From 7e3d06ff12ef6f77bee31b7d2e606f6eebbbddeb Mon Sep 17 00:00:00 2001 From: "cluster-stack-bot[bot]" <143188378+cluster-stack-bot[bot]@users.noreply.github.com> Date: Fri, 24 Jan 2025 11:19:42 +0000 Subject: [PATCH] :seedling: Update github-actions group | datasource | package | from | to | | ----------- | ------------------------ | ------- | ------- | | github-tags | actions/cache | v4.1.2 | v4.2.0 | | github-tags | actions/setup-go | v5.1.0 | v5.3.0 | | github-tags | actions/upload-artifact | v4.4.3 | v4.6.0 | | github-tags | docker/build-push-action | v6.10.0 | v6.13.0 | --- .builder-image-version.txt | 2 +- .github/actions/setup-go/action.yaml | 6 +++--- .github/workflows/build.yml | 14 +++++++------- .github/workflows/pr-lint.yml | 2 +- .github/workflows/release.yml | 10 +++++----- .../workflows/schedule-cache-cleaner-cso-image.yml | 2 +- .github/workflows/schedule-scan-image.yml | 2 +- .github/workflows/schedule-update-bot.yaml | 2 +- 8 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.builder-image-version.txt b/.builder-image-version.txt index 5166d134..93325dde 100644 --- a/.builder-image-version.txt +++ b/.builder-image-version.txt @@ -1 +1 @@ -1.1.26 +1.1.27 diff --git a/.github/actions/setup-go/action.yaml b/.github/actions/setup-go/action.yaml index 453ac7f4..65fa6522 100644 --- a/.github/actions/setup-go/action.yaml +++ b/.github/actions/setup-go/action.yaml @@ -4,7 +4,7 @@ runs: using: "composite" steps: - name: Install go - uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0 + uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0 with: go-version: "1.22" go-version-file: "go.mod" @@ -16,14 +16,14 @@ runs: echo "::set-output name=go-build::$(go env GOCACHE)" echo "::set-output name=go-mod::$(go env GOMODCACHE)" - name: Go Mod Cache - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4 + uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4 with: path: ${{ steps.go-cache-paths.outputs.go-mod }} key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }} restore-keys: | ${{ runner.os }}-go-mod- - name: Go Build Cache - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4 + uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4 with: path: ${{ steps.go-cache-paths.outputs.go-build }} key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }} diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 5cf0f1ba..4583be87 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -33,9 +33,9 @@ jobs: fetch-depth: 0 - uses: ./.github/actions/setup-go - name: Set up QEMU - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 + uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Generate metadata cso id: metacso @@ -65,7 +65,7 @@ jobs: # Load Golang cache build from GitHub - name: Load cso Golang cache build from GitHub - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 + uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 id: cache with: path: /tmp/.cache/cso @@ -83,7 +83,7 @@ jobs: # Import GitHub's cache build to docker cache - name: Copy cso Golang cache to docker cache - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0 + uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0 with: provenance: false context: /tmp/.cache/cso @@ -93,7 +93,7 @@ jobs: target: import-cache - name: Build and push cso image - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6 + uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6 id: docker_build_release_cso with: provenance: false @@ -120,7 +120,7 @@ jobs: # Upload artifact digests - name: Upload artifact digests - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: image-digest path: image-digest @@ -129,7 +129,7 @@ jobs: # Store docker's golang's cache build locally only on the main branch - name: Store cso Golang cache build locally if: ${{ steps.cache.outputs.cache-hit != 'true' }} - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0 + uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0 with: provenance: false context: . diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml index 1bbd1104..fd13f862 100644 --- a/.github/workflows/pr-lint.yml +++ b/.github/workflows/pr-lint.yml @@ -21,7 +21,7 @@ jobs: if: github.event_name != 'pull_request' || !github.event.pull_request.draft runs-on: ubuntu-latest container: - image: ghcr.io/sovereigncloudstack/cso-builder:1.1.26 + image: ghcr.io/sovereigncloudstack/cso-builder:1.1.27 credentials: username: ${{ github.actor }} password: ${{ secrets.github_token }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 044f435d..bb48c469 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -23,9 +23,9 @@ jobs: fetch-depth: 0 - uses: ./.github/actions/setup-go - name: Set up QEMU - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 + uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 + uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3 - name: Generate metadata cso id: metacso @@ -61,7 +61,7 @@ jobs: echo 'EOF' >> $GITHUB_ENV - name: Build and push cso image - uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6 + uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6 id: docker_build_release_cso with: provenance: false @@ -106,7 +106,7 @@ jobs: # Upload artifact digests - name: Upload artifact digests - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: image-digest cso path: image-digest @@ -155,7 +155,7 @@ jobs: make release-notes - name: Release - uses: softprops/action-gh-release@e7a8f85e1c67a31e6ed99a94b41bd0b71bbee6b8 # v2 + uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2 with: draft: true files: out/* diff --git a/.github/workflows/schedule-cache-cleaner-cso-image.yml b/.github/workflows/schedule-cache-cleaner-cso-image.yml index ec4223c4..e579c42d 100644 --- a/.github/workflows/schedule-cache-cleaner-cso-image.yml +++ b/.github/workflows/schedule-cache-cleaner-cso-image.yml @@ -15,7 +15,7 @@ jobs: steps: # Load Golang cache build from GitHub - name: Load cso Golang cache build from GitHub - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.1.2 + uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 id: cache with: path: /tmp/.cache/cso diff --git a/.github/workflows/schedule-scan-image.yml b/.github/workflows/schedule-scan-image.yml index bd0be6de..1ddd930b 100644 --- a/.github/workflows/schedule-scan-image.yml +++ b/.github/workflows/schedule-scan-image.yml @@ -9,7 +9,7 @@ jobs: name: Trivy runs-on: ubuntu-latest container: - image: ghcr.io/sovereigncloudstack/cso-builder:1.1.26 + image: ghcr.io/sovereigncloudstack/cso-builder:1.1.27 credentials: username: ${{ github.actor }} password: ${{ secrets.github_token }} diff --git a/.github/workflows/schedule-update-bot.yaml b/.github/workflows/schedule-update-bot.yaml index a69e3483..a896fdbd 100644 --- a/.github/workflows/schedule-update-bot.yaml +++ b/.github/workflows/schedule-update-bot.yaml @@ -33,7 +33,7 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Generate Token - uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1 + uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1 id: generate-token with: app-id: ${{ secrets.SCS_APP_ID }}