From ad0204f0da5b3103b4edc7edc1bed236ab7c2f8d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 08:43:02 +0000 Subject: [PATCH] chore(deps-actions)(deps): bump the github-actions group across 1 directory with 18 updates Bumps the github-actions group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dallay/common-actions/.github/workflows/cache-maintenance.yml](https://github.com/dallay/common-actions) | `2.2.1` | `2.2.2` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.1` | | [dorny/paths-filter](https://github.com/dorny/paths-filter) | `4.0.1` | `4.0.3` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `6.0.8` | `6.0.10` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` | | [Swatinem/rust-cache](https://github.com/swatinem/rust-cache) | `2.9.1` | `2.9.2` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.36.2` | `4.37.6` | | [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) | `8.1.0` | `8.2.1` | | [dallay/common-actions/.github/workflows/greetings.yml](https://github.com/dallay/common-actions) | `2.2.1` | `2.2.2` | | [dallay/common-actions/.github/workflows/labels-sync.yml](https://github.com/dallay/common-actions) | `2.2.1` | `2.2.2` | | [dallay/common-actions/.github/workflows/pr-labeler.yml](https://github.com/dallay/common-actions) | `2.2.1` | `2.2.2` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `3.0.0` | `3.0.2` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.1.0` | `4.2.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.1.0` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.2.0` | `4.6.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `6.1.0` | `6.2.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.2.0` | `7.3.0` | | [dallay/common-actions/.github/workflows/stale.yml](https://github.com/dallay/common-actions) | `2.2.1` | `2.2.2` | Updates `dallay/common-actions/.github/workflows/cache-maintenance.yml` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/dallay/common-actions/releases) - [Commits](https://github.com/dallay/common-actions/compare/v2.2.1...v2.2.2) Updates `actions/checkout` from 6.0.3 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b4311f1884172cec0e10...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `dorny/paths-filter` from 4.0.1 to 4.0.3 - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](https://github.com/dorny/paths-filter/compare/fbd0ab8f3e69293af611ebaee6363fc25e6d187d...ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d) Updates `pnpm/action-setup` from 6.0.8 to 6.0.10 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/0e279bb959325dab635dd2c09392533439d90093...0977fd99725f1db4007ccb2928dbb4e90d06cc86) Updates `actions/setup-node` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020) Updates `Swatinem/rust-cache` from 2.9.1 to 2.9.2 - [Release notes](https://github.com/swatinem/rust-cache/releases) - [Changelog](https://github.com/Swatinem/rust-cache/blob/master/CHANGELOG.md) - [Commits](https://github.com/swatinem/rust-cache/compare/c19371144df3bb44fab255c43d04cbc2ab54d1c4...6323deb102c322ba6fcbdcafc7e3dddab59af2b6) Updates `github/codeql-action/upload-sarif` from 4.36.2 to 4.37.6 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/8aad20d150bbac5944a9f9d289da16a4b0d87c1e...5595ccaf912efad79be6eef63a5619ff05969be3) Updates `SonarSource/sonarqube-scan-action` from 8.1.0 to 8.2.1 - [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases) - [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/7006c4492b2e0ee0f816d36501671557c97f5995...22918119ff8e1ca75a623e15c8296b6ea4fbe28f) Updates `dallay/common-actions/.github/workflows/greetings.yml` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/dallay/common-actions/releases) - [Commits](https://github.com/dallay/common-actions/compare/v2.2.1...v2.2.2) Updates `dallay/common-actions/.github/workflows/labels-sync.yml` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/dallay/common-actions/releases) - [Commits](https://github.com/dallay/common-actions/compare/v2.2.1...v2.2.2) Updates `dallay/common-actions/.github/workflows/pr-labeler.yml` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/dallay/common-actions/releases) - [Commits](https://github.com/dallay/common-actions/compare/v2.2.1...v2.2.2) Updates `softprops/action-gh-release` from 3.0.0 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...3d0d9888cb7fd7b750713d6e236d1fcb99157228) Updates `docker/setup-qemu-action` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be40b68a1882f3264fb8) Updates `docker/setup-buildx-action` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c) Updates `docker/login-action` from 4.2.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...dbcb813823bdd20940b903addbd779551569679f) Updates `docker/metadata-action` from 6.1.0 to 6.2.