From 2eb380bdb79500ff07b09fc5c3e517cbf40f1869 Mon Sep 17 00:00:00 2001 From: "cloudquery-ci[bot]" <271027272+cloudquery-ci[bot]@users.noreply.github.com> Date: Mon, 8 Jun 2026 21:09:05 +0000 Subject: [PATCH 1/2] chore(deps): Update github-actions --- .github/workflows/changed_files.yml | 2 +- .github/workflows/publish_transformation.yml | 10 +++++----- .../publish_visualization_aws_asset_inventory.yml | 2 +- .../publish_visualization_aws_compliance.yml | 2 +- .../publish_visualization_aws_data_resilience.yml | 2 +- .github/workflows/release_pr.yml | 2 +- .../transformations_aws_asset_inventory_free.yml | 8 ++++---- .../transformations_aws_compliance_premium.yml | 12 ++++++------ .github/workflows/transformations_aws_cost.yml | 8 ++++---- .../transformations_aws_data_resilience.yml | 8 ++++---- .github/workflows/transformations_aws_encryption.yml | 8 ++++---- .../transformations_azure_asset_inventory_free.yml | 8 ++++---- .../transformations_azure_compliance_premium.yml | 10 +++++----- .github/workflows/transformations_docs_deploy.yml | 8 ++++---- .../transformations_gcp_asset_inventory_free.yml | 8 ++++---- .../transformations_gcp_compliance_premium.yml | 10 +++++----- .../transformations_k8s_compliance_premium.yml | 10 +++++----- .../workflows/validate_transformation_release.yml | 10 +++++----- .github/workflows/wait_for_required_workflows.yml | 2 +- 19 files changed, 65 insertions(+), 65 deletions(-) diff --git a/.github/workflows/changed_files.yml b/.github/workflows/changed_files.yml index 8c0e8bb6c..7e89d4a1d 100644 --- a/.github/workflows/changed_files.yml +++ b/.github/workflows/changed_files.yml @@ -29,7 +29,7 @@ jobs: any_changed: ${{ fromJson(steps.changed-files.outputs.result).any_changed }} changed_files: ${{ fromJson(steps.changed-files.outputs.result).changed_files }} steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Install micromatch run: npm i -D micromatch@4.0.8 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 diff --git a/.github/workflows/publish_transformation.yml b/.github/workflows/publish_transformation.yml index 33dbd93e3..cbb07489c 100644 --- a/.github/workflows/publish_transformation.yml +++ b/.github/workflows/publish_transformation.yml @@ -32,7 +32,7 @@ jobs: clickhouse: ${{ fromJson(steps.set-result.outputs.result).clickhouse }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -83,7 +83,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # Required for BigQuery targets - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 @@ -92,7 +92,7 @@ jobs: service_account: "integration-service-account@cq-integration-tests.iam.gserviceaccount.com" # Required for athena targets - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6 + uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6 with: role-to-assume: arn:aws:iam::590184131402:role/cq-integration-tests-aws-github-action aws-region: us-east-1 @@ -116,10 +116,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies working-directory: ${{ needs.prepare.outputs.transformation_dir }} run: uv sync --frozen diff --git a/.github/workflows/publish_visualization_aws_asset_inventory.yml b/.github/workflows/publish_visualization_aws_asset_inventory.yml index eb4fed360..c49100018 100644 --- a/.github/workflows/publish_visualization_aws_asset_inventory.yml +++ b/.github/workflows/publish_visualization_aws_asset_inventory.yml @@ -16,7 +16,7 @@ jobs: working-directory: visualizations/aws/asset_inventory steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Update Release Notes uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: diff --git a/.github/workflows/publish_visualization_aws_compliance.yml b/.github/workflows/publish_visualization_aws_compliance.yml index bd43df0ee..ce999e68c 100644 --- a/.github/workflows/publish_visualization_aws_compliance.yml +++ b/.github/workflows/publish_visualization_aws_compliance.yml @@ -16,7 +16,7 @@ jobs: working-directory: visualizations/aws/compliance steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Update Release Notes uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: diff --git a/.github/workflows/publish_visualization_aws_data_resilience.yml b/.github/workflows/publish_visualization_aws_data_resilience.yml index b72b567f0..3e55f4a1b 100644 --- a/.github/workflows/publish_visualization_aws_data_resilience.yml +++ b/.github/workflows/publish_visualization_aws_data_resilience.yml @@ -16,7 +16,7 @@ jobs: working-directory: visualizations/aws/data_resilience steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Update Release Notes uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 with: diff --git a/.github/workflows/release_pr.yml b/.github/workflows/release_pr.yml index f2b34576f..09325e7a3 100644 --- a/.github/workflows/release_pr.yml +++ b/.github/workflows/release_pr.