From f04001fda7d8f78a5b060d86d965df70b239e889 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 10 Dec 2021 16:32:28 +0100 Subject: [PATCH] chore(deps): pin dependencies (#1498) Co-authored-by: Renovate Bot --- .github/workflows/apps.release.yaml | 4 ++-- .github/workflows/apps.test.yaml | 18 +++++++++--------- .github/workflows/common.test.yaml | 16 ++++++++-------- .github/workflows/docs.deploy.yaml | 2 +- .github/workflows/general.security-scan.yaml | 6 +++--- .github/workflows/prune.yaml | 4 ++-- .github/workflows/renovate-bump.yaml | 4 ++-- 7 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/apps.release.yaml b/.github/workflows/apps.release.yaml index 1a733d442b7..32a6fdb5d14 100644 --- a/.github/workflows/apps.release.yaml +++ b/.github/workflows/apps.release.yaml @@ -15,14 +15,14 @@ jobs: image: ghcr.io/truecharts/devcontainer:v2.2.1 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 name: Checkout with: fetch-depth: 100 token: ${{ secrets.BOT_TOKEN }} - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 with: repository: truecharts/catalog token: ${{ secrets.BOT_TOKEN }} diff --git a/.github/workflows/apps.test.yaml b/.github/workflows/apps.test.yaml index 0307706a334..3ed20d29462 100644 --- a/.github/workflows/apps.test.yaml +++ b/.github/workflows/apps.test.yaml @@ -21,7 +21,7 @@ jobs: empty_matrix: ${{ steps.reduce.outputs.empty_matrix }} steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 - uses: dorny/paths-filter@v2 id: filter with: @@ -61,13 +61,13 @@ jobs: ## - name: Checkout if: ${{ matrix.app != '.gitkee' }} - uses: actions/checkout@v2 + uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 with: fetch-depth: 0 - name: Cache helm repo cache id: cache - uses: actions/cache@v2 + uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2 with: key: helmrepocache-${{ github.sha }} path: | @@ -106,7 +106,7 @@ jobs: - name: Install Helm if: ${{ matrix.app != '.gitkee' }} - uses: azure/setup-helm@v1 + uses: azure/setup-helm@18bc76811624f360dbd7f18c2d4ecb32c7b87bab # renovate: tag=v1 with: version: v3.7.1 @@ -119,14 +119,14 @@ jobs: helm repo add prometheus https://prometheus-community.github.io/helm-charts helm repo update - - uses: actions/setup-python@v2 + - uses: actions/setup-python@f38219332975fe8f9c04cca981d674bf22aea1d3 # renovate: tag=v2 if: ${{ matrix.app != '.gitkee' }} with: python-version: 3.7 - name: Set up chart-testing if: ${{ matrix.app != '.gitkee' }} - uses: helm/chart-testing-action@v2.1.0 + uses: helm/chart-testing-action@5f16c27cf7a4fa9c776ff73734df3909b2b65127 # renovate: tag=v2.1.0 ## # Chart-Testing Section @@ -163,20 +163,20 @@ jobs: steps: - name: Cache helm repo cache id: cache - uses: actions/cache@v2 + uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2 with: key: helmrepocache-${{ github.sha }} path: | ~/.cache/helm/repository ~/.config/helm/repositories.yaml - - uses: actions/checkout@v2 + - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 name: Checkout with: fetch-depth: 100 - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 with: repository: truecharts/catalog path: catalog diff --git a/.github/workflows/common.test.yaml b/.github/workflows/common.test.yaml index a5df1ba34e5..33cc80eadd1 100644 --- a/.github/workflows/common.test.yaml +++ b/.github/workflows/common.test.yaml @@ -22,14 +22,14 @@ jobs: steps: - name: Cache helm repo cache id: cache - uses: actions/cache@v2 + uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2 with: key: helmrepocache-${{ github.sha }} path: | ~/.cache/helm/repository ~/.config/helm/repositories.yaml - - uses: actions/checkout@v2 + - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 name: Checkout with: fetch-depth: 100 @@ -57,21 +57,21 @@ jobs: steps: - name: Cache helm repo cache id: cache - uses: actions/cache@v2 + uses: actions/cache@937d24475381cd9c75ae6db12cb4e79714b926ed # renovate: tag=v2 with: key: helmrepocache-${{ github.sha }} path: | ~/.cache/helm/repository ~/.config/helm/repositories.yaml - - uses: actions/checkout@v2 + - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 name: Checkout with: fetch-depth: 100 - name: Install Helm if: ${{ matrix.app != '.gitkee' }} - uses: azure/setup-helm@v1 + uses: azure/setup-helm@18bc76811624f360dbd7f18c2d4ecb32c7b87bab # renovate: tag=v1 with: version: v3.7.1 @@ -83,19 +83,19 @@ jobs: helm repo add prometheus https://prometheus-community.github.io/helm-charts helm repo update - - uses: actions/setup-python@v2 + - uses: actions/setup-python@f38219332975fe8f9c04cca981d674bf22aea1d3 # renovate: tag=v2 if: ${{ matrix.app != '.gitkee' }} with: python-version: 3.7 - name: Set up chart-testing if: ${{ matrix.app != '.gitkee' }} - uses: helm/chart-testing-action@v2.1.0 + uses: helm/chart-testing-action@5f16c27cf7a4fa9c776ff73734df3909b2b65127 # renovate: tag=v2.1.0 ## # Chart-Testing Section ## - - uses: actions/setup-python@v2 + - uses: actions/setup-python@f38219332975fe8f9c04cca981d674bf22aea1d3 # renovate: tag=v2 if: ${{ matrix.app != '.gitkee' }} with: python-version: 3.7 diff --git a/.github/workflows/docs.deploy.yaml b/.github/workflows/docs.deploy.yaml index 74a9de83d51..44eb8ac792c 100644 --- a/.github/workflows/docs.deploy.yaml +++ b/.github/workflows/docs.deploy.yaml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 with: token: ${{ secrets.BOT_TOKEN }} diff --git a/.github/workflows/general.security-scan.yaml b/.github/workflows/general.security-scan.yaml index 8436ba7898c..0464de75433 100644 --- a/.github/workflows/general.security-scan.yaml +++ b/.github/workflows/general.security-scan.yaml @@ -17,7 +17,7 @@ jobs: outputs: dir: ${{ steps.set-dirs.outputs.dir }} # generate output name dir by using inner step output steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 with: token: ${{ secrets.BOT_TOKEN }} - id: set-dirs # Give it an id to handle to get step outputs in the outputs key above @@ -30,7 +30,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 - name: Run Trivy vulnerability scanner in repo mode uses: aquasecurity/trivy-action@master @@ -58,7 +58,7 @@ jobs: fail-fast: false steps: - name: Container Security scan - uses: Azure/container-scan@v0 + uses: Azure/container-scan@595707a78db6069af4db7d81902d7a886ec73973 # renovate: tag=v0 with: image-name: ghcr.io/${{ github.repository_owner }}/${{matrix.dir}}:latest severity-threshold: HIGH diff --git a/.github/workflows/prune.yaml b/.github/workflows/prune.yaml index 0e1025f6ef1..e12ada6d353 100644 --- a/.github/workflows/prune.yaml +++ b/.github/workflows/prune.yaml @@ -9,9 +9,9 @@ jobs: name: "prune old releases" steps: - name: Checkout - uses: actions/checkout@v2 + uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 with: fetch-depth: 0 - - uses: actions/delete-package-versions@v2 + - uses: actions/delete-package-versions@fc4c9fe9124691791f1856863589939fd5a1c071 # renovate: tag=v2 with: min-versions-to-keep: 200 diff --git a/.github/workflows/renovate-bump.yaml b/.github/workflows/renovate-bump.yaml index 1e4b5049791..8e523e1b655 100644 --- a/.github/workflows/renovate-bump.yaml +++ b/.github/workflows/renovate-bump.yaml @@ -12,12 +12,12 @@ jobs: name: Get changed Apps runs-on: ubuntu-20.04 steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 name: Checkout with: fetch-depth: 0 token: ${{ secrets.BOT_TOKEN }} - - uses: actions/checkout@v2 + - uses: actions/checkout@ec3a7ce113134d7a93b817d10a8272cb61118579 # renovate: tag=v2 name: Checkout with: fetch-depth: 0