From 80a1fadc90848b0dbf3cf0cd1773b262ed441be8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 23 Oct 2026 17:51:37 +0000 Subject: [PATCH] chore(deps): bump the actions group with 21 updates Bumps the actions group with 21 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.1.1` | `7.0.1` | | [haskell-actions/setup](https://github.com/haskell-actions/setup) | `2.7.5` | `2.12.1` | | [actions/cache](https://github.com/actions/cache) | `4.3.0` | `6.1.0` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `5.0.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.1` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.37.9` | `4.39.0` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.37.9` | `4.39.0` | | [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.2.0` | `3.1.0` | | [slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml](https://github.com/slsa-framework/slsa-github-generator) | `1.4.0` | `2.1.0` | | [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch) | `3.0.0` | `4.0.1` | | [KSXGitHub/github-actions-deploy-aur](https://github.com/ksxgithub/github-actions-deploy-aur) | `3.0.1` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `3.3.0` | `4.6.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `5.5.1` | `6.2.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6.9.0` | `7.4.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2.4.0` | `4.2.2` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.8` | `8.0.2` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.2.1` | `3.0.3` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.0.2` | `7.1.0` | | [denoland/setup-deno](https://github.com/denoland/setup-deno) | `1.5.2` | `2.0.5` | Updates `actions/checkout` from 4.1.1 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v4.1.1...v7.0.1) Updates `haskell-actions/setup` from 2.7.5 to 2.12.1 - [Release notes](https://github.com/haskell-actions/setup/releases) - [Commits](https://github.com/haskell-actions/setup/compare/v2.7.5...v2.12.1) Updates `actions/cache` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v4.3.0...v6.1.0) Updates `actions/configure-pages` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](https://github.com/actions/configure-pages/compare/v5.0.0...v6.0.0) Updates `actions/upload-pages-artifact` from 3.0.1 to 5.0.0 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](https://github.com/actions/upload-pages-artifact/compare/v3.0.1...v5.0.0) Updates `actions/deploy-pages` from 4.0.5 to 5.0.1 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](https://github.com/actions/deploy-pages/compare/v4.0.5...v5.0.1) Updates `github/codeql-action/init` from 4.37.9 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) Updates `github/codeql-action/analyze` from 4.37.9 to 4.39.0 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cdf488f595d80d6e07e03d4674febd5ab45fa938...6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee) Updates `dependabot/fetch-metadata` from 2.2.0 to 3.1.0 - [Release notes](https://github.com/dependabot/fetch-metadata/releases) - [Commits](https://github.com/dependabot/fetch-metadata/compare/v2.2.0...v3.1.0) Updates `slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml` from 1.4.0 to 2.1.0 - [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases) - [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md) - [Commits](https://github.com/slsa-framework/slsa-github-generator/compare/68bad40844440577b33778c9f29077a3388838e9...f7dd8c54c2067bafc12ca7a55595d5ee9b75204a) Updates `peter-evans/repository-dispatch` from 3.0.0 to 4.0.1 - [Release notes](https://github.com/peter-evans/repository-dispatch/releases) - [Commits](https://github.com/peter-evans/repository-dispatch/compare/v3.0.0...v4.0.1) Updates `KSXGitHub/github-actions-deploy-aur` from 3.0.1 to 4.2.0 - [Release notes](https://github.com/ksxgithub/github-actions-deploy-aur/releases) - [Commits](https://github.com/ksxgithub/github-actions-deploy-aur/compare/v3.0.1...v4.2.0) Updates `docker/login-action` from 3.3.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3.3.0...v4.6.0) Updates `docker/metadata-action` from 5.5.1 to 6.2.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/v5.5.1...v6.2.0) Updates `docker/build-push-action` from 6.9.0 to 7.4.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v6.9.0...v7.4.0) Updates `actions/attest-build-provenance` from 2.4.0 to 4.2.