diff --git a/.github/workflows/boj-build.yml b/.github/workflows/boj-build.yml index 0bf4058..aaf6c0d 100644 --- a/.github/workflows/boj-build.yml +++ b/.github/workflows/boj-build.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4.1.7 + uses: actions/checkout@v7.0.1 - name: Trigger BoJ Server (Casket/ssg-mcp) run: | # Send a secure trigger to boj-server to build this repository diff --git a/.github/workflows/casket-pages.yml b/.github/workflows/casket-pages.yml index 94f7d07..282c51c 100644 --- a/.github/workflows/casket-pages.yml +++ b/.github/workflows/casket-pages.yml @@ -22,22 +22,22 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4.1.1 + uses: actions/checkout@v7.0.1 - name: Checkout casket-ssg - uses: actions/checkout@v4.1.1 + uses: actions/checkout@v7.0.1 with: repository: hyperpolymath/casket-ssg path: .casket-ssg - name: Setup GHCup - uses: haskell-actions/setup@v2.7.5 + uses: haskell-actions/setup@v2.12.0 with: ghc-version: '9.8.2' cabal-version: '3.10' - name: Cache Cabal - uses: actions/cache@v4.3.0 + uses: actions/cache@v6.1.0 with: path: | ~/.cabal/packages @@ -125,7 +125,7 @@ jobs: find _site -maxdepth 2 | sort - name: Setup Pages - uses: actions/configure-pages@v5.0.0 + uses: actions/configure-pages@v6.0.0 # NOTE: actions/upload-pages-artifact is a composite that internally # calls actions/upload-artifact@v4 (an UNPINNED upstream tag). The @@ -144,7 +144,7 @@ jobs: --exclude=.git --exclude=.github \ . - name: Upload artifact - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@v7.0.1 with: name: github-pages path: ${{ runner.temp }}/artifact.tar @@ -160,4 +160,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v4.0.5 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 51f3701..815d548 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Install Idris2 0.8.0 env: diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 24c9bbe..d4ee3cc 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -42,12 +42,12 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3 + uses: github/codeql-action/init@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v3 + uses: github/codeql-action/analyze@b96794f015dfd88f77b49b1c93e0fa7110f94c63 # v3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/dependabot-automerge.yml b/.github/workflows/dependabot-automerge.yml index fd9abc4..a150286 100644 --- a/.github/workflows/dependabot-automerge.yml +++ b/.github/workflows/dependabot-automerge.yml @@ -56,7 +56,7 @@ jobs: steps: - name: Fetch Dependabot metadata id: meta - uses: dependabot/fetch-metadata@v2.2.0 + uses: dependabot/fetch-metadata@v3.1.0 with: github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/dogfood-gate.yml b/.github/workflows/dogfood-gate.yml index 10ce0c9..b26bdec 100644 --- a/.github/workflows/dogfood-gate.yml +++ b/.github/workflows/dogfood-gate.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check for A2ML files id: detect @@ -71,7 +71,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check for K9 files id: detect @@ -120,7 +120,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Scan for invisible characters id: lint @@ -184,7 +184,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check for Groove manifest id: groove @@ -242,7 +242,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Check and validate eclexiaiser manifest id: eclex @@ -307,7 +307,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4.3.1 + uses: actions/checkout@v7.0.1 - name: Generate dogfooding scorecard run: | diff --git a/.github/workflows/finishingbot.yml b/.github/workflows/finishingbot.yml index f146508..b178dc1 100644 --- a/.github/workflows/finishingbot.yml +++ b/.github/workflows/finishingbot.yml @@ -24,7 +24,7 @@ jobs: release-readiness: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Setup Rust toolchain uses: dtolnay/rust-toolchain@v1 @@ -44,7 +44,7 @@ jobs: git -C "$RUNNER_TEMP/gitbot-fleet" checkout "$GITBOT_FLEET_REF" - name: Cache dependencies - uses: Swatinem/rust-cache@v2.7.8 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ${{ runner.temp }}/gitbot-fleet/bots/finishingbot @@ -88,7 +88,7 @@ jobs: - name: Upload results if: always() - uses: actions/upload-artifact@v4.1.0 + uses: actions/upload-artifact@v7.0.1 with: name: finishingbot-results path: finishingbot-results.txt diff --git a/.github/workflows/glambot.yml b/.github/workflows/glambot.yml index 3f456f9..64ac605 100644 --- a/.github/workflows/glambot.yml +++ b/.github/workflows/glambot.yml @@ -21,7 +21,7 @@ jobs: presentation-quality: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Glambot status run: | diff --git a/.github/workflows/instant-sync.yml b/.github/workflows/instant-sync.yml index f7a26a8..54e08ef 100644 --- a/.github/workflows/instant-sync.yml +++ b/.github/workflows/instant-sync.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Trigger Propagation - uses: peter-evans/repository-dispatch@v3.0.0 + uses: peter-evans/repository-dispatch@v4.0.1 with: token: ${{ secrets.FARM_DISPATCH_TOKEN }} repository: hyperpolymath/.git-private-farm diff --git a/.github/workflows/push-email-notify.yml b/.github/workflows/push-email-notify.yml index 9e133d7..8d1f093 100644 --- a/.github/workflows/push-email-notify.yml +++ b/.github/workflows/push-email-notify.yml @@ -40,7 +40,7 @@ jobs: timeout-minutes: 5 steps: - name: Send push notification email - uses: hyperpolymath/smtp-notify-action@v0.2.0 # NOSONAR — pin authority is actions.lock (sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7) + uses: hyperpolymath/smtp-notify-action@v0.3.0 # NOSONAR — pin authority is actions.lock (sha1-ede1191ef6ff3ac02c4f4d9efdf837ee517e11d7) with: server_address: ${{ secrets.SMTP_HOST }} server_port: ${{ secrets.SMTP_PORT }} diff --git a/.github/workflows/rhodibot.yml b/.github/workflows/rhodibot.yml index 9b9a511..57ef25d 100644 --- a/.github/workflows/rhodibot.yml +++ b/.github/workflows/rhodibot.yml @@ -25,7 +25,7 @@ jobs: rsr-compliance: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Setup Rust toolchain uses: dtolnay/rust-toolchain@v1 @@ -45,7 +45,7 @@ jobs: git -C "$RUNNER_TEMP/gitbot-fleet" checkout "$GITBOT_FLEET_REF" - name: Cache dependencies - uses: Swatinem/rust-cache@v2.7.8 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ${{ runner.temp }}/gitbot-fleet/bots/rhodibot @@ -94,7 +94,7 @@ jobs: - name: Upload results if: always() - uses: actions/upload-artifact@v4.1.0 + uses: actions/upload-artifact@v7.0.1 with: name: rhodibot-results path: rhodibot-results.txt diff --git a/.github/workflows/seambot.yml b/.github/workflows/seambot.yml index 65a9bcb..975b712 100644 --- a/.github/workflows/seambot.yml +++ b/.github/workflows/seambot.yml @@ -24,7 +24,7 @@ jobs: seam-health: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Check for seam register id: check-seam @@ -56,7 +56,7 @@ jobs: - name: Cache dependencies if: steps.check-seam.outputs.has_seam == 'true' - uses: Swatinem/rust-cache@v2.7.8 + uses: Swatinem/rust-cache@v2.9.2 with: workspaces: ${{ runner.temp }}/gitbot-fleet/bots/seambot @@ -105,7 +105,7 @@ jobs: - name: Upload results if: always() && steps.check-seam.outputs.has_seam == 'true' - uses: actions/upload-artifact@v4.1.0 + uses: actions/upload-artifact@v7.0.1 with: name: seambot-results path: seambot-results.txt diff --git a/.github/workflows/workflow-linter.yml b/.github/workflows/workflow-linter.yml index 4e98f60..3b03910 100644 --- a/.github/workflows/workflow-linter.yml +++ b/.github/workflows/workflow-linter.yml @@ -18,7 +18,7 @@ jobs: lint-workflows: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4.1.1 + - uses: actions/checkout@v7.0.1 - name: Check SPDX headers run: |