From eba292e8f0f476d5926b0cc9a841666a650638df Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Mon, 7 Oct 2024 20:08:31 +0200 Subject: [PATCH] chore(deps): pin dependencies by renovate (#27353) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [EndBug/label-sync](https://redirect.github.com/EndBug/label-sync) | action | pinDigest | -> `5207415` | | [actions/cache](https://redirect.github.com/actions/cache) | action | digest | `0c45773` -> `2cdf405` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | digest | `692973e` -> `eef6144` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | digest | `ac59398` -> `f43a0e5` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | minor | `v3.3.0` -> `v3.6.0` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | pinDigest | -> `ee0669b` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | pinDigest | -> `50fbc62` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | digest | `d27e3f3` -> `65d7f2d` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | pinDigest | -> `0f07f7f` | | [actions/stale](https://redirect.github.com/actions/stale) | action | pinDigest | -> `f7176fd` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | pinDigest | -> `3446296` | | [anchore/sbom-action](https://redirect.github.com/anchore/sbom-action) | action | minor | `v0.14.3` -> `v0.17.2` | | [azohra/shell-linter](https://redirect.github.com/azohra/shell-linter) | action | minor | `v0.3.0` -> `v0.6.0` | | [docker/build-push-action](https://redirect.github.com/docker/build-push-action) | action | digest | `0565240` -> `ca052bb` | | [docker/build-push-action](https://redirect.github.com/docker/build-push-action) | action | pinDigest | -> `ac9327e` | | [docker/login-action](https://redirect.github.com/docker/login-action) | action | digest | `343f7c4` -> `9780b0c` | | [docker/login-action](https://redirect.github.com/docker/login-action) | action | pinDigest | -> `dd4fa06` | | [docker/metadata-action](https://redirect.github.com/docker/metadata-action) | action | digest | `96383f4` -> `8e5442c` | | [docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action) | action | digest | `f95db51` -> `c47758b` | | [docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action) | action | pinDigest | -> `f211e3e` | | [docker/setup-qemu-action](https://redirect.github.com/docker/setup-qemu-action) | action | digest | `6882732` -> `49b3bc8` | | [docker/setup-qemu-action](https://redirect.github.com/docker/setup-qemu-action) | action | pinDigest | -> `27d0a4f` | | ghcr.io/truenas/middleware | container | pinDigest | -> `f6d1c7a` | | ixsystems/catalog_validation | container | pinDigest | -> `ec05445` | | [pascalgn/size-label-action](https://redirect.github.com/pascalgn/size-label-action) | action | minor | `v0.4.3` -> `v0.5.4` | | [peaceiris/actions-label-commenter](https://redirect.github.com/peaceiris/actions-label-commenter) | action | pinDigest | -> `f0dbbef` | | [peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request) | action | pinDigest | -> `18f7dc0` | | [pre-commit/action](https://redirect.github.com/pre-commit/action) | action | patch | `v3.0.0` -> `v3.0.1` | | tccr.io/truecharts/catalog_validation | container | pinDigest | -> `35d6b97` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes
actions/checkout (actions/checkout) ### [`v3.6.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v360) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.5.3...v3.6.0) - [Fix: Mark test scripts with Bash'isms to be run via Bash](https://redirect.github.com/actions/checkout/pull/1377) - [Add option to fetch tags even if fetch-depth > 0](https://redirect.github.com/actions/checkout/pull/579) ### [`v3.5.3`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v353) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.5.2...v3.5.3) - [Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in](https://redirect.github.com/actions/checkout/pull/1196) - [Fix typos found by codespell](https://redirect.github.com/actions/checkout/pull/1287) - [Add support for sparse checkouts](https://redirect.github.com/actions/checkout/pull/1369) ### [`v3.5.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v352) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.5.1...v3.5.2) - [Fix api endpoint for GHES](https://redirect.github.com/actions/checkout/pull/1289) ### [`v3.5.1`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v351) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.5.0...v3.5.1) - [Fix slow checkout on Windows](https://redirect.github.com/actions/checkout/pull/1246) ### [`v3.5.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v350) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.4.0...v3.5.0) - [Add new public key for known_hosts](https://redirect.github.com/actions/checkout/pull/1237) ### [`v3.4.0`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340) [Compare Source](https://redirect.github.com/actions/checkout/compare/v3.3.0...v3.4.0) - [Upgrade codeql actions to v2](https://redirect.github.com/actions/checkout/pull/1209) - [Upgrade dependencies](https://redirect.github.com/actions/checkout/pull/1210) - [Upgrade @​actions/io](https://redirect.github.com/actions/checkout/pull/1225)