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v2.4.0...v4.2.2) Updates `actions/upload-artifact` from 4.6.2 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4.6.2...v7.0.2) Updates `actions/download-artifact` from 4.1.8 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4.1.8...v8.0.2) Updates `softprops/action-gh-release` from 2.2.1 to 3.0.3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v2.2.1...v3.0.3) Updates `actions/setup-node` from 4.0.2 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4.0.2...v7.1.0) Updates `denoland/setup-deno` from 1.5.2 to 2.0.5 - [Release notes](https://github.com/denoland/setup-deno/releases) - [Commits](https://github.com/denoland/setup-deno/compare/v1.5.2...v2.0.5) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: haskell-actions/setup dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/configure-pages dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-pages-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/deploy-pages dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: dependabot/fetch-metadata dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml dependency-version: 2.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: peter-evans/repository-dispatch dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: KSXGitHub/github-actions-deploy-aur dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/metadata-action dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/build-push-action dependency-version: 7.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: denoland/setup-deno dependency-version: 2.0.5 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/actions.lock | 307 +++++++----------- .github/workflows/boj-build.yml | 2 +- .github/workflows/cargo-audit.yml | 4 +- .github/workflows/casket-pages.yml | 14 +- .github/workflows/codeql.yml | 4 +- .github/workflows/dependabot-automerge.yml | 2 +- .github/workflows/dogfood-gate.yml | 12 +- .../generator-generic-ossf-slsa3-publish.yml | 4 +- .github/workflows/ghcr-publish.yml | 2 +- .github/workflows/instant-sync.yml | 2 +- .github/workflows/pages.yml | 8 +- .github/workflows/publish-aur.yml | 4 +- .github/workflows/publish-chocolatey.yml | 2 +- .github/workflows/publish-container.yml | 10 +- .github/workflows/publish-copr.yml | 2 +- .github/workflows/publish-debian-ppa.yml | 2 +- .github/workflows/publish-flatpak.yml | 2 +- .github/workflows/publish-homebrew.yml | 2 +- .github/workflows/publish-macports.yml | 2 +- .github/workflows/publish-nixpkgs.yml | 2 +- .github/workflows/publish-obs.yml | 2 +- .github/workflows/publish-packages.yml | 22 +- .github/workflows/publish-scoop.yml | 2 +- .github/workflows/publish-winget.yml | 2 +- .github/workflows/release.yml | 20 +- .github/workflows/stress-test.yml | 2 +- .github/workflows/workflow-linter.yml | 2 +- .github/workflows/zig-ffi.yml | 12 +- 28 files changed, 186 insertions(+), 267 deletions(-) mode change 100755 => 100644 .github/workflows/pages.yml diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 4627463..73e2b27 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -1,126 +1,120 @@ # This file is machine-generated by `gh actions-lock`. # Do not edit by hand; run `gh actions-lock` to update. # Docs: https://gh.io/actions-lockfile -version: 'v0.0.2' +version: 'v0.0.3' workflows: '.github/workflows/boj-build.yml': - - 'actions/checkout@v4.1.7' + - 'actions/checkout@v7.0.1' '.github/workflows/cargo-audit.yml': - - 'actions/checkout@v4.1.1' + - 'actions/checkout@v7.0.1' '.github/workflows/casket-pages.yml': - - 'actions/cache@v4.3.0' - - 'actions/checkout@v4.1.1' - - 'actions/configure-pages@v5.0.0' - - 'actions/deploy-pages@v4.0.5' - - 'actions/upload-pages-artifact@v3.0.1' - - 'haskell-actions/setup@v2.7.5' + - 'actions/cache@v6.1.0' + - 'actions/checkout@v7.0.1' + - 'actions/configure-pages@v6.0.0' + - 'actions/deploy-pages@v5.0.1' + - 'actions/upload-pages-artifact@v5.0.0' + - 'haskell-actions/setup@v2.12.1' '.github/workflows/cflite_batch.yml': - 'google/clusterfuzzlite@v1' '.github/workflows/cflite_pr.yml': - 'google/clusterfuzzlite@v1' '.github/workflows/codeql.yml': - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1' - - 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938' + - 'github/codeql-action@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee' '.github/workflows/dependabot-automerge.yml': - - 'dependabot/fetch-metadata@v2.2.0' + - 'dependabot/fetch-metadata@v3.1.0' '.github/workflows/dogfood-gate.yml': - - 'actions/checkout@v4.3.1' + - 'actions/checkout@v7.0.1' - 'hyperpolymath/deed-ecosystem@main' - 'hyperpolymath/k9-ecosystem@main' '.github/workflows/generator-generic-ossf-slsa3-publish.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/ghcr-publish.