From a8ed69229854aec6885937d4a885b607e0a97025 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 26 Nov 2025 00:05:38 +0000 Subject: [PATCH] Bump the github-actions group across 1 directory with 9 updates (#3972) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/android-ci.yml | 18 +++++++------- .github/workflows/android-device-test.yml | 12 +++++----- .github/workflows/android-release.yml | 16 ++++++------- .github/workflows/android-testapp-release.yml | 6 ++--- .github/workflows/cache-cleanup.yml | 2 +- .github/workflows/core-release.yml | 14 +++++------ .github/workflows/gh-pages-android-api.yml | 4 ++-- .../workflows/gh-pages-android-examples.yml | 4 ++-- .github/workflows/gh-pages-cpp-api.yml | 4 ++-- .github/workflows/gh-pages-docc.yml | 10 ++++---- .github/workflows/gh-pages-mdbook.yml | 10 ++++---- .github/workflows/ios-ci.yml | 24 +++++++++---------- .github/workflows/ios-device-test.yml | 6 ++--- .github/workflows/ios-release-cocoapods.yml | 2 +- .github/workflows/linux-ci.yml | 20 ++++++++-------- .github/workflows/macos-ci.yml | 8 +++---- .github/workflows/node-ci.yml | 10 ++++---- .github/workflows/node-release.yml | 16 ++++++------- .github/workflows/pr-bloaty-ios.yml | 8 +++---- .github/workflows/pr-linux-tests.yml | 10 ++++---- .github/workflows/qt-ci.yml | 2 +- .github/workflows/rust-ci.yaml | 4 ++-- .github/workflows/typecheck-scripts.yml | 2 +- .github/workflows/upload-coverage.yml | 6 ++--- .github/workflows/windows-ci.yml | 18 +++++++------- 25 files changed, 118 insertions(+), 118 deletions(-) diff --git a/.github/workflows/android-ci.yml b/.github/workflows/android-ci.yml index c9b33c7c7..0700ba9c1 100644 --- a/.github/workflows/android-ci.yml +++ b/.github/workflows/android-ci.yml @@ -26,7 +26,7 @@ jobs: outputs: should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.android_any_modified != 'true' }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -57,14 +57,14 @@ jobs: SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} SENTRY_DSN: ${{ secrets.SENTRY_DSN_ANDROID }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false - uses: ./.github/actions/setup-android-ci - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: ".nvmrc" @@ -165,7 +165,7 @@ jobs: - name: Create artifact for benchmark APKs if: matrix.renderer == 'opengl' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: if-no-files-found: error name: benchmarkAPKs @@ -200,7 +200,7 @@ jobs: run: sentry-cli debug-files upload MapLibreAndroidTestApp - name: Upload android-ui-test-${{ matrix.renderer }} - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: if-no-files-found: error name: android-ui-test-${{ matrix.renderer }} @@ -223,7 +223,7 @@ jobs: working-directory: test/android steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -259,7 +259,7 @@ jobs: cp app/build/outputs/apk/androidTest/release/app-release-androidTest.apk . - name: Store C++ Unit Tests .apk files - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: android-cpp-tests if-no-files-found: error @@ -281,7 +281,7 @@ jobs: if: needs.pre_job.outputs.should_skip != 'true' steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -333,7 +333,7 @@ jobs: # automatically trigger android-release when code is pushed to main # and the platform/android/VERSION file has changed - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 if: github.ref == 'refs/heads/main' && github.event_name == 'push' - name: VERSION file changed diff --git a/.github/workflows/android-device-test.yml b/.github/workflows/android-device-test.yml index c94963004..97cf462da 100644 --- a/.github/workflows/android-device-test.yml +++ b/.github/workflows/android-device-test.yml @@ -78,11 +78,11 @@ jobs: runs-on: ubuntu-latest if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success' steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: '.nvmrc' @@ -102,7 +102,7 @@ jobs: id: get-pr-number - name: Generate token - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 + uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0 id: generate_token with: skip-token-revoke: true # revoking will fail for long running workflows, because the token will already have expired @@ -111,7 +111,7 @@ jobs: - name: Check if comment on PR contains '!benchmark android' if: matrix.test.name == 'Android Benchmark' && steps.get-pr-number.outputs.pr-number - uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0 + uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0 id: benchmark_comment with: issue-number: ${{ steps.get-pr-number.outputs.pr-number }} @@ -198,14 +198,14 @@ jobs: - name: Upload