Skip to content

Commit f534ecb

Browse files
committed
chore: Update workflows and some notes
Also fix some broken tests Signed-off-by: Austin Ziegler <austin@zieglers.ca>
1 parent d7361aa commit f534ecb

18 files changed

Lines changed: 74 additions & 60 deletions

.github/workflows/ci.yml

Lines changed: 22 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222

2323
steps:
2424
- name: Harden the runner
25-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
25+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2626
with:
2727
disable-sudo: true
2828
egress-policy: block
@@ -33,11 +33,11 @@ jobs:
3333
release-assets.githubusercontent.com:443
3434
rubygems.org:443
3535
36-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
36+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3737
with:
3838
persist-credentials: false
3939

40-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
40+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
4141
with:
4242
ruby-version: '3.4'
4343
rubygems: latest
@@ -55,7 +55,7 @@ jobs:
5555

5656
steps:
5757
- name: Harden the runner
58-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
58+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
5959
with:
6060
disable-sudo: true
6161
egress-policy: block
@@ -67,11 +67,11 @@ jobs:
6767
release-assets.githubusercontent.com:443
6868
rubygems.org:443
6969
70-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
70+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
7171
with:
7272
persist-credentials: false
7373

74-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
74+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
7575
with:
7676
ruby-version: '3.4'
7777
rubygems: latest
@@ -80,7 +80,7 @@ jobs:
8080

8181
- run: bundle exec ruby -S rake coverage --trace
8282

83-
- uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b #v2.3.6
83+
- uses: coverallsapp/github-action@648a8eb78e6d50909eff900e4ec85cab4524a45b # v2.3.6
8484

8585
required-ubuntu:
8686
name: Ruby ${{ matrix.ruby }} - ${{ matrix.os }}
@@ -105,7 +105,7 @@ jobs:
105105

106106
steps:
107107
- name: Harden the runner
108-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
108+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
109109
with:
110110
disable-sudo: true
111111
egress-policy: block
@@ -116,11 +116,11 @@ jobs:
116116
release-assets.githubusercontent.com:443
117117
rubygems.org:443
118118
119-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
119+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
120120
with:
121121
persist-credentials: false
122122

123-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
123+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
124124
with:
125125
ruby-version: ${{ matrix.ruby }}
126126
rubygems: latest
@@ -157,7 +157,7 @@ jobs:
157157

158158
steps:
159159
- name: Harden the runner
160-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
160+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
161161
with:
162162
disable-sudo: true
163163
egress-policy: block
@@ -168,11 +168,11 @@ jobs:
168168
release-assets.githubusercontent.com:443
169169
rubygems.org:443
170170
171-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
171+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
172172
with:
173173
persist-credentials: false
174174

175-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
175+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
176176
with:
177177
ruby-version: ${{ matrix.ruby }}
178178
rubygems: latest
@@ -213,7 +213,7 @@ jobs:
213213

214214
steps:
215215
- name: Harden the runner
216-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
216+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
217217
with:
218218
disable-sudo: true
219219
egress-policy: block
@@ -224,11 +224,11 @@ jobs:
224224
release-assets.githubusercontent.com:443
225225
rubygems.org:443
226226
227-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
227+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
228228
with:
229229
persist-credentials: false
230230

231-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
231+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
232232
with:
233233
ruby-version: ${{ matrix.ruby }}
234234
rubygems: latest
@@ -265,7 +265,7 @@ jobs:
265265

266266
steps:
267267
- name: Harden the runner
268-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
268+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
269269
with:
270270
disable-sudo: true
271271
egress-policy: block
@@ -277,11 +277,11 @@ jobs:
277277
repo.maven.apache.org:443
278278
rubygems.org:443
279279
280-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
280+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
281281
with:
282282
persist-credentials: false
283283

284-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
284+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
285285
with:
286286
ruby-version: ${{ matrix.ruby }}
287287
rubygems: latest
@@ -319,7 +319,7 @@ jobs:
319319

320320
steps:
321321
- name: Harden the runner
322-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
322+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
323323
with:
324324
disable-sudo: true
325325
egress-policy: block
@@ -330,11 +330,11 @@ jobs:
330330
release-assets.githubusercontent.com:443
331331
rubygems.org:443
332332
333-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
333+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
334334
with:
335335
persist-credentials: false
336336

337-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
337+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
338338
with:
339339
ruby-version: ${{ matrix.ruby }}
340340
rubygems: latest

.github/workflows/dco-check.yml

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,15 +16,20 @@ jobs:
1616

1717
permissions:
1818
contents: read
19+
pull-requests: write # Required to write comments on the PR
1920

2021
steps:
2122
- name: Harden the runner
22-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
23+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2324
with:
2425
egress-policy: block
2526
disable-sudo: true
2627
allowed-endpoints: >
2728
api.github.com:443
2829
github.com:443
30+
release-assets.githubusercontent.com:443
2931
30-
- uses: KineticCafe/actions-dco@6e1652ef3027ce128e65e6edd215ae053350bd16 # v2.1.1
32+
- uses: KineticCafe/actions-dco@1da04282bbf757dab7d92a5c8535dbfb8113da5c # v3.1.0
33+
with:
34+
config: |
35+
comment = true

