Update deps

.github/workflows/draft-release.yml

@@ -15,10 +15,8 @@ on:
 
 jobs:
   draft-release:
-    name: 'Draft release'
-    uses: 'google-github-actions/.github/.github/workflows/draft-release.yml@v0'
+    uses: 'google-github-actions/.github/.github/workflows/draft-release.yml@v3' # ratchet:exclude
     with:
       version_strategy: '${{ github.event.inputs.version_strategy }}'
-    # secrets must be explicitly passed to reusable workflows https://docs.github.com/en/enterprise-cloud@latest/actions/using-workflows/reusing-workflows#using-inputs-and-secrets-in-a-reusable-workflow
     secrets:
       ACTIONS_BOT_TOKEN: '${{ secrets.ACTIONS_BOT_TOKEN }}'

.github/workflows/integration.yml

@@ -28,80 +28,80 @@ jobs:
     runs-on: 'ubuntu-latest'
 
     steps:
-    - id: 'checkout'
-      name: 'Checkout'
-      uses: 'actions/checkout@v4'
-
-    - id: 'compute-test-uid'
-      name: 'Compute test UID'
-      run: |-
-        echo "TEST_UID=${GITHUB_JOB}-${GITHUB_SHA::7}-${GITHUB_RUN_NUMBER}" >> ${GITHUB_ENV}
-
-    - id: 'set-up-node'
-      name: 'Set up Node'
-      uses: 'actions/setup-node@v4'
-      with:
-        node-version: '20.x'
-
-    - id: 'build'
-      name: 'Build'
-      run: 'npm ci && npm run build'
-
-    - id: 'auth'
-      name: 'Auth'
-      uses: 'google-github-actions/auth@v2'
-      with:
-        workload_identity_provider: '${{ vars.WIF_PROVIDER_NAME }}'
-        service_account: '${{ vars.SERVICE_ACCOUNT_EMAIL }}'
-
-    - id: 'gcloud-setup'
-      name: 'Set up Cloud SDK'
-      uses: 'google-github-actions/setup-gcloud@v2'
-      with:
-        project_id: '${{ vars.PROJECT_ID }}'
-
-    - id: 'populate-pipeline-template'
-      name: 'Populate values in template for Cloud Deploy pipeline and target'
-      run: 'envsubst < tests/fixtures/clouddeploy.yaml.template > tests/fixtures/clouddeploy.yaml'
-      env:
-        PROJECT_ID: '${{ vars.PROJECT_ID }}'
-        REGION: '${{ env.REGION }}'
-
-    - id: 'create-pipeline'
-      name: 'Create pipeline'
-      run: 'gcloud deploy apply --file=tests/fixtures/clouddeploy.yaml --region=${REGION}'
-
-    - id: 'create-release'
-      name: 'Create release'
-      uses: './'
-      with:
-        name: '${{ env.TEST_UID }}'
-        region: '${{ env.REGION }}'
-        delivery_pipeline: 'gha-test-pipeline'
-        source: 'tests/fixtures/'
-        images: 'gha-test-app=gcr.io/cloudrun/hello:latest'
-        description: 'GHA test ${{ env.TEST_UID }}'
-        disable_initial_rollout: true
-        labels: |-
-          label1=value1
-        annotations: |-
-          annotation1=value1
-
-    - id: 'report-release'
-      name: 'Report Cloud Deploy release'
-      run: |-
-        echo "Created release: ${{ steps.create-release.outputs.name }}"
-        echo "Release link: ${{ steps.create-release.outputs.link }}"
-
-    - id: 'run-e2e-tests'
-      name: 'Run Tests'
-      run: 'npm run e2e-tests'
-      env:
-        ANNOTATIONS: '{"git-sha":"${{ github.sha }}", "annotation1":"value1"}'
-        DELIVERY_PIPELINE: 'gha-test-pipeline'
-        DESCRIPTION: 'GHA test ${{ env.TEST_UID }}'
-        IMAGES: 'gha-test-app=gcr.io/cloudrun/hello:latest'
-        LABELS: '{"managed-by":"github-actions", "label1":"value1"}'
-        NAME: 'projects/${{ vars.PROJECT_ID }}/locations/${{ env.REGION }}/deliveryPipelines/gha-test-pipeline/releases/${{ env.TEST_UID }}'
-        PROJECT_ID: '${{ vars.PROJECT_ID }}'
-        REGION: '${{ env.REGION }}'
+      - id: 'checkout'
+        name: 'Checkout'
+        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
+
+      - id: 'compute-test-uid'
+        name: 'Compute test UID'
+        run: |-
+          echo "TEST_UID=${GITHUB_JOB}-${GITHUB_SHA::7}-${GITHUB_RUN_NUMBER}" >> ${GITHUB_ENV}
+
+      - id: 'set-up-node'
+        name: 'Set up Node'
+        uses: 'actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a' # ratchet:actions/setup-node@v4
+        with:
+          node-version: '20.x'
+
+      - id: 'build'
+        name: 'Build'
+        run: 'npm ci && npm run build'
+
+      - id: 'auth'
+        name: 'Auth'
+        uses: 'google-github-actions/auth@v2' # ratchet:exclude
+        with:
+          workload_identity_provider: '${{ vars.WIF_PROVIDER_NAME }}'
+          service_account: '${{ vars.SERVICE_ACCOUNT_EMAIL }}'
+
+      - id: 'gcloud-setup'
+        name: 'Set up Cloud SDK'
+        uses: 'google-github-actions/setup-gcloud@v2' # ratchet:exclude
+        with:
+          project_id: '${{ vars.PROJECT_ID }}'
+
+      - id: 'populate-pipeline-template'
+        name: 'Populate values in template for Cloud Deploy pipeline and target'
+        run: 'envsubst < tests/fixtures/clouddeploy.yaml.template > tests/fixtures/clouddeploy.yaml'
+        env:
+          PROJECT_ID: '${{ vars.PROJECT_ID }}'
+          REGION: '${{ env.REGION }}'
+
+      - id: 'create-pipeline'
+        name: 'Create pipeline'
+        run: 'gcloud deploy apply --file=tests/fixtures/clouddeploy.yaml --region=${REGION}'
+
+      - id: 'create-release'
+        name: 'Create release'
+        uses: './'
+        with:
+          name: '${{ env.TEST_UID }}'
+          region: '${{ env.REGION }}'
+          delivery_pipeline: 'gha-test-pipeline'
+          source: 'tests/fixtures/'
+          images: 'gha-test-app=gcr.io/cloudrun/hello:latest'
+          description: 'GHA test ${{ env.TEST_UID }}'
+          disable_initial_rollout: true
+          labels: |-
+            label1=value1
+          annotations: |-
+            annotation1=value1
+
+      - id: 'report-release'
+        name: 'Report Cloud Deploy release'
+        run: |-
+          echo "Created release: ${{ steps.create-release.outputs.name }}"
+          echo "Release link: ${{ steps.create-release.outputs.link }}"
+
+      - id: 'run-e2e-tests'
+        name: 'Run Tests'
+        run: 'npm run e2e-tests'
+        env:
+          ANNOTATIONS: '{"git-sha":"${{ github.sha }}", "annotation1":"value1"}'
+          DELIVERY_PIPELINE: 'gha-test-pipeline'
+          DESCRIPTION: 'GHA test ${{ env.TEST_UID }}'
+          IMAGES: 'gha-test-app=gcr.io/cloudrun/hello:latest'
+          LABELS: '{"managed-by":"github-actions", "label1":"value1"}'
+          NAME: 'projects/${{ vars.PROJECT_ID }}/locations/${{ env.REGION }}/deliveryPipelines/gha-test-pipeline/releases/${{ env.TEST_UID }}'
+          PROJECT_ID: '${{ vars.PROJECT_ID }}'
+          REGION: '${{ env.REGION }}'