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} diff --git a/.github/workflows/transformations_aws_asset_inventory_free.yml b/.github/workflows/transformations_aws_asset_inventory_free.yml index 090de920b..1a133112f 100644 --- a/.github/workflows/transformations_aws_asset_inventory_free.yml +++ b/.github/workflows/transformations_aws_asset_inventory_free.yml @@ -45,7 +45,7 @@ jobs: clickhouse: ${{ fromJson(steps.set-result.outputs.result).clickhouse }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -96,7 +96,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -106,10 +106,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_compliance_premium.yml b/.github/workflows/transformations_aws_compliance_premium.yml index 51446e671..7fc4c3329 100644 --- a/.github/workflows/transformations_aws_compliance_premium.yml +++ b/.github/workflows/transformations_aws_compliance_premium.yml @@ -45,7 +45,7 @@ jobs: s3: ${{ fromJson(steps.set-result.outputs.result).s3 }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -96,13 +96,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -112,17 +112,17 @@ jobs: workload_identity_provider: "projects/151868820337/locations/global/workloadIdentityPools/integration-test-pool/providers/integration-test-provider" service_account: "integration-service-account@cq-integration-tests.iam.gserviceaccount.com" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6 + uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6 with: role-to-assume: arn:aws:iam::590184131402:role/cq-integration-tests-aws-github-action aws-region: us-east-1 - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_cost.yml b/.github/workflows/transformations_aws_cost.yml index 8a9c66c8d..eb293fd35 100644 --- a/.github/workflows/transformations_aws_cost.yml +++ b/.github/workflows/transformations_aws_cost.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -92,7 +92,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -102,10 +102,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_data_resilience.yml b/.github/workflows/transformations_aws_data_resilience.yml index 8ecfc2170..950412f00 100644 --- a/.github/workflows/transformations_aws_data_resilience.yml +++ b/.github/workflows/transformations_aws_data_resilience.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -92,7 +92,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -102,10 +102,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_encryption.yml b/.github/workflows/transformations_aws_encryption.yml index 0f09f367a..619dbbfa1 100644 --- a/.github/workflows/transformations_aws_encryption.yml +++ b/.github/workflows/transformations_aws_encryption.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -92,7 +92,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -102,10 +102,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_azure_asset_inventory_free.yml b/.github/workflows/transformations_azure_asset_inventory_free.yml index 6daec42c6..8a3059547 100644 --- a/.github/workflows/transformations_azure_asset_inventory_free.yml +++ b/.github/workflows/transformations_azure_asset_inventory_free.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,7 +93,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -103,10 +103,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_azure_compliance_premium.yml b/.github/workflows/transformations_azure_compliance_premium.yml index 8a32ad5df..f81d2c788 100644 --- a/.github/workflows/transformations_azure_compliance_premium.yml +++ b/.github/workflows/transformations_azure_compliance_premium.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,13 +93,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -111,10 +111,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_docs_deploy.yml b/.github/workflows/transformations_docs_deploy.yml index 190d4c8b8..7131f125c 100644 --- a/.github/workflows/transformations_docs_deploy.yml +++ b/.github/workflows/transformations_docs_deploy.yml @@ -39,10 +39,10 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Setup CloudQuery uses: cloudquery/setup-cloudquery@b7f7ea62cfec9774ad44a0d9307d0f6c5573bcb6 # v5.0.2 with: @@ -60,7 +60,7 @@ jobs: needs: generate-docs runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Download artifacts uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: @@ -81,7 +81,7 @@ jobs: needs: generate-docs runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Download artifacts uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: diff --git a/.github/workflows/transformations_gcp_asset_inventory_free.yml b/.github/workflows/transformations_gcp_asset_inventory_free.yml index 3a47017cb..4235b9282 100644 --- a/.github/workflows/transformations_gcp_asset_inventory_free.yml +++ b/.github/workflows/transformations_gcp_asset_inventory_free.