From 82170ab8d8946511fc9a325ca3de8108457b87b8 Mon Sep 17 00:00:00 2001 From: Mend Renovate Date: Fri, 17 Oct 2025 21:56:42 +0000 Subject: [PATCH] chore(deps): update github-actions --- .github/actions/build-base-image/action.yaml | 8 ++-- .../ossf-compiler-flags-scanner/action.yaml | 4 +- .github/workflows/github-actions-checker.yaml | 2 +- .github/workflows/license-scanner.yaml | 2 +- .github/workflows/main.yaml | 44 +++++++++---------- .github/workflows/openvex-sync.yml | 4 +- .../ossf-compiler-flags-scanner.yaml | 2 +- .github/workflows/osv-scanner-scheduled.yml | 2 +- .github/workflows/pr-comment.yaml | 10 ++--- .github/workflows/renovate-vendored-deps.yaml | 2 +- .../reusable-vendor-vulnerability-scanner.yml | 6 +-- .github/workflows/sync-github-releases.yaml | 2 +- .github/workflows/update-base.yaml | 4 +- .github/workflows/upload-windows-zip.yaml | 2 +- 14 files changed, 47 insertions(+), 47 deletions(-) diff --git a/.github/actions/build-base-image/action.yaml b/.github/actions/build-base-image/action.yaml index f4aff668f8c9..de72937030d5 100644 --- a/.github/actions/build-base-image/action.yaml +++ b/.github/actions/build-base-image/action.yaml @@ -47,14 +47,14 @@ runs: run: echo "date=$(date +'%Y-%m-%d')" >> $GITHUB_OUTPUT - name: Cache BASE image - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 if: inputs.TYPE == '64-bit' || inputs.TYPE == 'clang' with: path: otp_docker_base.tar key: ${{ runner.os }}-${{ hashFiles('.github/dockerfiles/Dockerfile.ubuntu-base', '.github/scripts/build-base-image.sh') }}-${{ steps.date.outputs.date }}-${{ hashFiles('OTP_VERSION') }} - name: Docker login - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ghcr.io username: ${{ github.repository_owner }} @@ -67,7 +67,7 @@ runs: - name: Cache pre-built src id: cache-src if: inputs.BUILD_IMAGE == 'true' - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: otp_src.tar.gz key: prebuilt-src-${{ github.ref_name }}-${{ github.sha }} @@ -81,7 +81,7 @@ runs: - name: Cache pre-built binaries id: cache-binary if: inputs.BUILD_IMAGE == 'true' && steps.cache-src.outputs.cache-hit == 'true' - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: otp_cache.tar.gz key: prebuilt-cache-${{ inputs.TYPE }}-${{ github.ref_name }}-${{ github.sha }} diff --git a/.github/actions/ossf-compiler-flags-scanner/action.yaml b/.github/actions/ossf-compiler-flags-scanner/action.yaml index b85a45236d02..35f761e736c9 100644 --- a/.github/actions/ossf-compiler-flags-scanner/action.yaml +++ b/.github/actions/ossf-compiler-flags-scanner/action.yaml @@ -28,7 +28,7 @@ inputs: runs: using: composite steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: repository: ossf/wg-best-practices-os-developers sparse-checkout: docs/Compiler-Hardening-Guides/compiler-options-scraper @@ -57,6 +57,6 @@ runs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" if: ${{ !cancelled() && inputs.upload == 'true' }} - uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # ratchet:github/codeql-action/upload-sarif@v3.29.7 + uses: github/codeql-action/upload-sarif@ff0a06e83cb2de871e5a09832bc6a81e7276941f # ratchet:github/codeql-action/upload-sarif@v3.30.9 with: sarif_file: results.sarif \ No newline at end of file diff --git a/.github/workflows/github-actions-checker.yaml b/.github/workflows/github-actions-checker.yaml index 2658bd0ec082..379657257be9 100644 --- a/.github/workflows/github-actions-checker.yaml +++ b/.github/workflows/github-actions-checker.yaml @@ -34,7 +34,7 @@ jobs: runs-on: 'ubuntu-latest' name: 'ratchet' steps: - - uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/checkout@v4.2.2 + - uses: 'actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955' # v4.3.0 - id: files run: | FILES=$(find .github/ -name "*.yml" -o -name "*.yaml" -printf "%p ") diff --git a/.github/workflows/license-scanner.yaml b/.github/workflows/license-scanner.yaml index 137ecc98e8d5..47df726c96b6 100644 --- a/.github/workflows/license-scanner.yaml +++ b/.github/workflows/license-scanner.yaml @@ -35,7 +35,7 @@ jobs: run-scan: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: fetch-depth: '0' - uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4 diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index 695e1deea101..7439504eea0c 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -68,7 +68,7 @@ jobs: build-c-code: ${{ steps.c-code-changes.outputs.changes != '[]' || env.FULL_BUILD_AND_CHECK == 'true' }} all: ${{ steps.apps.outputs.all }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -106,14 +106,14 @@ jobs: with: filters: .github/scripts/c-code-path-filters.yaml - name: Cache pre-built src - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: otp_src.tar.gz key: prebuilt-src-${{ github.ref_name }}-${{ github.sha }} restore-keys: | prebuilt-src-${{ github.base_ref }}-${{ github.event.pull_request.base.sha }} - name: Cache pre-built binaries - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: otp_cache.tar.gz key: prebuilt-cache-64-bit-${{ github.ref_name }}-${{ github.sha }} @@ -197,7 +197,7 @@ jobs: WXWIDGETS_VERSION: 3.2.8.1 MACOS_VERSION: 15 steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Download source archive uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4.3.0 @@ -206,7 +206,7 @@ jobs: - name: Cache wxWidgets id: wxwidgets-cache - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: wxWidgets key: wxWidgets-${{ env.WXWIDGETS_VERSION }}-${{ runner.os }}-${{ hashFiles('.github/scripts/build-macos-wxwidgets.sh') }}-${{ env.MACOS_VERSION }} @@ -246,7 +246,7 @@ jobs: needs: pack if: needs.pack.outputs.build-c-code == 'true' steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Download source archive uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4.3.0 with: @@ -297,7 +297,7 @@ jobs: IF EXIST "c:\\Program Files\\OpenSSL-Win64" (move "c:\\Program Files\\OpenSSL-Win64" "c:\\OpenSSL-Win64") ELSE (move "c:\\Program Files\\OpenSSL" "c:\\OpenSSL-Win64") - name: Cache wxWidgets - uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: wxWidgets key: wxWidgets-${{ env.WXWIDGETS_VERSION }}-${{ runner.os }} @@ -385,7 +385,7 @@ jobs: fail-fast: false steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -464,7 +464,7 @@ jobs: outputs: vendor-files: ${{ steps.vendor-files.outputs.MODIFIED_FILES != '0' }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: fetch-depth: 0 - name: Get modified vendor files @@ -503,7 +503,7 @@ jobs: fail-fast: false steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -520,7 +520,7 @@ jobs: with: name: otp_prebuilt - name: Build on FreeBSD - uses: vmactions/freebsd-vm@966989c456d41351f095a421f60e71342d3bce41 # v1 + uses: vmactions/freebsd-vm@487ce35b96fae3e60d45b521735f5aa436ecfade # v1 with: usesh: true copyback: false @@ -549,7 +549,7 @@ jobs: with: name: otp_prebuilt - name: Build on OpenBSD - uses: vmactions/openbsd-vm@0d65352eee1508bab7cb12d130536d3a556be487 # v1.1.8 + uses: vmactions/openbsd-vm@1e7cc4fa7727646d3cf5921289b1f5c9d1a88f3c # v1.2.0 with: usesh: true copyback: false @@ -575,7 +575,7 @@ jobs: with: name: otp_prebuilt - name: Build on Solaris - uses: vmactions/solaris-vm@170f1f96f376cf7467cc41627e0c7590932fccaa # v1.1.4 + uses: vmactions/solaris-vm@58cbd70c6e051860f9b8f65908cc582938fbbdba # v1.1.5 with: usesh: true copyback: false @@ -595,7 +595,7 @@ jobs: runs-on: ubuntu-latest needs: pack steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -649,7 +649,7 @@ jobs: runs-on: ubuntu-latest