diff --git a/.github/workflows/PRBuild.yaml b/.github/workflows/PRBuild.yaml index aa67eac..effedac 100644 --- a/.github/workflows/PRBuild.yaml +++ b/.github/workflows/PRBuild.yaml @@ -27,25 +27,25 @@ jobs: steps: - name: Set up latest stable Go - uses: actions/setup-go@v6.4.0 + uses: actions/setup-go@v6.5.0 with: go-version: stable - name: Set up QEMU - uses: docker/setup-qemu-action@v4.0.0 + uses: docker/setup-qemu-action@v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4.0.0 + uses: docker/setup-buildx-action@v4.2.0 with: driver-opts: | image=moby/buildkit:master network=host - name: Docker Login - uses: docker/login-action@v4.1.0 + uses: docker/login-action@v4.5.1 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Checkout - uses: actions/checkout@v6.0.2 + uses: actions/checkout@v6.1.0 with: fetch-tags: 1 fetch-depth: 0 @@ -75,7 +75,7 @@ jobs: git tag -f -a pr-${PR_NUM} -m "PR Release" - name: Build/Push container with goreleaser - uses: goreleaser/goreleaser-action@v7.2.2 + uses: goreleaser/goreleaser-action@v7.2.3 env: GITHUB_TOKEN: ${{ github.token }} with: @@ -93,11 +93,11 @@ jobs: node process.js echo "digest=$(cat digest.txt)" >> $GITHUB_OUTPUT - name: Attest Binaries - uses: actions/attest-build-provenance@v4.1.0 + uses: actions/attest-build-provenance@v4.1.1 with: subject-path: dist/**/fru-tracker* - name: generate build provenance - uses: actions/attest-build-provenance@v4.1.0 + uses: actions/attest-build-provenance@v4.1.1 with: subject-name: ghcr.io/openchami/fru-tracker subject-digest: ${{ steps.process_goreleaser_output.outputs.digest }} diff --git a/.github/workflows/REUSE.yaml b/.github/workflows/REUSE.yaml index c42cb9a..d88e4eb 100644 --- a/.github/workflows/REUSE.yaml +++ b/.github/workflows/REUSE.yaml @@ -11,6 +11,6 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@v6.1.0 - name: REUSE Compliance Check uses: fsfe/reuse-action@v6 diff --git a/.github/workflows/codegen-check.yaml b/.github/workflows/codegen-check.yaml index 580ee79..abfe3c1 100644 --- a/.github/workflows/codegen-check.yaml +++ b/.github/workflows/codegen-check.yaml @@ -24,10 +24,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6.0.2 + uses: actions/checkout@v6.1.0 - name: Set up Go - uses: actions/setup-go@v6.4.0 + uses: actions/setup-go@v6.5.0 with: go-version: stable diff --git a/.github/workflows/golangci-lint.yaml b/.github/workflows/golangci-lint.yaml index b242ba3..172a185 100644 --- a/.github/workflows/golangci-lint.yaml +++ b/.github/workflows/golangci-lint.yaml @@ -15,11 +15,11 @@ jobs: steps: - name: Set up latest stable Go - uses: actions/setup-go@v6.4.0 + uses: actions/setup-go@v6.5.0 with: go-version: stable - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@v6.1.0 - name: Run golangci-lint - uses: golangci/golangci-lint-action@v9.2.0 + uses: golangci/golangci-lint-action@v9.3.0 with: version: latest diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 0f80780..37fcb24 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -21,25 +21,25 @@ jobs: steps: - name: Set up latest stable Go - uses: actions/setup-go@v6.4.0 + uses: actions/setup-go@v6.5.0 with: go-version: stable - name: Set up QEMU - uses: docker/setup-qemu-action@v4.0.0 + uses: docker/setup-qemu-action@v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4.0.0 + uses: docker/setup-buildx-action@v4.2.0 with: driver-opts: | image=moby/buildkit:master network=host - name: Docker Login - uses: docker/login-action@v4.1.0 + uses: docker/login-action@v4.5.1 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Checkout - uses: actions/checkout@v6.0.2 + uses: actions/checkout@v6.1.0 with: fetch-tags: 1 fetch-depth: 0 @@ -58,7 +58,7 @@ jobs: echo "IS_PR_BUILD=false" >> $GITHUB_ENV - name: Release with goreleaser - uses: goreleaser/goreleaser-action@v7.2.2 + uses: goreleaser/goreleaser-action@v7.2.3 env: GITHUB_TOKEN: ${{ github.token }} with: @@ -76,11 +76,11 @@ jobs: node process.js echo "digest=$(cat digest.txt)" >> $GITHUB_OUTPUT - name: Attest Binaries - uses: actions/attest-build-provenance@v4.1.0 + uses: actions/attest-build-provenance@v4.1.1 with: subject-path: dist/**/fru-tracker* - name: generate build provenance - uses: actions/attest-build-provenance@v4.1.0 + uses: actions/attest-build-provenance@v4.1.1 with: subject-name: ghcr.io/openchami/fru-tracker subject-digest: ${{ steps.process_goreleaser_output.outputs.digest }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 476ffda..8daf493 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -38,12 +38,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3 + uses: ossf/scorecard-action@2d1146689b8cda280b9bc96326124645441f03bc # v2.4.4 with: results_file: results.sarif results_format: sarif @@ -77,6 +77,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@v3.35.5 + uses: github/codeql-action/upload-sarif@v3.37.3 with: sarif_file: results.sarif diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 0dbb265..47c9cdb 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -17,7 +17,7 @@ jobs: run-stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v10.2.0 + - uses: actions/stale@v10.4.0 with: days-before-stale: 35 days-before-close: 7