anchore/sbom-action (anchore/sbom-action) ### [`v0.17.2`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.2) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.1...v0.17.2) #### Changes in v0.17.2 - Update Syft to v1.11.1 ([#​485](https://redirect.github.com/anchore/sbom-action/issues/485)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.17.1`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.1) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.0...v0.17.1) #### Changes in v0.17.1 - chore(deps): update Syft to v1.11.0 ([#​483](https://redirect.github.com/anchore/sbom-action/issues/483)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.17.0`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.0) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.16.1...v0.17.0) #### Changes in v0.17.0 - chore(deps): update Syft to v1.9.0 ([#​479](https://redirect.github.com/anchore/sbom-action/issues/479)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.16.1`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.16.1) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.16.0...v0.16.1) #### Changes in v0.16.1 - fix: workaround windows install issue ([#​477](https://redirect.github.com/anchore/sbom-action/issues/477)) \[[willmurphyscode](https://redirect.github.com/willmurphyscode)] - fix: allow users to properly use the file input over the default path value ([#​471](https://redirect.github.com/anchore/sbom-action/issues/471)) \[[komish](https://redirect.github.com/komish)] - chore(deps): update Syft to v1.5.0 ([#​470](https://redirect.github.com/anchore/sbom-action/issues/470)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] - docs: notes for matrix and required permissions ([#​469](https://redirect.github.com/anchore/sbom-action/issues/469)) \[[kzantow](https://redirect.github.com/kzantow)] - chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 ([#​466](https://redirect.github.com/anchore/sbom-action/issues/466)) \[[dependabot](https://redirect.github.com/dependabot)] ### [`v0.16.0`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.16.0): v0.16 [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.11...v0.16.0) #### Changes in v0.16.0 - Update Syft to v1.4.1 ([#​465](https://redirect.github.com/anchore/sbom-action/issues/465)) - Update GitHub artifact client ([#​463](https://redirect.github.com/anchore/sbom-action/issues/463)) \[[kzantow](https://redirect.github.com/kzantow)] NOTE: if you are using this action within a *matrix build* and see failures attempting to upload artifacts with duplicate names, you will need to set the `artifact-name` to be unique based on the matrix properties ([an example here](https://redirect.github.com/anchore/sbom-action/blob/main/.github/workflows/test.yml#L36)). This is due to a change to use a newer GitHub API which no longer allows artifacts with duplicate names. ### [`v0.15.11`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.11) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.10...v0.15.11) #### Changes in v0.15.11 - chore(deps): update Syft to v1.3.0 ([#​456](https://redirect.github.com/anchore/sbom-action/issues/456)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] - chore: remove outdated snapshot workflow ([#​457](https://redirect.github.com/anchore/sbom-action/issues/457)) \[[spiffcs](https://redirect.github.com/spiffcs)] - fix: don't pass in a separate env. This makes it impossible to pass env vars via the action context to syft. ([#​455](https://redirect.github.com/anchore/sbom-action/issues/455)) \[[iNoahNothing](https://redirect.github.com/iNoahNothing)] ### [`v0.15.10`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.10) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.9...v0.15.10) #### Changes in v0.15.10 - Update Syft to v1.1.0 ([#​454](https://redirect.github.com/anchore/sbom-action/issues/454)) - Bump Node to v20 on download-syft/publish-sbom actions ([#​448](https://redirect.github.com/anchore/sbom-action/issues/448)) \[[ViacheslavKudinov](https://redirect.github.com/ViacheslavKudinov)] ### [`v0.15.9`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.9) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.8...v0.15.9) #### Changes in v0.15.9 - reduce syft debug level ([#​446](https://redirect.github.com/anchore/sbom-action/issues/446)) \[[kzantow](https://redirect.github.com/kzantow)] - update Syft to v0.105.0 ([#​442](https://redirect.github.com/anchore/sbom-action/issues/442)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.15.8`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.8) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.7...v0.15.8) #### Changes in v0.15.8 - Update Syft to v0.103.1 ([#​441](https://redirect.github.com/anchore/sbom-action/issues/441)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.15.7`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.7) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.6...v0.15.7) #### Changes in v0.15.7 - chore: migrate action to use node v20.11.0 (Iron) FROM node v16.x.x ([#​440](https://redirect.github.com/anchore/sbom-action/issues/440)) \[[spiffcs](https://redirect.github.com/spiffcs)] ### [`v0.15.6`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.6) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.5...v0.15.6) #### Changes in v0.15.6 - chore(deps): update Syft to v0.102.0 ([#​438](https://redirect.github.com/anchore/sbom-action/issues/438)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.15.5`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.5) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.4...v0.15.5) #### Changes in v0.15.5 - chore(deps): update Syft to v0.101.1 ([#​437](https://redirect.github.com/anchore/sbom-action/issues/437)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.15.4`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.4) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.3...v0.15.4) #### Changes in v0.15.4 - chore(deps): update Syft to v0.101.0 ([#​436](https://redirect.github.com/anchore/sbom-action/issues/436)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.15.3`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.3) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.2...v0.15.3) #### Changes in v0.15.3 - chore(deps): update Syft to v0.100.0 ([#​435](https://redirect.github.com/anchore/sbom-action/issues/435)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] ### [`v0.15.2`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.2) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.1...v0.15.2) #### Changes in v0.15.2 - chore(deps): update Syft to v0.99.0 ([#​432](https://redirect.github.com/anchore/sbom-action/issues/432)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] - chore: fix github-script invocation in update-snapshots workflow ([#​433](https://redirect.github.com/anchore/sbom-action/issues/433)) \[[willmurphyscode](https://redirect.github.com/willmurphyscode)] ### [`v0.15.1`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.1) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.15.0...v0.15.1) #### Changes in v0.15.1 - chore(deps): update Syft to v0.98.0 ([#​431](https://redirect.github.com/anchore/sbom-action/issues/431)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] - Add config input ([#​430](https://redirect.github.com/anchore/sbom-action/issues/430)) \[[eyakubovich](https://redirect.github.com/eyakubovich)] - chore: pin and upgrade gh actions ([#​429](https://redirect.github.com/anchore/sbom-action/issues/429)) \[[willmurphyscode](https://redirect.github.com/willmurphyscode)] ### [`v0.15.0`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.15.0) [Compare Source](https://redirect.github.com/anchore/sbom-action/compare/v0.14.3...v0.15.0) #### Changes in v0.14.4 ##### Breaking Changes - Previously, running on Windows required WSL. Now, running on Windows expects to be run on native windows ([#​426](https://redirect.github.com/anchore/sbom-action/issues/426)) \[[willmurphyscode](https://redirect.github.com/willmurphyscode)]. ##### Other Changes - pin and upgrade actions/checkout ([#​428](https://redirect.github.com/anchore/sbom-action/issues/428)) \[[willmurphyscode](https://redirect.github.com/willmurphyscode)] - chore(deps): update Syft to v0.97.1 ([#​427](https://redirect.github.com/anchore/sbom-action/issues/427)) \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)] - add oss community board auto-add workflow ([#​421](https://redirect.github.com/anchore/sbom-action/issues/421)) \[[wagoodman](https://redirect.github.com/wagoodman)]
azohra/shell-linter (azohra/shell-linter) ### [`v0.6.0`](https://redirect.github.com/azohra/shell-linter/releases/tag/v0.6.0): Shell Linter v0.6.0 [Compare Source](https://redirect.github.com/azohra/shell-linter/compare/v0.5.0...v0.6.0) - Added support for excluding files and folders from Shellcheck scan - Upgraded the Shellcheck version used in the Shell-linter action to v0.7.2 to support the updated error/warning codes - Improved performance by adding `-x` to shellcheck to follow sourced files that are not specified as input ### [`v0.5.0`](https://redirect.github.com/azohra/shell-linter/releases/tag/v0.5.0): Shell Linter v0.5.0 [Compare Source](https://redirect.github.com/azohra/shell-linter/compare/v0.4.0...v0.5.0) - Improved performance by only scanning the Shellcheck-supported scripts (sh/bash/dsh/ksh) - Added templates for bug reports, feature requests and pull requests - Improved code coverage by adding more unit tests and integration tests ### [`v0.4.0`](https://redirect.github.com/azohra/shell-linter/releases/tag/v0.4.0): Shell Linter v0.4.0 [Compare Source](https://redirect.github.com/azohra/shell-linter/compare/v0.3.0...v0.4.0) - Added support for ShellCheck severity mode - The default behavior is set to `style` which considers errors with all severity levels - Improved tagging - The latest stable version can be fetched by using `@latest`
