diff --git a/.github/renovate.json5 b/.github/renovate.json5 index a67d4a6d5..ecaeb5c1d 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -19,7 +19,6 @@ ], }, { - matchManagers: ['github-actions'], matchPackageNames: ['python'], allowedVersions: '<3.12', }, diff --git a/.github/workflows/changed_files.yml b/.github/workflows/changed_files.yml index 8c0e8bb6c..7e89d4a1d 100644 --- a/.github/workflows/changed_files.yml +++ b/.github/workflows/changed_files.yml @@ -29,7 +29,7 @@ jobs: any_changed: ${{ fromJson(steps.changed-files.outputs.result).any_changed }} changed_files: ${{ fromJson(steps.changed-files.outputs.result).changed_files }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install micromatch run: npm i -D micromatch@4.0.8 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 diff --git a/.github/workflows/publish_transformation.yml b/.github/workflows/publish_transformation.yml index 33dbd93e3..8112659af 100644 --- a/.github/workflows/publish_transformation.yml +++ b/.github/workflows/publish_transformation.yml @@ -32,7 +32,7 @@ jobs: clickhouse: ${{ fromJson(steps.set-result.outputs.result).clickhouse }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -83,7 +83,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # Required for BigQuery targets - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 @@ -92,7 +92,7 @@ jobs: service_account: "integration-service-account@cq-integration-tests.iam.gserviceaccount.com" # Required for athena targets - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6 + uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6 with: role-to-assume: arn:aws:iam::590184131402:role/cq-integration-tests-aws-github-action aws-region: us-east-1 @@ -116,7 +116,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/publish_visualization_aws_asset_inventory.yml b/.github/workflows/publish_visualization_aws_asset_inventory.yml index eb4fed360..c49100018 100644 --- a/.github/workflows/publish_visualization_aws_asset_inventory.yml +++ b/.github/workflows/publish_visualization_aws_asset_inventory.yml @@ -16,7 +16,7 @@ jobs: working-directory: visualizations/aws/asset_inventory steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Update Release Notes uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: diff --git a/.github/workflows/publish_visualization_aws_compliance.yml b/.github/workflows/publish_visualization_aws_compliance.yml index bd43df0ee..ce999e68c 100644 --- a/.github/workflows/publish_visualization_aws_compliance.yml +++ b/.github/workflows/publish_visualization_aws_compliance.yml @@ -16,7 +16,7 @@ jobs: working-directory: visualizations/aws/compliance steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Update Release Notes uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: diff --git a/.github/workflows/publish_visualization_aws_data_resilience.yml b/.github/workflows/publish_visualization_aws_data_resilience.yml index b72b567f0..3e55f4a1b 100644 --- a/.github/workflows/publish_visualization_aws_data_resilience.yml +++ b/.github/workflows/publish_visualization_aws_data_resilience.yml @@ -16,7 +16,7 @@ jobs: working-directory: visualizations/aws/data_resilience steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Update Release Notes uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: diff --git a/.github/workflows/release_pr.yml b/.github/workflows/release_pr.yml index f2b34576f..09325e7a3 100644 --- a/.github/workflows/release_pr.yml +++ b/.github/workflows/release_pr.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} diff --git a/.github/workflows/transformations_aws_asset_inventory_free.yml b/.github/workflows/transformations_aws_asset_inventory_free.yml index 090de920b..1b63fef83 100644 --- a/.github/workflows/transformations_aws_asset_inventory_free.yml +++ b/.github/workflows/transformations_aws_asset_inventory_free.yml @@ -45,7 +45,7 @@ jobs: clickhouse: ${{ fromJson(steps.set-result.outputs.result).clickhouse }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -96,7 +96,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -106,7 +106,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_aws_compliance_premium.yml b/.github/workflows/transformations_aws_compliance_premium.yml index 51446e671..ff88ef4ca 100644 --- a/.github/workflows/transformations_aws_compliance_premium.yml +++ b/.github/workflows/transformations_aws_compliance_premium.yml @@ -45,7 +45,7 @@ jobs: s3: ${{ fromJson(steps.set-result.outputs.result).s3 }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -96,13 +96,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -112,14 +112,14 @@ jobs: workload_identity_provider: "projects/151868820337/locations/global/workloadIdentityPools/integration-test-pool/providers/integration-test-provider" service_account: "integration-service-account@cq-integration-tests.iam.gserviceaccount.com" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6 + uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6 with: role-to-assume: arn:aws:iam::590184131402:role/cq-integration-tests-aws-github-action aws-region: us-east-1 - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_aws_cost.yml b/.github/workflows/transformations_aws_cost.yml index 8a9c66c8d..44a2dc8c6 100644 --- a/.github/workflows/transformations_aws_cost.yml +++ b/.github/workflows/transformations_aws_cost.