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/governance.yml': [] '.github/workflows/hypatia-scan.yml': [] '.github/workflows/instant-sync.yml': - - 'peter-evans/repository-dispatch@v3.0.0' + - 'peter-evans/repository-dispatch@v4.0.1' '.github/workflows/label-triage.yml': [] '.github/workflows/labels.yml': [] '.github/workflows/mirror.yml': [] '.github/workflows/pages.yml': - - 'actions/checkout@v4.4.0' - - 'actions/deploy-pages@v4.0.5' - - 'actions/upload-pages-artifact@v3.0.1' + - 'actions/checkout@v7.0.1' + - 'actions/deploy-pages@v5.0.1' + - 'actions/upload-pages-artifact@v5.0.0' '.github/workflows/publish-aur.yml': - - 'actions/checkout@v6.0.1' - - 'ksxgithub/github-actions-deploy-aur@v3.0.1' + - 'actions/checkout@v7.0.1' + - 'ksxgithub/github-actions-deploy-aur@v4.2.0' '.github/workflows/publish-chocolatey.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-container.yml': - - 'actions/attest-build-provenance@v2.4.0' - - 'actions/checkout@v6.0.1' - - 'docker/build-push-action@v6.9.0' - - 'docker/login-action@v3.3.0' - - 'docker/metadata-action@v5.5.1' + - 'actions/attest-build-provenance@v4.2.2' + - 'actions/checkout@v7.0.1' + - 'docker/build-push-action@v7.4.0' + - 'docker/login-action@v4.6.0' + - 'docker/metadata-action@v6.2.0' '.github/workflows/publish-copr.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-debian-ppa.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-flatpak.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-homebrew.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-macports.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-nixpkgs.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-obs.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-packages.yml': - - 'peter-evans/repository-dispatch@v3.0.0' + - 'peter-evans/repository-dispatch@v4.0.1' '.github/workflows/publish-scoop.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/publish-winget.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' '.github/workflows/push-email-notify.yml': - 'dawidd6/action-send-mail@v3.12.0' '.github/workflows/release.yml': - - 'actions/attest-build-provenance@v2.4.0' - - 'actions/checkout@v6.0.1' - - 'actions/download-artifact@v4.1.8' - - 'actions/setup-node@v4.0.2' - - 'actions/upload-artifact@v4.6.2' + - 'actions/attest-build-provenance@v4.2.2' + - 'actions/checkout@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'actions/setup-node@v7.1.0' + - 'actions/upload-artifact@v7.0.2' - 'dtolnay/rust-toolchain@v1' - 'goto-bus-stop/setup-zig@v2.2.1' - - 'softprops/action-gh-release@v2.2.1' + - 'softprops/action-gh-release@v3.0.3' '.github/workflows/rust-ci.yml': [] '.github/workflows/scorecard.yml': [] '.github/workflows/secret-scanner.yml': [] '.github/workflows/stress-test.yml': - - 'actions/checkout@v6.0.1' + - 'actions/checkout@v7.0.1' - 'dtolnay/rust-toolchain@v1' '.github/workflows/workflow-linter.yml': - - 'actions/checkout@v4.1.1' + - 'actions/checkout@v7.0.1' '.github/workflows/zig-ffi.yml': - - 'actions/cache@v4.3.0' - - 'actions/checkout@v6.0.1' - - 'actions/upload-artifact@v4.6.2' - - 'denoland/setup-deno@v1.5.2' + - 'actions/cache@v6.1.0' + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + - 'denoland/setup-deno@v2.0.5' - 'dtolnay/rust-toolchain@v1' - 'goto-bus-stop/setup-zig@v2.2.1' dependencies: - 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01': - ref: 'predicate@1.1.5' - commit: 'sha1-1176ef556905f349f669722abf30bce1a6e16e01' - owner_id: 44036562 - repo_id: 760702757 - 'actions/attest-build-provenance@v2.4.0': - ref: 'v2.4.0' - commit: 'sha1-e8998f949152b193b063cb0ec769d69d929409be' + 'actions/attest-build-provenance@v4.2.2': + ref: 'v4.2.2' + commit: 'sha1-4d101475d8b20a2381f78447822ac1eab6504dd8' owner_id: 44036562 repo_id: 760702757 uses: - - 'actions/attest-build-provenance@1176ef556905f349f669722abf30bce1a6e16e01' - - 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc' - 'actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc': - ref: 'v2.4.0' - commit: 'sha1-ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc' + - 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d' + 'actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d': + ref: 'v4.2.1' + commit: 'sha1-508db95dd578ae2727ebd6217d5ba78e4fbda05d' owner_id: 44036562 repo_id: 760701061 - 'actions/cache@v4.3.0': - ref: 'v4.3.0' - commit: 'sha1-0057852bfaa89a56745cba8c7296529d2fc39830' + 'actions/cache@v6.1.0': + ref: 'v6.1.0' + commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' owner_id: 44036562 repo_id: 215566462 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1': @@ -128,101 +122,76 @@ dependencies: commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' owner_id: 44036562 repo_id: 197814629 - 'actions/checkout@v4.1.1': - ref: 'v4.1.1' - commit: 'sha1-b4ffde65f46336ab88eb53be808477a3936bae11' - owner_id: 44036562 - repo_id: 197814629 - 'actions/checkout@v4.1.7': - ref: 'v4.1.7' - commit: 'sha1-692973e3d937129bcbf40652eb9f2f61becf3332' - owner_id: 44036562 - repo_id: 197814629 - 