From a1f5585d7a23d27c12a732822dc78ffc4b706fe5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 22 Feb 2024 01:41:09 +0000 Subject: [PATCH 1/2] Bump actions/checkout Bumps [actions/checkout](https://github.com/actions/checkout) from 3df4ab11eba7bda6032a0b82a6bb43b11571feac to aadec899646c8e0f34c52d9219c2faac36626b55. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/3df4ab11eba7bda6032a0b82a6bb43b11571feac...aadec899646c8e0f34c52d9219c2faac36626b55) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- .github/workflows/draft.yml | 4 ++-- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/draft.yml b/.github/workflows/draft.yml index f00ada8..854fe9a 100644 --- a/.github/workflows/draft.yml +++ b/.github/workflows/draft.yml @@ -16,7 +16,7 @@ jobs: cache: pip - name: Clone - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac + uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 - name: Build specification run: | @@ -25,7 +25,7 @@ jobs: make -f ../Makefile draft - name: Switch branch - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac + uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 with: ref: gh-pages clean: false diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index ad58505..0d663ee 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -9,7 +9,7 @@ jobs: name: Sanity checks before a PR merge runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac + - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 with: fetch-depth: 0 # we want all refs for the --is-ancestor check diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 97e8937..85c4ab4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,7 +12,7 @@ jobs: contents: write # required to publish (tag) a release steps: - name: Clone main - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac + uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 with: fetch-depth: 0 @@ -54,7 +54,7 @@ jobs: - name: Switch branch if: steps.getver.outputs.spec_version != steps.prevver.outputs.prev_version - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac + uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 with: ref: gh-pages clean: false From a63f67e1ec7a67c0f4a2f8f25a9dd0233e126282 Mon Sep 17 00:00:00 2001 From: Joshua Lock Date: Thu, 22 Feb 2024 10:22:39 +0000 Subject: [PATCH 2/2] Update all GHA and reference pinned version number/tag Ensure we're using the latest released version of all GitHub Actions we're using, make it clear what version we have pinned. Signed-off-by: Joshua Lock --- .github/workflows/check-latest-spec-version.yml | 2 +- .github/workflows/draft.yml | 6 +++--- .github/workflows/pr.yml | 4 ++-- .github/workflows/release.yml | 8 ++++---- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/check-latest-spec-version.yml b/.github/workflows/check-latest-spec-version.yml index a754ce6..a01065c 100644 --- a/.github/workflows/check-latest-spec-version.yml +++ b/.github/workflows/check-latest-spec-version.yml @@ -37,7 +37,7 @@ jobs: contents: read issues: write steps: - - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea + - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 with: script: | const release = await github.rest.repos.getLatestRelease({ diff --git a/.github/workflows/draft.yml b/.github/workflows/draft.yml index 854fe9a..47115bb 100644 --- a/.github/workflows/draft.yml +++ b/.github/workflows/draft.yml @@ -10,13 +10,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Set up Python - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0 with: python-version: '3.10' cache: pip - name: Clone - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Build specification run: | @@ -25,7 +25,7 @@ jobs: make -f ../Makefile draft - name: Switch branch - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: ref: gh-pages clean: false diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 0d663ee..c15ca9f 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -9,12 +9,12 @@ jobs: name: Sanity checks before a PR merge runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: fetch-depth: 0 # we want all refs for the --is-ancestor check - name: Set up Python - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0 with: python-version: '3.10' cache: pip diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 85c4ab4..de65b5f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,7 +12,7 @@ jobs: contents: write # required to publish (tag) a release steps: - name: Clone main - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: fetch-depth: 0 @@ -30,14 +30,14 @@ jobs: - name: Set up Python if: steps.getver.outputs.spec_version != steps.prevver.outputs.prev_version - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c # v5.0.0 with: python-version: '3.10' cache: 'pip' - name: Make release if: steps.getver.outputs.spec_version != steps.prevver.outputs.prev_version - uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e + uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -54,7 +54,7 @@ jobs: - name: Switch branch if: steps.getver.outputs.spec_version != steps.prevver.outputs.prev_version - uses: actions/checkout@aadec899646c8e0f34c52d9219c2faac36626b55 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: ref: gh-pages clean: false