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -92,7 +92,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -102,7 +102,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_aws_data_resilience.yml b/.github/workflows/transformations_aws_data_resilience.yml index 8ecfc2170..bd458bca0 100644 --- a/.github/workflows/transformations_aws_data_resilience.yml +++ b/.github/workflows/transformations_aws_data_resilience.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -92,7 +92,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -102,7 +102,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_aws_encryption.yml b/.github/workflows/transformations_aws_encryption.yml index 0f09f367a..74f1a8599 100644 --- a/.github/workflows/transformations_aws_encryption.yml +++ b/.github/workflows/transformations_aws_encryption.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -92,7 +92,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -102,7 +102,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_azure_asset_inventory_free.yml b/.github/workflows/transformations_azure_asset_inventory_free.yml index 6daec42c6..3ba0a316b 100644 --- a/.github/workflows/transformations_azure_asset_inventory_free.yml +++ b/.github/workflows/transformations_azure_asset_inventory_free.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,7 +93,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -103,7 +103,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_azure_compliance_premium.yml b/.github/workflows/transformations_azure_compliance_premium.yml index 8a32ad5df..0edcca01f 100644 --- a/.github/workflows/transformations_azure_compliance_premium.yml +++ b/.github/workflows/transformations_azure_compliance_premium.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,13 +93,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -111,7 +111,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_docs_deploy.yml b/.github/workflows/transformations_docs_deploy.yml index 190d4c8b8..6b854d563 100644 --- a/.github/workflows/transformations_docs_deploy.yml +++ b/.github/workflows/transformations_docs_deploy.yml @@ -39,7 +39,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" @@ -60,7 +60,7 @@ jobs: needs: generate-docs runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Download artifacts uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: @@ -81,7 +81,7 @@ jobs: needs: generate-docs runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Download artifacts uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: diff --git a/.github/workflows/transformations_gcp_asset_inventory_free.yml b/.github/workflows/transformations_gcp_asset_inventory_free.yml index 3a47017cb..db9d12e3c 100644 --- a/.github/workflows/transformations_gcp_asset_inventory_free.yml +++ b/.github/workflows/transformations_gcp_asset_inventory_free.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,7 +93,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -103,7 +103,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_gcp_compliance_premium.yml b/.github/workflows/transformations_gcp_compliance_premium.yml index 824fe969c..c3d5539fc 100644 --- a/.github/workflows/transformations_gcp_compliance_premium.yml +++ b/.github/workflows/transformations_gcp_compliance_premium.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,13 +93,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -111,7 +111,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/transformations_k8s_compliance_premium.yml b/.github/workflows/transformations_k8s_compliance_premium.yml index 1ddac12d2..b28f6bf7a 100644 --- a/.github/workflows/transformations_k8s_compliance_premium.yml +++ b/.github/workflows/transformations_k8s_compliance_premium.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,13 +93,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -111,7 +111,7 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/validate_transformation_release.yml b/.github/workflows/validate_transformation_release.yml index 56657f07c..e9c8fdb01 100644 --- a/.github/workflows/validate_transformation_release.yml +++ b/.github/workflows/validate_transformation_release.yml @@ -32,7 +32,7 @@ jobs: clickhouse: ${{ fromJson(steps.set-result.outputs.result).clickhouse }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -86,7 +86,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # Required for BigQuery targets - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 @@ -95,14 +95,14 @@ jobs: service_account: "integration-service-account@cq-integration-tests.iam.gserviceaccount.com" # Required for athena targets - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6 + uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6 with: role-to-assume: arn:aws:iam::590184131402:role/cq-integration-tests-aws-github-action aws-region: us-east-1 - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: python-version: "3.11" diff --git a/.github/workflows/wait_for_required_workflows.yml b/.github/workflows/wait_for_required_workflows.yml index c4269a6a6..07fd03f33 100644 --- a/.github/workflows/wait_for_required_workflows.yml +++ b/.github/workflows/wait_for_required_workflows.yml @@ -24,7 +24,7 @@ jobs: name: wait-for-required-workflows runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 env: FILES: ${{ needs.prepare.outputs.changed_files }}