diff --git a/.github/workflows/billing-image.yml b/.github/workflows/billing-image.yml index fe8b1eec..4cbaa3b6 100644 --- a/.github/workflows/billing-image.yml +++ b/.github/workflows/billing-image.yml @@ -21,11 +21,11 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 + - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - - uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 + - uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -33,7 +33,7 @@ jobs: - name: Image tags id: meta - uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.10.0 + uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0 with: images: ghcr.io/${{ github.repository_owner }}/omp-billing tags: | @@ -41,7 +41,7 @@ jobs: type=sha,prefix= type=ref,event=branch - - uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 + - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 with: context: ops/billing file: ops/vps/Dockerfile diff --git a/.github/workflows/billing-watchdog.yml b/.github/workflows/billing-watchdog.yml index 343c253f..1276f151 100644 --- a/.github/workflows/billing-watchdog.yml +++ b/.github/workflows/billing-watchdog.yml @@ -23,12 +23,12 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: sparse-checkout: scripts # the last state ({ ok, since, reason }), so only a change is told; a fresh cache key per run, restored by prefix - name: Restore the last state - uses: actions/cache/restore@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: watchdog-state.json key: billing-watchdog-${{ github.run_id }}-${{ github.run_attempt }} @@ -40,7 +40,7 @@ jobs: run: node scripts/billing-watchdog.mjs watchdog-state.json - name: Save the state if: always() - uses: actions/cache/save@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: watchdog-state.json key: billing-watchdog-${{ github.run_id }}-${{ github.run_attempt }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1cf6d41f..d9ad7fb8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -15,7 +15,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 @@ -92,7 +92,7 @@ jobs: overflow: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 @@ -109,7 +109,7 @@ jobs: android: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: fetch-depth: 1 - name: Detect Android paths @@ -178,7 +178,7 @@ jobs: - name: Verify lockfiles if: steps.filter.outputs.android == 'true' run: git diff --exit-code -- package-lock.json desktop/package-lock.json - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 if: steps.filter.outputs.android == 'true' with: distribution: temurin @@ -284,7 +284,7 @@ jobs: --health-timeout 5s --health-retries 10 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 9ed97f2d..99d160a6 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -41,7 +41,7 @@ jobs: build-mode: none timeout: 20 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Checkout 2160 Player submodule if: matrix.language == 'java-kotlin' @@ -65,7 +65,7 @@ jobs: npx cap sync android node scripts/strip-flatdir.mjs - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 if: matrix.language == 'java-kotlin' with: distribution: temurin diff --git a/.github/workflows/desktop.yml b/.github/workflows/desktop.yml index c21999af..2ef02188 100644 --- a/.github/workflows/desktop.yml +++ b/.github/workflows/desktop.yml @@ -39,7 +39,7 @@ jobs: desktop: ${{ steps.filter.outputs.desktop }} rust: ${{ steps.filter.outputs.rust }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 if: github.event_name == 'pull_request' with: fetch-depth: 1 @@ -79,7 +79,7 @@ jobs: - name: Skip unchanged Rust paths if: needs.changes.outputs.desktop == 'true' && needs.changes.outputs.rust != 'true' run: echo "Pull request does not change Rust inputs. Apt, Python and cargo test are skipped." - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 if: needs.changes.outputs.desktop == 'true' || needs.changes.outputs.rust == 'true' with: submodules: recursive @@ -188,7 +188,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: recursive - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 @@ -337,7 +337,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: recursive - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 @@ -463,7 +463,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: recursive - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index bfc4be3d..a68bf246 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -18,9 +18,9 @@ jobs: publish: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Check out gh-pages - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: gh-pages path: build/pages diff --git a/.github/workflows/player2160-update.yml b/.github/workflows/player2160-update.yml index 13ac4f88..cdb8a256 100644 --- a/.github/workflows/player2160-update.yml +++ b/.github/workflows/player2160-update.yml @@ -21,7 +21,7 @@ jobs: # to start ci.yml on the PR branch: pushes and PRs made with GITHUB_TOKEN do not trigger other workflows actions: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 31c7d670..ae2df80c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -54,7 +54,7 @@ jobs: env: TAG: ${{ inputs.tag || github.ref_name }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: ${{ inputs.tag || github.ref }} # android/vendor/2160player (2160 Player's player-core, included build in android/settings.gradle) @@ -87,7 +87,7 @@ jobs: run: npm run build - run: node scripts/package.mjs - run: npm run check:boot - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 + - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 with: distribution: temurin # 17 for the player-core toolchain (jvmToolchain(17) in the submodule), 21 (last = default) for Gradle diff --git a/.github/workflows/telegram-fix.yml b/.github/workflows/telegram-fix.yml index 7d6e91d1..9fe22c11 100644 --- a/.github/workflows/telegram-fix.yml +++ b/.github/workflows/telegram-fix.yml @@ -27,7 +27,7 @@ jobs: fix: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 diff --git a/.github/workflows/telegram-post.yml b/.github/workflows/telegram-post.yml index daffeb45..8e95931a 100644 --- a/.github/workflows/telegram-post.yml +++ b/.github/workflows/telegram-post.yml @@ -39,7 +39,7 @@ jobs: exit 1 fi # the workflow ref (main), not the tag: scripts/telegram-post.mjs and CHANGELOG.md as they are now - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: CHANGELOG has this version run: | VERSION="${TAG#v}" diff --git a/.github/workflows/torrserver-update.yml b/.github/workflows/torrserver-update.yml index 2a9167bf..e3dc768e 100644 --- a/.github/workflows/torrserver-update.yml +++ b/.github/workflows/torrserver-update.yml @@ -22,7 +22,7 @@ jobs: # to start ci.yml on the PR branch: pushes and PRs made with GITHUB_TOKEN do not trigger other workflows actions: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: main fetch-depth: 0 diff --git a/.github/workflows/vps-deploy.yml b/.github/workflows/vps-deploy.yml index e32dffe0..fce21b3b 100644 --- a/.github/workflows/vps-deploy.yml +++ b/.github/workflows/vps-deploy.yml @@ -33,7 +33,7 @@ jobs: steps: # Checkout this workflow's revision. inputs.ref is only the release # the VPS downloads; an older tag does not have these scripts. - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: ref: ${{ github.sha }}