@@ -50,17 +50,17 @@ jobs:
5050
5151 steps :
5252 - name : Harden the runner (Audit all outbound calls)
53- uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
53+ uses : step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
5454 with :
5555 egress-policy : audit
5656
5757 - run : git config --global core.autocrlf false
58- - uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
58+ - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
5959 with :
6060 fetch-depth : 0
6161 submodules : true
6262
63- - uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0 .0
63+ - uses : actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1 .0
6464 env :
6565 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
6666 with :
@@ -121,7 +121,7 @@ jobs:
121121
122122 - name : Upload dist
123123 if : runner.os == 'Linux'
124- uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5 .0.0
124+ uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
125125 with :
126126 name : dist
127127 path : |
@@ -142,13 +142,13 @@ jobs:
142142 git commit -m "Update CHANGELOG.md after release [skip ci]"
143143 git push
144144
145- - uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5 .0.0
145+ - uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
146146 if : runner.os == 'Linux'
147147 with :
148148 name : test-coverage
149149 path : ./coverage
150150
151- - uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5 .0.0
151+ - uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
152152 with :
153153 name : test-report-${{ matrix.target }}
154154 path : ./test-report.html
@@ -177,13 +177,13 @@ jobs:
177177 packages : read
178178 steps :
179179 - name : Harden the runner (Audit all outbound calls)
180- uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
180+ uses : step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
181181 with :
182182 egress-policy : audit
183183
184- - uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
184+ - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
185185
186- - uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0 .0
186+ - uses : actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1 .0
187187 env :
188188 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
189189 with :
@@ -193,7 +193,7 @@ jobs:
193193 package-manager-cache : false
194194
195195 - name : Download dist
196- uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6 .0.0
196+ uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 .0.0
197197 with :
198198 name : dist
199199 path : .
@@ -208,7 +208,7 @@ jobs:
208208 yarn package --target ${{ matrix.target }}
209209
210210 - name : Upload package
211- uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5 .0.0
211+ uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
212212 with :
213213 name : vsix-package-${{ matrix.target }}
214214 path : ./*.vsix
@@ -236,13 +236,13 @@ jobs:
236236 packages : read
237237 steps :
238238 - name : Harden the runner (Audit all outbound calls)
239- uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
239+ uses : step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
240240 with :
241241 egress-policy : audit
242242
243- - uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
243+ - uses : actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
244244
245- - uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0 .0
245+ - uses : actions/setup-node@395ad3262231945c25e8478fd5baf05154b1d79f # v6.1 .0
246246 env :
247247 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
248248 with :
@@ -256,7 +256,7 @@ jobs:
256256 yarn --frozen-lockfile --ignore-scripts --prefer-offline
257257
258258 - name : Download vsix package
259- uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6 .0.0
259+ uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 .0.0
260260 with :
261261 pattern : vsix-package-${{ matrix.target }}
262262
@@ -276,23 +276,23 @@ jobs:
276276 contents : write # for softprops/action-gh-release to create a GitHub release
277277 steps :
278278 - name : Harden the runner (Audit all outbound calls)
279- uses : step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1
279+ uses : step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0
280280 with :
281281 egress-policy : audit
282282
283283 - name : Download packages
284- uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6 .0.0
284+ uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 .0.0
285285 with :
286286 pattern : vsix-package-*
287287
288288 - name : Download coverage report
289- uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6 .0.0
289+ uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 .0.0
290290 with :
291291 pattern : test-coverage
292292 path : test-coverage # Required for single-match patterns by actions/download-artifact >= v5
293293
294294 - name : Download test report
295- uses : actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6 .0.0
295+ uses : actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 .0.0
296296 with :
297297 pattern : test-report-linux
298298 path : test-report-linux # Required for single-match patterns by actions/download-artifact >= v5
0 commit comments