needs: pack steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -674,7 +674,7 @@ jobs: # type: ["os_mon","sasl"] fail-fast: false steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -727,7 +727,7 @@ jobs: if: ${{ !cancelled() }} # Run even if the need has failed needs: test steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -804,13 +804,13 @@ jobs: - name: Use HTTPS instead of SSH for Git cloning run: git config --global url.https://github.com/.insteadOf ssh://git@github.com/ - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} - name: Fetch Default ORT Config - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4 + uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 with: repository: oss-review-toolkit/ort-config ref: "d2978deb230beae095bb6cfec074b94f1a74fd34" @@ -976,7 +976,7 @@ jobs: contents: write id-token: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: ./.github/actions/build-base-image with: BASE_BRANCH: ${{ env.BASE_BRANCH }} @@ -1027,7 +1027,7 @@ jobs: echo "tag=${TAG}" >> $GITHUB_OUTPUT echo "vsn=${VSN}" >> $GITHUB_OUTPUT - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 ## Publish the pre-built archive and docs - name: Download source archive @@ -1097,7 +1097,7 @@ jobs: path: "attestations/*.sigstore" - name: Upload pre-built and doc tar archives - uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2.3.2 + uses: softprops/action-gh-release@6da8fa9354ddfdc4aeace5fc48d7f679b5214090 # v2.4.1 with: name: OTP ${{ steps.tag.outputs.vsn }} files: | diff --git a/.github/workflows/openvex-sync.yml b/.github/workflows/openvex-sync.yml index 4ff2a5280e07..208c99881148 100644 --- a/.github/workflows/openvex-sync.yml +++ b/.github/workflows/openvex-sync.yml @@ -40,11 +40,11 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: ref: 'master' # '' = default branch - - uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # ratchet:actions/checkout@v1 + - uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1 with: otp-version: '28' diff --git a/.github/workflows/ossf-compiler-flags-scanner.yaml b/.github/workflows/ossf-compiler-flags-scanner.yaml index 42863be4e784..ccaa824690f9 100644 --- a/.github/workflows/ossf-compiler-flags-scanner.yaml +++ b/.github/workflows/ossf-compiler-flags-scanner.yaml @@ -44,7 +44,7 @@ jobs: # Only need to read contents contents: read steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Create initial pre-release tar run: .github/scripts/init-pre-release.sh otp_src.tar.gz - uses: ./.github/actions/build-base-image diff --git a/.github/workflows/osv-scanner-scheduled.yml b/.github/workflows/osv-scanner-scheduled.yml index db1e16092294..55f2e866dd35 100644 --- a/.github/workflows/osv-scanner-scheduled.yml +++ b/.github/workflows/osv-scanner-scheduled.yml @@ -39,7 +39,7 @@ jobs: outputs: versions: ${{ steps.get-versions.outputs.versions }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - id: get-versions name: Fetch latest 3 OTP versions run: | diff --git a/.github/workflows/pr-comment.yaml b/.github/workflows/pr-comment.yaml index 7a4c6936b991..64db32429993 100644 --- a/.github/workflows/pr-comment.yaml +++ b/.github/workflows/pr-comment.yaml @@ -44,7 +44,7 @@ jobs: outputs: result: ${{ steps.pr-number.outputs.result }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - uses: erlef/setup-beam@e6d7c94229049569db56a7ad5a540c051a010af9 # v1.20.4 with: otp-version: '27' @@ -64,9 +64,9 @@ jobs: pull-requests: write if: github.event.action == 'requested' && needs.pr-number.outputs.result != '' steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 ## We create an initial comment with some useful help to the user - - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # ratchet:actions/github-script@v7.0.1 + - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 with: script: | const script = require('./.github/scripts/pr-comment.js'); @@ -87,7 +87,7 @@ jobs: needs.pr-number.outputs.result != '' && github.event.workflow_run.conclusion != 'skipped' steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Download and Extract Artifacts id: extract env: @@ -124,7 +124,7 @@ jobs: ## Append some useful links and tips to the test results posted by ## Publish CT Test Results - - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # ratchet:actions/github-script@v7.0.1 + - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 if: always() with: script: | diff --git a/.github/workflows/renovate-vendored-deps.yaml b/.github/workflows/renovate-vendored-deps.yaml index fde6f6897273..751bd806215f 100644 --- a/.github/workflows/renovate-vendored-deps.yaml +++ b/.github/workflows/renovate-vendored-deps.yaml @@ -34,7 +34,7 @@ jobs: runs-on: ubuntu-latest if: contains(github.event.pull_request.title, 'Update dependency') && github.actor == 'renovate-bot' steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: repository: ${{ github.event.pull_request.head.repo.full_name }} ref: ${{ github.event.pull_request.head.ref }} diff --git a/.github/workflows/reusable-vendor-vulnerability-scanner.yml b/.github/workflows/reusable-vendor-vulnerability-scanner.yml index 0f1cc6b9b9ec..a9263d37a6f4 100644 --- a/.github/workflows/reusable-vendor-vulnerability-scanner.yml +++ b/.github/workflows/reusable-vendor-vulnerability-scanner.yml @@ -102,11 +102,11 @@ jobs: permissions: actions: read steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: ref: ${{ inputs.checkout && inputs.version || ''}} # '' = default branch - - uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # racket:actions/checkout@v1 + - uses: erlef/setup-beam@566deebc640988a494af16ecdf6f820fe0d3fea4 # racket:actions/checkout@v1 with: otp-version: '28' @@ -119,7 +119,7 @@ jobs: # so we need to use the condition below for PRs based on a fork - name: "Generate GitHub App Token (if secrets exist)" if: ${{ env.IS_NOT_FORKED_PR == 'true' }} - uses: actions/create-github-app-token@67018539274d69449ef7c02e8e71183d1719ab42 + uses: actions/create-github-app-token@b96fde71c0080358ed6e2d162f11c612c92a97d1 id: app-token with: app-id: ${{ secrets.ERLANG_VENDOR_SCANNER_APP_ID }} diff --git a/.github/workflows/sync-github-releases.yaml b/.github/workflows/sync-github-releases.yaml index d27c013e92df..7c2ee0a68727 100644 --- a/.github/workflows/sync-github-releases.yaml +++ b/.github/workflows/sync-github-releases.yaml @@ -43,7 +43,7 @@ jobs: contents: write actions: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 ## We need to login to the package registry in order to pull ## the base debian image. - name: Docker login diff --git a/.github/workflows/update-base.yaml b/.github/workflows/update-base.yaml index e62aece63936..f72ecf5f832a 100644 --- a/.github/workflows/update-base.yaml +++ b/.github/workflows/update-base.yaml @@ -49,14 +49,14 @@ jobs: fail-fast: false steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 with: ref: ${{ matrix.branch }} - name: Cleanup GH Runner shell: bash run: .github/scripts/cleanup_gh_runner.sh - name: Docker login - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/upload-windows-zip.yaml b/.github/workflows/upload-windows-zip.yaml index ce9aaeeb37f3..8a690c6f192a 100644 --- a/.github/workflows/upload-windows-zip.yaml +++ b/.github/workflows/upload-windows-zip.yaml @@ -43,7 +43,7 @@ jobs: env: basename: otp_${{ inputs.target }}_${{ inputs.version }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4.2.2 + - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 - name: Install OTP shell: cmd