diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 1cc01c98486915cfac57a3ab3fb30bbb032b7f20..44960a84d680ff7a87922abd550c98b8b8e3c640 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -94,7 +94,7 @@ jobs: run: gh api ${{ env.PR_URL }} | jq -rc '${{ env.JQ_FILTER }}' >> "$GITHUB_OUTPUT" - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: sparse-checkout: ${{ env.SPARSE_CHECKOUT }} @@ -150,7 +150,7 @@ jobs: steps: - name: Checkout code if: needs.setup.outputs.os-matrix-is-full && runner.os != 'Linux' - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: sparse-checkout: ${{ env.SPARSE_CHECKOUT }} @@ -172,7 +172,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: ./.github/actions/setup-node @@ -215,7 +215,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: ./.github/actions/setup-node @@ -255,7 +255,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: ./.github/actions/setup-node @@ -282,7 +282,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: ./.github/actions/setup-node @@ -319,7 +319,7 @@ jobs: include: ${{ fromJSON(needs.setup.outputs.test-shard-matrix) }} steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: ./.github/actions/setup-node @@ -380,7 +380,7 @@ jobs: if: (success() || failure()) && github.event.pull_request.draft != true steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: sparse-checkout: ${{ env.SPARSE_CHECKOUT }} @@ -455,7 +455,7 @@ jobs: if: github.event.pull_request.draft != true steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: ./.github/actions/setup-node @@ -482,7 +482,7 @@ jobs: if: github.event.pull_request.draft != true steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: ./.github/actions/setup-node @@ -508,7 +508,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Setup Node.js uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 @@ -551,7 +551,7 @@ jobs: pull-requests: write steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: fetch-depth: 0 # zero stands for full checkout, which is required for semantic-release diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 6e37bdcebe82d9eca891187903c00f5c645100e1..ac32c0270edd681ad71cf3fe8fd24f2d3dc7681f 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -31,7 +31,7 @@ jobs: security-events: write steps: - name: Checkout repository - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Delete fixtures to suppress false positives run: | diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index e545ec2728b0202f0753b8e97ac553de94acc252..2d1da3d3e6f9d650b7bf319ae697a57261c1b4f1 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: 'Dependency Review' uses: actions/dependency-review-action@6c5ccdad469c9f8a2996bfecaec55a631a347034 # v3.1.0 diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml index 983bfc712630992232e75ffcba6ac0c52b4c1c1b..af2dfb06f0a70eabd992d7f27510250ed466539a 100644 --- a/.github/workflows/devcontainer.yml +++ b/.github/workflows/devcontainer.yml @@ -18,7 +18,7 @@ jobs: if: github.event.pull_request.draft != true steps: - name: Checkout - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Build and run dev container task uses: devcontainers/ci@57eaf0c9b518a76872bc429cdceefd65a912309b # v0.3.1900000329 diff --git a/.github/workflows/release-npm.yml b/.github/workflows/release-npm.yml index 8389a77d34b6e502cff2b4d82f74d91e9030bd3b..4bac279c2878c1d6a1d1f2d17139a1fdfe83ef38 100644 --- a/.github/workflows/release-npm.yml +++ b/.github/workflows/release-npm.yml @@ -39,7 +39,7 @@ jobs: echo "NPM_TAG=${{ github.event.inputs.tag }}" >> "$GITHUB_ENV" fi - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: ref: ${{ env.GIT_SHA }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index e2f7a455a0da575a6c3567125265b20d6b0bbd3e..c3d5c4946cf58a79a1549be01f90f8c57f4af3e7 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -20,7 +20,7 @@ jobs: steps: - name: 'Checkout code' - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 with: persist-credentials: false diff --git a/.github/workflows/update-data.yml b/.github/workflows/update-data.yml index d48091e84d0daff3a73efff487666e6747d152e0..315d03f9a5345b60537b1fcbc5a0fa282e1eb984 100644 --- a/.github/workflows/update-data.yml +++ b/.github/workflows/update-data.yml @@ -17,7 +17,7 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Enable corepack shell: bash diff --git a/.github/workflows/ws_scan.yaml b/.github/workflows/ws_scan.yaml index 2ffeae548b1019f563a8db9f7f976d8495a07ace..74a26a8dca1a799019c51788c2f192062662391e 100644 --- a/.github/workflows/ws_scan.yaml +++ b/.github/workflows/ws_scan.yaml @@ -11,7 +11,7 @@ jobs: WS_SCAN: runs-on: ubuntu-latest steps: - - uses: actions/checkout@3df4ab11eba7bda6032a0b82a6bb43b11571feac # v4.0.0 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 - name: Download UA run: curl -LJO https://github.com/whitesource/unified-agent-distribution/releases/latest/download/wss-unified-agent.jar