Merge remote-tracking branch 'origin/master'

Author: pk910

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+   - package-ecosystem: github-actions
+     directory: /
+     schedule:
+        interval: monthly
+     groups:
+        actions:
+           patterns:
+              - '*'

.github/workflows/_shared-prepare-docker-cache.yaml

@@ -39,7 +39,7 @@ jobs:
     - name: Cache Docker images.
       id: cache
       if: ${{ steps.check_cache.outputs.exists == 'false' }}
-      uses: ScribeMD/docker-cache@0.5.0
+      uses: ScribeMD/docker-cache@fb28c93772363301b8d0a6072ce850224b73f74e # 0.5.0
       with:
         key: kurtosis-docker-${{ runner.os }}-${{ steps.kurtosis_version.outputs.kurtosis_version }}
 
@@ -54,7 +54,7 @@ jobs:
       if: ${{ steps.cache.outputs.cache-hit == 'false' }}
       continue-on-error: true
       id: testnet
-      uses: ethpandaops/kurtosis-assertoor-github-action@v1
+      uses: ethpandaops/kurtosis-assertoor-github-action@5932604b244dbd2ddb811516b516a9094f4d2c2f # v1
       with:
         kurtosis_extra_args: "--image-download always --non-blocking-tasks --verbosity DETAILED"
         kurtosis_backend: docker

.github/workflows/_shared-run-test.yaml

@@ -77,9 +77,9 @@ jobs:
     timeout-minutes: 1440
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Cache Docker images.
-      uses: ScribeMD/docker-cache@0.5.0
+      uses: ScribeMD/docker-cache@fb28c93772363301b8d0a6072ce850224b73f74e # 0.5.0
       with:
         key: kurtosis-docker-${{ runner.os }}-${{ inputs.kurtosis_version }}
         read-only: true
@@ -148,7 +148,7 @@ jobs:
               cl_type=$(echo "$pair" | sed 's/^\(.*\)-\(.*\)$/\1/')
               el_type=$(echo "$pair" | sed 's/^\(.*\)-\(.*\)$/\2/')
             fi
-            
+
             if [[ "$cl_type" == *"/"* ]]; then
               vc_type=$(echo "$cl_type" | sed 's/^\(.*\)\/\(.*\)$/\2/')
               cl_type=$(echo "$cl_type" | sed 's/^\(.*\)\/\(.*\)$/\1/')
@@ -257,7 +257,7 @@ jobs:
 
     - name: Run kurtosis testnet
       id: testnet
-      uses: ethpandaops/kurtosis-assertoor-github-action@v1
+      uses: ethpandaops/kurtosis-assertoor-github-action@5932604b244dbd2ddb811516b516a9094f4d2c2f # v1
       with:
         kurtosis_extra_args: "--non-blocking-tasks --verbosity DETAILED"
         kurtosis_backend: ${{ inputs.backend }}
@@ -269,10 +269,10 @@ jobs:
         enclave_name: "assertoor-${{ github.run_id }}-${{ inputs.id }}"
         await_assertoor_tests: "false"
         enclave_dump: "false"
-    
+
     - name: Await assertoor test result
       id: test_result
-      uses: ethpandaops/assertoor-github-action@v1
+      uses: ethpandaops/assertoor-github-action@2c0747b6d798a3a646d4339c85258940b8fa66ff # v1
       if: ${{ fromJson(steps.testnet.outputs.services).assertoor.http.url != '' }}
       with:
         kurtosis_enclave_name: "assertoor-${{ github.run_id }}-${{ inputs.id }}"
@@ -389,7 +389,7 @@ jobs:
 
     - name: Upload dump artifact
       if: ${{ steps.enclave_dump.outputs.dump_dir != '' }}
-      uses: actions/upload-artifact@v4
+      uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
       with:
         name: "enclave-dump-assertoor-${{ github.run_id }}-${{ inputs.id }}"
         path: "${{ steps.enclave_dump.outputs.dump_dir }}"
@@ -404,17 +404,17 @@ jobs:
         echo "- **Test ID:** ${{ inputs.id }}" >> $GITHUB_STEP_SUMMARY
         echo "- **Name:** ${{ inputs.name }}" >> $GITHUB_STEP_SUMMARY
         echo "- **Status:** ${{ steps.test_result.outputs.result }}" >> $GITHUB_STEP_SUMMARY
-        
+
         start_time="${{ steps.clients.outputs.start_time }}"
         end_time="$(date +%s)"
         runtime="$(expr $end_time - $start_time)"
         echo "- **Run Time:** $(printf '%02dh:%02dm:%02ds\n' $((runtime/3600)) $((runtime%3600/60)) $((runtime%60)))" >> $GITHUB_STEP_SUMMARY
-        
+
         echo "" >> $GITHUB_STEP_SUMMARY
         echo "## Client Configuration" >> $GITHUB_STEP_SUMMARY
         cat ./temp/clients_summary.txt >> $GITHUB_STEP_SUMMARY
         echo "" >> $GITHUB_STEP_SUMMARY
-        
+
         echo "## Failed Test" >> $GITHUB_STEP_SUMMARY
         if [ -z "${{ steps.test_result.outputs.result }}" ]; then
           echo "kurtosis testnet failed during startup" >> $GITHUB_STEP_SUMMARY
@@ -465,7 +465,7 @@ jobs:
         echo "**Clients:**" >> ./temp/notification_text.txt
         cat ./temp/clients_summary.txt >> ./temp/notification_text.txt
         echo "" >> ./temp/notification_text.txt
-        
+
         echo "**Failed Test:**" >> ./temp/notification_text.txt
         if [ -z "${{ steps.test_result.outputs.result }}" ]; then
           echo "kurtosis testnet failed during startup" >> ./temp/notification_text.txt
@@ -491,9 +491,14 @@ jobs:
         fi
 
         echo "Resolve job_id..."
-        jobs=$(gh api "repos/${{ github.repository }}/actions/runs/${{ github.run_id}}/attempts/${{ github.run_attempt }}/jobs")
-        job_id=$(echo $jobs | jq -r '.jobs[] | select(.runner_name=="${{ runner.name }}") | .id')
-        job_url="https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id}}/job/${job_id}"
+        job_id=$(gh run view ${{ github.run_id }} --json jobs --jq '.jobs[] | select(.name=="${{ github.job }}") | .id')
+
+        if [ -z "$job_id" ]; then
+          echo "⚠️ Job ID not found, using default run URL"
+          job_url="https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}"
+        else
+          job_url="https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}/job/${job_id}"
+        fi
 
         echo "Generate discord message..."
         msgjson="{}"

.github/workflows/run-manual.yml

@@ -29,7 +29,7 @@ jobs:
       has_docker_tests: ${{ steps.tests.outputs.has_docker_tests }}
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: "Load test configurations from tests.yaml"
       id: tests
       shell: bash

.github/workflows/run-scheduled.yml

@@ -18,7 +18,7 @@ jobs:
       has_docker_tests: ${{ steps.tests.outputs.has_docker_tests }}
     steps:
     - name: Checkout Repository
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: "Load test configurations from tests.yaml"
       id: tests
       shell: bash