diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 3145baeb25c..3d5a25b6d5c 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -32,7 +32,7 @@ jobs: - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@v1 + uses: anthropics/claude-code-action@v1.0.93 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml index 018ec76c694..2b0c3862972 100644 --- a/.github/workflows/codeql-analysis.yaml +++ b/.github/workflows/codeql-analysis.yaml @@ -22,10 +22,10 @@ jobs: uses: actions/checkout@v6 - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@v4.35.1 with: languages: 'go, javascript' - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@v4.35.1 diff --git a/.github/workflows/docker-publish-lakefs-rclone-export.yaml b/.github/workflows/docker-publish-lakefs-rclone-export.yaml index 44470a193ce..007114fa5ee 100644 --- a/.github/workflows/docker-publish-lakefs-rclone-export.yaml +++ b/.github/workflows/docker-publish-lakefs-rclone-export.yaml @@ -42,7 +42,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.2 - name: Login to DockerHub uses: docker/login-action@v4 diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml index ff5107d5437..baf896e999d 100644 --- a/.github/workflows/docker-publish.yaml +++ b/.github/workflows/docker-publish.yaml @@ -68,7 +68,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.2 - name: Login to DockerHub uses: docker/login-action@v4 diff --git a/.github/workflows/docs-pr.yaml b/.github/workflows/docs-pr.yaml index d462df9a381..7f63c07aabc 100644 --- a/.github/workflows/docs-pr.yaml +++ b/.github/workflows/docs-pr.yaml @@ -58,7 +58,7 @@ jobs: run: aws s3 sync docs/site/ s3://lakefs-docs-pr-previews/prs/oss-pr-${{ github.event.pull_request.number }}/ - name: Comment with preview URL - uses: actions/github-script@v8 + uses: actions/github-script@v9 with: script: | const previewUrl = `https://oss-pr-${context.payload.pull_request.number}.docs-lakefs-preview.io/`; diff --git a/.github/workflows/esti.yaml b/.github/workflows/esti.yaml index 3b56c2b883e..df13f0e3eee 100644 --- a/.github/workflows/esti.yaml +++ b/.github/workflows/esti.yaml @@ -21,7 +21,7 @@ jobs: python-sdk-change: ${{ steps.filter.outputs.python-sdk == 'true' }} steps: - uses: actions/checkout@v6 - - uses: dorny/paths-filter@v4 + - uses: dorny/paths-filter@v4.0.1 id: filter with: filters: | @@ -56,7 +56,7 @@ jobs: run: echo "tag=sha-$(git rev-parse --short HEAD | sed s/^v//g)" >> $GITHUB_OUTPUT - name: Restore cache - uses: actions/cache@v5 + uses: actions/cache@v5.0.4 id: restore-cache with: path: /tmp/generated.tar.gz @@ -106,7 +106,7 @@ jobs: aws-region: us-east-1 - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.2 - name: Checkout uses: actions/checkout@v6 @@ -163,7 +163,7 @@ jobs: mask-aws-account-id: 'false' - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.2 with: mask-password: 'false' @@ -269,7 +269,7 @@ jobs: run: tar -xzvf /tmp/generated.tar.gz - name: Restore cache - uses: actions/cache@v5 + uses: actions/cache@v5.0.4 id: restore-cache with: path: ${{ github.workspace }}/test/spark/metaclient @@ -352,7 +352,7 @@ jobs: aws-region: us-east-1 - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.2 - name: Checkout uses: actions/checkout@v6 @@ -726,7 +726,7 @@ jobs: - name: Check-out code uses: actions/checkout@v6 - name: Restore cache - uses: actions/cache@v5 + uses: actions/cache@v5.0.4 id: restore-cache with: path: ${{ github.workspace }}/test/spark/metaclient @@ -773,7 +773,7 @@ jobs: - name: Check-out code uses: actions/checkout@v6 - name: Restore cache - uses: actions/cache@v5 + uses: actions/cache@v5.0.4 id: restore-cache with: path: ${{ github.workspace }}/test/spark/metaclient @@ -1324,7 +1324,7 @@ jobs: working-directory: webui run: echo "PLAYWRIGHT_VERSION=$(node -e "console.log(require('./package-lock.json').dependencies['@playwright/test'].version)")" >> $GITHUB_ENV - name: Cache Playwright binaries - uses: actions/cache@v5 + uses: actions/cache@v5.0.4 id: playwright-cache with: path: | @@ -1400,7 +1400,7 @@ jobs: working-directory: webui run: echo "PLAYWRIGHT_VERSION=$(node -e "console.log(require('./package-lock.json').dependencies['@playwright/test'].version)")" >> $GITHUB_ENV - name: Cache Playwright binaries - uses: actions/cache@v5 + uses: actions/cache@v5.0.4 id: playwright-cache with: path: | diff --git a/.github/workflows/python-api-client.yaml b/.github/workflows/python-api-client.yaml index c47b163474b..c0860b18551 100644 --- a/.github/workflows/python-api-client.yaml +++ b/.github/workflows/python-api-client.yaml @@ -53,7 +53,7 @@ jobs: id: docver - name: Setup Ruby - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@v1.300.0 with: working-directory: clients/python ruby-version: '3.2' diff --git a/.github/workflows/python-wrapper-unit-tests.yaml b/.github/workflows/python-wrapper-unit-tests.yaml index 74dbc840bcf..ad193c0a558 100644 --- a/.github/workflows/python-wrapper-unit-tests.yaml +++ b/.github/workflows/python-wrapper-unit-tests.yaml @@ -13,7 +13,7 @@ jobs: sdk-change: ${{ steps.filter.outputs.sdk == 'true' }} steps: - uses: actions/checkout@v6 - - uses: dorny/paths-filter@v4 + - uses: dorny/paths-filter@v4.0.1 id: filter with: filters: |