diff --git a/.github/workflows/arc-publish-chart.yaml b/.github/workflows/arc-publish-chart.yaml index 96f03f22..fc60aaeb 100644 --- a/.github/workflows/arc-publish-chart.yaml +++ b/.github/workflows/arc-publish-chart.yaml @@ -45,7 +45,7 @@ jobs: fetch-depth: 0 - name: Set up Helm - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 + uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 with: version: ${{ env.HELM_VERSION }} @@ -63,7 +63,7 @@ jobs: python-version: '3.11' - name: Set up chart-testing - uses: helm/chart-testing-action@v2.6.0 + uses: helm/chart-testing-action@v2.7.0 - name: Run chart-testing (list-changed) id: list-changed @@ -79,7 +79,7 @@ jobs: - name: Create kind cluster if: steps.list-changed.outputs.changed == 'true' - uses: helm/kind-action@v1.4.0 + uses: helm/kind-action@v1.12.0 # We need cert-manager already installed in the cluster because we assume the CRDs exist - name: Install cert-manager @@ -145,14 +145,14 @@ jobs: - name: Get Token id: get_workflow_token - uses: peter-murray/workflow-application-token-action@dc0413987a085fa17d19df9e47d4677cf81ffef3 + uses: peter-murray/workflow-application-token-action@d17e3a9a36850ea89f35db16c1067dd2b68ee343 with: application_id: ${{ secrets.ACTIONS_ACCESS_APP_ID }} application_private_key: ${{ secrets.ACTIONS_ACCESS_PK }} organization: ${{ env.CHART_TARGET_ORG }} - name: Install chart-releaser - uses: helm/chart-releaser-action@v1.4.1 + uses: helm/chart-releaser-action@v1.7.0 with: install_only: true install_dir: ${{ github.workspace }}/bin diff --git a/.github/workflows/arc-publish.yaml b/.github/workflows/arc-publish.yaml index 37d67e9f..b3c3986c 100644 --- a/.github/workflows/arc-publish.yaml +++ b/.github/workflows/arc-publish.yaml @@ -73,7 +73,7 @@ jobs: - name: Get Token id: get_workflow_token - uses: peter-murray/workflow-application-token-action@dc0413987a085fa17d19df9e47d4677cf81ffef3 + uses: peter-murray/workflow-application-token-action@d17e3a9a36850ea89f35db16c1067dd2b68ee343 with: application_id: ${{ secrets.ACTIONS_ACCESS_APP_ID }} application_private_key: ${{ secrets.ACTIONS_ACCESS_PK }} diff --git a/.github/workflows/arc-release-runners.yaml b/.github/workflows/arc-release-runners.yaml index 55ced306..c11dca95 100644 --- a/.github/workflows/arc-release-runners.yaml +++ b/.github/workflows/arc-release-runners.yaml @@ -39,7 +39,7 @@ jobs: - name: Get Token id: get_workflow_token - uses: peter-murray/workflow-application-token-action@dc0413987a085fa17d19df9e47d4677cf81ffef3 + uses: peter-murray/workflow-application-token-action@d17e3a9a36850ea89f35db16c1067dd2b68ee343 with: application_id: ${{ secrets.ACTIONS_ACCESS_APP_ID }} application_private_key: ${{ secrets.ACTIONS_ACCESS_PK }} diff --git a/.github/workflows/arc-validate-chart.yaml b/.github/workflows/arc-validate-chart.yaml index f38a3fc3..668b7178 100644 --- a/.github/workflows/arc-validate-chart.yaml +++ b/.github/workflows/arc-validate-chart.yaml @@ -46,7 +46,7 @@ jobs: - name: Set up Helm # Using https://github.com/Azure/setup-helm/releases/tag/v4.2 - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 + uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 with: version: ${{ env.HELM_VERSION }} @@ -72,7 +72,7 @@ jobs: python-version: '3.11' - name: Set up chart-testing - uses: helm/chart-testing-action@v2.6.0 + uses: helm/chart-testing-action@v2.7.0 - name: Run chart-testing (list-changed) id: list-changed @@ -87,7 +87,7 @@ jobs: ct lint --config charts/.ci/ct-config.yaml - name: Create kind cluster - uses: helm/kind-action@v1.4.0 + uses: helm/kind-action@v1.12.0 if: steps.list-changed.outputs.changed == 'true' # We need cert-manager already installed in the cluster because we assume the CRDs exist diff --git a/.github/workflows/gha-publish-chart.yaml b/.github/workflows/gha-publish-chart.yaml