pascalgn/size-label-action (pascalgn/size-label-action) ### [`v0.5.4`](https://redirect.github.com/pascalgn/size-label-action/releases/tag/v0.5.4): Release 0.5.4 [Compare Source](https://redirect.github.com/pascalgn/size-label-action/compare/v0.5.3...v0.5.4) #### What's Changed - Add HTTPS proxy support by [@​donovanmuller](https://redirect.github.com/donovanmuller) in [https://github.com/pascalgn/size-label-action/pull/28](https://redirect.github.com/pascalgn/size-label-action/pull/28) #### New Contributors - [@​donovanmuller](https://redirect.github.com/donovanmuller) made their first contribution in [https://github.com/pascalgn/size-label-action/pull/28](https://redirect.github.com/pascalgn/size-label-action/pull/28) **Full Changelog**: https://github.com/pascalgn/size-label-action/compare/v0.5.3...v0.5.4 ### [`v0.5.3`](https://redirect.github.com/pascalgn/size-label-action/releases/tag/v0.5.3): Release 0.5.3 [Compare Source](https://redirect.github.com/pascalgn/size-label-action/compare/v0.5.2...v0.5.3) #### What's Changed - fix: Use list pull request files api by [@​levsa](https://redirect.github.com/levsa) in [https://github.com/pascalgn/size-label-action/pull/54](https://redirect.github.com/pascalgn/size-label-action/pull/54) #### New Contributors - [@​levsa](https://redirect.github.com/levsa) made their first contribution in [https://github.com/pascalgn/size-label-action/pull/54](https://redirect.github.com/pascalgn/size-label-action/pull/54) **Full Changelog**: https://github.com/pascalgn/size-label-action/compare/v0.5.2...v0.5.3 ### [`v0.5.2`](https://redirect.github.com/pascalgn/size-label-action/releases/tag/v0.5.2): Release 0.5.2 [Compare Source](https://redirect.github.com/pascalgn/size-label-action/compare/v0.5.1...v0.5.2) #### What's Changed - feat: use GITHUB_API_URL as baseUrl for octokit by [@​fty4](https://redirect.github.com/fty4) in [https://github.com/pascalgn/size-label-action/pull/43](https://redirect.github.com/pascalgn/size-label-action/pull/43) - feat: add sizeLabel GITHUB_OUTPUT for further reuse in other jobs by [@​mat3e](https://redirect.github.com/mat3e) in [https://github.com/pascalgn/size-label-action/pull/44](https://redirect.github.com/pascalgn/size-label-action/pull/44) #### New Contributors - [@​fty4](https://redirect.github.com/fty4) made their first contribution in [https://github.com/pascalgn/size-label-action/pull/43](https://redirect.github.com/pascalgn/size-label-action/pull/43) - [@​mat3e](https://redirect.github.com/mat3e) made their first contribution in [https://github.com/pascalgn/size-label-action/pull/44](https://redirect.github.com/pascalgn/size-label-action/pull/44) **Full Changelog**: https://github.com/pascalgn/size-label-action/compare/v0.5.1...v0.5.2 ### [`v0.5.1`](https://redirect.github.com/pascalgn/size-label-action/releases/tag/v0.5.1): Release 0.5.1 [Compare Source](https://redirect.github.com/pascalgn/size-label-action/compare/v0.5.0...v0.5.1) Switched to Node 20 ### [`v0.5.0`](https://redirect.github.com/pascalgn/size-label-action/releases/tag/v0.5.0): Release 0.5.0 [Compare Source](https://redirect.github.com/pascalgn/size-label-action/compare/v0.4.3...v0.5.0)
pre-commit/action (pre-commit/action) ### [`v3.0.1`](https://redirect.github.com/pre-commit/action/releases/tag/v3.0.1): pre-commit/action@v3.0.1 [Compare Source](https://redirect.github.com/pre-commit/action/compare/v3.0.0...v3.0.1) ##### Misc - Update actions/cache to v4 - [#​190](https://redirect.github.com/pre-commit/action/issues/190) PR by [@​SukiCZ](https://redirect.github.com/SukiCZ). - [#​189](https://redirect.github.com/pre-commit/action/issues/189) issue by [@​bakerkj](https://redirect.github.com/bakerkj).
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- .github/workflows/charts-lint.yaml | 4 ++-- .github/workflows/charts-release.yaml | 8 ++++---- .github/workflows/charts-test.yaml | 14 +++++++------- .github/workflows/containers.build.yaml | 6 +++--- .github/workflows/containers.housekeeping.yaml | 2 +- .github/workflows/containers.scarf.yaml | 2 +- .github/workflows/pr-validate.yaml | 4 ++-- .github/workflows/prune.yaml | 2 +- .github/workflows/schedule-sync-labels.yaml | 2 +- .../ix-source/.github/workflows/ci.yml | 6 +++--- .../.github/workflows/docker_image.yml | 8 ++++---- .../ix-source/.github/workflows/lint.yml | 4 ++-- .../ix-source/.github/workflows/test.yaml | 4 ++-- .../truecharts-fork/.github/workflows/ci.yml | 6 +++--- .../.github/workflows/containers.build.yaml | 18 +++++++++--------- .../truecharts-fork/.github/workflows/lint.yml | 4 ++-- .../.github/workflows/test.yaml | 4 ++-- .../.github/workflows/fluxupdate.yaml | 4 ++-- .../jailman/.github/workflows/filecheck.yml | 2 +- .../jailman/.github/workflows/shellcheck.yml | 4 ++-- archive/jailman/.github/workflows/wiki.yml | 2 +- .../jailman/wiki/.github/workflows/deploy.yml | 2 +- .../.github/workflows/PR_testing.yaml | 4 ++-- .../.github/workflows/Push_testing.yaml | 4 ++-- .../workflows/metadata-label-commenter.yaml | 4 ++-- .../.github/workflows/metadata-label-pr.yaml | 2 +- .../scale-catalog/.github/workflows/prune.yaml | 2 +- .../workflows/schedule-sync-labels.yaml | 4 ++-- .../scale-catalog/.github/workflows/stale.yaml | 2 +- .../truetool/.github/workflows/renovate.yml | 2 +- .../truetool/.github/workflows/shellcheck.yml | 8 ++++---- .../.github/workflows/docker-publish.yml | 2 +- 32 files changed, 73 insertions(+), 73 deletions(-) diff --git a/.github/workflows/charts-lint.yaml b/.github/workflows/charts-lint.yaml index 22f013c5101..e3b5614df2c 100644 --- a/.github/workflows/charts-lint.yaml +++ b/.github/workflows/charts-lint.yaml @@ -22,13 +22,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout [master] - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: master - name: Checkout [commit] - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} diff --git a/.github/workflows/charts-release.yaml b/.github/workflows/charts-release.yaml index 229008f9d68..1d3b5a9c4ba 100644 --- a/.github/workflows/charts-release.yaml +++ b/.github/workflows/charts-release.yaml @@ -15,7 +15,7 @@ jobs: runs-on: actions-runner-large steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: token: ${{ secrets.BOT_TOKEN }} fetch-depth: 0 @@ -30,7 +30,7 @@ jobs: - name: Cache Changelog id: cache-changelog - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 + uses: actions/cache@2cdf405574d6ef1f33a1d12acccd3ae82f47b3f2 # v4 with: path: changelog.json.gz key: ${{ env.CHANGELOG_CACHE_KEY }} @@ -53,7 +53,7 @@ jobs: gzip "$JSON_FILE" --best - name: Checkout Helm-Staging - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 repository: truecharts/helm-staging @@ -87,7 +87,7 @@ jobs: cd - - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 repository: truecharts/website diff --git a/.github/workflows/charts-test.yaml b/.github/workflows/charts-test.yaml index 508f0f3bd51..63ca9ee00a1 100644 --- a/.github/workflows/charts-test.yaml +++ b/.github/workflows/charts-test.yaml @@ -50,7 +50,7 @@ jobs: detected6: ${{ steps.list-changed.outputs.detected6 }} steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} @@ -115,7 +115,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} @@ -169,7 +169,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} @@ -223,7 +223,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} @@ -277,7 +277,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} @@ -331,7 +331,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} @@ -385,7 +385,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 1 ref: ${{ inputs.checkoutCommit }} diff --git a/.github/workflows/containers.build.yaml b/.github/workflows/containers.build.yaml index fdec6e14363..a1fcdb09d67 100644 --- a/.github/workflows/containers.build.yaml +++ b/.github/workflows/containers.build.yaml @@ -30,7 +30,7 @@ jobs: matrix: "{\"container\": ${{ steps.reduce.outputs.containers }} }" steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3 id: filter with: @@ -51,7 +51,7 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 - name: hadolint uses: reviewdog/action-hadolint@73fec8b28091e5082c19df69815dd749d97b882a # v1.46.0 with: @@ -77,7 +77,7 @@ jobs: if: "!contains(github.event.head_commit.message, '[ci-skip]')" steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 # Define if tests and push should be run against which versions/platforms - name: Prepare diff --git a/.github/workflows/containers.housekeeping.yaml b/.github/workflows/containers.housekeeping.yaml index c34141a2791..3f7c2195aee 100644 --- a/.github/workflows/containers.housekeeping.yaml +++ b/.github/workflows/containers.housekeeping.yaml @@ -16,7 +16,7 @@ jobs: name: "Housekeeping" steps: - name: Checkout branch - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 0 token: ${{ secrets.BOT_TOKEN }} diff --git a/.github/workflows/containers.scarf.yaml b/.github/workflows/containers.scarf.yaml index 59ec74ce0cb..1fa64b370f5 100644 --- a/.github/workflows/containers.scarf.yaml +++ b/.github/workflows/containers.scarf.yaml @@ -9,7 +9,7 @@ jobs: name: "Add to Scarf" steps: - name: Checkout branch - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 0 token: ${{ secrets.BOT_TOKEN }} diff --git a/.github/workflows/pr-validate.yaml b/.github/workflows/pr-validate.yaml index f84931ab63e..f1bd4f1c7ac 100644 --- a/.github/workflows/pr-validate.yaml +++ b/.github/workflows/pr-validate.yaml @@ -17,7 +17,7 @@ jobs: addedOrModifiedCharts: ${{ steps.collect-changes.outputs.addedOrModifiedCharts }} steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 - name: Collect changes id: collect-changes @@ -49,7 +49,7 @@ jobs: head-commit-message: ${{ steps.get_head_commit_message.outputs.headCommitMsg }} steps: - name: Get repo - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: ref: ${{ github.event.pull_request.head.sha }} - name: verbose head git commit message diff --git a/.github/workflows/prune.yaml b/.github/workflows/prune.yaml index 9ace9cc7517..8ba19695c2a 100644 --- a/.github/workflows/prune.yaml +++ b/.github/workflows/prune.yaml @@ -9,7 +9,7 @@ jobs: name: "prune old releases" steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: fetch-depth: 0 - uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5 diff --git a/.github/workflows/schedule-sync-labels.yaml b/.github/workflows/schedule-sync-labels.yaml index fff31628503..927370d46b5 100644 --- a/.github/workflows/schedule-sync-labels.yaml +++ b/.github/workflows/schedule-sync-labels.yaml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 with: token: ${{ secrets.BOT_TOKEN }} diff --git a/archive/catalog_validation/ix-source/.github/workflows/ci.yml b/archive/catalog_validation/ix-source/.github/workflows/ci.yml index a964f544c9f..0fa6c8caba8 100644 --- a/archive/catalog_validation/ix-source/.github/workflows/ci.yml +++ b/archive/catalog_validation/ix-source/.github/workflows/ci.yml @@ -6,11 +6,11 @@ jobs: build-deb: runs-on: ubuntu-latest container: - image: ixsystems/catalog_validation:latest + image: ixsystems/catalog_validation:latest@sha256:ec054455af9857782d13f0507b0e0378ed0dee83dab11a3e1e5939eebb083522 steps: - name: Checkout - uses: actions/checkout@v1 + uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1 - name: Build deb package run: > @@ -27,7 +27,7 @@ jobs: run: mv ../*.deb artifacts if: success() - - uses: actions/upload-artifact@v1 + - uses: actions/upload-artifact@3446296876d12d4e3a0f3145a3c87e67bf0a16b5 # v1 with: name: py-catalog-validation path: artifacts diff --git a/archive/catalog_validation/ix-source/.github/workflows/docker_image.yml b/archive/catalog_validation/ix-source/.github/workflows/docker_image.yml index 91f66097dbd..d8ceb42440b 100644 --- a/archive/catalog_validation/ix-source/.github/workflows/docker_image.yml +++ b/archive/catalog_validation/ix-source/.github/workflows/docker_image.yml @@ -10,17 +10,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Set up QEMU - uses: docker/setup-qemu-action@v1 + uses: docker/setup-qemu-action@27d0a4f181a40b142cce983c5393082c365d1480 # v1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v1 + uses: docker/setup-buildx-action@f211e3e9ded2d9377c8cadc4489a4e38014bc4c9 # v1 - name: Login to DockerHub - uses: docker/login-action@v1 + uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Build and push id: docker_build - uses: docker/build-push-action@v2 + uses: docker/build-push-action@ac9327eae2b366085ac7f6a2d02df8aa8ead720a # v2 with: push: true tags: ixsystems/catalog_validation:latest diff --git a/archive/catalog_validation/ix-source/.github/workflows/lint.yml b/archive/catalog_validation/ix-source/.github/workflows/lint.yml index 8cd12cb7c51..650064973e2 100644 --- a/archive/catalog_validation/ix-source/.github/workflows/lint.yml +++ b/archive/catalog_validation/ix-source/.github/workflows/lint.yml @@ -8,9 +8,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 - name: Set up Python 3.8 - uses: actions/setup-python@v1 + uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1 with: python-version: 3.8 - name: Install dependencies diff --git a/archive/catalog_validation/ix-source/.github/workflows/test.yaml b/archive/catalog_validation/ix-source/.github/workflows/test.yaml index 81880fe3082..3089b4dcbb0 100644 --- a/archive/catalog_validation/ix-source/.github/workflows/test.yaml +++ b/archive/catalog_validation/ix-source/.github/workflows/test.yaml @@ -7,10 +7,10 @@ jobs: runs-on: ubuntu-latest container: - image: ghcr.io/truenas/middleware:master + image: ghcr.io/truenas/middleware:master@sha256:f6d1c7a932e0745d3bf9928711de0e715d7d130e317931a2498457aec5aa555b steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 - name: Setup dependencies run: | /usr/bin/install-dev-tools diff --git a/archive/catalog_validation/truecharts-fork/.github/workflows/ci.yml b/archive/catalog_validation/truecharts-fork/.github/workflows/ci.yml index 2d48c77a40d..9358902f1e1 100644 --- a/archive/catalog_validation/truecharts-fork/.github/workflows/ci.yml +++ b/archive/catalog_validation/truecharts-fork/.github/workflows/ci.yml @@ -6,11 +6,11 @@ jobs: build-deb: runs-on: ubuntu-latest container: - image: tccr.io/truecharts/catalog_validation:latest + image: tccr.io/truecharts/catalog_validation:latest@sha256:35d6b9765e7f86f064b494c640b60ca485b4a82a12e4851930dd50fca83c6c2e steps: - name: Checkout - uses: actions/checkout@v1 + uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1 - name: Build deb package run: > @@ -27,7 +27,7 @@ jobs: run: mv ../*.deb artifacts if: success() - - uses: actions/upload-artifact@v1 + - uses: actions/upload-artifact@3446296876d12d4e3a0f3145a3c87e67bf0a16b5 # v1 with: name: py-catalog-validation path: artifacts diff --git a/archive/catalog_validation/truecharts-fork/.github/workflows/containers.build.yaml b/archive/catalog_validation/truecharts-fork/.github/workflows/containers.build.yaml index ee67f87fd27..cd121b05b2b 100644 --- a/archive/catalog_validation/truecharts-fork/.github/workflows/containers.build.yaml +++ b/archive/catalog_validation/truecharts-fork/.github/workflows/containers.build.yaml @@ -16,7 +16,7 @@ jobs: if: "!contains(github.event.head_commit.message, '[ci-skip]')" steps: - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 # Define if tests and push should be run against which versions/platforms - name: Prepare @@ -42,17 +42,17 @@ jobs: format: 'YYYYMMDDHHmmss' - name: Set up QEMU - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3 + uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3 with: platforms: amd64 - uses: sigstore/cosign-installer@main - name: Install Syft - uses: anchore/sbom-action/download-syft@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3 + uses: anchore/sbom-action/download-syft@61119d458adab75f756bc0b9e4bde25725f86a7a # v0.17.2 - name: Login to Quay - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3 + uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 if: github.event_name != 'pull_request' with: registry: quay.io @@ -60,7 +60,7 @@ jobs: password: ${{ secrets.QUAY_SECRET }} - name: Login to GHCR - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3 + uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 if: github.event_name != 'pull_request' with: registry: ghcr.io @@ -69,7 +69,7 @@ jobs: - name: Docker meta id: meta - uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5 + uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5 with: # list of Docker images to use as base name for tags images: | @@ -80,7 +80,7 @@ jobs: # Install and configure Buildx - name: Set up Docker Buildx id: buildx - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3 + uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3 with: install: true version: latest @@ -89,7 +89,7 @@ jobs: # Creates a local build to run tests on - name: Build and Load local test-container if: ${{ steps.prep.outputs.goss == 'true' }} - uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5 + uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5 with: build-args: | CONTAINER_NAME=catalog_validation @@ -102,7 +102,7 @@ jobs: # Push if not a PR, otherwise just test the build process for all requested platforms - name: Build and Push id: push - uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5 + uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5 with: build-args: | CONTAINER_NAME=catalog_validation diff --git a/archive/catalog_validation/truecharts-fork/.github/workflows/lint.yml b/archive/catalog_validation/truecharts-fork/.github/workflows/lint.yml index 8cd12cb7c51..650064973e2 100644 --- a/archive/catalog_validation/truecharts-fork/.github/workflows/lint.yml +++ b/archive/catalog_validation/truecharts-fork/.github/workflows/lint.yml @@ -8,9 +8,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 - name: Set up Python 3.8 - uses: actions/setup-python@v1 + uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1 with: python-version: 3.8 - name: Install dependencies diff --git a/archive/catalog_validation/truecharts-fork/.github/workflows/test.yaml b/archive/catalog_validation/truecharts-fork/.github/workflows/test.yaml index 74fc0f44ed7..3867280cd4e 100644 --- a/archive/catalog_validation/truecharts-fork/.github/workflows/test.yaml +++ b/archive/catalog_validation/truecharts-fork/.github/workflows/test.yaml @@ -8,9 +8,9 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 - name: Set up Python 3.8 - uses: actions/setup-python@v1 + uses: actions/setup-python@0f07f7f756721ebd886c2462646a35f78a8bc4de # v1 with: python-version: 3.8 - name: Install dependencies diff --git a/archive/clustertool/.github/workflows/fluxupdate.yaml b/archive/clustertool/.github/workflows/fluxupdate.yaml index 3d9b0c51508..510538f75a9 100644 --- a/archive/clustertool/.github/workflows/fluxupdate.yaml +++ b/archive/clustertool/.github/workflows/fluxupdate.yaml @@ -10,7 +10,7 @@ jobs: flux-upgrade: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 with: fetch-depth: 1 @@ -28,7 +28,7 @@ jobs: echo "::set-output name=flux_version::$VERSION" - name: Create pull request for Flux upgrade - uses: peter-evans/create-pull-request@v3 + uses: peter-evans/create-pull-request@18f7dc018cc2cd597073088f7c7591b9d1c02672 # v3 with: token: ${{ secrets.GITHUB_TOKEN }} branch: "flux/upgrade-${{ steps.upgrade.outputs.flux_version }}" diff --git a/archive/jailman/.github/workflows/filecheck.yml b/archive/jailman/.github/workflows/filecheck.yml index e3efcef86de..449730b4af7 100644 --- a/archive/jailman/.github/workflows/filecheck.yml +++ b/archive/jailman/.github/workflows/filecheck.yml @@ -11,7 +11,7 @@ jobs: name: Check Files runs-on: ubuntu-latest steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1 - name: check existance run: | for pathname in blueprints/*; do test -e $pathname/readme.md || { echo "File missing: $pathname/readme.md"; error="true"; }; done diff --git a/archive/jailman/.github/workflows/shellcheck.yml b/archive/jailman/.github/workflows/shellcheck.yml index d4e3bd5b8c8..0a9f158517c 100644 --- a/archive/jailman/.github/workflows/shellcheck.yml +++ b/archive/jailman/.github/workflows/shellcheck.yml @@ -14,6 +14,6 @@ jobs: Shellcheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1 - name: Shell Linter - uses: azohra/shell-linter@v0.3.0 + uses: azohra/shell-linter@6bbeaa868df09c34ddc008e6030cfe89c03394a1 # v0.6.0 diff --git a/archive/jailman/.github/workflows/wiki.yml b/archive/jailman/.github/workflows/wiki.yml index a925925399d..e0ba0ad1120 100644 --- a/archive/jailman/.github/workflows/wiki.yml +++ b/archive/jailman/.github/workflows/wiki.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout master - uses: actions/checkout@v1 + uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1 with: ref: 'master' - name: rename-readme diff --git a/archive/jailman/wiki/.github/workflows/deploy.yml b/archive/jailman/wiki/.github/workflows/deploy.yml index ff040122e25..2b318f5121c 100644 --- a/archive/jailman/wiki/.github/workflows/deploy.yml +++ b/archive/jailman/wiki/.github/workflows/deploy.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout master - uses: actions/checkout@v1 + uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1 with: ref: 'master' - name: Deploy docs diff --git a/archive/scale-catalog-template/.github/workflows/PR_testing.yaml b/archive/scale-catalog-template/.github/workflows/PR_testing.yaml index 001e3c0605a..b8b2b1bc678 100644 --- a/archive/scale-catalog-template/.github/workflows/PR_testing.yaml +++ b/archive/scale-catalog-template/.github/workflows/PR_testing.yaml @@ -6,14 +6,14 @@ jobs: test-apps: runs-on: ubuntu-latest container: - image: ixsystems/catalog_validation:latest + image: ixsystems/catalog_validation:latest@sha256:ec054455af9857782d13f0507b0e0378ed0dee83dab11a3e1e5939eebb083522 steps: - name: Install Helm run: /bin/bash -c "curl https://raw.githubusercontent.com/helm/helm/master/scripts/get-helm-3 | bash" - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 with: fetch-depth: 0 diff --git a/archive/scale-catalog-template/.github/workflows/Push_testing.yaml