'actions/checkout@v4.3.1': - ref: 'v4.3.1' - commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5' - owner_id: 44036562 - repo_id: 197814629 - 'actions/checkout@v4.4.0': - ref: 'v4.4.0' - commit: 'sha1-11d5960a326750d5838078e36cf38b85af677262' - owner_id: 44036562 - repo_id: 197814629 - 'actions/checkout@v6.0.1': - ref: 'v6.0.1' - commit: 'sha1-8e8c483db84b4bee98b60c0593521ed34d9990e8' + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' owner_id: 44036562 repo_id: 197814629 - 'actions/configure-pages@v5.0.0': - ref: 'v5.0.0' - commit: 'sha1-983d7736d9b0ae728b81ab479565c72886d7745b' + 'actions/configure-pages@v6.0.0': + ref: 'v6.0.0' + commit: 'sha1-45bfe0192ca1faeb007ade9deae92b16b8254a0d' owner_id: 44036562 repo_id: 513659658 - 'actions/deploy-pages@v4.0.5': - ref: 'v4.0.5' - commit: 'sha1-d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e' + 'actions/deploy-pages@v5.0.1': + ref: 'v5.0.1' + commit: 'sha1-368f82528645a54fb793d4d04e342629a3f51346' owner_id: 44036562 repo_id: 438112499 - 'actions/download-artifact@v4.1.8': - ref: 'v4.1.8' - commit: 'sha1-fa0a91b85d4f404e444e00e005971372dc801d16' + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' owner_id: 44036562 repo_id: 192626254 - 'actions/setup-node@v4.0.2': - ref: 'v4.0.2' - commit: 'sha1-60edb5dd545a775178f52524783378180af0d1f8' + 'actions/setup-node@v7.1.0': + ref: 'v7.1.0' + commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1' owner_id: 44036562 repo_id: 189476904 - 'actions/upload-artifact@v4': - ref: 'v4' - commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02' + 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f': + ref: 'v7.0.0' + commit: 'sha1-bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' owner_id: 44036562 repo_id: 192625955 - 'actions/upload-artifact@v4.6.2': - ref: 'v4.6.2' - commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02' + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' owner_id: 44036562 repo_id: 192625955 - 'actions/upload-pages-artifact@v3.0.1': - ref: 'v3.0.1' - commit: 'sha1-56afc609e74202658d3ffba0e8f6dda462b719fa' + 'actions/upload-pages-artifact@v5.0.0': + ref: 'v5.0.0' + commit: 'sha1-fc324d3547104276b827a68afc52ff2a11cc49c9' owner_id: 44036562 repo_id: 496012378 uses: - - 'actions/upload-artifact@v4' - 'cachix/install-nix-action@v30': - ref: 'v30' - commit: 'sha1-08dcb3a5e62fa31e2da3d490afc4176ef55ecd72' - owner_id: 36824654 - repo_id: 212301524 + - 'actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f' 'dawidd6/action-send-mail@v3.12.0': ref: 'v3.12.0' commit: 'sha1-2cea9617b09d79a095af21254fbcb7ae95903dde' owner_id: 9713907 repo_id: 222439721 - 'denoland/setup-deno@v1.5.2': - ref: 'v1.5.2' - commit: 'sha1-11b63cf76cfcafb4e43f97b6cad24d8e8438f62d' + 'denoland/setup-deno@v2.0.5': + ref: 'v2.0.5' + commit: 'sha1-22d081ff2d3a40755e97629de92e3bcbfa7cf2ed' owner_id: 42048915 repo_id: 356423100 - 'dependabot/fetch-metadata@v2.2.0': - ref: 'v2.2.0' - commit: 'sha1-dbb049abf0d677abbd7f7eee0375145b417fdd34' + 'dependabot/fetch-metadata@v3.1.0': + ref: 'v3.1.0' + commit: 'sha1-25dd0e34f4fe68f24cc83900b1fe3fe149efef98' owner_id: 27347476 repo_id: 371068214 - 'docker/build-push-action@v6.9.0': - ref: 'v6.9.0' - commit: 'sha1-4f58ea79222b3b9dc2c8bbdd6debcef730109a75' + 'docker/build-push-action@v7.4.0': + ref: 'v7.4.0' + commit: 'sha1-c3c9e263c25d99ce0380d002d59b67737d91b0dc' owner_id: 5429470 repo_id: 241092383 - 'docker/login-action@v3.3.0': - ref: 'v3.3.0' - commit: 'sha1-9780b0c442fbb1117ed29e0efdff1e18412f7567' + 'docker/login-action@v4.6.0': + ref: 'v4.6.0' + commit: 'sha1-dbcb813823bdd20940b903addbd779551569679f' owner_id: 5429470 repo_id: 287743349 - 'docker/metadata-action@v5.5.1': - ref: 'v5.5.1' - commit: 'sha1-8e5442c4ef9f78752691e2d8f8d19755c6f78e81' + 'docker/metadata-action@v6.2.0': + ref: 'v6.2.0' + commit: 'sha1-dc802804100637a589fabce1cb79ff13a1411302' owner_id: 5429470 repo_id: 306769011 'dtolnay/rust-toolchain@v1': @@ -230,9 +199,9 @@ dependencies: commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772' owner_id: 1940490 repo_id: 260749683 - 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938': - ref: 'v4.37.9' - commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938' + 'github/codeql-action@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee': + ref: 'v4.39.0' + commit: 'sha1-6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee' owner_id: 9919 repo_id: 259445878 'google/clusterfuzzlite@v1': @@ -245,9 +214,9 @@ dependencies: commit: 'sha1-abea47f85e598557f500fa1fd2ab7464fcb39406' owner_id: 1006268 repo_id: 212984112 - 'haskell-actions/setup@v2.7.5': - ref: 'v2.7.5' - commit: 'sha1-ec49483bfc012387b227434aba94f59a6ecd0900' + 'haskell-actions/setup@v2.12.1': + ref: 