Skip to content

Commit cfaf8d0

Browse files
renovate-botrenovate-bot
committed
chore(deps): update github-actions
1 parent 3431636 commit cfaf8d0

File tree

12 files changed

+45
-45
lines changed

12 files changed

+45
-45
lines changed

‎.github/actions/build-base-image/action.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ runs:
7474

7575
- name: Download pre-built src
7676
if: inputs.BUILD_IMAGE == 'true' && steps.cache-src.outputs.cache-hit != 'true'
77-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
77+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
7878
with:
7979
name: otp_prebuilt
8080

@@ -88,7 +88,7 @@ runs:
8888

8989
- name: Download pre-built binaries
9090
if: inputs.BUILD_IMAGE == 'true' && steps.cache-binary.outputs.cache-hit != 'true'
91-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
91+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
9292
with:
9393
name: otp_prebuilt
9494

‎.github/actions/ossf-compiler-flags-scanner/action.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ inputs:
2828
runs:
2929
using: composite
3030
steps:
31-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
31+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3232
with:
3333
repository: ossf/wg-best-practices-os-developers
3434
sparse-checkout: docs/Compiler-Hardening-Guides/compiler-options-scraper

‎.github/workflows/github-actions-checker.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
runs-on: 'ubuntu-latest'
3535
name: 'ratchet'
3636
steps:
37-
- uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/[email protected]
37+
- uses: 'actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8' # v5.0.0
3838
- id: files
3939
run: |
4040
FILES=$(find .github/ -name "*.yml" -o -name "*.yaml" -printf "%p ")

‎.github/workflows/license-scanner.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
run-scan:
3636
runs-on: ubuntu-latest
3737
steps:
38-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
38+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3939
with:
4040
fetch-depth: '0'
4141
- uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4

‎.github/workflows/main.yaml‎

Lines changed: 27 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
build-c-code: ${{ steps.c-code-changes.outputs.changes != '[]' || env.FULL_BUILD_AND_CHECK == 'true' }}
6969
all: ${{ steps.apps.outputs.all }}
7070
steps:
71-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
71+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
7272
- uses: ./.github/actions/build-base-image
7373
with:
7474
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -197,10 +197,10 @@ jobs:
197197
WXWIDGETS_VERSION: 3.2.6
198198
MACOS_VERSION: 15
199199
steps:
200-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
200+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
201201

202202
- name: Download source archive
203-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
203+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
204204
with:
205205
name: otp_prebuilt
206206

@@ -246,9 +246,9 @@ jobs:
246246
needs: pack
247247
if: needs.pack.outputs.build-c-code == 'true'
248248
steps:
249-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
249+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
250250
- name: Download source archive
251-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
251+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
252252
with:
253253
name: otp_prebuilt
254254

@@ -279,11 +279,11 @@ jobs:
279279
env:
280280
WXWIDGETS_VERSION: 3.2.6
281281
name: Build Erlang/OTP (Windows)
282-
runs-on: windows-2022
282+
runs-on: windows-2025
283283
needs: pack
284284
if: needs.pack.outputs.build-c-code == 'true'
285285
steps:
286-
- uses: Vampire/setup-wsl@3b46b44374d5d0ae94654c45d114a3ed7a0e07a8 # ratchet:Vampire/setup-wsl@v5.0.1
286+
- uses: Vampire/setup-wsl@6a8db447be7ed35f2f499c02c6e60ff77ef11278 # v6.0.0
287287
with:
288288
distribution: Ubuntu-18.04
289289

@@ -339,7 +339,7 @@ jobs:
339339
nmake TARGET_CPU=amd64 BUILD=release SHARED=0 DIR_SUFFIX_CPU= -f makefile.vc
340340
341341
- name: Download source archive
342-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
342+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
343343
with:
344344
name: otp_prebuilt
345345

@@ -385,7 +385,7 @@ jobs:
385385
fail-fast: false
386386

387387
steps:
388-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
388+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
389389
- uses: ./.github/actions/build-base-image
390390
with:
391391
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -468,7 +468,7 @@ jobs:
468468
fail-fast: false
469469

470470
steps:
471-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
471+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
472472
- uses: ./.github/actions/build-base-image
473473
with:
474474
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -481,7 +481,7 @@ jobs:
481481
if: needs.pack.outputs.build-c-code == 'true'
482482
steps:
483483
- name: Download source archive
484-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
484+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
485485
with:
486486
name: otp_prebuilt
487487
- name: Build on FreeBSD
@@ -509,7 +509,7 @@ jobs:
509509
runs-on: ubuntu-latest
510510
needs: pack
511511
steps:
512-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
512+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
513513
- uses: ./.github/actions/build-base-image
514514
with:
515515
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -563,7 +563,7 @@ jobs:
563563
runs-on: ubuntu-latest
564564
needs: pack
565565
steps:
566-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
566+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
567567
- uses: ./.github/actions/build-base-image
568568
with:
569569
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -588,7 +588,7 @@ jobs:
588588
# type: ["os_mon","sasl"]
589589
fail-fast: false
590590
steps:
591-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
591+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
592592
- uses: ./.github/actions/build-base-image
593593
with:
594594
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -641,12 +641,12 @@ jobs:
641641
if: ${{ !cancelled() }} # Run even if the need has failed
642642
needs: test
643643
steps:
644-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
644+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
645645
- uses: ./.github/actions/build-base-image
646646
with:
647647
BASE_BRANCH: ${{ env.BASE_BRANCH }}
648648
- name: Download test results
649-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
649+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
650650
- name: Merge test results
651651
run: |
652652
shopt -s nullglob
@@ -718,13 +718,13 @@ jobs:
718718
- name: Use HTTPS instead of SSH for Git cloning
719719
run: git config --global url.https://github.com/.insteadOf ssh://[email protected]/
720720

