From 808701122008f7b56c3adb6cd417ef678fcd21f3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 20 Aug 2026 22:43:37 +0000 Subject: [PATCH] build(deps): bump the github-actions group with 16 updates (#8389) Bumps the github-actions group with 16 updates: | Package | From | To | | --- | --- | --- | | [mhils/workflows/checkout](https://github.com/mhils/workflows) | `8fe88b311a66c441e01edfebe4cd90d8a47fa335` | `acc73c7af100db9fb3f1ad3c0178d382048e943f` | | [mhils/workflows/setup-uv](https://github.com/mhils/workflows) | `8fe88b311a66c441e01edfebe4cd90d8a47fa335` | `acc73c7af100db9fb3f1ad3c0178d382048e943f` | | [mhils/workflows/uv-sync](https://github.com/mhils/workflows) | `8fe88b311a66c441e01edfebe4cd90d8a47fa335` | `acc73c7af100db9fb3f1ad3c0178d382048e943f` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `6.0.1` | `7.0.0` | | [mhils/workflows/.github/workflows/python-build.yml](https://github.com/mhils/workflows) | `8fe88b311a66c441e01edfebe4cd90d8a47fa335` | `acc73c7af100db9fb3f1ad3c0178d382048e943f` | | [actions/cache](https://github.com/actions/cache) | `5.0.5` | `6.1.0` | | [mhils/workflows/.github/workflows/alls-green.yml](https://github.com/mhils/workflows) | `8fe88b311a66c441e01edfebe4cd90d8a47fa335` | `acc73c7af100db9fb3f1ad3c0178d382048e943f` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.0.0` | `4.2.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.0.0` | `4.2.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.6.0` | | [docker/metadata-action](https://github.com/docker/metadata-action) | `6.0.0` | `6.2.0` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `7.1.0` | `7.3.0` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `4.1.0` | `4.2.2` | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` | | [mhils/workflows/setup-python](https://github.com/mhils/workflows) | `8fe88b311a66c441e01edfebe4cd90d8a47fa335` | `acc73c7af100db9fb3f1ad3c0178d382048e943f` | Updates `mhils/workflows/checkout` from 8fe88b311a66c441e01edfebe4cd90d8a47fa335 to acc73c7af100db9fb3f1ad3c0178d382048e943f - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](https://github.com/mhils/workflows/compare/8fe88b311a66c441e01edfebe4cd90d8a47fa335...acc73c7af100db9fb3f1ad3c0178d382048e943f) Updates `mhils/workflows/setup-uv` from 8fe88b311a66c441e01edfebe4cd90d8a47fa335 to acc73c7af100db9fb3f1ad3c0178d382048e943f - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](https://github.com/mhils/workflows/compare/8fe88b311a66c441e01edfebe4cd90d8a47fa335...acc73c7af100db9fb3f1ad3c0178d382048e943f) Updates `mhils/workflows/uv-sync` from 8fe88b311a66c441e01edfebe4cd90d8a47fa335 to acc73c7af100db9fb3f1ad3c0178d382048e943f - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](https://github.com/mhils/workflows/compare/8fe88b311a66c441e01edfebe4cd90d8a47fa335...acc73c7af100db9fb3f1ad3c0178d382048e943f) Updates `actions/setup-node` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020) Updates `codecov/codecov-action` from 6.0.1 to 7.0.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/e79a6962e0d4c0c17b229090214935d2e33f8354...fb8b3582c8e4def4969c97caa2f19720cb33a72f) Updates `mhils/workflows/.github/workflows/python-build.yml` from 8fe88b311a66c441e01edfebe4cd90d8a47fa335 to acc73c7af100db9fb3f1ad3c0178d382048e943f - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](https://github.com/mhils/workflows/compare/8fe88b311a66c441e01edfebe4cd90d8a47fa335...acc73c7af100db9fb3f1ad3c0178d382048e943f) Updates `actions/cache` from 5.0.5 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) Updates `mhils/workflows/.github/workflows/alls-green.yml` from 8fe88b311a66c441e01edfebe4cd90d8a47fa335 to acc73c7af100db9fb3f1ad3c0178d382048e943f - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](https://github.com/mhils/workflows/compare/8fe88b311a66c441e01edfebe4cd90d8a47fa335...acc73c7af100db9fb3f1ad3c0178d382048e943f) Updates `docker/setup-qemu-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/ce360397dd3f832beb865e1373c09c0e9f86d70a...96fe6ef7f33517b61c61be40b68a1882f3264fb8) Updates `docker/setup-buildx-action` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd...bb05f3f5519dd87d3ba754cc423b652a5edd6d2c) Updates `docker/login-action` from 4.1.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...dbcb813823bdd20940b903addbd779551569679f) Updates `docker/metadata-action` from 6.0.0 to 6.2.0 - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](https://github.com/docker/metadata-action/compare/030e881283bb7a6894de51c315a6bfe6a94e05cf...dc802804100637a589fabce1cb79ff13a1411302) Updates `docker/build-push-action` from 7.1.0 to 7.3.