From 308c6aef0242bcb6ee7b1779f8257d871bca1922 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 21:04:08 +0000 Subject: [PATCH] chore(github-action): update github-actions --- .github/actions/app-versions/action.yaml | 2 +- .github/workflows/app-builder.yaml | 20 ++++++++++---------- .github/workflows/codeql.yaml | 4 ++-- .github/workflows/deprecate-app.yaml | 4 ++-- .github/workflows/label-sync.yaml | 2 +- .github/workflows/labeler.yaml | 2 +- .github/workflows/retry-release.yaml | 2 +- .github/workflows/vulnerability-scan.yaml | 2 +- 8 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/actions/app-versions/action.yaml b/.github/actions/app-versions/action.yaml index 182490c0e..fb7591215 100644 --- a/.github/actions/app-versions/action.yaml +++ b/.github/actions/app-versions/action.yaml @@ -26,7 +26,7 @@ runs: using: composite steps: - name: Setup Node - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24.x diff --git a/.github/workflows/app-builder.yaml b/.github/workflows/app-builder.yaml index 10a3e993a..3e0785a44 100644 --- a/.github/workflows/app-builder.yaml +++ b/.github/workflows/app-builder.yaml @@ -62,7 +62,7 @@ jobs: type=raw,value=rolling - name: Upload Bake Metadata - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ inputs.app }}-bake-metadata path: ${{ steps.meta.outputs.bake-file }} @@ -97,14 +97,14 @@ jobs: app: ${{ inputs.app }} - name: Login to GitHub Container Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ github.token }} - name: Download Bake Metadata - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: ${{ inputs.app }}-bake-metadata path: ${{ runner.temp }} @@ -117,7 +117,7 @@ jobs: rsync -a --ignore-existing --progress ./include/ ./apps/${{ inputs.app }}/ - name: Build Application - uses: docker/bake-action@018cb6412ab401ebaa809aa5f85966b74628600f # v7.4.0 + uses: docker/bake-action@59cb1203cd42bcefd40a1b6d73b589e48c86040e # v7.5.0 id: bake with: files: | @@ -155,7 +155,7 @@ jobs: - if: ${{ inputs.release }} name: Upload Digest - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ inputs.app }}-digests-${{ steps.target.outputs.arch }} path: ${{ runner.temp }}/digests/* @@ -176,20 +176,20 @@ jobs: persist-credentials: false - name: Download Bake Metadata - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: ${{ inputs.app }}-bake-metadata path: ${{ runner.temp }} - name: Download Digests - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: ${{ runner.temp }}/digests pattern: ${{ inputs.app }}-digests-* merge-multiple: true - name: Login to GitHub Container Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -237,7 +237,7 @@ jobs: persist-credentials: false - name: Login to GitHub Container Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -296,7 +296,7 @@ jobs: persist-credentials: false - name: Generate Token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: app-id: ${{ secrets.BOT_APP_ID }} diff --git a/.github/workflows/codeql.yaml b/.github/workflows/codeql.yaml index 6a46473ae..d232e9163 100644 --- a/.github/workflows/codeql.yaml +++ b/.github/workflows/codeql.yaml @@ -30,12 +30,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: category: language:${{ matrix.language }} diff --git a/.github/workflows/deprecate-app.yaml b/.github/workflows/deprecate-app.yaml index 93e5ae0b6..906d128ab 100644 --- a/.github/workflows/deprecate-app.yaml +++ b/.github/workflows/deprecate-app.yaml @@ -31,7 +31,7 @@ jobs: persist-credentials: false - name: Generate Token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: app-id: ${{ secrets.BOT_APP_ID }} @@ -66,7 +66,7 @@ jobs: persist-credentials: false - name: Generate Token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: app-id: ${{ secrets.BOT_APP_ID }} diff --git a/.github/workflows/label-sync.yaml b/.github/workflows/label-sync.yaml index a2bfaa481..c036017a3 100644 --- a/.github/workflows/label-sync.yaml +++ b/.github/workflows/label-sync.yaml @@ -18,7 +18,7 @@ jobs: persist-credentials: false - name: Generate Token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: app-id: ${{ secrets.BOT_APP_ID }} diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml index 1ffdf6343..c1c720687 100644 --- a/.github/workflows/labeler.yaml +++ b/.github/workflows/labeler.yaml @@ -22,7 +22,7 @@ jobs: persist-credentials: false - name: Generate Token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: app-id: ${{ secrets.BOT_APP_ID }} diff --git a/.github/workflows/retry-release.yaml b/.github/workflows/retry-release.yaml index 5fad22100..690611550 100644 --- a/.github/workflows/retry-release.yaml +++ b/.github/workflows/retry-release.yaml @@ -44,7 +44,7 @@ jobs: persist-credentials: false - name: Generate Token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 id: app-token with: app-id: ${{ secrets.BOT_APP_ID }} diff --git a/.github/workflows/vulnerability-scan.yaml b/.github/workflows/vulnerability-scan.yaml index 2b759a5fc..42ba1b75d 100644 --- a/.github/workflows/vulnerability-scan.yaml +++ b/.github/workflows/vulnerability-scan.yaml @@ -84,7 +84,7 @@ jobs: severity-cutoff: high - name: Upload Report - uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/upload-sarif@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: category: container:${{ matrix.app }} sarif_file: ${{ steps.scan.outputs.sarif }}