10
10
11
11
env :
12
12
# Common versions
13
- GO_VERSION : ' 1.21 '
14
- GOLANGCI_VERSION : ' v1.54.0 '
15
- DOCKER_BUILDX_VERSION : ' v0.9.1 '
13
+ GO_VERSION : ' 1.23 '
14
+ GOLANGCI_VERSION : ' v2.1.2 '
15
+ DOCKER_BUILDX_VERSION : ' v0.23.0 '
16
16
17
17
# Common users. We can't run a step 'if secrets.AWS_USR != ""' but we can run
18
18
# a step 'if env.AWS_USR' != ""', so we copy these to succinctly test whether
23
23
24
24
jobs :
25
25
detect-noop :
26
- runs-on : ubuntu-22 .04
26
+ runs-on : ubuntu-24 .04
27
27
outputs :
28
28
noop : ${{ steps.noop.outputs.should_skip }}
29
29
steps :
30
30
- name : Detect No-op Changes
31
31
id : noop
32
- uses : fkirc/skip-duplicate-actions@v5.2.0
32
+ uses : fkirc/skip-duplicate-actions@f75f66ce1886f00957d99748a42c724f4330bdcf # v5.3.1
33
33
with :
34
34
github_token : ${{ secrets.GITHUB_TOKEN }}
35
35
paths_ignore : ' ["**.md", "**.png", "**.jpg"]'
@@ -38,18 +38,18 @@ jobs:
38
38
39
39
40
40
lint :
41
- runs-on : ubuntu-22 .04
41
+ runs-on : ubuntu-24 .04
42
42
needs : detect-noop
43
43
if : needs.detect-noop.outputs.noop != 'true'
44
44
45
45
steps :
46
46
- name : Checkout
47
- uses : actions/checkout@v3
47
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
48
48
with :
49
49
submodules : true
50
50
51
51
- name : Setup Go
52
- uses : actions/setup-go@v3
52
+ uses : actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
53
53
with :
54
54
go-version : ${{ env.GO_VERSION }}
55
55
@@ -58,14 +58,14 @@ jobs:
58
58
run : echo "cachedir=$(make go.cachedir)" >> $GITHUB_ENV
59
59
60
60
- name : Cache the Go Build Cache
61
- uses : actions/cache@v3
61
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
62
62
with :
63
63
path : ${{ env.cachedir }}
64
64
key : ${{ runner.os }}-build-lint-${{ hashFiles('**/go.sum') }}
65
65
restore-keys : ${{ runner.os }}-build-lint-
66
66
67
67
- name : Cache Go Dependencies
68
- uses : actions/cache@v3
68
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
69
69
with :
70
70
path : .work/pkg
71
71
key : ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -77,24 +77,23 @@ jobs:
77
77
# We could run 'make lint' but we prefer this action because it leaves
78
78
# 'annotations' (i.e. it comments on PRs to point out linter violations).
79
79
- name : Lint
80
- uses : golangci/golangci-lint-action@v3
80
+ uses : golangci/golangci-lint-action@1481404843c368bc19ca9406f87d6e0fc97bdcfd # v7.0.0
81
81
with :
82
82
version : ${{ env.GOLANGCI_VERSION }}
83
- skip-go-installation : true
84
83
85
84
check-diff :
86
- runs-on : ubuntu-22 .04
85
+ runs-on : ubuntu-24 .04
87
86
needs : detect-noop
88
87
if : needs.detect-noop.outputs.noop != 'true'
89
88
90
89
steps :
91
90
- name : Checkout
92
- uses : actions/checkout@v3
91
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
93
92
with :
94
93
submodules : true
95
94
96
95
- name : Setup Go
97
- uses : actions/setup-go@v3
96
+ uses : actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
98
97
with :
99
98
go-version : ${{ env.GO_VERSION }}
100
99
@@ -103,14 +102,14 @@ jobs:
103
102
run : echo "cachedir=$(make go.cachedir)" >> $GITHUB_ENV
104
103
105
104
- name : Cache the Go Build Cache
106
- uses : actions/cache@v3
105
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
107
106
with :
108
107
path : ${{ env.cachedir }}
109
108
key : ${{ runner.os }}-build-check-diff-${{ hashFiles('**/go.sum') }}
110
109
restore-keys : ${{ runner.os }}-build-check-diff-
111
110
112
111
- name : Cache Go Dependencies
113
- uses : actions/cache@v3
112
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
114
113
with :
115
114
path : .work/pkg
116
115
key : ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -130,21 +129,21 @@ jobs:
130
129
run : git diff
131
130
132
131
unit-tests :
133
- runs-on : ubuntu-22 .04
132
+ runs-on : ubuntu-24 .04
134
133
needs : detect-noop
135
134
if : needs.detect-noop.outputs.noop != 'true'
136
135
137
136
steps :
138
137
- name : Checkout
139
- uses : actions/checkout@v3
138
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
140
139
with :
141
140
submodules : true
142
141
143
142
- name : Fetch History
144
143
run : git fetch --prune --unshallow
145
144
146
145
- name : Setup Go
147
- uses : actions/setup-go@v3
146
+ uses : actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
148
147
with :
149
148
go-version : ${{ env.GO_VERSION }}
150
149
@@ -153,14 +152,14 @@ jobs:
153
152
run : echo "cachedir=$(make go.cachedir)" >> $GITHUB_ENV
154
153
155
154
- name : Cache the Go Build Cache
156
- uses : actions/cache@v3
155
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
157
156
with :
158
157
path : ${{ env.cachedir }}
159
158
key : ${{ runner.os }}-build-unit-tests-${{ hashFiles('**/go.sum') }}
160
159
restore-keys : ${{ runner.os }}-build-unit-tests-
161
160
162
161
- name : Cache Go Dependencies
163
- uses : actions/cache@v3
162
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
164
163
with :
165
164