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/bcafcacb16a39f128d818304e6c9c0c18556b85f...53b7df96c91f9c12dcc8a07bcb9ccacbed38856a) Updates `actions/attest-build-provenance` from 4.1.0 to 4.2.2 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32...4d101475d8b20a2381f78447822ac1eab6504dd8) Updates `actions/checkout` from 6.0.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `mhils/workflows/setup-python` from 8fe88b311a66c441e01edfebe4cd90d8a47fa335 to acc73c7af100db9fb3f1ad3c0178d382048e943f - [Release notes](https://github.com/mhils/workflows/releases) - [Commits](https://github.com/mhils/workflows/compare/8fe88b311a66c441e01edfebe4cd90d8a47fa335...acc73c7af100db9fb3f1ad3c0178d382048e943f) --- updated-dependencies: - dependency-name: mhils/workflows/checkout dependency-version: acc73c7af100db9fb3f1ad3c0178d382048e943f dependency-type: direct:production dependency-group: github-actions - dependency-name: mhils/workflows/setup-uv dependency-version: acc73c7af100db9fb3f1ad3c0178d382048e943f dependency-type: direct:production dependency-group: github-actions - dependency-name: mhils/workflows/uv-sync dependency-version: acc73c7af100db9fb3f1ad3c0178d382048e943f dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: mhils/workflows/.github/workflows/python-build.yml dependency-version: acc73c7af100db9fb3f1ad3c0178d382048e943f dependency-type: direct:production dependency-group: github-actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: mhils/workflows/.github/workflows/alls-green.yml dependency-version: acc73c7af100db9fb3f1ad3c0178d382048e943f dependency-type: direct:production dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/metadata-action dependency-version: 6.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: mhils/workflows/setup-python dependency-version: acc73c7af100db9fb3f1ad3c0178d382048e943f dependency-type: direct:production dependency-group: github-actions ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/autofix.yml | 8 ++-- .github/workflows/main.yml | 70 +++++++++++++++++------------------ .github/workflows/release.yml | 6 +-- 3 files changed, 42 insertions(+), 42 deletions(-) diff --git a/.github/workflows/autofix.yml b/.github/workflows/autofix.yml index 8143bb52b..e511fe7ff 100644 --- a/.github/workflows/autofix.yml +++ b/.github/workflows/autofix.yml @@ -13,19 +13,19 @@ jobs: autofix: runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/setup-uv@acc73c7af100db9fb3f1ad3c0178d382048e943f - run: uv lock - - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/uv-sync@acc73c7af100db9fb3f1ad3c0178d382048e943f - run: ruff check --fix-only . - run: ruff format . - run: web/gen/all - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version-file: .github/node-version.txt - run: npm ci diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 2e19548ac..5a232fc0d 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -26,9 +26,9 @@ jobs: name: ${{ matrix.env }} runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/setup-uv@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/uv-sync@acc73c7af100db9fb3f1ad3c0178d382048e943f with: args: --only-group tox @@ -51,14 +51,14 @@ jobs: py: "3.12" runs-on: ${{ matrix.os }} steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/setup-uv@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/uv-sync@acc73c7af100db9fb3f1ad3c0178d382048e943f with: args: --only-group tox - run: tox -e py${{ matrix.py }} - - uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6 + - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./coverage.xml @@ -88,9 +88,9 @@ jobs: run: | apt-get update apt-get install --no-install-recommends -y git ca-certificates binutils build-essential - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/setup-uv@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/uv-sync@acc73c7af100db9fb3f1ad3c0178d382048e943f - run: uv pip install . # pyinstaller 5.9 does not like pyproject.toml + editable installs. - if: runner.os == 'macOS' && github.repository == 'mitmproxy/mitmproxy' @@ -125,7 +125,7 @@ jobs: path: release/dist build-wheel: - uses: mhils/workflows/.github/workflows/python-build.yml@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + uses: mhils/workflows/.github/workflows/python-build.yml@acc73c7af100db9fb3f1ad3c0178d382048e943f with: artifact: binaries.wheel @@ -137,9 +137,9 @@ jobs: startsWith(github.ref, 'refs/tags/') ) steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/setup-uv@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/uv-sync@acc73c7af100db9fb3f1ad3c0178d382048e943f - run: uv pip install . # pyinstaller 5.9 does not like pyproject.toml + editable installs. - run: python -u release/build.py