721-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
721+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
722722
- uses: ./.github/actions/build-base-image
723723
with:
724724
BASE_BRANCH: ${{ env.BASE_BRANCH }}
725725

726726
- name: Fetch Default ORT Config
727-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
727+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
728728
with:
729729
repository: oss-review-toolkit/ort-config
730730
ref: "d2978deb230beae095bb6cfec074b94f1a74fd34"
@@ -891,13 +891,13 @@ jobs:
891891
id-token: write
892892

893893
steps:
894-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
894+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
895895
- uses: ./.github/actions/build-base-image
896896
with:
897897
BASE_BRANCH: ${{ env.BASE_BRANCH }}
898898

899899
- name: Download SBoM
900-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
900+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
901901
with:
902902
name: ort-results-otp-${{ env.OTP_SBOM_VERSION }}
903903

@@ -936,19 +936,19 @@ jobs:
936936
echo "tag=${TAG}" >> $GITHUB_OUTPUT
937937
echo "vsn=${VSN}" >> $GITHUB_OUTPUT
938938
939-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
939+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
940940

941941
## Publish the pre-built archive and docs
942942
- name: Download source archive
943-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
943+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
944944
with:
945945
name: otp_prebuilt
946946
- name: Download html docs
947-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
947+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
948948
with:
949949
name: otp_doc_html
950950
- name: Download man docs
951-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
951+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
952952
with:
953953
name: otp_doc_man
954954

@@ -967,18 +967,18 @@ jobs:
967967
sha256sum $FILES > SHA256.txt
968968
969969
- name: Download SBoM
970-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
970+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
971971
with:
972972
name: ort-results-otp-${{ env.OTP_SBOM_VERSION }}
973973

974974
- name: Download ORT Scan Results
975-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
975+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
976976
with:
977977
name: ort-results-otp-${{ env.OTP_SBOM_VERSION }}-scan-result.json.zip
978978

979979
- name: Attest Distribution Assets with SBoM
980980
id: attest-sbom
981-
uses: actions/attest-sbom@bd218ad0dbcb3e146bd073d1d9c6d78e08aa8a0b # v2
981+
uses: actions/attest-sbom@4651f806c01d8637787e274ac3bdf724ef169f34 # v3
982982
with:
983983
subject-path: |
984984
artifacts/*.tar.gz

‎.github/workflows/ossf-compiler-flags-scanner.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
# Only need to read contents
4545
contents: read
4646
steps:
47-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
47+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4848
- name: Create initial pre-release tar
4949
run: .github/scripts/init-pre-release.sh otp_src.tar.gz
5050
- uses: ./.github/actions/build-base-image

‎.github/workflows/osv-scanner-scheduled.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
outputs:
4141
versions: ${{ steps.get-versions.outputs.versions }}
4242
steps:
43-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
43+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4444
- id: get-versions
4545
name: Fetch latest 3 OTP versions
4646
run: |
@@ -60,7 +60,7 @@ jobs:
6060
permissions:
6161
actions: write
6262
steps:
63-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
63+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6464
with:
6565
ref: ${{ matrix.type }}
6666

‎.github/workflows/pr-comment.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
outputs:
4545
result: ${{ steps.pr-number.outputs.result }}
4646
steps:
47-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
47+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4848
- uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4
4949
with:
5050
otp-version: '27'
@@ -64,9 +64,9 @@ jobs:
6464
pull-requests: write
6565
if: github.event.action == 'requested' && needs.pr-number.outputs.result != ''
6666
steps:
67-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
67+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6868
## We create an initial comment with some useful help to the user
69-
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # ratchet:actions/github-script@v7.0.1
69+
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
7070
with:
7171
script: |
7272
const script = require('./.github/scripts/pr-comment.js');
@@ -87,7 +87,7 @@ jobs:
8787
needs.pr-number.outputs.result != '' &&
8888
github.event.workflow_run.conclusion != 'skipped'
8989
steps:
90-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
90+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
9191
- name: Download and Extract Artifacts
9292
id: extract
9393
env:
@@ -124,7 +124,7 @@ jobs:
124124

125125
## Append some useful links and tips to the test results posted by
126126
## Publish CT Test Results
127-
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # ratchet:actions/github-script@v7.0.1
127+
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
128128
if: always()
129129
with:
130130
script: |

‎.github/workflows/renovate-vendored-deps.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
runs-on: ubuntu-latest
3535
if: contains(github.event.pull_request.title, 'Update dependency') && github.actor == 'renovate[bot]'
3636
steps:
37-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
37+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3838
with:
3939
ref: ${{ github.event.pull_request.head.ref }}
4040
fetch-depth: 0

‎.github/workflows/sync-github-releases.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
contents: write
4444
actions: write
4545
steps:
46-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
46+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4747
## We need to login to the package registry in order to pull
4848
## the base debian image.
4949
- name: Docker login

0 commit comments

Comments
 (0)