3939
4040 steps :
4141 - name : Harden the runner (Audit all outbound calls)
42- uses : step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
42+ uses : step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
4343 with :
4444 egress-policy : audit
4545
5757 env :
5858 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
5959 with :
60- node-version : ' 20 '
60+ node-version-file : package.json
6161 registry-url : https://npm.pkg.github.com
6262 package-manager-cache : false
6363
@@ -174,42 +174,42 @@ jobs:
174174 run : npm run package -- --target darwin-arm64
175175
176176 - name : Upload win32-x64 VSIX package
177- uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
177+ uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 .0.0
178178 with :
179179 name : vscode-cmsis-solution-win32-x64
180180 path : ./*win32-x64*.vsix
181181 retention-days : 1
182182
183183 - name : Upload win32-arm64 VSIX package
184- uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
184+ uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 .0.0
185185 with :
186186 name : vscode-cmsis-solution-win32-arm64
187187 path : ./*win32-arm64*.vsix
188188 retention-days : 1
189189
190190 - name : Upload linux-x64 VSIX package
191- uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
191+ uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 .0.0
192192 with :
193193 name : vscode-cmsis-solution-linux-x64
194194 path : ./*linux-x64*.vsix
195195 retention-days : 1
196196
197197 - name : Upload linux-arm64 VSIX package
198- uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
198+ uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 .0.0
199199 with :
200200 name : vscode-cmsis-solution-linux-arm64
201201 path : ./*linux-arm64*.vsix
202202 retention-days : 1
203203
204204 - name : Upload darwin-x64 VSIX package
205- uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
205+ uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 .0.0
206206 with :
207207 name : vscode-cmsis-solution-darwin-x64
208208 path : ./*darwin-x64*.vsix
209209 retention-days : 1
210210
211211 - name : Upload darwin-arm64 VSIX package
212- uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
212+ uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 .0.0
213213 with :
214214 name : vscode-cmsis-solution-darwin-arm64
215215 path : ./*darwin-arm64*.vsix
@@ -219,7 +219,7 @@ jobs:
219219 run : git diff > new-version.patch
220220
221221 - name : Store version bump patch
222- uses : actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4
222+ uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
223223 with :
224224 name : new-version-patch
225225 path : ./new-version.patch
@@ -249,7 +249,7 @@ jobs:
249249
250250 steps :
251251 - name : Harden the runner (Audit all outbound calls)
252- uses : step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
252+ uses : step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
253253 with :
254254 egress-policy : audit
255255
@@ -264,7 +264,7 @@ jobs:
264264 env :
265265 NODE_AUTH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
266266 with :
267- node-version : ' 20 '
267+ node-version-file : package.json
268268 registry-url : https://npm.pkg.github.com
269269 package-manager-cache : false
270270
@@ -277,15 +277,15 @@ jobs:
277277 - name : Run Test
278278 run : npm run test
279279
280- - uses : actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 .0.0
280+ - uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 .0.0
281281 if : ${{ matrix.target == 'linux-x64' }}
282282 with :
283283 name : unit-test-coverage
284284 path : ./coverage
285285
286286 - name : Publish coverage report to QLTY
287287 if : github.repository_owner == 'Open-CMSIS-Pack' && matrix.target == 'linux-x64'
288- uses : qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v1
288+ uses : qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v2.2.0
289289 with :
290290 token : ${{ secrets.QLTY_COVERAGE_TOKEN }}
291291 files : coverage/lcov.info
@@ -299,7 +299,7 @@ jobs:
299299 contents : write
300300 steps :
301301 - name : Harden the runner (Audit all outbound calls)
302- uses : step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
302+ uses : step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
303303 with :
304304 egress-policy : audit
305305
0 commit comments