From e71e65662d423d5af3d1d10b671bfe4a7f232d08 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 18 Aug 2026 18:16:40 +0000 Subject: [PATCH 1/2] chore(deps): bump the github-actions group across 1 directory with 8 updates Bumps the github-actions group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `7.0.1` | | [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` | `7.0.0` | | [actions/create-github-app-token](https://github.com/actions/create-github-app-token) | `1.12.0` | `3.2.0` | | [fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml](https://github.com/fullsend-ai/fullsend) | `0.32.0` | `0.36.0` | | [actions/setup-python](https://github.com/actions/setup-python) | `6.2.0` | `7.0.0` | | [docker/login-action](https://github.com/docker/login-action) | `4.1.0` | `4.6.0` | | [actions/stale](https://github.com/actions/stale) | `10.2.0` | `11.0.0` | | [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) | `21` | `23` | Updates `actions/checkout` from 6.0.2 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67214ff5f5447ce83dd...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `actions/setup-node` from 6.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020) Updates `actions/create-github-app-token` from 1.12.0 to 3.2.0 - [Release notes](https://github.com/actions/create-github-app-token/releases) - [Changelog](https://github.com/actions/create-github-app-token/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/create-github-app-token/compare/d72941d797fd3113feb6b93fd0dec494b13a2547...bcd2ba49218906704ab6c1aa796996da409d3eb1) Updates `fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml` from 0.32.0 to 0.36.0 - [Release notes](https://github.com/fullsend-ai/fullsend/releases) - [Commits](https://github.com/fullsend-ai/fullsend/compare/3cfa255ab4cc8190670585ea42da529119251632...65ceb961020290e43b008daa380765b44f35c5df) Updates `actions/setup-python` from 6.2.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...5fda3b95a4ea91299a34e894583c3862153e4b97) Updates `docker/login-action` from 4.1.0 to 4.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/4907a6ddec9925e35a0a9e82d7399ccc52663121...dbcb813823bdd20940b903addbd779551569679f) Updates `actions/stale` from 10.2.0 to 11.0.0 - [Release notes](https://github.com/actions/stale/releases) - [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/stale/compare/b5d41d4e1d5dceea10e7104786b73624c18a190f...4391f3da665fdf50b6810c1a66712fb9ba21aa93) Updates `dawidd6/action-download-artifact` from 21 to 23 - [Release notes](https://github.com/dawidd6/action-download-artifact/releases) - [Commits](https://github.com/dawidd6/action-download-artifact/compare/b6e2e70617bc3265edd6dab6c906732b2f1ae151...57aa996fc1713cc1579039614f4645a7f4841fd4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/create-github-app-token dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-python dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/stale dependency-version: 11.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: dawidd6/action-download-artifact dependency-version: '23' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-publish-pr.yaml | 12 ++++++------ .../workflows/check-backstage-compatibility.yaml | 8 ++++---- .github/workflows/community-plugin-sweep.yaml | 12 ++++++------ .github/workflows/create-release-branch.yaml | 4 ++-- .github/workflows/e2e-code-quality.yaml | 4 ++-- .github/workflows/e2e-triage-agent.yaml | 2 +- .github/workflows/fullsend.yaml | 2 +- .github/workflows/generate-catalog-index.yaml | 14 +++++++------- .../workflows/label-mandatory-workspace-prs.yaml | 2 +- .github/workflows/native-smoke.yaml | 4 ++-- .github/workflows/nfs-readiness-report.yaml | 4 ++-- .github/workflows/pr-actions.yaml | 2 +- .github/workflows/publish-coverage-upstream.yaml | 4 ++-- .github/workflows/refresh-coverage-snapshot.yaml | 6 +++--- .../refresh-stale-coverage-snapshots.yaml | 4 ++-- .github/workflows/run-workspace-smoke-tests.yaml | 6 +++--- .github/workflows/seed-coverage-main.yaml | 2 +- .github/workflows/stale.yaml | 2 +- .github/workflows/sync-user-guide-to-wiki.yaml | 4 ++-- .github/workflows/update-plugins-repo-refs.yaml | 2 +- .../update-prs-with-release-branch-commits.yaml | 2 +- .github/workflows/update-wiki.yml | 6 +++--- .../workflows/validate-app-config-examples.yaml | 4 ++-- .github/workflows/validate-catalog-scripts.yaml | 4 ++-- .github/workflows/workspace-tests.yaml | 4 ++-- 25 files changed, 60 insertions(+), 60 deletions(-) diff --git a/.github/workflows/auto-publish-pr.yaml b/.github/workflows/auto-publish-pr.yaml index 2a4e00a2ef..9fd597261a 100644 --- a/.github/workflows/auto-publish-pr.yaml +++ b/.github/workflows/auto-publish-pr.yaml @@ -213,7 +213,7 @@ jobs: steps: - name: Checkout overlay repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ${{ needs.prepare.outputs.overlay-repo }} ref: ${{ needs.prepare.outputs.overlay-branch }} @@ -244,7 +244,7 @@ jobs: echo "node-version=${node_version}" >> $GITHUB_OUTPUT - name: Checkout plugins repository (flat) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 if: steps.source-config.outputs.plugins-root == '.' with: repository: ${{ steps.source-config.outputs.plugins-repo }} @@ -252,7 +252,7 @@ jobs: path: source-repo - name: Checkout plugins repository (workspace) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 if: steps.source-config.outputs.plugins-root != '.' with: repository: ${{ steps.source-config.outputs.plugins-repo }} @@ -263,7 +263,7 @@ jobs: path: source-repo - name: Setup Node.js ${{ steps.source-config.outputs.node-version }} - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: ${{ steps.source-config.outputs.node-version }} @@ -348,7 +348,7 @@ jobs: contents: read packages: write steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ${{ needs.prepare.outputs.overlay-repo }} ref: ${{ needs.prepare.outputs.overlay-branch }} @@ -374,7 +374,7 @@ jobs: - name: Setup Node.js if: steps.check-e2e.outputs.has-e2e == 'true' - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 20 diff --git a/.github/workflows/check-backstage-compatibility.yaml b/.github/workflows/check-backstage-compatibility.yaml index 6d24615e91..34f61218e9 100644 --- a/.github/workflows/check-backstage-compatibility.yaml +++ b/.github/workflows/check-backstage-compatibility.yaml @@ -36,7 +36,7 @@ jobs: prepare-required-plugins: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Create the required-plugins file@ continue-on-error: true @@ -67,7 +67,7 @@ jobs: if: always() && github.ref == 'refs/heads/main' steps: - name: Checkout metadata branch - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: metadata @@ -118,10 +118,10 @@ jobs: if: always() && github.ref == 'refs/heads/main' steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Checkout wiki - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ${{ github.repository }}.wiki path: wiki diff --git a/.github/workflows/community-plugin-sweep.yaml b/.github/workflows/community-plugin-sweep.yaml index 3c8d502b33..8ee6146631 100644 --- a/.github/workflows/community-plugin-sweep.yaml +++ b/.github/workflows/community-plugin-sweep.yaml @@ -77,7 +77,7 @@ jobs: shard-count: ${{ steps.plan.outputs.shard-count }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -85,7 +85,7 @@ jobs: run: corepack enable - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 cache: yarn @@ -161,7 +161,7 @@ jobs: working-directory: smoke-tests-native steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -169,7 +169,7 @@ jobs: run: corepack enable - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 cache: yarn @@ -239,7 +239,7 @@ jobs: working-directory: smoke-tests-native steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -247,7 +247,7 @@ jobs: run: corepack enable - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 cache: yarn diff --git a/.github/workflows/create-release-branch.yaml b/.github/workflows/create-release-branch.yaml index c9fe3d7516..014d2c894a 100644 --- a/.github/workflows/create-release-branch.yaml +++ b/.github/workflows/create-release-branch.yaml @@ -21,7 +21,7 @@ jobs: prepare-required-plugins: runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Create the required-plugins file@ continue-on-error: true @@ -50,7 +50,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: main diff --git