Skip to content

[skip-release] Update github-actions (major) #5

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[skip-release] Update github-actions (major) #5

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/actionlint.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ jobs:
persist-credentials: false

- name: Set up Go
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
with:
go-version: "1.26.x"

Expand Down
38 changes: 19 additions & 19 deletions .github/workflows/build-push.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -214,7 +214,7 @@ jobs:
fi
} >> "$GITHUB_OUTPUT"

- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
ref: ${{ inputs.ref }}
persist-credentials: false
Expand Down Expand Up @@ -257,7 +257,7 @@ jobs:
echo "file=$dockerfile"
} >> "$GITHUB_OUTPUT"

- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
repository: ${{ fromJSON(toJSON(job)).workflow_repository }}
ref: ${{ fromJSON(toJSON(job)).workflow_sha }}
Expand Down Expand Up @@ -311,7 +311,7 @@ jobs:

- name: GHCR Login
if: steps.registry.outputs.primary-kind == 'ghcr'
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
registry: ghcr.io
username: ${{ github.actor }}
Expand All @@ -331,25 +331,25 @@ jobs:

- name: Primary GAR Login
if: steps.registry.outputs.primary-kind == 'gar'
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
registry: ${{ steps.registry.outputs.primary-host }}
username: oauth2accesstoken
password: ${{ steps.auth-primary.outputs.access_token }}

- name: Docker Hub Login
if: steps.registry.outputs.primary-kind == 'dockerhub'
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}

- uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
- uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4

- name: build+push
id: push-direct
if: ${{ inputs.additional-gar-registry == '' && inputs.expected-main-sha == '' && steps.registry.outputs.has-aliases != 'true' }}
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
with:
context: ${{ steps.paths.outputs.context }}
file: ${{ steps.paths.outputs.file }}
Expand All @@ -365,7 +365,7 @@ jobs:

- name: Build native image for verified publication
if: ${{ inputs.additional-gar-registry != '' || inputs.expected-main-sha != '' || steps.registry.outputs.has-aliases == 'true' }}
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7
with:
context: ${{ steps.paths.outputs.context }}
file: ${{ steps.paths.outputs.file }}
Expand Down Expand Up @@ -406,7 +406,7 @@ jobs:

- name: Additional GAR Login
if: inputs.additional-gar-registry != ''
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
registry: ${{ steps.registry.outputs.additional-host }}
username: oauth2accesstoken
Expand Down Expand Up @@ -467,7 +467,7 @@ jobs:
done

- name: Preserve platform digests
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: ${{ steps.metadata.outputs.artifact-name }}-${{ steps.vars.outputs.platform }}
path: ${{ runner.temp }}/build-digests
Expand Down Expand Up @@ -510,7 +510,7 @@ jobs:

- name: GHCR Login
if: steps.registry.outputs.primary-kind == 'ghcr'
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
registry: ghcr.io
username: ${{ github.actor }}
Expand All @@ -529,15 +529,15 @@ jobs:

- name: Primary GAR Login
if: steps.registry.outputs.primary-kind == 'gar'
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
registry: ${{ steps.registry.outputs.primary-host }}
username: oauth2accesstoken
password: ${{ steps.auth-primary.outputs.access_token }}

- name: Docker Hub Login
if: steps.registry.outputs.primary-kind == 'dockerhub'
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
username: ${{ secrets.DOCKERHUB_USER }}
password: ${{ secrets.DOCKERHUB_PASSWORD }}
Expand All @@ -554,13 +554,13 @@ jobs:

- name: Additional GAR Login
if: inputs.additional-gar-registry != ''
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
with:
registry: ${{ steps.registry.outputs.additional-host }}
username: oauth2accesstoken
password: ${{ steps.auth-primary.outputs.access_token || steps.auth-additional.outputs.access_token }}

- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
repository: ${{ fromJSON(toJSON(job)).workflow_repository }}
ref: ${{ fromJSON(toJSON(job)).workflow_sha }}
Expand Down Expand Up @@ -607,7 +607,7 @@ jobs:
fi
} >> "$GITHUB_OUTPUT"

- uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
- uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4

- name: Install Cosign
if: inputs.sign
Expand Down Expand Up @@ -636,7 +636,7 @@ jobs:
printf '%s\n' "$install_dir" >> "$GITHUB_PATH"

- name: Restore platform digests
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
pattern: ${{ steps.metadata.outputs.artifact-name }}-*
path: ${{ runner.temp }}/build-digests
Expand Down Expand Up @@ -766,7 +766,7 @@ jobs:
- name: Preserve verified publication record
id: publication-record
if: inputs.sign
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: publication-record-${{ steps.metadata.outputs.artifact-name }}
path: ${{ runner.temp }}/publication-record.json
Expand All @@ -785,7 +785,7 @@ jobs:
# not turn an already verified publication into a failed release rerun.
continue-on-error: true
steps:
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
if: needs.merge.result == 'success'
with:
repository: ${{ fromJSON(toJSON(job)).workflow_repository }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/bump-release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@ jobs:
runs-on: ubuntu-24.04
steps:
- name: Checkout
uses: "actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8" # v6
uses: "actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1" # v7
with:
fetch-depth: 0

Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/sitectl-create-smoke-test.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -136,7 +136,7 @@ jobs:
GITHUB_ACTIONS: "true"
steps:
- name: Checkout caller repository
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
path: ${{ inputs.checkout-path }}

Expand Down Expand Up @@ -165,7 +165,7 @@ jobs:

- name: Checkout local plugin source
if: ${{ inputs.local-plugin-repository != '' }}
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
repository: ${{ inputs.local-plugin-repository }}
ref: ${{ inputs.local-plugin-ref }}
Expand Down Expand Up @@ -341,14 +341,14 @@ jobs:

- name: Checkout sitectl source
if: ${{ inputs.sitectl-repository != '' }}
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
repository: ${{ inputs.sitectl-repository }}
ref: ${{ inputs.sitectl-ref }}
path: ${{ inputs.sitectl-path }}

- name: Check out resolved shared workflow bundle
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
repository: ${{ fromJSON(toJSON(job)).workflow_repository }}
ref: ${{ fromJSON(toJSON(job)).workflow_sha }}
Expand All @@ -366,7 +366,7 @@ jobs:

- name: Set up Go
if: ${{ inputs.local-plugin-path != '' || inputs.sitectl-repository != '' }}
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
with:
go-version: ${{ inputs.go-version }}
cache-dependency-path: ${{ steps.smoke.outputs.go-cache-dependency-path }}
Expand Down Expand Up @@ -597,7 +597,7 @@ jobs:

- name: Upload docker diagnostics
if: ${{ failure() && steps.smoke.outcome == 'success' }}
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: ${{ steps.smoke.outputs.diagnostics-artifact-name }}
path: ${{ steps.smoke.outputs.diagnostics-dir }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/sitectl-plugin-goreleaser.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -155,7 +155,7 @@ jobs:
} >> "$GITHUB_OUTPUT"

- name: Checkout release source
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
fetch-depth: 0
ref: refs/tags/${{ steps.validate_full.outputs.version }}
Expand Down Expand Up @@ -203,12 +203,12 @@ jobs:
fi

- name: Set up Go
uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7
with:
go-version: ${{ inputs.go-version }}

- name: Publish release assets and Homebrew formula
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6
uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7
with:
distribution: goreleaser
version: v2.17.0
Expand Down Expand Up @@ -302,7 +302,7 @@ jobs:
fi

- name: Checkout exact package publisher
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
with:
repository: libops/terraform-linux-packages
ref: 3864ea410d49df5b0ee0ddcf2b2d18243167edda # main
Expand Down
Loading