139 with :
140140 environment-file : conda-environment.yaml
141141 - name : Install package
@@ -147,7 +147,7 @@ jobs:
147147 - name : Test and coverage
148148 run : |
149149 poetry run pytest --junitxml=build/reports/pytest.xml --cov=bignbit --cov-report=xml:build/reports/coverage.xml tests/
150- - uses : hashicorp/setup-terraform@v3
150+ - uses : hashicorp/setup-terraform@v4
151151 with :
152152 terraform_version : ${{ env.TERRAFORM_VERSION }}
153153 terraform_wrapper : false
@@ -157,7 +157,7 @@ jobs:
157157 terraform init -backend=false -upgrade
158158 terraform validate -no-color
159159 - name : SonarCloud Scan
160- uses : sonarsource/sonarqube-scan-action@v6
160+ uses : sonarsource/sonarqube-scan-action@v8.2.0
161161 env :
162162 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
163163 SONAR_TOKEN : ${{ secrets.SONAR_TOKEN }}
@@ -179,7 +179,7 @@ jobs:
179179 echo "the_version=$(poetry version | awk '{print $2}')" >> $GITHUB_OUTPUT
180180 echo "pyproject_name=$(poetry version | awk '{print $1}')" >> $GITHUB_OUTPUT
181181 echo "tf_module_artifact_name=$(poetry version | awk '{print $1}')-${{ env.software_version }}-cumulus-tf" >> $GITHUB_OUTPUT
182- - uses : actions/upload-artifact@v4
182+ - uses : actions/upload-artifact@v7
183183 with :
184184 name : ${{ steps.poetry-build.outputs.pyproject_name }}-dist
185185 path : dist/*
@@ -189,7 +189,7 @@ jobs:
189189 cp terraform/* build/${{ steps.poetry-build.outputs.tf_module_artifact_name }}/
190190 cd build
191191 zip ${{ steps.poetry-build.outputs.tf_module_artifact_name }}.zip ${{ steps.poetry-build.outputs.tf_module_artifact_name }}/* -r -j
192- - uses : actions/upload-artifact@v4
192+ - uses : actions/upload-artifact@v7
193193 with :
194194 name : ${{ steps.poetry-build.outputs.tf_module_artifact_name }}
195195 path : build/${{ steps.poetry-build.outputs.tf_module_artifact_name }}.zip
@@ -238,26 +238,26 @@ jobs:
238238 THE_VERSION : ${{ needs.build.outputs.version }}
239239 PYPROJECT_NAME : ${{ needs.build.outputs.pyproject_name }}
240240 steps :
241- - uses : actions/checkout@v4
241+ - uses : actions/checkout@v7
242242 with :
243243 repository : ${{ github.repository }}
244244 - name : Set up Docker Buildx
245- uses : docker/setup-buildx-action@v3
245+ uses : docker/setup-buildx-action@v4
246246 - name : Log in to the Container registry
247- uses : docker/login-action@v3
247+ uses : docker/login-action@v4
248248 with :
249249 registry : ${{ env.REGISTRY }}
250250 username : ${{ github.actor }}
251251 password : ${{ secrets.GITHUB_TOKEN }}
252252 - name : Extract metadata (tags, labels) for Docker
253253 id : meta
254- uses : docker/metadata-action@v5
254+ uses : docker/metadata-action@v6
255255 with :
256256 images : ${{ env.REGISTRY }}/${{ github.repository }}/${{env.PYPROJECT_NAME}}
257257 tags : |
258258 type=pep440,pattern={{version}},value=${{ env.THE_VERSION }}
259259 - name : Build and push Docker image
260- uses : docker/build-push-action@v5
260+ uses : docker/build-push-action@v7
261261 with :
262262 context : .
263263 file : docker/Dockerfile
@@ -286,16 +286,16 @@ jobs:
286286 startsWith(github.ref, 'refs/heads/release') ||
287287 github.event_name == 'workflow_dispatch'
288288 steps :
289- - uses : actions/checkout@v4
289+ - uses : actions/checkout@v7
290290 with :
291291 repository : ${{ github.repository }}
292- - uses : hashicorp/setup-terraform@v3
292+ - uses : hashicorp/setup-terraform@v4
293293 with :
294294 terraform_version : ${{ env.TERRAFORM_VERSION }}
295295 terraform_wrapper : false
296296
297297 - name : Configure AWS credentials
298- uses : aws-actions/configure-aws-credentials@v4
298+ uses : aws-actions/configure-aws-credentials@v6.1.0
299299 with :
300300 aws-region : us-west-2
301301 role-session-name : GitHubActions
@@ -310,7 +310,7 @@ jobs:
310310 terraform validate -no-color
311311
312312 - name : Log in to the Container registry
313- uses : docker/login-action@v3
313+ uses : docker/login-action@v4
314314 with :
315315 registry : ${{ env.REGISTRY }}
316316 username : ${{ github.actor }}
0 commit comments