a/.github/workflows/e2e-code-quality.yaml b/.github/workflows/e2e-code-quality.yaml index b63ab3d519..bcf4548fc9 100644 --- a/.github/workflows/e2e-code-quality.yaml +++ b/.github/workflows/e2e-code-quality.yaml @@ -21,12 +21,12 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 diff --git a/.github/workflows/e2e-triage-agent.yaml b/.github/workflows/e2e-triage-agent.yaml index 6cf7018ec7..7d145346f0 100644 --- a/.github/workflows/e2e-triage-agent.yaml +++ b/.github/workflows/e2e-triage-agent.yaml @@ -115,7 +115,7 @@ jobs: - name: Generate GitHub App token if: steps.discover.outputs.should_file == 'true' && (inputs.dry_run || 'false') != 'true' id: generate-token - uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1.12.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.RHDH_GITHUB_APP_ID }} private-key: ${{ secrets.RHDH_GITHUB_APP_PRIVATE_KEY }} diff --git a/.github/workflows/fullsend.yaml b/.github/workflows/fullsend.yaml index 44c50e8fdc..a514df1fa5 100644 --- a/.github/workflows/fullsend.yaml +++ b/.github/workflows/fullsend.yaml @@ -44,7 +44,7 @@ jobs: if: >- github.event_name != 'issue_comment' || github.event.comment.user.type != 'Bot' - uses: fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml@3cfa255ab4cc8190670585ea42da529119251632 # v0.32.0 + uses: fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml@65ceb961020290e43b008daa380765b44f35c5df # v0.36.0 with: event_action: ${{ github.event.action }} install_mode: per-repo diff --git a/.github/workflows/generate-catalog-index.yaml b/.github/workflows/generate-catalog-index.yaml index cc6983d1e5..025b198970 100644 --- a/.github/workflows/generate-catalog-index.yaml +++ b/.github/workflows/generate-catalog-index.yaml @@ -71,7 +71,7 @@ jobs: echo "Target branch: $TARGET_BRANCH" - name: Checkout source branch - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ steps.branches.outputs.source-branch }} fetch-depth: 0 @@ -93,7 +93,7 @@ jobs: fi - name: Setup Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.11' @@ -307,7 +307,7 @@ jobs: steps: - name: Checkout (for Dockerfile) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ needs.generate.outputs.source-branch }} sparse-checkout: | @@ -360,7 +360,7 @@ jobs: steps: - name: Checkout (for Dockerfile) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ needs.generate.outputs.source-branch }} sparse-checkout: | @@ -414,13 +414,13 @@ jobs: steps: - name: Checkout catalog-index branch - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ needs.generate.outputs.target-branch }} fetch-depth: 1 - name: Setup Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.11' @@ -531,7 +531,7 @@ jobs: - name: Checkout wiki id: wiki-checkout continue-on-error: true - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ${{ github.repository }}.wiki path: wiki diff --git a/.github/workflows/label-mandatory-workspace-prs.yaml b/.github/workflows/label-mandatory-workspace-prs.yaml index c99a12e791..f07b76decf 100644 --- a/.github/workflows/label-mandatory-workspace-prs.yaml +++ b/.github/workflows/label-mandatory-workspace-prs.yaml @@ -22,7 +22,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Label PRs based on workspace changes uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 diff --git a/.github/workflows/native-smoke.yaml b/.github/workflows/native-smoke.yaml index 2bc9f2a127..a04d069379 100644 --- a/.github/workflows/native-smoke.yaml +++ b/.github/workflows/native-smoke.yaml @@ -69,7 +69,7 @@ jobs: working-directory: smoke-tests-native steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -78,7 +78,7 @@ jobs: run: corepack enable - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 cache: yarn diff --git a/.github/workflows/nfs-readiness-report.yaml b/.github/workflows/nfs-readiness-report.yaml index 1e0b63af8f..6c18aa4eb0 100644 --- a/.github/workflows/nfs-readiness-report.yaml +++ b/.github/workflows/nfs-readiness-report.yaml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install oras env: @@ -62,7 +62,7 @@ jobs: steps: - name: Checkout wiki - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ${{ github.repository }}.wiki path: wiki diff --git a/.github/workflows/pr-actions.yaml