Test Artifacts if: (matrix.test.name == 'Android Benchmark' || failure()) && env.run_device_test == 'true' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: "Test Artifacts ${{ matrix.test.name }}" path: test_artifacts.zip - name: Generate another token (previous one could have expired) if: always() - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 + uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0 id: generate_token_2 with: app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} diff --git a/.github/workflows/android-release.yml b/.github/workflows/android-release.yml index e0a3c1854..09031f713 100644 --- a/.github/workflows/android-release.yml +++ b/.github/workflows/android-release.yml @@ -15,7 +15,7 @@ jobs: run: working-directory: platform/android steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - name: Validate and set version working-directory: . @@ -52,7 +52,7 @@ jobs: - name: Create release (draft) id: create_release - uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3 + uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2 with: tag_name: ${{ steps.prepare_release.outputs.version_tag }} name: ${{ steps.prepare_release.outputs.version_tag }} @@ -78,11 +78,11 @@ jobs: - Release - Debug steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: ".nvmrc" @@ -118,7 +118,7 @@ jobs: "build/debug-symbols-maplibre-android-${{ matrix.RENDERER }}-${{ env.buildtype }}-$version_tag.tar.gz" - name: Upload release assets (${{ matrix.RENDERER }}, ${{ matrix.BUILDTYPE }}) - uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3 + uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2 with: tag_name: ${{ needs.android-create-release.outputs.version_tag }} fail_on_unmatched_files: true @@ -149,20 +149,20 @@ jobs: - android-build-and-upload-release steps: - name: Publish release (remove draft) - uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3 + uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2 with: tag_name: ${{ needs.android-create-release.outputs.version_tag }} name: ${{ needs.android-create-release.outputs.version_tag }} draft: false - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v4 with: distribution: "temurin" java-version: "17" - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: ".nvmrc" diff --git a/.github/workflows/android-testapp-release.yml b/.github/workflows/android-testapp-release.yml index f0982c50d..ff80fc972 100644 --- a/.github/workflows/android-testapp-release.yml +++ b/.github/workflows/android-testapp-release.yml @@ -10,7 +10,7 @@ jobs: create-android-testapp-release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false @@ -43,7 +43,7 @@ jobs: SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} SENTRY_DSN: ${{ secrets.SENTRY_DSN_ANDROID }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -68,7 +68,7 @@ jobs: needs: [android-build-testapp] runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - name: Finalize release (set draft=false) run: | diff --git a/.github/workflows/cache-cleanup.yml b/.github/workflows/cache-cleanup.yml index bc29193d5..9af2bc733 100644 --- a/.github/workflows/cache-cleanup.yml +++ b/.github/workflows/cache-cleanup.yml @@ -15,7 +15,7 @@ jobs: contents: read steps: - name: Check out code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false diff --git a/.github/workflows/core-release.yml b/.github/workflows/core-release.yml index 0d80432aa..28bd32db6 100644 --- a/.github/workflows/core-release.yml +++ b/.github/workflows/core-release.yml @@ -14,7 +14,7 @@ jobs: create-release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive @@ -45,7 +45,7 @@ jobs: needs: [create-release] runs-on: macos-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive @@ -67,7 +67,7 @@ jobs: - name: Upload macOS artifacts if: github.event_name == 'pull_request' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: macos-metal-build path: | @@ -97,7 +97,7 @@ jobs: - renderer: vulkan runner: { os: ubuntu-24.04-arm, arch: arm64 } steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive @@ -120,7 +120,7 @@ jobs: - name: Upload Linux artifacts if: github.event_name == 'pull_request' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: linux-${{ matrix.runner.arch }}-${{ matrix.renderer }}-build path: | @@ -145,7 +145,7 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive @@ -161,7 +161,7 @@ jobs: - name: Upload Windows artifact if: github.event_name == 'pull_request' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: windows-${{ matrix.renderer }}-build path: | diff --git a/.github/workflows/gh-pages-android-api.yml b/.github/workflows/gh-pages-android-api.yml index 5f2a961a0..3a5a10ac5 100644 --- a/.github/workflows/gh-pages-android-api.yml +++ b/.github/workflows/gh-pages-android-api.