.github/workflows/dependency-review.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
runs-on: ubuntu-latest
2525
steps:
2626
- name: Harden the runner
27-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
27+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2828
with:
2929
disable-sudo: true
3030
egress-policy: block
@@ -33,9 +33,9 @@ jobs:
3333
api.securityscorecards.dev:443
3434
github.com:443
3535
36-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
36+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3737
with:
3838
persist-credentials: false
3939

4040
- name: 'Dependency Review'
41-
uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0
41+
uses: actions/dependency-review-action@a1d282b36b6f3519aa1f3fc636f609c47dddb294 # v5.0.0

.github/workflows/publish-docs.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,11 +24,11 @@ jobs:
2424

2525
steps:
2626
- name: Harden the runner
27-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
27+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2828
with:
2929
egress-policy: audit
3030

31-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
31+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3232
with:
3333
persist-credentials: false
3434

@@ -38,7 +38,7 @@ jobs:
3838
'print "version=", Gem::Specification.load(ARGV[0]).rubygems_version, "\n"' \
3939
diff-lcs.gemspec >>"${GITHUB_OUTPUT}"
4040
41-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
41+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
4242
with:
4343
bundler-cache: false
4444
ruby-version: ruby
@@ -55,7 +55,7 @@ jobs:
5555
rake docs
5656
5757
- name: Upload documentation artifact
58-
uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4.0.0
58+
uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
5959
with:
6060
path: doc
6161

.github/workflows/publish-gem.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141

4242
steps:
4343
- name: Harden the runner
44-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
44+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
4545
with:
4646
disable-sudo: true
4747
egress-policy: block
@@ -55,7 +55,7 @@ jobs:
5555
rubygems.org:443
5656
tuf-repo-cdn.sigstore.dev:443
5757
58-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
58+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
5959
with:
6060
persist-credentials: true
6161

@@ -65,7 +65,7 @@ jobs:
6565
'print "version=", Gem::Specification.load(ARGV[0]).rubygems_version, "\n"' \
6666
diff-lcs.gemspec >>"${GITHUB_OUTPUT}"
6767
68-
- uses: ruby/setup-ruby@09a7688d3b55cf0e976497ff046b70949eeaccfd # v1.288.0
68+
- uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0
6969
with:
7070
bundler-cache: false
7171
ruby-version: ruby
@@ -90,7 +90,7 @@ jobs:
9090
git push origin main
9191
fi
9292
93-
- uses: rubygems/release-gem@e9a6361a0b14562539327c2a02373edc56dd3169 # v1.1.4
93+
- uses: rubygems/release-gem@052cc82692552de3ef2b81fd670e41d13cba8092 # v1.4.0
9494

9595
- name: Show the status if release failed
9696
if: failure()

.github/workflows/reviewdog.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121

2222
steps:
2323
- name: Harden Runner
24-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
24+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2525
with:
2626
disable-sudo: true
2727
egress-policy: block
@@ -32,7 +32,7 @@ jobs:
3232
raw.githubusercontent.com:443
3333
release-assets.githubusercontent.com:443
3434
35-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
35+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3636
with:
3737
persist-credentials: false
3838

@@ -49,16 +49,16 @@ jobs:
4949

5050
steps:
5151
- name: Harden Runner
52-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
52+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
5353
with:
5454
disable-sudo: true
5555
egress-policy: block
5656
allowed-endpoints: >
5757
api.github.com:443
5858
github.com:443
5959
60-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
60+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
6161
with:
6262
persist-credentials: false
6363

64-
- uses: reviewdog/action-actionlint@0d952c597ef8459f634d7145b0b044a9699e5e43 # v1.71.0
64+
- uses: reviewdog/action-actionlint@6fb7acc99f4a1008869fa8a0f09cfca740837d9d # v1.72.0

.github/workflows/zizmor.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121

2222
steps:
2323
- name: Harden Runner
24-
uses: step-security/harden-runner@5ef0c079ce82195b2a36a210272d6b661572d83e # v2.14.2
24+
uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4
2525
with:
2626
disable-sudo: true
2727
egress-policy: block
@@ -31,10 +31,10 @@ jobs:
3131
github.com:443
3232
pkg-containers.githubusercontent.com:443
3333
34-
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
34+
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
3535
with:
3636
persist-credentials: false
3737

38-
- uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2
38+
- uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
3939
with:
4040
persona: pedantic

.gitignore

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,4 +15,4 @@
1515
/vendor/
1616
/website/index.html
1717
Gemfile.lock
18-
mise.toml
18+
.ruby*

.mise.toml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
11
[tools]
2-
ruby = "3.4"
2+
ruby = "4.0"

Gemfile

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,8 @@
1+
# -*- ruby -*-
2+
# frozen_string_literal: true
3+
14
# NOTE: This file is not the canonical source of dependencies. Edit the Rakefile, instead.
5+
26
source "https://rubygems.org/"
37

48
gem "debug", platforms: [:mri] if ENV["DEV"]

0 commit comments

Comments
 (0)