diff --git a/.github/workflows/reusable-ci-go.yml b/.github/workflows/reusable-ci-go.yml index 44188e1..7620fcd 100644 --- a/.github/workflows/reusable-ci-go.yml +++ b/.github/workflows/reusable-ci-go.yml @@ -91,14 +91,14 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Set up Go - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v5.2.0 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 with: go-version: ${{ inputs.go-version }} cache: true cache-dependency-path: ${{ inputs.working-directory }}/go.sum - name: Run golangci-lint - uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v6.5.0 + uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0 with: version: ${{ inputs.golangci-lint-version }} args: --timeout=${{ inputs.lint-timeout }} @@ -121,7 +121,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Set up Go - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v5.2.0 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 with: go-version: ${{ inputs.go-version }} cache: true @@ -183,7 +183,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Set up Go - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v5.2.0 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 with: go-version: ${{ matrix.go-version }} cache: true @@ -231,7 +231,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Set up Go - uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v5.2.0 + uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0 with: go-version: ${{ inputs.go-version }} cache: true diff --git a/.github/workflows/reusable-ci-typescript.yml b/.github/workflows/reusable-ci-typescript.yml index 3e89600..03f8cd0 100644 --- a/.github/workflows/reusable-ci-typescript.yml +++ b/.github/workflows/reusable-ci-typescript.yml @@ -190,7 +190,7 @@ jobs: - name: Upload coverage report if: inputs.upload-coverage - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.4.2 + uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2 with: files: ./coverage/lcov.info fail_ci_if_error: false diff --git a/.github/workflows/reusable-docs.yml b/.github/workflows/reusable-docs.yml index 8ad55e4..e25713b 100644 --- a/.github/workflows/reusable-docs.yml +++ b/.github/workflows/reusable-docs.yml @@ -124,7 +124,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Install lychee - uses: lycheeverse/lychee-action@a8c4c7cb88f0c7386610c35eb25108e448569cb0 # v2.3.0 + uses: lycheeverse/lychee-action@a8c4c7cb88f0c7386610c35eb25108e448569cb0 # v2.7.0 with: args: >- --verbose @@ -218,7 +218,7 @@ jobs: - name: Upload Pages artifact if: inputs.deploy-to-pages - uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v3.0.1 + uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0 with: path: ${{ inputs.working-directory }}/${{ inputs.output-directory }} @@ -236,4 +236,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v6.0.1 + uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5 diff --git a/.github/workflows/reusable-release.yml b/.github/workflows/reusable-release.yml index 6c965e3..4e20b8d 100644 --- a/.github/workflows/reusable-release.yml +++ b/.github/workflows/reusable-release.yml @@ -214,14 +214,14 @@ jobs: - name: Download artifacts if: inputs.upload-artifacts - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v6.0.1 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: path: release-artifacts continue-on-error: true - name: Create GitHub Release id: create-release - uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.2.1 + uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 with: tag_name: ${{ steps.version.outputs.tag }} name: Release ${{ steps.version.outputs.tag }} diff --git a/.github/workflows/reusable-security.yml b/.github/workflows/reusable-security.yml index 45dc3a2..39e79fb 100644 --- a/.github/workflows/reusable-security.yml +++ b/.github/workflows/reusable-security.yml @@ -108,7 +108,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Set up Python - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v5.3.0 + uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0 with: python-version: ${{ inputs.python-version }} @@ -294,7 +294,7 @@ jobs: GO_AUDIT_ENABLED: ${{ inputs.go-audit }} steps: - name: Download all artifacts - uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v6.0.1 + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: path: security-results continue-on-error: true diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml index 8b7fef0..81f0e6a 100644 --- a/.github/workflows/sync-labels.yml +++ b/.github/workflows/sync-labels.yml @@ -70,7 +70,7 @@ jobs: steps: - name: Checkout repository - # actions/checkout v4.2.2 - 2024-10-31 + # actions/checkout v6.0.1 - 2025-12-28 uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 with: sparse-checkout: | @@ -78,7 +78,7 @@ jobs: sparse-checkout-cone-mode: false - name: Setup Node.js - # actions/setup-node v4.1.0 - 2024-10-24 + # actions/setup-node v6.1.0 - 2025-12-28 uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f with: node-version: '20' diff --git a/actions/setup-node-pnpm/action.yml b/actions/setup-node-pnpm/action.yml index 5fec162..325f6c3 100644 --- a/actions/setup-node-pnpm/action.yml +++ b/actions/setup-node-pnpm/action.yml @@ -47,11 +47,11 @@ runs: using: 'composite' steps: - name: Setup pnpm - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v6.0.1 + uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 - name: Setup Node.js id: node - uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.0.1 + uses: actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1.0 with: node-version: ${{ inputs.node-version }} cache: 'pnpm' diff --git a/actions/setup-python-uv/action.yml b/actions/setup-python-uv/action.yml index 7496e48..4f219cc 100644 --- a/actions/setup-python-uv/action.yml +++ b/actions/setup-python-uv/action.yml @@ -48,7 +48,7 @@ runs: steps: - name: Install uv id: uv - uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v6.0.1 + uses: astral-sh/setup-uv@681c641aba71e4a1c380be3ab5e12ad51f415867 # v7.1.6 with: enable-cache: true cache-dependency-glob: "${{ inputs.working-directory }}/uv.lock"