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false @@ -28,7 +28,7 @@ jobs: run: ./gradlew dokkaGenerate - name: Deploy 🚀 - uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3 + uses: JamesIves/github-pages-deploy-action@4a3abc783e1a24aeb44c16e869ad83caf6b4cc23 # v4.7.4 with: branch: gh-pages folder: platform/android/MapLibreAndroid/build/dokka/html diff --git a/.github/workflows/gh-pages-android-examples.yml b/.github/workflows/gh-pages-android-examples.yml index 9b3313fce..0cb47c620 100644 --- a/.github/workflows/gh-pages-android-examples.yml +++ b/.github/workflows/gh-pages-android-examples.yml @@ -17,13 +17,13 @@ jobs: shell: bash steps: - name: Checkout 🛎️ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - name: Generate documentation run: make mkdocs-build - name: Deploy 🚀 - uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3 + uses: JamesIves/github-pages-deploy-action@4a3abc783e1a24aeb44c16e869ad83caf6b4cc23 # v4.7.4 with: branch: gh-pages folder: platform/android/site diff --git a/.github/workflows/gh-pages-cpp-api.yml b/.github/workflows/gh-pages-cpp-api.yml index a907aa1fb..bb9ee55f7 100644 --- a/.github/workflows/gh-pages-cpp-api.yml +++ b/.github/workflows/gh-pages-cpp-api.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: true @@ -20,7 +20,7 @@ jobs: run: doxygen - name: Deploy 🚀 - uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3 + uses: JamesIves/github-pages-deploy-action@4a3abc783e1a24aeb44c16e869ad83caf6b4cc23 # v4.7.4 with: branch: gh-pages folder: docs/doxygen/html diff --git a/.github/workflows/gh-pages-docc.yml b/.github/workflows/gh-pages-docc.yml index 6a06f1e50..282ca4bc6 100644 --- a/.github/workflows/gh-pages-docc.yml +++ b/.github/workflows/gh-pages-docc.yml @@ -20,7 +20,7 @@ jobs: runs-on: macos-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - name: Configure AWS Credentials uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 @@ -41,7 +41,7 @@ jobs: cd build zip -r docs.zip docs/ - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: docc-docs path: build/docs.zip @@ -52,10 +52,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - name: Download DocC docs artifacts - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v4 + uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v4 with: name: docc-docs path: build @@ -67,7 +67,7 @@ jobs: rm docs.zip - name: Deploy DocC documentation (main) 🚀 - uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3 + uses: JamesIves/github-pages-deploy-action@4a3abc783e1a24aeb44c16e869ad83caf6b4cc23 # v4.7.4 with: branch: gh-pages folder: build/docs diff --git a/.github/workflows/gh-pages-mdbook.yml b/.github/workflows/gh-pages-mdbook.yml index 0ee87b836..f66ee48ad 100644 --- a/.github/workflows/gh-pages-mdbook.yml +++ b/.github/workflows/gh-pages-mdbook.yml @@ -16,7 +16,7 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3.0.0 - name: Setup mdBook uses: peaceiris/actions-mdbook@ee69d230fe19748b7abf22df32acaa93833fad08 # v2.0.0 @@ -29,7 +29,7 @@ jobs: working-directory: docs/mdbook shell: bash run: mdbook build - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: book path: docs/mdbook/book/ @@ -40,15 +40,15 @@ jobs: name: Deploy runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - name: Download book - uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v4 + uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v4 with: name: book path: artifacts/book - name: Deploy - uses: JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3 + uses: JamesIves/github-pages-deploy-action@4a3abc783e1a24aeb44c16e869ad83caf6b4cc23 # v4.7.4 with: branch: gh-pages folder: artifacts/book diff --git a/.github/workflows/ios-ci.yml b/.github/workflows/ios-ci.yml index 2ca86f149..f9905ecec 100644 --- a/.github/workflows/ios-ci.yml +++ b/.github/workflows/ios-ci.yml @@ -38,7 +38,7 @@ jobs: outputs: should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files-yaml.outputs.ios_any_modified != 'true' }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -73,13 +73,13 @@ jobs: working-directory: platform/ios shell: bash steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false - name: Cache Bazel - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} restore-keys: | @@ -142,7 +142,7 @@ jobs: zip -r "$render_test_app_dir"/RenderTest.xctest.zip RenderTest.xctest echo render_test_artifacts_dir="$render_test_app_dir" >> "$GITHUB_ENV" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: ios-render-test retention-days: 3 @@ -169,7 +169,7 @@ jobs: zip -r "$ios_cpp_test_app_dir"/CppUnitTests.xctest.zip CppUnitTests.xctest echo ios_cpp_test_artifacts_dir="$ios_cpp_test_app_dir" >> "$GITHUB_ENV" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: ios-cpp-unit-tests retention-days: 3 @@ -190,7 +190,7 @@ jobs: - name: Upload size test as artifact (Bloaty) if: github.event_name == 'pull_request' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: ios-size-test-files retention-days: 3 @@ -230,7 +230,7 @@ jobs: working-directory: platform/ios shell: bash steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive @@ -247,7 +247,7 @@ jobs: (github.event_name == 'push' && steps.version-file-ios-changed.outputs.any_changed == 'true') run: echo make_release=true >> "$GITHUB_ENV" - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 if: env.make_release with: node-version-file: ".nvmrc" @@ -320,7 +320,7 @@ jobs: - name: Release (GitHub) - Create Draft if: env.make_release id: github_release - uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3 + uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2 with: name: ios-v${{ env.version }} files: | @@ -335,7 +335,7 @@ jobs: # needed to trigger workflow for Swift Package Index release - name: Generate token if: env.make_release - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 + uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0 id: generate_token with: app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} @@ -370,7 +370,7 @@ jobs: - name: Publish release (remove draft) if: env.make_release - uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2.3.3 + uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe # v2.4.2 with: tag_name: ios-v${{ env.version }} name: ios-v${{ env.version }} @@ -388,7 +388,7 @@ jobs: runs-on: macos-14 if: needs.pre_job.outputs.should_skip != 'true' steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive diff --git a/.github/workflows/ios-device-test.yml b/.github/workflows/ios-device-test.yml index 0fef5e775..6148dbf33 100644 --- a/.github/workflows/ios-device-test.yml +++ b/.github/workflows/ios-device-test.yml @@ -21,12 +21,12 @@ jobs: runs-on: ubuntu-22.04 if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success' steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false - name: Generate token - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 + uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0 id: generate_token with: app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} @@ -76,7 +76,7 @@ jobs: - name: Generate another token (previous one could have expired) if: always() - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 # v2.1.4 + uses: actions/create-github-app-token@7e473efe3cb98aa54f8d4bac15400b15fad77d94 # v2.2.0 id: generate_token_2 with: app-id: ${{ secrets.MAPLIBRE_NATIVE_BOT_APP_ID }} diff --git a/.github/workflows/ios-release-cocoapods.yml b/.github/workflows/ios-release-cocoapods.yml index 23ec606fc..151421d00 100644 --- a/.github/workflows/ios-release-cocoapods.yml +++ b/.github/workflows/ios-release-cocoapods.yml @@ -14,7 +14,7 @@ jobs: working-directory: platform/ios runs-on: macos-14 steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false diff --git a/.github/workflows/linux-ci.yml b/.github/workflows/linux-ci.yml index 01f09087e..a397bcc5c 100644 --- a/.github/workflows/linux-ci.yml +++ b/.github/workflows/linux-ci.yml @@ -33,7 +33,7 @@ jobs: outputs: should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.linux_any_modified != 'true' }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -66,7 +66,7 @@ jobs: rust: true runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -152,7 +152,7 @@ jobs: - name: Upload mbgl-render as artifact if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: mbgl-render path: | @@ -160,7 +160,7 @@ jobs: - name: Upload mbgl-benchmark-runner as artifact if: matrix.variant.renderer == 'opengl' && !matrix.variant.rust && github.event_name == 'pull_request' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: mbgl-benchmark-runner path: | @@ -202,7 +202,7 @@ jobs: - name: Upload render test result if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: render-test-result-${{ matrix.variant.renderer }} path: | @@ -218,7 +218,7 @@ jobs: linux-coverage: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -227,14 +227,14 @@ jobs: run: .github/scripts/install-linux-deps - name: Cache Bazel - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} restore-keys: | ${{ runner.os }}-bazel- path: ~/.cache/bazel - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: '.nvmrc' @@ -254,7 +254,7 @@ jobs: echo coverage_report="$(bazel info output_path)"/_coverage/_coverage_report.dat >> "$GITHUB_ENV" - name: Upload coverage report - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: coverage-report path: ${{ env.coverage_report }} @@ -268,7 +268,7 @@ jobs: - linux-build-and-test - linux-coverage steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 - if: github.event_name == 'pull_request' uses: ./.github/actions/save-pr-number diff --git a/.github/workflows/macos-ci.yml b/.github/workflows/macos-ci.yml index b605acbdb..a3cad621f 100644 --- a/.github/workflows/macos-ci.yml +++ b/.github/workflows/macos-ci.yml @@ -69,13 +69,13 @@ jobs: shell: bash steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive fetch-depth: 0 - name: Cache Bazel - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: key: ${{ runner.os }}-bazel-${{ hashFiles('.bazelversion', '.bazelrc', 'WORKSPACE', 'WORKSPACE.bazel', 'MODULE.bazel') }} restore-keys: | @@ -106,7 +106,7 @@ jobs: name: wgpu steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -155,7 +155,7 @@ jobs: - name: Upload render report if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: macos-webgpu-${{ matrix.variant.impl }}-render-report path: metrics/macos-webgpu-${{ matrix.variant.impl }}.html diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml index da4d6952e..49a5409b9 100644 --- a/.github/workflows/node-ci.yml +++ b/.github/workflows/node-ci.yml @@ -100,7 +100,7 @@ jobs: run: git config --global core.longpaths true - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -141,7 +141,7 @@ jobs: /usr/sbin/update-ccache-symlinks - name: Use Node.js from nvmrc - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: 'platform/node/.nvmrc' @@ -193,7 +193,7 @@ jobs: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }} - name: Cache cmake-node-module deps - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: # downloaded with platform/node/cmake/module.cmake path: build/headers @@ -218,7 +218,7 @@ jobs: - name: Restore vcpkg binary cache if: runner.os == 'Windows' - uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -259,7 +259,7 @@ jobs: - name: Upload render test artifacts (MacOS) if: runner.os == 'MacOS' && steps.render_tests.outcome == 'failure' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: render-query-test-results_${{ runner.os }}_${{ matrix.arch }} path: metrics/macos-xcode11-release-style.html diff --git a/.github/workflows/node-release.yml b/.github/workflows/node-release.yml index 5832dbf81..1bd73ec09 100644 --- a/.github/workflows/node-release.yml +++ b/.github/workflows/node-release.yml @@ -13,12 +13,12 @@ jobs: run: shell: bash steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false - name: Use Node.js from nvmrc - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: 'platform/node/.nvmrc' @@ -70,7 +70,7 @@ jobs: run: git config --global core.longpaths true - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -111,7 +111,7 @@ jobs: /usr/sbin/update-ccache-symlinks - name: Use Node.js from nvmrc - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: 'platform/node/.nvmrc' @@ -163,7 +163,7 @@ jobs: ${{ matrix.runs-on }}-${{ matrix.arch }}-${{ env.BUILDTYPE }} - name: Cache cmake-node-module deps - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: # downloaded with platform/node/cmake/module.cmake path: build/headers @@ -188,7 +188,7 @@ jobs: - name: Restore vcpkg binary cache if: runner.os == 'Windows' - uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -251,12 +251,12 @@ jobs: shell: bash steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false - name: Use Node.js from nvmrc - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: 'platform/node/.nvmrc' diff --git a/.github/workflows/pr-bloaty-ios.yml b/.github/workflows/pr-bloaty-ios.yml index c1cda0ddb..26fd52c7f 100644 --- a/.github/workflows/pr-bloaty-ios.yml +++ b/.github/workflows/pr-bloaty-ios.yml @@ -19,14 +19,14 @@ jobs: outputs: should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: sparse-checkout: | .github .nvmrc persist-credentials: false - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: '.nvmrc' @@ -45,13 +45,13 @@ jobs: if: needs.pre_job.outputs.should_skip == 'false' runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false - name: Cache Bloaty id: cache-bloaty - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: bloaty/build/bloaty key: bloaty-${{ env.bloaty_sha }} diff --git a/.github/workflows/pr-linux-tests.yml b/.github/workflows/pr-linux-tests.yml