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9...dc802804100637a589fabce1cb79ff13a1411302) Updates `docker/build-push-action` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/f9f3042f7e2789586610d6e8b85c8f03e5195baf...53b7df96c91f9c12dcc8a07bcb9ccacbed38856a) Updates `dallay/common-actions/.github/workflows/stale.yml` from 2.2.1 to 2.2.2 - [Release notes](https://github.com/dallay/common-actions/releases) - [Commits](https://github.com/dallay/common-actions/compare/v2.2.1...v2.2.2) --- updated-dependencies: - dependency-name: dallay/common-actions/.github/workflows/cache-maintenance.yml dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dorny/paths-filter dependency-version: 4.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: pnpm/action-setup dependency-version: 6.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: Swatinem/rust-cache dependency-version: 2.9.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: SonarSource/sonarqube-scan-action dependency-version: 8.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dallay/common-actions/.github/workflows/greetings.yml dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: dallay/common-actions/.github/workflows/labels-sync.yml dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: dallay/common-actions/.github/workflows/pr-labeler.yml dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/metadata-action dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: dallay/common-actions/.github/workflows/stale.yml dependency-version: 2.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/cache-cleanup.yml | 2 +- .github/workflows/ci.yml | 96 ++++++++++++++--------------- .github/workflows/greetings.yml | 2 +- .github/workflows/labels-sync.yml | 2 +- .github/workflows/pr-labeler.yml | 2 +- .github/workflows/release.yml | 34 +++++----- .github/workflows/security-deep.yml | 12 ++-- .github/workflows/stale.yml | 2 +- 8 files changed, 76 insertions(+), 76 deletions(-) diff --git a/.github/workflows/cache-cleanup.yml b/.github/workflows/cache-cleanup.yml index 4e1629dd..c3e4d671 100644 --- a/.github/workflows/cache-cleanup.yml +++ b/.github/workflows/cache-cleanup.yml @@ -23,7 +23,7 @@ permissions: jobs: cleanup: name: ๐Ÿงน Clean Caches - uses: dallay/common-actions/.github/workflows/cache-maintenance.yml@v2.2.1 + uses: dallay/common-actions/.github/workflows/cache-maintenance.yml@v2.2.2 with: retention-days: 7 cache-types: ${{ inputs.cache-type || 'all' }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ce6dab37..f81c4395 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -29,10 +29,10 @@ jobs: docker: ${{ steps.filter.outputs.docker }} github: ${{ steps.filter.outputs.github }} steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1 + - uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3 id: filter with: filters: | @@ -63,11 +63,11 @@ jobs: needs: changes if: needs.changes.outputs.frontend == 'true' || needs.changes.outputs.backend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'pnpm' @@ -89,7 +89,7 @@ jobs: needs: changes if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: dtolnay/rust-toolchain@dd44c20b1206a46e25fba8503d5d7c9a33bd355a @@ -104,11 +104,11 @@ jobs: needs: changes if: needs.changes.outputs.docs == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'pnpm' @@ -124,7 +124,7 @@ jobs: needs: [changes, build-dashboard] if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -136,7 +136,7 @@ jobs: with: components: clippy - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Run Clippy run: cargo clippy --workspace --all-targets -- -D warnings @@ -146,7 +146,7 @@ jobs: needs: [changes, build-dashboard] if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -156,7 +156,7 @@ jobs: path: apps/rook/dashboard/dist - uses: dtolnay/rust-toolchain@dd44c20b1206a46e25fba8503d5d7c9a33bd355a - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Check workspace run: cargo check --workspace @@ -167,7 +167,7 @@ jobs: needs: [changes, build-dashboard, fmt, clippy] if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -177,7 +177,7 @@ jobs: path: apps/rook/dashboard/dist - uses: dtolnay/rust-toolchain@dd44c20b1206a46e25fba8503d5d7c9a33bd355a - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Run tests run: cargo test --workspace --all-features @@ -188,11 +188,11 @@ jobs: needs: [changes] if: needs.changes.outputs.frontend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'pnpm' @@ -213,11 +213,11 @@ jobs: needs.test.result != 'failure' && needs.test-frontend.result != 'failure' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'pnpm' @@ -240,7 +240,7 @@ jobs: needs: [changes, build-dashboard] if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -252,7 +252,7 @@ jobs: with: components: rustfmt, clippy - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Build docs run: cargo doc --workspace --no-deps --document-private-items env: @@ -265,7 +265,7 @@ jobs: needs: [changes, build-dashboard] if: needs.changes.outputs.backend == 'true' || needs.changes.outputs.github == 'true' steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -275,7 +275,7 @@ jobs: path: apps/rook/dashboard/dist - uses: dtolnay/rust-toolchain@dd44c20b1206a46e25fba8503d5d7c9a33bd355a - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Install cargo-audit run: cargo install cargo-audit - name: Run cargo audit @@ -291,7 +291,7 @@ jobs: contents: read security-events: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Create reports directory @@ -310,7 +310,7 @@ jobs: exit-code: '1' - name: Upload Trivy SARIF if: always() - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 with: sarif_file: reports/trivy/trivy-pr.sarif category: trivy-fs @@ -326,7 +326,7 @@ jobs: contents: read security-events: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 50 persist-credentials: false @@ -346,7 +346,7 @@ jobs: --exit-code 1 - name: Upload Gitleaks SARIF if: always() - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 with: sarif_file: reports/gitleaks/gitleaks-pr.sarif category: gitleaks-pr @@ -361,7 +361,7 @@ jobs: contents: read security-events: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Install Semgrep CLI @@ -387,7 +387,7 @@ jobs: fi - name: Upload Semgrep SARIF if: always() - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 with: sarif_file: reports/semgrep/semgrep-pr.sarif category: semgrep-pr @@ -402,7 +402,7 @@ jobs: contents: read statuses: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -412,7 +412,7 @@ jobs: path: apps/rook/dashboard/dist - uses: dtolnay/rust-toolchain@dd44c20b1206a46e25fba8503d5d7c9a33bd355a - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Install cargo-llvm-cov run: cargo install cargo-llvm-cov - name: Generate coverage report @@ -437,11 +437,11 @@ jobs: contents: read statuses: write steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'pnpm' @@ -469,11 +469,11 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 22 cache: 'pnpm' @@ -485,7 +485,7 @@ jobs: run: pnpm exec vitest run --coverage --coverage.reporter=lcov --coverage.reportsDirectory=coverage - name: SonarQube Scan if: env.SONAR_TOKEN != '' - uses: SonarSource/sonarqube-scan-action@7006c4492b2e0ee0f816d36501671557c97f5995 # v8.1.0 + uses: SonarSource/sonarqube-scan-action@22918119ff8e1ca75a623e15c8296b6ea4fbe28f # v8.2.1 env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} @@ -503,7 +503,7 @@ jobs: target: - x86_64-unknown-linux-gnu steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -515,7 +515,7 @@ jobs: with: targets: ${{ matrix.target }} - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Build for ${{ matrix.target }} run: cargo build -p rook --release --target ${{ matrix.target }} @@ -533,7 +533,7 @@ jobs: - x86_64-pc-windows-msvc - aarch64-pc-windows-msvc steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -545,7 +545,7 @@ jobs: with: targets: ${{ matrix.target }} - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Build for ${{ matrix.target }} run: cargo build -p rook --release --target ${{ matrix.target }} @@ -563,7 +563,7 @@ jobs: - x86_64-apple-darwin - aarch64-apple-darwin steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -575,7 +575,7 @@ jobs: with: targets: ${{ matrix.target }} - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Build for ${{ matrix.target }} run: cargo build -p rook --release --target ${{ matrix.target }} @@ -592,7 +592,7 @@ jobs: matrix: os: [macos-latest, windows-latest] steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Download dashboard dist @@ -604,7 +604,7 @@ jobs: with: components: clippy - name: Cache cargo - uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 + uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 - name: Run tests run: cargo test --workspace --all-features - name: Run clippy diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml index e1e52c49..cff53fa4 100644 --- a/.github/workflows/greetings.yml +++ b/.github/workflows/greetings.yml @@ -13,5 +13,5 @@ permissions: jobs: greeting: name: ๐Ÿ‘‹ Welcome Contributor - uses: dallay/common-actions/.github/workflows/greetings.yml@v2.2.1 + uses: dallay/common-actions/.github/workflows/greetings.yml@v2.2.2 secrets: inherit \ No newline at end of file diff --git a/.github/workflows/labels-sync.yml b/.github/workflows/labels-sync.yml index 32bf019c..b9fbe2f9 100644 --- a/.github/workflows/labels-sync.yml +++ b/.github/workflows/labels-sync.yml @@ -12,7 +12,7 @@ permissions: jobs: sync: name: ๐Ÿท๏ธ Sync Labels - uses: dallay/common-actions/.github/workflows/labels-sync.yml@v2.2.1 + uses: dallay/common-actions/.github/workflows/labels-sync.yml@v2.2.2 with: labels-file: '.github/labels.yml' secrets: inherit \ No newline