b/.github/workflows/pr-actions.yaml index 74a65a6719..4657057125 100644 --- a/.github/workflows/pr-actions.yaml +++ b/.github/workflows/pr-actions.yaml @@ -579,7 +579,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Override Backstage compatibility id: override diff --git a/.github/workflows/publish-coverage-upstream.yaml b/.github/workflows/publish-coverage-upstream.yaml index ed238cdfae..1107b83dfa 100644 --- a/.github/workflows/publish-coverage-upstream.yaml +++ b/.github/workflows/publish-coverage-upstream.yaml @@ -113,12 +113,12 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Set up Node - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24" diff --git a/.github/workflows/refresh-coverage-snapshot.yaml b/.github/workflows/refresh-coverage-snapshot.yaml index 128db0d272..af29b44a23 100644 --- a/.github/workflows/refresh-coverage-snapshot.yaml +++ b/.github/workflows/refresh-coverage-snapshot.yaml @@ -85,7 +85,7 @@ jobs: # `require`-ing code the PR author wrote into a job holding a write token, # which is the thing the fork guard further down exists to prevent. - name: Checkout the default branch for the comment parser - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false # Its own directory, so the PR-branch checkout below lands on a clean @@ -156,7 +156,7 @@ jobs: - name: Checkout PR branch if: steps.parse.outputs.skip == 'false' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ steps.parse.outputs.head_ref }} # Full history so the push-retry's `git rebase origin/` has a @@ -166,7 +166,7 @@ jobs: - name: Setup Node if: steps.parse.outputs.skip == 'false' - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24" diff --git a/.github/workflows/refresh-stale-coverage-snapshots.yaml b/.github/workflows/refresh-stale-coverage-snapshots.yaml index 12aa21a952..9f45fc3dcc 100644 --- a/.github/workflows/refresh-stale-coverage-snapshots.yaml +++ b/.github/workflows/refresh-stale-coverage-snapshots.yaml @@ -54,7 +54,7 @@ jobs: BRANCH: chore/refresh-coverage-snapshots steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: # find-stale-snapshots.sh compares commit dates per path, which a # shallow clone cannot answer. @@ -62,7 +62,7 @@ jobs: persist-credentials: true - name: Setup Node - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24" diff --git a/.github/workflows/run-workspace-smoke-tests.yaml b/.github/workflows/run-workspace-smoke-tests.yaml index 17f4fe7038..b29ade5d79 100644 --- a/.github/workflows/run-workspace-smoke-tests.yaml +++ b/.github/workflows/run-workspace-smoke-tests.yaml @@ -53,7 +53,7 @@ jobs: path: ./artifacts - name: Log in to GitHub Container Registry - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -295,7 +295,7 @@ jobs: result: ${{ steps.outcome.outputs.result }} steps: - name: Checkout (harness source) - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -310,7 +310,7 @@ jobs: run: corepack enable - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 cache: yarn diff --git a/.github/workflows/seed-coverage-main.yaml b/.github/workflows/seed-coverage-main.yaml index 9421ad29f0..334b2cc10f 100644 --- a/.github/workflows/seed-coverage-main.yaml +++ b/.github/workflows/seed-coverage-main.yaml @@ -49,7 +49,7 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Seed coverage snapshots env: diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml index f169a2363f..7ee500fa76 100644 --- a/.github/workflows/stale.yaml +++ b/.github/workflows/stale.yaml @@ -13,7 +13,7 @@ jobs: pull-requests: write steps: - - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10.2.0 + - uses: actions/stale@4391f3da665fdf50b6810c1a66712fb9ba21aa93 # v11.0.