index f754dd4e4..47dc7c719 100644 --- a/.github/workflows/pr-linux-tests.yml +++ b/.github/workflows/pr-linux-tests.yml @@ -22,14 +22,14 @@ jobs: outputs: should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: sparse-checkout: | .github .nvmrc persist-credentials: false - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: '.nvmrc' @@ -48,7 +48,7 @@ jobs: if: needs.pre_job.outputs.should_skip == 'false' runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false @@ -70,7 +70,7 @@ jobs: - name: Cache Bloaty id: cache-bloaty - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: bloaty/build/bloaty key: bloaty-${{ env.bloaty_sha }} @@ -139,7 +139,7 @@ jobs: if: needs.pre_job.outputs.should_skip == 'false' runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: true persist-credentials: false diff --git a/.github/workflows/qt-ci.yml b/.github/workflows/qt-ci.yml index b5c03cab3..dbe9e3e95 100644 --- a/.github/workflows/qt-ci.yml +++ b/.github/workflows/qt-ci.yml @@ -104,7 +104,7 @@ jobs: run: git config --global core.longpaths true - name: Checkout - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: path: source submodules: recursive diff --git a/.github/workflows/rust-ci.yaml b/.github/workflows/rust-ci.yaml index 8580739b3..d43607cec 100644 --- a/.github/workflows/rust-ci.yaml +++ b/.github/workflows/rust-ci.yaml @@ -26,7 +26,7 @@ jobs: steps: - uses: taiki-e/install-action@d6912b47771be2c443ec90dbb3d28e023987e782 # v2.62.1 with: { tool: just } - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false - run: just -v ci-test @@ -37,7 +37,7 @@ jobs: steps: - uses: taiki-e/install-action@d6912b47771be2c443ec90dbb3d28e023987e782 # v2.62.1 with: { tool: just } - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false - name: Read crate metadata diff --git a/.github/workflows/typecheck-scripts.yml b/.github/workflows/typecheck-scripts.yml index 038580f3f..1dcb12fef 100644 --- a/.github/workflows/typecheck-scripts.yml +++ b/.github/workflows/typecheck-scripts.yml @@ -9,7 +9,7 @@ jobs: typecheck-scripts: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false diff --git a/.github/workflows/upload-coverage.yml b/.github/workflows/upload-coverage.yml index c671909f2..c2d474349 100644 --- a/.github/workflows/upload-coverage.yml +++ b/.github/workflows/upload-coverage.yml @@ -12,14 +12,14 @@ jobs: outputs: should_run: ${{ !steps.parent_workflow.outputs.was_skipped_or_cancelled }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: sparse-checkout: | .github .nvmrc persist-credentials: false - - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 + - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v4 with: node-version-file: '.nvmrc' @@ -38,7 +38,7 @@ jobs: if: needs.pre_job.outputs.should_run == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: persist-credentials: false diff --git a/.github/workflows/windows-ci.yml b/.github/workflows/windows-ci.yml index 5ac47ef1b..b3eab9d40 100644 --- a/.github/workflows/windows-ci.yml +++ b/.github/workflows/windows-ci.yml @@ -37,7 +37,7 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -62,7 +62,7 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: sparse-checkout: | platform/windows/vendor @@ -76,7 +76,7 @@ jobs: - name: Restore vcpkg binary cache id: vcpkg-cache - uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -102,7 +102,7 @@ jobs: - name: Save vcpkg binary cache if: steps.vcpkg-cache.outputs.cache-hit != 'true' - uses: actions/cache/save@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -118,7 +118,7 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -143,7 +143,7 @@ jobs: Add-Content -Path $env:GITHUB_ENV -Value "VCPKG_COMMIT_ID=${vcpkg_commit_id}" - name: Restore vcpkg binary cache - uses: actions/cache/restore@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: ${{ github.workspace }}\platform\windows\vendor\vcpkg\archives key: vcpkg-${{ env.VCPKG_COMMIT_ID }} @@ -231,7 +231,7 @@ jobs: - name: Upload render test result if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: render-test-result-${{ matrix.renderer }} path: | @@ -255,7 +255,7 @@ jobs: git config --system core.longpaths true git config --system core.autocrlf input - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v4 with: submodules: recursive persist-credentials: false @@ -372,7 +372,7 @@ jobs: - name: Upload render test result if: always() && steps.render_test.outcome == 'failure' - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 + uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 with: name: render-test-result-${{ matrix.renderer }} path: |