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,7 +93,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 if: needs.prepare.outputs.bigquery == 'true' @@ -103,10 +103,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_gcp_compliance_premium.yml b/.github/workflows/transformations_gcp_compliance_premium.yml index 824fe969c..fd266e669 100644 --- a/.github/workflows/transformations_gcp_compliance_premium.yml +++ b/.github/workflows/transformations_gcp_compliance_premium.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,13 +93,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -111,10 +111,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_k8s_compliance_premium.yml b/.github/workflows/transformations_k8s_compliance_premium.yml index 1ddac12d2..60b494b4f 100644 --- a/.github/workflows/transformations_k8s_compliance_premium.yml +++ b/.github/workflows/transformations_k8s_compliance_premium.yml @@ -44,7 +44,7 @@ jobs: bigquery: ${{ fromJson(steps.set-result.outputs.result).bigquery }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -93,13 +93,13 @@ jobs: steps: - name: Generate GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3 with: app-id: ${{ secrets.CQ_APP_ID }} private-key: ${{ secrets.CQ_APP_PRIVATE_KEY }} permission-contents: write - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: token: ${{ steps.app-token.outputs.token }} - name: Authenticate to Google Cloud @@ -111,10 +111,10 @@ jobs: - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/validate_transformation_release.yml b/.github/workflows/validate_transformation_release.yml index 56657f07c..708510ac5 100644 --- a/.github/workflows/validate_transformation_release.yml +++ b/.github/workflows/validate_transformation_release.yml @@ -32,7 +32,7 @@ jobs: clickhouse: ${{ fromJson(steps.set-result.outputs.result).clickhouse }} steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 id: set-result env: @@ -86,7 +86,7 @@ jobs: --health-retries 5 steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 # Required for BigQuery targets - name: Authenticate to Google Cloud uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093" # v3 @@ -95,17 +95,17 @@ jobs: service_account: "integration-service-account@cq-integration-tests.iam.gserviceaccount.com" # Required for athena targets - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@ec61189d14ec14c8efccab744f656cffd0e33f37 # v6 + uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6 with: role-to-assume: arn:aws:iam::590184131402:role/cq-integration-tests-aws-github-action aws-region: us-east-1 - name: Install uv uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8 with: - version: "0.11.7" + version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.11" + python-version: "3.14" - name: Install dependencies working-directory: ${{ needs.prepare.outputs.transformation_dir }} run: uv sync --frozen diff --git a/.github/workflows/wait_for_required_workflows.yml b/.github/workflows/wait_for_required_workflows.yml index c4269a6a6..07fd03f33 100644 --- a/.github/workflows/wait_for_required_workflows.yml +++ b/.github/workflows/wait_for_required_workflows.yml @@ -24,7 +24,7 @@ jobs: name: wait-for-required-workflows runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9 env: FILES: ${{ needs.prepare.outputs.changed_files }} From 46afa8b17b1c683896303cf2a44715a803d0fe7f Mon Sep 17 00:00:00 2001 From: erezrokah Date: Tue, 9 Jun 2026 12:06:04 +0100 Subject: [PATCH 2/2] fix: Revert Python 3.14 bump and tighten renovate rule --- .github/renovate.json5 | 1 - .github/workflows/publish_transformation.yml | 2 +- .github/workflows/transformations_aws_asset_inventory_free.yml | 2 +- .github/workflows/transformations_aws_compliance_premium.yml | 2 +- .github/workflows/transformations_aws_cost.yml | 2 +- .github/workflows/transformations_aws_data_resilience.yml | 2 +- .github/workflows/transformations_aws_encryption.yml | 2 +- .../workflows/transformations_azure_asset_inventory_free.yml | 2 +- .github/workflows/transformations_azure_compliance_premium.yml | 2 +- .github/workflows/transformations_docs_deploy.yml | 2 +- .github/workflows/transformations_gcp_asset_inventory_free.yml | 2 +- .github/workflows/transformations_gcp_compliance_premium.yml | 2 +- .github/workflows/transformations_k8s_compliance_premium.yml | 2 +- .github/workflows/validate_transformation_release.yml | 2 +- 14 files changed, 13 insertions(+), 14 deletions(-) diff --git a/.github/renovate.json5 b/.github/renovate.json5 index a67d4a6d5..ecaeb5c1d 100644 --- a/.github/renovate.json5 +++ b/.github/renovate.json5 @@ -19,7 +19,6 @@ ], }, { - matchManagers: ['github-actions'], matchPackageNames: ['python'], allowedVersions: '<3.12', }, diff --git a/.github/workflows/publish_transformation.yml b/.github/workflows/publish_transformation.yml index cbb07489c..8112659af 100644 --- a/.github/workflows/publish_transformation.yml +++ b/.github/workflows/publish_transformation.yml @@ -119,7 +119,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies working-directory: ${{ needs.prepare.outputs.transformation_dir }} run: uv sync --frozen diff --git a/.github/workflows/transformations_aws_asset_inventory_free.yml b/.github/workflows/transformations_aws_asset_inventory_free.yml index 1a133112f..1b63fef83 100644 --- a/.github/workflows/transformations_aws_asset_inventory_free.yml +++ b/.github/workflows/transformations_aws_asset_inventory_free.yml @@ -109,7 +109,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_compliance_premium.yml b/.github/workflows/transformations_aws_compliance_premium.yml index 7fc4c3329..ff88ef4ca 100644 --- a/.github/workflows/transformations_aws_compliance_premium.yml +++ b/.github/workflows/transformations_aws_compliance_premium.yml @@ -122,7 +122,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_cost.yml b/.github/workflows/transformations_aws_cost.yml index eb293fd35..44a2dc8c6 100644 --- a/.github/workflows/transformations_aws_cost.yml +++ b/.github/workflows/transformations_aws_cost.yml @@ -105,7 +105,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_data_resilience.yml b/.github/workflows/transformations_aws_data_resilience.yml index 950412f00..bd458bca0 100644 --- a/.github/workflows/transformations_aws_data_resilience.yml +++ b/.github/workflows/transformations_aws_data_resilience.yml @@ -105,7 +105,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_aws_encryption.yml b/.github/workflows/transformations_aws_encryption.yml index 619dbbfa1..74f1a8599 100644 --- a/.github/workflows/transformations_aws_encryption.yml +++ b/.github/workflows/transformations_aws_encryption.yml @@ -105,7 +105,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_azure_asset_inventory_free.yml b/.github/workflows/transformations_azure_asset_inventory_free.yml index 8a3059547..3ba0a316b 100644 --- a/.github/workflows/transformations_azure_asset_inventory_free.yml +++ b/.github/workflows/transformations_azure_asset_inventory_free.yml @@ -106,7 +106,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_azure_compliance_premium.yml b/.github/workflows/transformations_azure_compliance_premium.yml index f81d2c788..0edcca01f 100644 --- a/.github/workflows/transformations_azure_compliance_premium.yml +++ b/.github/workflows/transformations_azure_compliance_premium.yml @@ -114,7 +114,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_docs_deploy.yml b/.github/workflows/transformations_docs_deploy.yml index 7131f125c..6b854d563 100644 --- a/.github/workflows/transformations_docs_deploy.yml +++ b/.github/workflows/transformations_docs_deploy.yml @@ -42,7 +42,7 @@ jobs: uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Setup CloudQuery uses: cloudquery/setup-cloudquery@b7f7ea62cfec9774ad44a0d9307d0f6c5573bcb6 # v5.0.2 with: diff --git a/.github/workflows/transformations_gcp_asset_inventory_free.yml b/.github/workflows/transformations_gcp_asset_inventory_free.yml index 4235b9282..db9d12e3c 100644 --- a/.github/workflows/transformations_gcp_asset_inventory_free.yml +++ b/.github/workflows/transformations_gcp_asset_inventory_free.yml @@ -106,7 +106,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_gcp_compliance_premium.yml b/.github/workflows/transformations_gcp_compliance_premium.yml index fd266e669..c3d5539fc 100644 --- a/.github/workflows/transformations_gcp_compliance_premium.yml +++ b/.github/workflows/transformations_gcp_compliance_premium.yml @@ -114,7 +114,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/transformations_k8s_compliance_premium.yml b/.github/workflows/transformations_k8s_compliance_premium.yml index 60b494b4f..b28f6bf7a 100644 --- a/.github/workflows/transformations_k8s_compliance_premium.yml +++ b/.github/workflows/transformations_k8s_compliance_premium.yml @@ -114,7 +114,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies run: uv sync --frozen - name: Setup CloudQuery diff --git a/.github/workflows/validate_transformation_release.yml b/.github/workflows/validate_transformation_release.yml index 708510ac5..e9c8fdb01 100644 --- a/.github/workflows/validate_transformation_release.yml +++ b/.github/workflows/validate_transformation_release.yml @@ -105,7 +105,7 @@ jobs: version: "0.11.18" - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 with: - python-version: "3.14" + python-version: "3.11" - name: Install dependencies working-directory: ${{ needs.prepare.outputs.transformation_dir }} run: uv sync --frozen