installbuilder-installer msix-installer env: @@ -153,12 +153,12 @@ jobs: test-web-ui: runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version-file: .github/node-version.txt - name: Cache Node.js modules - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: # npm cache files are stored in `~/.npm` on Linux/macOS path: ~/.npm @@ -170,7 +170,7 @@ jobs: run: npm ci - working-directory: ./web run: npm test - - uses: codecov/codecov-action@e79a6962e0d4c0c17b229090214935d2e33f8354 # v6 + - uses: codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v6 with: token: ${{ secrets.CODECOV_TOKEN }} files: ./web/coverage/coverage-final.json @@ -179,7 +179,7 @@ jobs: runs-on: ubuntu-latest needs: build-wheel steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: name: binaries.wheel @@ -192,9 +192,9 @@ jobs: docs: runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/setup-uv@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/uv-sync@acc73c7af100db9fb3f1ad3c0178d382048e943f - run: | wget -q https://github.com/gohugoio/hugo/releases/download/v0.139.3/hugo_extended_0.139.3_linux-amd64.deb echo "3e58800d1fee57269208d07d104ae1a6ab886615344099f2dca0c6ad5279bc11 hugo_extended_0.139.3_linux-amd64.deb" | sha256sum -c @@ -226,7 +226,7 @@ jobs: - build-wheel - build-windows-installer - docs - uses: mhils/workflows/.github/workflows/alls-green.yml@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + uses: mhils/workflows/.github/workflows/alls-green.yml@acc73c7af100db9fb3f1ad3c0178d382048e943f with: jobs: ${{ toJSON(needs) }} allowed-skips: build-windows-installer @@ -246,23 +246,23 @@ jobs: needs: check runs-on: ubuntu-latest steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: name: binaries.wheel path: release/docker - - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0 - - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v1.6.0 + - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 + - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v1.6.0 with: cache-binary: false - name: Login to Docker Hub - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: mitmbot password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to GitHub Container Registry - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.repository_owner }} @@ -270,7 +270,7 @@ jobs: - name: Docker meta id: meta - uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf + uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 env: DOCKER_METADATA_ANNOTATIONS_LEVELS: index with: @@ -286,7 +286,7 @@ jobs: - name: Build and push id: push - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: release/docker platforms: linux/amd64,linux/arm64 @@ -295,7 +295,7 @@ jobs: tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} annotations: ${{ steps.meta.outputs.annotations }} - - uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4 + - uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4 with: subject-name: ghcr.io/${{ github.repository }} subject-digest: ${{ steps.push.outputs.digest }} @@ -326,9 +326,9 @@ jobs: R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }} R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }} steps: - - uses: mhils/workflows/checkout@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/setup-uv@8fe88b311a66c441e01edfebe4cd90d8a47fa335 - - uses: mhils/workflows/uv-sync@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/checkout@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/setup-uv@acc73c7af100db9fb3f1ad3c0178d382048e943f + - uses: mhils/workflows/uv-sync@acc73c7af100db9fb3f1ad3c0178d382048e943f with: args: --only-group deploy @@ -347,7 +347,7 @@ jobs: merge-multiple: true path: release/dist - id: provenance - uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4 + uses: actions/attest-build-provenance@4d101475d8b20a2381f78447822ac1eab6504dd8 # v4 with: subject-path: 'release/dist/*' - run: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a80b3ea83..6b6825ca6 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,14 +22,14 @@ jobs: environment: deploy-release runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: token: ${{ secrets.GH_PUSH_TOKEN }} # this token works to push to the protected main branch. persist-credentials: true - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version-file: .github/node-version.txt - - uses: mhils/workflows/setup-python@8fe88b311a66c441e01edfebe4cd90d8a47fa335 + - uses: mhils/workflows/setup-python@acc73c7af100db9fb3f1ad3c0178d382048e943f - run: ./release/release.py ${{ inputs.version }} ${{ inputs.skip-branch-status-check }} env: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} # this token works with the GraphQL API