build: node と各種 actions のバージョンを上げた

.github/workflows/auto-merge-depandabot.yml

@@ -7,8 +7,8 @@ jobs:
   auto-merge-dependabot:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v2
-      - uses: ahmadnassri/action-dependabot-auto-merge@v2
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: ahmadnassri/action-dependabot-auto-merge@45fc124d949b19b6b8bf6645b6c9d55f4f9ac61a # v2.6.6
         with:
           target: minor
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/build.yml

@@ -18,22 +18,22 @@ jobs:
 
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
       - name: Build web
         if: matrix.SERVICE_NAME == 'web'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           context: ./web
           build-args: |
             SPARQL_ENDPOINT_URL=${{ env.SPARQL_ENDPOINT_URL }}
 
       - name: Build virtuoso
         if: matrix.SERVICE_NAME == 'virtuoso'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           context: ./virtuoso
           build-contexts: |

.github/workflows/delivery.yml

@@ -21,18 +21,18 @@ jobs:
 
     steps:
       - name: Checkout the repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
 
       - name: GCP Authenticate
-        uses: google-github-actions/auth@v1
+        uses: google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
         with:
           credentials_json: ${{ secrets.GCP_SA_KEY }}
 
       - name: Setup gcloud
-        uses: google-github-actions/setup-gcloud@v1
+        uses: google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1
 
       - name: Configure docker to use the gcloud cli
         run: gcloud auth configure-docker ${{env.GCP_REGION}}-docker.pkg.dev --quiet
@@ -42,7 +42,7 @@ jobs:
 
       - name: Build and push web
         if: matrix.SERVICE_NAME == 'web'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           context: ./web
           push: true
@@ -52,7 +52,7 @@ jobs:
 
       - name: Build and push virtuoso
         if: matrix.SERVICE_NAME == 'virtuoso'
-        uses: docker/build-push-action@v6
+        uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
         with:
           context: ./virtuoso
           push: true
@@ -75,12 +75,3 @@ jobs:
               --quiet \
               $DEPLOY_ARGS
 
-      - name: Slack Notification
-        uses: lazy-actions/slatify@master
-        if: always()
-        continue-on-error: true
-        with:
-          job_name:  ${{ format('*delivery* ({0})', matrix.SERVICE_NAME) }}
-          type: ${{ job.status }}
-          url: ${{ secrets.SLACK_WEBHOOK }}
-          token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/rdflint.yml

@@ -6,11 +6,15 @@ jobs:
   rdflint:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v3
-      - uses: actions/setup-java@v1
+      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
         with:
+          distribution: 'temurin'
           java-version: 11
-      - uses: imas/setup-rdflint@v1
+      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
+        with:
+          node-version: '25'
+      - uses: imas/setup-rdflint@f6f7c4feca3bb31b025d7d01836f2eab596779de # v1.0.7
       - working-directory: csv2rdf
         run: |
           npm ci

.tool-versions

@@ -1 +1 @@
-nodejs 20.8.0
+nodejs 25.9.0