From e9461e6f2f45ccb7b8a5b3e7d98a45309111a3d3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 23 Jun 2026 07:04:07 +0000 Subject: [PATCH 1/3] Bump actions/checkout from 6 to 7 in the all-dependencies group Bumps the all-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/unittest.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/unittest.yml b/.github/workflows/unittest.yml index c78be7e..782c052 100644 --- a/.github/workflows/unittest.yml +++ b/.github/workflows/unittest.yml @@ -6,13 +6,13 @@ jobs: name: 'Build docker image' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-test-image lint-ruff: name: 'Lint check (ruff)' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: astral-sh/ruff-action@v3 unit-test: name: 'Unit test' @@ -23,7 +23,7 @@ jobs: matrix: test_target: ['tests/'] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-test-image - name: build image on compose run: docker compose build @@ -53,7 +53,7 @@ jobs: packages: read pull-requests: write steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-test-image - name: build image on compose run: docker compose build From 4ff1d5cafa887befb443ec017ad2a9c8af6b0ec0 Mon Sep 17 00:00:00 2001 From: Yoshihito Aso Date: Tue, 23 Jun 2026 17:47:11 +0900 Subject: [PATCH 2/3] Pin GitHub Actions to specific SHAs --- .github/actions/setup-test-image/action.yml | 6 +++--- .github/workflows/auto-assign.yml | 2 +- .github/workflows/unittest.yml | 22 ++++++++++----------- 3 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/actions/setup-test-image/action.yml b/.github/actions/setup-test-image/action.yml index 502c736..7283b12 100644 --- a/.github/actions/setup-test-image/action.yml +++ b/.github/actions/setup-test-image/action.yml @@ -3,15 +3,15 @@ description: 'Setup docker builder for using github actions cache' runs: using: "composite" steps: - - uses: docker/setup-buildx-action@v3 + - uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Set metadata id: metadata - uses: docker/metadata-action@v5 + uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0 with: images: ibet-prime tags: | type=sha,format=short - - uses: docker/build-push-action@v6 + - uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6.19.2 with: context: . file: ./tests/Dockerfile_unittest diff --git a/.github/workflows/auto-assign.yml b/.github/workflows/auto-assign.yml index ed6c157..01b47d7 100644 --- a/.github/workflows/auto-assign.yml +++ b/.github/workflows/auto-assign.yml @@ -11,4 +11,4 @@ jobs: pull-requests: write runs-on: ubuntu-latest steps: - - uses: kentaro-m/auto-assign-action@v2.0.2 \ No newline at end of file + - uses: kentaro-m/auto-assign-action@0a2c53d3721e4c5cfcce6afd4014aecc337979f6 # v2.0.2 \ No newline at end of file diff --git a/.github/workflows/unittest.yml b/.github/workflows/unittest.yml index 782c052..beefd1b 100644 --- a/.github/workflows/unittest.yml +++ b/.github/workflows/unittest.yml @@ -6,13 +6,13 @@ jobs: name: 'Build docker image' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-test-image lint-ruff: name: 'Lint check (ruff)' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: astral-sh/ruff-action@v3 unit-test: name: 'Unit test' @@ -23,7 +23,7 @@ jobs: matrix: test_target: ['tests/'] steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-test-image - name: build image on compose run: docker compose build @@ -34,13 +34,13 @@ jobs: - name: run unit test run: docker compose run -e TEST_TARGET="${{ matrix.test_target }}" unittest-tre-server - run: mv cov/.coverage cov/.coverage-${{ strategy.job-index }} - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: .coverage-${{ strategy.job-index }} path: cov/.coverage-${{ strategy.job-index }} include-hidden-files: true - run: mv cov/pytest.xml cov/pytest-${{ strategy.job-index }}.xml - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: pytest-${{ strategy.job-index }} path: cov/pytest-${{ strategy.job-index }}.xml @@ -53,7 +53,7 @@ jobs: packages: read pull-requests: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - uses: ./.github/actions/setup-test-image - name: build image on compose run: docker compose build @@ -61,7 +61,7 @@ jobs: run: | sudo chown runner:docker /home/runner/work/TRE-server/TRE-server/cov sudo chmod 777 /home/runner/work/TRE-server/TRE-server/cov - - uses: actions/download-artifact@v8 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: '.coverage-*' path: cov/ @@ -70,21 +70,21 @@ jobs: run: docker compose run -w /app/TRE-server/cov unittest-tre-server bash --login -c 'uv run coverage combine .coverage-*' - name: generate coverage xml file run: docker compose run -w /app/TRE-server unittest-tre-server bash --login -c 'uv run coverage xml --data-file=cov/.coverage -o cov/coverage.xml' - - uses: actions/download-artifact@v8 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: 'pytest-*' path: cov/ merge-multiple: true - - uses: actions/setup-node@v6 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: - node-version: 20 + node-version: 24 - name: Install junit-report-merger run: npm install -g junit-report-merger - name: Merge reports run: jrm cov/pytest.xml "cov/pytest-*.xml" - name: Pytest coverage comment id: coverageComment - uses: MishaKav/pytest-coverage-comment@v1 + uses: MishaKav/pytest-coverage-comment@dd5b80bde6d16941f336518e92929e89069d8451 # v1.7.2 with: report-only-changed-files: true pytest-xml-coverage-path: cov/coverage.xml From c92f4d447f1e0b3d47059b1db6d5416145be53c0 Mon Sep 17 00:00:00 2001 From: Yoshihito Aso Date: Tue, 23 Jun 2026 17:50:46 +0900 Subject: [PATCH 3/3] Update unittest.yml --- .github/workflows/unittest.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/unittest.yml b/.github/workflows/unittest.yml index beefd1b..4357663 100644 --- a/.github/workflows/unittest.yml +++ b/.github/workflows/unittest.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: astral-sh/ruff-action@v3 + - uses: astral-sh/ruff-action@0ce1b0bf8b818ef400413f810f8a11cdbda0034b # v4.0.0 unit-test: name: 'Unit test' runs-on: ubuntu-latest