'v2.12.1' + commit: 'sha1-0f8e8c99d88aeb3fbfd523f1ef2c6f762d10d64d' owner_id: 75048950 repo_id: 623796603 'hyperpolymath/deed-ecosystem@main': @@ -260,68 +229,18 @@ dependencies: commit: 'sha1-2155aa26a21758f2ba119f61bc7e0e1981c106fb' owner_id: 6759885 repo_id: 1275650185 - 'ksxgithub/github-actions-deploy-aur@v3.0.1': - ref: 'v3.0.1' - commit: 'sha1-a97f56a8425a7a7f3b8c58607f769c69b089cadb' + 'ksxgithub/github-actions-deploy-aur@v4.2.0': + ref: 'v4.2.0' + commit: 'sha1-084b0d9b15415bf9cdb65d44dad1efe37a354050' owner_id: 11488886 repo_id: 261159912 - 'peter-evans/repository-dispatch@v3.0.0': - ref: 'v3.0.0' - commit: 'sha1-ff45666b9427631e3450c54a1bcbee4d9ff4d7c0' + 'peter-evans/repository-dispatch@v4.0.1': + ref: 'v4.0.1' + commit: 'sha1-28959ce8df70de7be546dd1250a005dd32156697' owner_id: 18365890 repo_id: 220359305 - 'softprops/action-gh-release@v2.2.1': - ref: 'v2.2.1' - commit: 'sha1-c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda' - owner_id: 2242 - repo_id: 204253808 - 'Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6': - ref: 'v2' - commit: 'sha1-6323deb102c322ba6fcbdcafc7e3dddab59af2b6' - owner_id: 580492 - repo_id: 298565987 - 'actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9': - ref: 'v6.1.0' - commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' - owner_id: 44036562 - repo_id: 215566462 - 'actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a': - ref: 'v7.0.1' - commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' - owner_id: 44036562 - repo_id: 192625955 - 'actions/upload-artifact@83fd05a356d7e2593de66fc9913b3002723633cb': - ref: 'tag' - commit: 'sha1-83fd05a356d7e2593de66fc9913b3002723633cb' - owner_id: 44036562 - repo_id: 192625955 - 'dtolnay/rust-toolchain@6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772': - ref: 'stable' - commit: 'sha1-6c977a6ca4077a0ceb28ffbe03f59d46e9ac8772' - owner_id: 1940490 - repo_id: 260749683 - 'editorconfig-checker/action-editorconfig-checker@51f63319f592f97930c73d9c46184d20bd206393': - ref: 'v3.0.0' - commit: 'sha1-51f63319f592f97930c73d9c46184d20bd206393' - owner_id: 26415196 - repo_id: 297874902 - 'erlef/setup-beam@54075bcc5e249e4758d363f27d099f55d843f124': - ref: 'v1.24.1' - commit: 'sha1-54075bcc5e249e4758d363f27d099f55d843f124' - owner_id: 47606891 - repo_id: 331103973 - 'ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc': - ref: 'v2.4.4' - commit: 'sha1-2d1146689b8cda280b9bc96326124645441f03bc' - owner_id: 67707773 - repo_id: 421101922 - 'softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844': - ref: 'v0.1.15' - commit: 'sha1-de2c0eb89ae2a093876385947365aca7b0e5f844' + 'softprops/action-gh-release@v3.0.3': + ref: 'v3.0.3' + commit: 'sha1-efb35369e0ad2afab669f228072c1b0d510eae64' owner_id: 2242 repo_id: 204253808 - 'webfactory/ssh-agent@e83874834305fe9a4a2997156cb26c5de65a8555': - ref: 'v0.10.0' - commit: 'sha1-e83874834305fe9a4a2997156cb26c5de65a8555' - owner_id: 135788 - repo_id: 208510314 diff --git a/.github/workflows/boj-build.yml b/.github/workflows/boj-build.yml index e4a8e6b..cbdcfda 100644 --- a/.github/workflows/boj-build.yml +++ b/.github/workflows/boj-build.yml @@ -13,7 +13,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@v4.1.7 + uses: actions/checkout@v7.0.1 - name: Trigger BoJ Server (Casket/ssg-mcp) run: | # Send a secure trigger to boj-server to build this repository diff --git a/.github/workflows/cargo-audit.yml b/.github/workflows/cargo-audit.yml index 3cf5d93..7091ec9 100644 --- a/.github/workflows/cargo-audit.yml +++ b/.github/workflows/cargo-audit.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Install cargo-audit run: cargo install cargo-audit --locked @@ -45,7 +45,7 @@ jobs: permissions: issues: write steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Create vulnerability issue env: diff --git a/.github/workflows/casket-pages.yml b/.github/workflows/casket-pages.yml index 8a35d6a..485e11b 100644 --- a/.github/workflows/casket-pages.yml +++ b/.github/workflows/casket-pages.yml @@ -24,22 +24,22 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@v4.1.1 + uses: actions/checkout@v7.0.1 - name: Checkout casket-ssg - uses: actions/checkout@v4.1.1 + uses: actions/checkout@v7.0.1 with: repository: hyperpolymath/casket-ssg path: .casket-ssg - name: Setup GHCup - uses: haskell-actions/setup@v2.7.5 + uses: haskell-actions/setup@v2.12.1 with: ghc-version: '9.8.2' cabal-version: '3.10' - name: Cache Cabal - uses: actions/cache@v4.3.0 + uses: actions/cache@v6.1.0 with: path: | ~/.cabal/packages @@ -101,10 +101,10 @@ jobs: touch ../_site/.nojekyll - name: Setup Pages - uses: actions/configure-pages@v5.0.0 + uses: actions/configure-pages@v6.0.0 - name: Upload artifact - uses: actions/upload-pages-artifact@v3.0.1 + uses: actions/upload-pages-artifact@v5.0.0 with: path: '_site' @@ -118,4 +118,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4.0.5 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 80d2588..84c9a3a 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,12 +44,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3 + uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3 + uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml index da95664..b0e8421 100644 --- a/.github/workflows/dependabot-automerge.yml +++ b/.github/workflows/dependabot-automerge.yml @@ -58,7 +58,7 @@ jobs: steps: - name: Fetch Dependabot metadata id: meta - uses: dependabot/fetch-metadata@v2.2.0 + uses: dependabot/fetch-metadata@v3.1.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml index 909b913..6c29f2a 100644 --- a/.github/workflows/dogfood-gate.yml +++ b/.github/workflows/dogfood-gate.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check for A2ML files id: detect @@ -74,7 +74,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check for K9 files id: detect @@ -124,7 +124,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Scan for invisible characters id: lint @@ -217,7 +217,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check for Groove manifest id: groove @@ -276,7 +276,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check and validate eclexiaiser manifest id: eclex @@ -342,7 +342,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Generate dogfooding scorecard run: | diff --git a/.github/workflows/generator-generic-ossf-slsa3-publish.yml b/.github/workflows/generator-generic-ossf-slsa3-publish.yml index a2d80e0..fb04ac7 100644 --- a/.github/workflows/generator-generic-ossf-slsa3-publish.yml +++ b/.github/workflows/generator-generic-ossf-slsa3-publish.yml @@ -32,7 +32,7 @@ jobs: digests: ${{ steps.hash.outputs.digests }} steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 # ======================================================== # @@ -69,7 +69,7 @@ jobs: actions: read # To read the workflow path. id-token: write # To sign the provenance. contents: write # To add assets to a release. - uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@68bad40844440577b33778c9f29077a3388838e9 # v1.4.0 + uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@f7dd8c54c2067bafc12ca7a55595d5ee9b75204a # v2.1.0 with: base64-subjects: "${{ needs.build.outputs.digests }}" upload-assets: true # Optional: Upload to a new release diff --git a/.github/workflows/ghcr-publish.yml b/.github/workflows/ghcr-publish.yml index 3bfc607..0e8e9ea 100644 --- a/.github/workflows/ghcr-publish.yml +++ b/.github/workflows/ghcr-publish.yml @@ -26,7 +26,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 - name: Install nerdctl and containerd run: | diff --git a/.github/workflows/instant-sync.yml b/.github/workflows/instant-sync.yml index e3a3052..415ed34 100644 --- a/.github/workflows/instant-sync.yml +++ b/.github/workflows/instant-sync.yml @@ -20,7 +20,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger Propagation - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.FARM_DISPATCH_TOKEN }} repository: hyperpolymath/.git-private-farm diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml old mode 100755 new mode 100644 index 96a53cf..2371e9b --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -22,9 +22,9 @@ jobs: image: ghcr.io/stefan-hoeck/idris2-pack@sha256:f0758996a931fb35d9ecb1de273c4d59dabe2a09b433afc7e357f65a08b7e1ff steps: - name: Checkout Site - uses: actions/checkout@v4.4.0 + uses: actions/checkout@v7.0.1 - name: Checkout Ddraig SSG - uses: actions/checkout@v4.4.0 + uses: actions/checkout@v7.0.1 with: repository: hyperpolymath/ddraig-ssg path: .ddraig-ssg @@ -41,7 +41,7 @@ jobs: fi ./.ddraig-ssg/build/exec/ddraig build src _site https://hyperpolymath.github.io/${GITHUB_REPOSITORY#*/} - name: Upload artifact - uses: actions/upload-pages-artifact@v3.0.1 + uses: actions/upload-pages-artifact@v5.0.0 with: path: '_site' deploy: @@ -54,4 +54,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4.0.5 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/publish-aur.yml b/.github/workflows/publish-aur.yml index dc0bcc8..783fc1b 100644 --- a/.github/workflows/publish-aur.yml +++ b/.github/workflows/publish-aur.yml @@ -43,7 +43,7 @@ jobs: - name: Checkout bunsenite if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 - name: Get inputs if: steps.check-secret.outputs.skip != 'true' @@ -104,7 +104,7 @@ jobs: - name: Publish to AUR if: steps.check-secret.outputs.skip != 'true' - uses: KSXGitHub/github-actions-deploy-aur@v3.0.1 + uses: KSXGitHub/github-actions-deploy-aur@v4.2.0 with: pkgname: bunsenite-bin pkgbuild: aur-package/PKGBUILD