From e0223a19b6e29a751edf0d440db0e536c12ed8ba Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 2 Jul 2026 16:32:08 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/REUSE.yaml | 4 +-- .github/workflows/ci.yml | 32 +++++++++---------- .github/workflows/golangci-lint.yaml | 6 ++-- .../workflows/sandbox-consumer.example.yaml | 10 +++--- .github/workflows/stale.yaml | 2 +- 5 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/REUSE.yaml b/.github/workflows/REUSE.yaml index 474ba19..1499beb 100644 --- a/.github/workflows/REUSE.yaml +++ b/.github/workflows/REUSE.yaml @@ -14,8 +14,8 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.0 with: persist-credentials: false - name: REUSE Compliance Check - uses: fsfe/reuse-action@v6 + uses: fsfe/reuse-action@v6.0.0 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 56cb01b..1db792c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -123,12 +123,12 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: persist-credentials: false - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v6.5.0 with: go-version-file: tests/go.mod cache: true @@ -138,11 +138,11 @@ jobs: uses: ./.github/actions/setup-tools - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@v4.2.0 continue-on-error: true - name: Log in to GHCR (read-only) - uses: docker/login-action@v4 + uses: docker/login-action@v4.3.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -162,16 +162,16 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: persist-credentials: false - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@v4.2.0 continue-on-error: true - name: Log in to GHCR - uses: docker/login-action@v4 + uses: docker/login-action@v4.3.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -191,17 +191,17 @@ jobs: timeout-minutes: 15 steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Install host-side tools (vault, bats) uses: ./.github/actions/setup-tools - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@v4.2.0 continue-on-error: true - name: Log in to GHCR - uses: docker/login-action@v4 + uses: docker/login-action@v4.3.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -232,7 +232,7 @@ jobs: - name: Upload BATS logs on failure if: failure() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@v7.0.1 with: name: bats-logs-${{ github.run_id }} path: logs/ @@ -319,10 +319,10 @@ jobs: doc: uc7-fru-discovery.md steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v6.5.0 with: go-version-file: tests/go.mod cache: true @@ -332,11 +332,11 @@ jobs: uses: ./.github/actions/setup-tools - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@v4.2.0 continue-on-error: true - name: Log in to GHCR - uses: docker/login-action@v4 + uses: docker/login-action@v4.3.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -401,7 +401,7 @@ jobs: - name: Upload artifacts if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@v7.0.1 with: name: ${{ matrix.id }}-logs-${{ github.run_id }} path: | diff --git a/.github/workflows/golangci-lint.yaml b/.github/workflows/golangci-lint.yaml index 9ff71f1..c9b58ec 100644 --- a/.github/workflows/golangci-lint.yaml +++ b/.github/workflows/golangci-lint.yaml @@ -19,14 +19,14 @@ jobs: run: working-directory: tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@v7.0.0 with: persist-credentials: false - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v6.5.0 with: go-version-file: tests/go.mod - name: Run golangci-lint - uses: golangci/golangci-lint-action@v9 + uses: golangci/golangci-lint-action@v9.3.0 with: # `version` is the golangci-lint *binary* version, not the action. # Pinned so it stays in sync with the v2 schema in tests/.golangci.yml. diff --git a/.github/workflows/sandbox-consumer.example.yaml b/.github/workflows/sandbox-consumer.example.yaml index 8f34d9a..8b675ab 100644 --- a/.github/workflows/sandbox-consumer.example.yaml +++ b/.github/workflows/sandbox-consumer.example.yaml @@ -37,13 +37,13 @@ jobs: timeout-minutes: 30 steps: - name: Check out the consumer repo (the service under test) - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: path: service fetch-depth: 0 - name: Check out the sandbox harness - uses: actions/checkout@v7 + uses: actions/checkout@v7.0.0 with: repository: OpenCHAMI/integration-sandbox path: integration-sandbox @@ -51,7 +51,7 @@ jobs: # ref: v1.0.0 - name: Install Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v6.5.0 with: go-version: "1.24.6" @@ -59,7 +59,7 @@ jobs: run: sudo apt-get update && sudo apt-get install -y bats - name: Log in to GHCR (read-only) - uses: docker/login-action@v4 + uses: docker/login-action@v4.3.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -89,7 +89,7 @@ jobs: - name: Upload log bundle on failure if: failure() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@v7.0.1 with: name: sandbox-logs path: integration-sandbox/logs/ diff --git a/.github/workflows/stale.yaml b/.github/workflows/stale.yaml index 557e4be..1ce48b9 100644 --- a/.github/workflows/stale.yaml +++ b/.github/workflows/stale.yaml @@ -17,7 +17,7 @@ jobs: run-stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v10 + - uses: actions/stale@v10.3.0 with: days-before-stale: 35 days-before-close: 7