index 251af8e8..b21c4038 100644 --- a/.github/workflows/gha-publish-chart.yaml +++ b/.github/workflows/gha-publish-chart.yaml @@ -91,7 +91,7 @@ jobs: password: ${{ secrets.GITHUB_TOKEN }} - name: Build & push controller image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v6 with: file: Dockerfile platforms: linux/amd64,linux/arm64 @@ -141,7 +141,7 @@ jobs: - name: Set up Helm # Using https://github.com/Azure/setup-helm/releases/tag/v4.2 - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 + uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 with: version: ${{ env.HELM_VERSION }} @@ -189,7 +189,7 @@ jobs: - name: Set up Helm # Using https://github.com/Azure/setup-helm/releases/tag/v4.2 - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 + uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 with: version: ${{ env.HELM_VERSION }} diff --git a/.github/workflows/gha-validate-chart.yaml b/.github/workflows/gha-validate-chart.yaml index a33fd74e..8e0eabae 100644 --- a/.github/workflows/gha-validate-chart.yaml +++ b/.github/workflows/gha-validate-chart.yaml @@ -42,7 +42,7 @@ jobs: - name: Set up Helm # Using https://github.com/Azure/setup-helm/releases/tag/v4.2 - uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 + uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 with: version: ${{ env.HELM_VERSION }} @@ -52,7 +52,7 @@ jobs: python-version: '3.11' - name: Set up chart-testing - uses: helm/chart-testing-action@v2.6.0 + uses: helm/chart-testing-action@v2.7.0 - name: Run chart-testing (list-changed) id: list-changed @@ -74,7 +74,7 @@ jobs: version: latest - name: Build controller image - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v6 if: steps.list-changed.outputs.changed == 'true' with: file: Dockerfile @@ -89,7 +89,7 @@ jobs: cache-to: type=gha,mode=max - name: Create kind cluster - uses: helm/kind-action@v1.4.0 + uses: helm/kind-action@v1.12.0 if: steps.list-changed.outputs.changed == 'true' with: cluster_name: chart-testing diff --git a/.github/workflows/global-publish-canary.yaml b/.github/workflows/global-publish-canary.yaml index ba4796a9..61d23431 100644 --- a/.github/workflows/global-publish-canary.yaml +++ b/.github/workflows/global-publish-canary.yaml @@ -59,7 +59,7 @@ jobs: - name: Get Token id: get_workflow_token - uses: peter-murray/workflow-application-token-action@dc0413987a085fa17d19df9e47d4677cf81ffef3 + uses: peter-murray/workflow-application-token-action@d17e3a9a36850ea89f35db16c1067dd2b68ee343 with: application_id: ${{ secrets.ACTIONS_ACCESS_APP_ID }} application_private_key: ${{ secrets.ACTIONS_ACCESS_PK }} @@ -119,7 +119,7 @@ jobs: # Unstable builds - run at your own risk - name: Build and Push - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v6 with: context: . file: ./Dockerfile diff --git a/.github/workflows/global-run-codeql.yaml b/.github/workflows/global-run-codeql.yaml index 99692156..db262624 100644 --- a/.github/workflows/global-run-codeql.yaml +++ b/.github/workflows/global-run-codeql.yaml @@ -33,12 +33,12 @@ jobs: go-version-file: go.mod - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@v3 with: languages: go - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@v3 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@v3 diff --git a/.github/workflows/global-run-stale.yaml b/.github/workflows/global-run-stale.yaml index a84af45b..52464196 100644 --- a/.github/workflows/global-run-stale.yaml +++ b/.github/workflows/global-run-stale.yaml @@ -14,7 +14,7 @@ jobs: issues: write # for actions/stale to close stale issues pull-requests: write # for actions/stale to close stale PRs steps: - - uses: actions/stale@v6 + - uses: actions/stale@v9 with: stale-issue-message: 'This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.' # turn off stale for both issues and PRs