.github/workflows/publish.yml

@@ -16,10 +16,10 @@ jobs:
 
     steps:
       - name: 'Checkout'
-        uses: 'actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871' # ratchet:actions/checkout@v4
+        uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
 
       - name: 'Publish'
         id: 'publish'
-        uses: 'actions/publish-immutable-action@4b1aa5c1cde5fedc80d52746c9546cb5560e5f53' # ratchet:actions/publish-immutable-action@v0.0.3
+        uses: 'actions/publish-immutable-action@4bc8754ffc40f27910afb20287dbbbb675a4e978' # ratchet:actions/publish-immutable-action@v0.0.4
         with:
           github-token: '${{ secrets.GITHUB_TOKEN }}'

.github/workflows/release.yml

@@ -8,10 +8,6 @@ on:
 
 jobs:
   release:
-    if: |-
-      ${{ startsWith(github.event.head_commit.message, 'Release: v') }}
-    name: 'Release'
-    uses: 'google-github-actions/.github/.github/workflows/release.yml@v1' # ratchet:exclude
-    # secrets must be explicitly passed to reusable workflows https://docs.github.com/en/enterprise-cloud@latest/actions/using-workflows/reusing-workflows\#using-inputs-and-secrets-in-a-reusable-workflow
+    uses: 'google-github-actions/.github/.github/workflows/release.yml@v3' # ratchet:exclude
     secrets:
       ACTIONS_BOT_TOKEN: '${{ secrets.ACTIONS_BOT_TOKEN }}'

.github/workflows/unit.yml

@@ -21,26 +21,26 @@ jobs:
       fail-fast: false
       matrix:
         os:
-        - 'ubuntu-latest'
-        - 'windows-latest'
-        - 'macos-latest'
+          - 'ubuntu-latest'
+          - 'windows-latest'
+          - 'macos-latest'
     runs-on: '${{ matrix.os }}'
 
     steps:
-    - uses: 'actions/checkout@v4'
+      - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4
 
-    - uses: 'actions/setup-node@v4'
-      with:
-        node-version: '20.x'
+      - uses: 'actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a' # ratchet:actions/setup-node@v4
+        with:
+          node-version: '20.x'
 
-    - name: 'npm build'
-      run: 'npm ci && npm run build'
+      - name: 'npm build'
+        run: 'npm ci && npm run build'
 
-    - name: 'npm lint'
-      # There's no need to run the linter for each operating system, since it
-      # will find the same thing 3x and clog up the PR review.
-      if: ${{ matrix.os == 'ubuntu-latest' }}
-      run: 'npm run lint'
+      - name: 'npm lint'
+        # There's no need to run the linter for each operating system, since it
+        # will find the same thing 3x and clog up the PR review.
+        if: ${{ matrix.os == 'ubuntu-latest' }}
+        run: 'npm run lint'
 
-    - name: 'npm test'
-      run: 'npm run test'
+      - name: 'npm test'
+        run: 'npm run test'