b/archive/scale-catalog-template/.github/workflows/Push_testing.yaml index 47d58ac70ed..bb2ba8f7474 100644 --- a/archive/scale-catalog-template/.github/workflows/Push_testing.yaml +++ b/archive/scale-catalog-template/.github/workflows/Push_testing.yaml @@ -6,10 +6,10 @@ jobs: build: runs-on: ubuntu-latest container: - image: ixsystems/catalog_validation:latest + image: ixsystems/catalog_validation:latest@sha256:ec054455af9857782d13f0507b0e0378ed0dee83dab11a3e1e5939eebb083522 steps: - - uses: actions/checkout@v1 + - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1 name: Checkout - name: Validate catalog format diff --git a/archive/scale-catalog/.github/workflows/metadata-label-commenter.yaml b/archive/scale-catalog/.github/workflows/metadata-label-commenter.yaml index 168a041aa5f..4dd32e44673 100644 --- a/archive/scale-catalog/.github/workflows/metadata-label-commenter.yaml +++ b/archive/scale-catalog/.github/workflows/metadata-label-commenter.yaml @@ -22,11 +22,11 @@ jobs: name: Label commenter runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: token: ${{ secrets.BOT_TOKEN }} ref: master - - uses: peaceiris/actions-label-commenter@v1 + - uses: peaceiris/actions-label-commenter@f0dbbef043eb1b150b566db36b0bdc8b7f505579 # v1 with: github_token: ${{ secrets.BOT_TOKEN }} diff --git a/archive/scale-catalog/.github/workflows/metadata-label-pr.yaml b/archive/scale-catalog/.github/workflows/metadata-label-pr.yaml index 12cb7138e14..b92a00dd0a4 100644 --- a/archive/scale-catalog/.github/workflows/metadata-label-pr.yaml +++ b/archive/scale-catalog/.github/workflows/metadata-label-pr.yaml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Label Size - uses: pascalgn/size-label-action@v0.4.3 + uses: pascalgn/size-label-action@be08a2d5f857dc99c5b9426cdb5a8ea1aa7f0399 # v0.5.4 env: GITHUB_TOKEN: "${{ secrets.BOT_TOKEN }}" with: diff --git a/archive/scale-catalog/.github/workflows/prune.yaml b/archive/scale-catalog/.github/workflows/prune.yaml index 9c72f020c51..eecc8677b7b 100644 --- a/archive/scale-catalog/.github/workflows/prune.yaml +++ b/archive/scale-catalog/.github/workflows/prune.yaml @@ -9,7 +9,7 @@ jobs: name: "Pruning" steps: - name: Checkout branch - uses: actions/checkout@v2 + uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 with: fetch-depth: 0 token: ${{ secrets.BOT_TOKEN }} diff --git a/archive/scale-catalog/.github/workflows/schedule-sync-labels.yaml b/archive/scale-catalog/.github/workflows/schedule-sync-labels.yaml index 001877c309d..3e142eae4fe 100644 --- a/archive/scale-catalog/.github/workflows/schedule-sync-labels.yaml +++ b/archive/scale-catalog/.github/workflows/schedule-sync-labels.yaml @@ -12,12 +12,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 with: token: ${{ secrets.BOT_TOKEN }} - name: Sync Labels - uses: EndBug/label-sync@v2 + uses: EndBug/label-sync@52074158190acb45f3077f9099fea818aa43f97a # v2 with: config-file: | https://raw.githubusercontent.com/truecharts/.github/main/.github/labels.yaml diff --git a/archive/scale-catalog/.github/workflows/stale.yaml b/archive/scale-catalog/.github/workflows/stale.yaml index fb649a1487f..b0f947e3ba6 100644 --- a/archive/scale-catalog/.github/workflows/stale.yaml +++ b/archive/scale-catalog/.github/workflows/stale.yaml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Check for stale issues and PRs - uses: actions/stale@v5 + uses: actions/stale@f7176fd3007623b69d27091f9b9d4ab7995f0a06 # v5 with: repo-token: ${{ secrets.BOT_TOKEN }} days-before-issue-stale: 180 diff --git a/archive/truetool/.github/workflows/renovate.yml b/archive/truetool/.github/workflows/renovate.yml index 1ef067568f1..14cc0817313 100644 --- a/archive/truetool/.github/workflows/renovate.yml +++ b/archive/truetool/.github/workflows/renovate.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0 + uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 with: token: ${{ secrets.BOT_TOKEN }} - name: Self-hosted Renovate diff --git a/archive/truetool/.github/workflows/shellcheck.yml b/archive/truetool/.github/workflows/shellcheck.yml index b0c3d633b4e..9c268f218e3 100644 --- a/archive/truetool/.github/workflows/shellcheck.yml +++ b/archive/truetool/.github/workflows/shellcheck.yml @@ -10,7 +10,7 @@ jobs: name: Shellcheck runs-on: ubuntu-latest steps: - - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 - name: Run ShellCheck uses: ludeeus/action-shellcheck@master with: @@ -21,6 +21,6 @@ jobs: pre-commit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3 - - uses: actions/setup-python@d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 # v4 - - uses: pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507 # tag=v3.0.0 + - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 + - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4 + - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1 diff --git a/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml b/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml index 69ac76cee65..bfe9592181c 100644 --- a/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml +++ b/containers/apps/kube-sa-proxy/.github/workflows/docker-publish.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 - name: Log in to the Container registry uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3