diff --git a/.github/workflows/publish-chocolatey.yml b/.github/workflows/publish-chocolatey.yml index 5d368f0..df0ff9e 100644 --- a/.github/workflows/publish-chocolatey.yml +++ b/.github/workflows/publish-chocolatey.yml @@ -41,7 +41,7 @@ jobs: - name: Checkout bunsenite if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 - name: Get inputs if: steps.check-secret.outputs.skip != 'true' diff --git a/.github/workflows/publish-container.yml b/.github/workflows/publish-container.yml index a504715..9df2dc6 100644 --- a/.github/workflows/publish-container.yml +++ b/.github/workflows/publish-container.yml @@ -23,10 +23,10 @@ jobs: id-token: write attestations: write steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Log in to GitHub Container Registry - uses: docker/login-action@v3.3.0 + uses: docker/login-action@v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -34,7 +34,7 @@ jobs: - name: Extract metadata id: meta - uses: docker/metadata-action@v5.5.1 + uses: docker/metadata-action@v6.2.0 with: images: ghcr.io/${{ github.repository }} tags: | @@ -45,7 +45,7 @@ jobs: - name: Build and push id: push - uses: docker/build-push-action@v6.9.0 + uses: docker/build-push-action@v7.4.0 with: context: . file: ./Containerfile @@ -54,7 +54,7 @@ jobs: labels: ${{ steps.meta.outputs.labels }} - name: Attest container provenance - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@v4.2.2 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push.outputs.digest }} diff --git a/.github/workflows/publish-copr.yml b/.github/workflows/publish-copr.yml index 8198867..a78c3f6 100644 --- a/.github/workflows/publish-copr.yml +++ b/.github/workflows/publish-copr.yml @@ -83,7 +83,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/publish-debian-ppa.yml b/.github/workflows/publish-debian-ppa.yml index 4a6e234..2e9a50e 100644 --- a/.github/workflows/publish-debian-ppa.yml +++ b/.github/workflows/publish-debian-ppa.yml @@ -42,7 +42,7 @@ jobs: - name: Checkout bunsenite if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 - name: Get inputs if: steps.check-secret.outputs.skip != 'true' diff --git a/.github/workflows/publish-flatpak.yml b/.github/workflows/publish-flatpak.yml index 8dec706..e0b1845 100644 --- a/.github/workflows/publish-flatpak.yml +++ b/.github/workflows/publish-flatpak.yml @@ -41,7 +41,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/publish-homebrew.yml b/.github/workflows/publish-homebrew.yml index a747eed..f6fdb37 100644 --- a/.github/workflows/publish-homebrew.yml +++ b/.github/workflows/publish-homebrew.yml @@ -52,7 +52,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/publish-macports.yml b/.github/workflows/publish-macports.yml index 0c0d6f8..dd8f739 100644 --- a/.github/workflows/publish-macports.yml +++ b/.github/workflows/publish-macports.yml @@ -40,7 +40,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/publish-nixpkgs.yml b/.github/workflows/publish-nixpkgs.yml index 19798a3..a8beccf 100644 --- a/.github/workflows/publish-nixpkgs.yml +++ b/.github/workflows/publish-nixpkgs.yml @@ -40,7 +40,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/publish-obs.yml b/.github/workflows/publish-obs.yml index 2bdacd9..f8211fa 100644 --- a/.github/workflows/publish-obs.yml +++ b/.github/workflows/publish-obs.yml @@ -42,7 +42,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/publish-packages.yml b/.github/workflows/publish-packages.yml index 96bd208..c9cd891 100644 --- a/.github/workflows/publish-packages.yml +++ b/.github/workflows/publish-packages.yml @@ -78,7 +78,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger Homebrew publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-homebrew @@ -99,7 +99,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger Scoop publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-scoop @@ -117,7 +117,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger AUR publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-aur @@ -136,7 +136,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger WinGet publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-winget @@ -154,7 +154,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger Chocolatey publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-chocolatey @@ -172,7 +172,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger Flatpak publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-flatpak @@ -189,7 +189,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger MacPorts publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-macports @@ -206,7 +206,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger Debian PPA publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-debian-ppa @@ -223,7 +223,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger COPR publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-copr @@ -240,7 +240,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger OBS publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-obs @@ -257,7 +257,7 @@ jobs: timeout-minutes: 15 steps: - name: Trigger Nixpkgs publisher - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.TAP_GITHUB_TOKEN || secrets.GITHUB_TOKEN }} event-type: publish-nixpkgs diff --git a/.github/workflows/publish-scoop.yml b/.github/workflows/publish-scoop.yml index f017781..ed66bd2 100644 --- a/.github/workflows/publish-scoop.yml +++ b/.github/workflows/publish-scoop.yml @@ -43,7 +43,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/publish-winget.yml b/.github/workflows/publish-winget.yml index 22cac22..bca0942 100644 --- a/.github/workflows/publish-winget.yml +++ b/.github/workflows/publish-winget.yml @@ -47,7 +47,7 @@ jobs: - name: Checkout homebrew-tap if: steps.check-secret.outputs.skip != 'true' - uses: actions/checkout@v6.0.1 + uses: actions/checkout@v7.0.1 with: repository: ${{ env.TAP_REPO }} token: ${{ secrets.TAP_GITHUB_TOKEN }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index b4f75f8..c8a201d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -60,7 +60,7 @@ jobs: archive: zip steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Install Rust uses: dtolnay/rust-toolchain@v1 @@ -127,7 +127,7 @@ jobs: Compress-Archive -Path dist/* -DestinationPath bunsenite-${{ github.ref_name }}-${{ matrix.target }}.${{ matrix.archive }} - name: Upload artifact - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@v7.0.2 with: name: bunsenite-${{ matrix.target }} path: bunsenite-*.${{ matrix.archive }} @@ -143,10 +143,10 @@ jobs: attestations: write steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Download all artifacts - uses: actions/download-artifact@v4.1.8 + uses: actions/download-artifact@v8.0.2 with: path: artifacts @@ -160,7 +160,7 @@ jobs: cat ../SHA256SUMS.txt - name: Create GitHub Release - uses: softprops/action-gh-release@v2.2.1 + uses: softprops/action-gh-release@v3.0.3 with: files: | artifacts/**/* @@ -198,7 +198,7 @@ jobs: RSR Compliance: Bronze Tier | TPCF Perimeter: 3 - name: Attest build provenance - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@v4.2.2 with: subject-path: | artifacts/**/* @@ -214,7 +214,7 @@ jobs: id-token: write attestations: write steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Install Rust uses: dtolnay/rust-toolchain@v1 @@ -225,7 +225,7 @@ jobs: run: cargo package - name: Attest crate provenance - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@v4.2.2 with: subject-path: 'target/package/*.crate' @@ -243,10 +243,10 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Setup Node.js - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@v7.1.0 with: node-version: '20' registry-url: 'https://registry.npmjs.org' diff --git a/.github/workflows/stress-test.yml b/.github/workflows/stress-test.yml index 5008ae2..0d750c5 100644 --- a/.github/workflows/stress-test.yml +++ b/.github/workflows/stress-test.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 60 steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Install Rust toolchain uses: dtolnay/rust-toolchain@v1 diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml index c31ac4d..eac10a8 100644 --- a/.github/workflows/workflow-linter.yml +++ b/.github/workflows/workflow-linter.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Check SPDX headers run: | diff --git a/.github/workflows/zig-ffi.yml b/.github/workflows/zig-ffi.yml index 67176c7..64bcdc5 100644 --- a/.github/workflows/zig-ffi.yml +++ b/.github/workflows/zig-ffi.yml @@ -43,7 +43,7 @@ jobs: lib_ext: dll steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Install Rust uses: dtolnay/rust-toolchain@v1 @@ -57,7 +57,7 @@ jobs: version: 0.11.0 - name: Cache Cargo - uses: actions/cache@v4.3.0 + uses: actions/cache@v6.1.0 with: path: | ~/.cargo/registry @@ -79,7 +79,7 @@ jobs: nm -D zig/zig-out/lib/libbunsenite.so | grep -E "parse_nickel|validate_nickel|free_string|version|rsr_tier|tpcf_perimeter" || true - name: Upload FFI library - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@v7.0.2 with: name: libbunsenite-${{ matrix.os }} path: | @@ -94,7 +94,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Install Rust uses: dtolnay/rust-toolchain@v1 @@ -124,7 +124,7 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@v6.0.1 + - uses: actions/checkout@v7.0.1 - name: Install Rust uses: dtolnay/rust-toolchain@v1 @@ -137,7 +137,7 @@ jobs: version: 0.11.0 - name: Install Deno - uses: denoland/setup-deno@v1.5.2 + uses: denoland/setup-deno@v2.0.5 with: deno-version: v1.x