path : .work/pkg
166
165
key : ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -173,38 +172,38 @@ jobs:
173
172
run : make -j2 test
174
173
175
174
- name : Publish Unit Test Coverage
176
- uses : codecov/codecov-action@v3
175
+ uses : codecov/codecov-action@ad3126e916f78f00edff4ed0317cf185271ccc2d # v5.4.2
177
176
with :
178
177
flags : unittests
179
- file : _output/tests/linux_amd64/coverage.txt
178
+ files : _output/tests/linux_amd64/coverage.txt
180
179
181
180
e2e-tests :
182
- runs-on : ubuntu-22 .04
181
+ runs-on : ubuntu-24 .04
183
182
needs : detect-noop
184
183
if : needs.detect-noop.outputs.noop != 'true'
185
184
186
185
steps :
187
186
- name : Setup QEMU
188
- uses : docker/setup-qemu-action@v2
187
+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
189
188
with :
190
189
platforms : all
191
190
192
191
- name : Setup Docker Buildx
193
- uses : docker/setup-buildx-action@v2
192
+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
194
193
with :
195
194
version : ${{ env.DOCKER_BUILDX_VERSION }}
196
195
install : true
197
196
198
197
- name : Checkout
199
- uses : actions/checkout@v3
198
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
200
199
with :
201
200
submodules : true
202
201
203
202
- name : Fetch History
204
203
run : git fetch --prune --unshallow
205
204
206
205
- name : Setup Go
207
- uses : actions/setup-go@v3
206
+ uses : actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
208
207
with :
209
208
go-version : ${{ env.GO_VERSION }}
210
209
@@ -213,14 +212,14 @@ jobs:
213
212
run : echo "cachedir=$(make go.cachedir)" >> $GITHUB_ENV
214
213
215
214
- name : Cache the Go Build Cache
216
- uses : actions/cache@v3
215
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
217
216
with :
218
217
path : ${{ env.cachedir }}
219
218
key : ${{ runner.os }}-build-unit-tests-${{ hashFiles('**/go.sum') }}
220
219
restore-keys : ${{ runner.os }}-build-unit-tests-
221
220
222
221
- name : Cache Go Dependencies
223
- uses : actions/cache@v3
222
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
224
223
with :
225
224
path : .work/pkg
226
225
key : ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -240,40 +239,40 @@ jobs:
240
239
run : make e2e USE_HELM=true
241
240
242
241
publish-artifacts :
243
- runs-on : ubuntu-22 .04
242
+ runs-on : ubuntu-24 .04
244
243
needs : detect-noop
245
244
if : needs.detect-noop.outputs.noop != 'true'
246
245
247
246
steps :
248
247
- name : Setup QEMU
249
- uses : docker/setup-qemu-action@v2
248
+ uses : docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
250
249
with :
251
250
platforms : all
252
251
253
252
- name : Setup Docker Buildx
254
- uses : docker/setup-buildx-action@v2
253
+ uses : docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
255
254
with :
256
255
version : ${{ env.DOCKER_BUILDX_VERSION }}
257
256
install : true
258
257
259
258
- name : Login to Upbound
260
- uses : docker/login-action@v1
259
+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
261
260
if : env.XPKG_ACCESS_ID != ''
262
261
with :
263
262
registry : xpkg.upbound.io
264
263
username : ${{ secrets.XPKG_ACCESS_ID }}
265
264
password : ${{ secrets.XPKG_TOKEN }}
266
265
267
266
- name : Checkout
268
- uses : actions/checkout@v3
267
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
269
268
with :
270
269
submodules : true
271
270
272
271
- name : Fetch History
273
272
run : git fetch --prune --unshallow
274
273
275
274
- name : Setup Go
276
- uses : actions/setup-go@v3
275
+ uses : actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
277
276
with :
278
277
go-version : ${{ env.GO_VERSION }}
279
278
@@ -282,14 +281,14 @@ jobs:
282
281
run : echo "cachedir=$(make go.cachedir)" >> $GITHUB_ENV
283
282
284
283
- name : Cache the Go Build Cache
285
- uses : actions/cache@v3
284
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
286
285
with :
287
286
path : ${{ env.cachedir }}
288
287
key : ${{ runner.os }}-build-publish-artifacts-${{ hashFiles('**/go.sum') }}
289
288
restore-keys : ${{ runner.os }}-build-publish-artifacts-
290
289
291
290
- name : Cache Go Dependencies
292
- uses : actions/cache@v3
291
+ uses : actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
293
292
with :
294
293
path : .work/pkg
295
294
key : ${{ runner.os }}-pkg-${{ hashFiles('**/go.sum') }}
@@ -306,7 +305,7 @@ jobs:
306
305
BUILD_ARGS : " --load"
307
306
308
307
- name : Publish Artifacts to GitHub
309
- uses : actions/upload-artifact@v3
308
+ uses : actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
310
309
with :
311
310
name : output
312
311
path : _output/**
@@ -316,7 +315,7 @@ jobs:
316
315
run : make publish BRANCH_NAME=${GITHUB_REF##*/}
317
316
318
317
- name : Login to Docker
319
- uses : docker/login-action@v1
318
+ uses : docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
320
319
if : env.CONTRIB_DOCKER_USR != ''
321
320
with :
322
321
username : ${{ secrets.CONTRIB_DOCKER_USR }}
0 commit comments