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} days-before-issue-stale: 30 diff --git a/.github/workflows/sync-user-guide-to-wiki.yaml b/.github/workflows/sync-user-guide-to-wiki.yaml index 42b382fcc9..0ddb444c3a 100644 --- a/.github/workflows/sync-user-guide-to-wiki.yaml +++ b/.github/workflows/sync-user-guide-to-wiki.yaml @@ -22,12 +22,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '24' diff --git a/.github/workflows/update-plugins-repo-refs.yaml b/.github/workflows/update-plugins-repo-refs.yaml index ed12c6604b..87ac8a154a 100644 --- a/.github/workflows/update-plugins-repo-refs.yaml +++ b/.github/workflows/update-plugins-repo-refs.yaml @@ -123,7 +123,7 @@ jobs: release-branch-pattern: ${{ steps.read-release-branch-pattern.outputs.RELEASE_BRANCH_PATTERN }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Read Regexps id: read-regexps diff --git a/.github/workflows/update-prs-with-release-branch-commits.yaml b/.github/workflows/update-prs-with-release-branch-commits.yaml index 0518b91b08..590e479a59 100644 --- a/.github/workflows/update-prs-with-release-branch-commits.yaml +++ b/.github/workflows/update-prs-with-release-branch-commits.yaml @@ -47,7 +47,7 @@ jobs: updated-pr-numbers: ${{ steps.update-prs.outputs.updated-pr-numbers }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 id: update-prs env: diff --git a/.github/workflows/update-wiki.yml b/.github/workflows/update-wiki.yml index 2d4ab83564..b3d75bc2a1 100644 --- a/.github/workflows/update-wiki.yml +++ b/.github/workflows/update-wiki.yml @@ -24,10 +24,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: '24' @@ -57,7 +57,7 @@ jobs: await script({github, context, core, checkOciImages}); - name: Checkout wiki repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: ${{ github.repository }}.wiki path: wiki diff --git a/.github/workflows/validate-app-config-examples.yaml b/.github/workflows/validate-app-config-examples.yaml index 1dae435c78..535d2c01d7 100644 --- a/.github/workflows/validate-app-config-examples.yaml +++ b/.github/workflows/validate-app-config-examples.yaml @@ -52,7 +52,7 @@ jobs: working-directory: scripts/validate-app-config-examples steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false @@ -63,7 +63,7 @@ jobs: run: corepack enable - name: Setup Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: 24 cache: yarn diff --git a/.github/workflows/validate-catalog-scripts.yaml b/.github/workflows/validate-catalog-scripts.yaml index 2a35cb8c09..550875c416 100644 --- a/.github/workflows/validate-catalog-scripts.yaml +++ b/.github/workflows/validate-catalog-scripts.yaml @@ -33,10 +33,10 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup Python - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.12' diff --git a/.github/workflows/workspace-tests.yaml b/.github/workflows/workspace-tests.yaml index fa4154afb8..07df745a8b 100644 --- a/.github/workflows/workspace-tests.yaml +++ b/.github/workflows/workspace-tests.yaml @@ -44,7 +44,7 @@ jobs: steps: - name: Download published-exports artifact for this PR if: inputs.workspace != '' && inputs.pr-number != '' - uses: dawidd6/action-download-artifact@b6e2e70617bc3265edd6dab6c906732b2f1ae151 # v21 + uses: dawidd6/action-download-artifact@57aa996fc1713cc1579039614f4645a7f4841fd4 # v23 with: name: published-exports-pr-${{ inputs.pr-number }} workflow: pr-actions.yaml @@ -134,7 +134,7 @@ jobs: missing-metadata-plugins: ${{ steps.build-dynamic-plugins.outputs.missing-metadata-plugins }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ needs.resolve.outputs.overlay-branch }} repository: ${{ needs.resolve.outputs.overlay-repo }} From 1638dadb47bc722e0c1cbef9a222cb8732c7c12d Mon Sep 17 00:00:00 2001 From: Marcel Hild Date: Mon, 31 Aug 2026 14:59:30 +0200 Subject: [PATCH 2/2] chore(deps): bump fullsend reusable-dispatch pin to v0.37.0 Align the Dependabot github-actions PR with the current fullsend tag. This is still only a SHA pin on the existing shim; the scaffold upgrade remains in #3476. Co-authored-by: Cursor --- .github/workflows/fullsend.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/fullsend.yaml b/.github/workflows/fullsend.yaml index a514df1fa5..1597b70d97 100644 --- a/.github/workflows/fullsend.yaml +++ b/.github/workflows/fullsend.yaml @@ -44,7 +44,7 @@ jobs: if: >- github.event_name != 'issue_comment' || github.event.comment.user.type != 'Bot' - uses: fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml@65ceb961020290e43b008daa380765b44f35c5df # v0.36.0 + uses: fullsend-ai/fullsend/.github/workflows/reusable-dispatch.yml@84c8bbbb821ff85136854150b06740253709b3b8 # v0.37.0 with: event_action: ${{ github.event.action }} install_mode: per-repo