From b6e1f2d5d8ef0b138529f7e1200dd5976eeeb453 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 10 Mar 2026 15:42:46 +0000 Subject: [PATCH] Update all third-party GitHub Actions --- .github/workflows/ShadowScans.yml | 2 +- .github/workflows/build.yml | 40 ++++++++++++++-------------- .github/workflows/mark-prs-stale.yml | 2 +- 3 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/ShadowScans.yml b/.github/workflows/ShadowScans.yml index 2a3a2e9..fff9447 100644 --- a/.github/workflows/ShadowScans.yml +++ b/.github/workflows/ShadowScans.yml @@ -16,7 +16,7 @@ jobs: id-token: write contents: write steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 79cac7e..ed9b874 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -30,7 +30,7 @@ jobs: - name: Setup Cloudflare WARP uses: SonarSource/gh-action_setup-cloudflare-warp@v1 id: warp - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 @@ -46,12 +46,12 @@ jobs: source $HOME/.cargo/env ./gradlew :analyzer:compileRustDarwin :analyzer:compileRustDarwinX86 --info --stacktrace - name: Upload Darwin ARM64 artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: analyzer-aarch64-apple-darwin path: analyzer/target/aarch64-apple-darwin/release/analyzer.xz - name: Upload Darwin x86_64 artifact - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: analyzer-x86_64-apple-darwin path: analyzer/target/x86_64-apple-darwin/release/analyzer.xz @@ -64,7 +64,7 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 @@ -75,7 +75,7 @@ jobs: sudo apt-get clean - name: Cache cross-compiler id: cache-cross-compiler - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 + uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5.0.3 with: path: cross-compiler-output key: musl-cross-compiler-aarch64-${{ env.MUSL_CROSS_MAKE_COMMIT }} @@ -114,17 +114,17 @@ jobs: run: | ./gradlew :analyzer:compileRustLinuxMusl :analyzer:compileRustLinuxArm :analyzer:compileRustWin --info --stacktrace - name: Upload Linux x86_64 analyzer - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: analyzer-x86_64-unknown-linux-musl path: analyzer/target/x86_64-unknown-linux-musl/release/analyzer.xz - name: Upload Linux ARM64 analyzer - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: analyzer-aarch64-unknown-linux-musl path: analyzer/target/aarch64-unknown-linux-musl/release/analyzer.xz - name: Upload Windows analyzer - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: analyzer-x86_64-pc-windows-gnu path: analyzer/target/x86_64-pc-windows-gnu/release/analyzer.exe.xz @@ -135,7 +135,7 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 @@ -168,36 +168,36 @@ jobs: id-token: write contents: write steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 # Download Darwin artifacts (only if macos_analyzers job succeeded) - name: Download Darwin ARM64 artifact if: needs.macos_analyzers.result == 'success' - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 + uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: analyzer-aarch64-apple-darwin path: analyzer/target/aarch64-apple-darwin/release/ - name: Download Darwin x86_64 artifact if: needs.macos_analyzers.result == 'success' - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 + uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: analyzer-x86_64-apple-darwin path: analyzer/target/x86_64-apple-darwin/release/ # Download Linux/Windows artifacts (always built) - name: Download Linux x86_64 analyzer - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 + uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: analyzer-x86_64-unknown-linux-musl path: analyzer/target/x86_64-unknown-linux-musl/release/ - name: Download Linux ARM64 analyzer - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 + uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: analyzer-aarch64-unknown-linux-musl path: analyzer/target/aarch64-unknown-linux-musl/release/ - name: Download Windows analyzer - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 + uses: actions/download-artifact@70fc10c6e5e1ce46ad2ea6f2b72d43f7d47b13c3 # v8.0.0 with: name: analyzer-x86_64-pc-windows-gnu path: analyzer/target/x86_64-pc-windows-gnu/release/ @@ -216,7 +216,7 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 @@ -242,7 +242,7 @@ jobs: id-token: write contents: write steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 @@ -269,7 +269,7 @@ jobs: ./gradlew :e2e:test -Pe2e -DpluginVersion=${PROJECT_VERSION} --info --stacktrace - name: Upload test reports if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: e2e-test-reports-windows path: e2e/build/reports/tests/** @@ -282,7 +282,7 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: jdx/mise-action@e79ddf65a11cec7b0e882bedced08d6e976efb2d # v3.6.2 with: version: 2025.7.12 @@ -303,7 +303,7 @@ jobs: ./gradlew :e2e:test -Pe2e -DpluginVersion=${PROJECT_VERSION} --info --stacktrace - name: Upload test reports if: always() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: e2e-test-reports-linux-arm64 path: e2e/build/reports/tests/** diff --git a/.github/workflows/mark-prs-stale.yml b/.github/workflows/mark-prs-stale.yml index 9de4fea..17a6695 100644 --- a/.github/workflows/mark-prs-stale.yml +++ b/.github/workflows/mark-prs-stale.yml @@ -11,7 +11,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9 + - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10 with: stale-pr-message: 'This PR is stale because it has been open 7 days with no activity. If there is no activity in the next 7 days it will be closed automatically' stale-pr-label: 'stale'