at end of file diff --git a/.github/workflows/pr-labeler.yml b/.github/workflows/pr-labeler.yml index 7db9c62c..e171189b 100644 --- a/.github/workflows/pr-labeler.yml +++ b/.github/workflows/pr-labeler.yml @@ -11,7 +11,7 @@ permissions: jobs: label: name: ๐Ÿท๏ธ Label PR - uses: dallay/common-actions/.github/workflows/pr-labeler.yml@v2.2.1 + uses: dallay/common-actions/.github/workflows/pr-labeler.yml@v2.2.2 with: sync-labels: true configuration-path: '.github/labeler.yml' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3f590d8a..8ac0a364 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -42,7 +42,7 @@ jobs: private-key: ${{ secrets.APP_PRIVATE_KEY }} - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: fetch-depth: 0 token: ${{ steps.app-token.outputs.token }} @@ -94,7 +94,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ needs.release-please.outputs.release_git_tag }} @@ -207,7 +207,7 @@ jobs: run: ls -la artifacts/ - name: Upload to GitHub Release - uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0 + uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2 with: tag_name: ${{ needs.release-please.outputs.release_git_tag }} files: artifacts/* @@ -255,7 +255,7 @@ jobs: arch: arm64 steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ needs.release-please.outputs.release_git_tag }} @@ -266,13 +266,13 @@ jobs: path: artifacts - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24.16" registry-url: "https://registry.npmjs.org" - name: Setup pnpm - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 with: version: 11 @@ -382,18 +382,18 @@ jobs: id-token: write steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ needs.release-please.outputs.release_git_tag }} - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24.16" registry-url: "https://registry.npmjs.org" - name: Setup pnpm - uses: pnpm/action-setup@0e279bb959325dab635dd2c09392533439d90093 # v6.0.8 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 with: version: 11 @@ -444,7 +444,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ needs.release-please.outputs.release_git_tag }} @@ -470,24 +470,24 @@ jobs: packages: write steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: ref: ${{ needs.release-please.outputs.release_git_tag }} - name: Set up QEMU - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Login to Docker Hub - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Login to GitHub Container Registry - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.repository_owner }} @@ -521,7 +521,7 @@ jobs: - name: Extract metadata for Docker id: meta - uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0 + uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0 with: images: | ${{ secrets.DOCKERHUB_USERNAME }}/rook @@ -533,7 +533,7 @@ jobs: type=raw,value=latest - name: Build and push multi-platform Docker image - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: docker-context push: true diff --git a/.github/workflows/security-deep.yml b/.github/workflows/security-deep.yml index 4c0bea40..d1968308 100644 --- a/.github/workflows/security-deep.yml +++ b/.github/workflows/security-deep.yml @@ -25,7 +25,7 @@ jobs: security-events: write steps: - name: Checkout code with full history - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: fetch-depth: 0 persist-credentials: false @@ -45,7 +45,7 @@ jobs: --exit-code 0 - name: Upload Gitleaks SARIF if: always() - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 with: sarif_file: reports/gitleaks/gitleaks-history.sarif category: gitleaks-history @@ -73,7 +73,7 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false - name: Install Semgrep CLI @@ -89,7 +89,7 @@ jobs: --output reports/semgrep/semgrep-full.sarif - name: Upload Semgrep SARIF if: always() - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 with: sarif_file: reports/semgrep/semgrep-full.sarif category: semgrep-full @@ -117,7 +117,7 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 with: persist-credentials: false - name: Create Trivy report directory @@ -147,7 +147,7 @@ jobs: - name: Upload Trivy SARIF if: steps.verify-sarif.outputs.found == 'true' - uses: github/codeql-action/upload-sarif@8aad20d150bbac5944a9f9d289da16a4b0d87c1e + uses: github/codeql-action/upload-sarif@5595ccaf912efad79be6eef63a5619ff05969be3 with: sarif_file: reports/trivy/trivy-full.sarif category: trivy-full diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 9d3ec75b..af8f5243 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -24,7 +24,7 @@ permissions: jobs: stale: name: ๐Ÿ• Close Stale Items - uses: dallay/common-actions/.github/workflows/stale.yml@v2.2.1 + uses: dallay/common-actions/.github/workflows/stale.yml@v2.2.2 with: days-before-stale: ${{ inputs.days-before-stale || 120 }} days-before-close: ${{ inputs.days-before-close || 60 }}