diff --git a/.github/workflows/__main-ci.yml b/.github/workflows/__main-ci.yml index c7a87098..253f3dd2 100644 --- a/.github/workflows/__main-ci.yml +++ b/.github/workflows/__main-ci.yml @@ -32,7 +32,7 @@ jobs: release: needs: ci if: github.event_name != 'schedule' - uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@ebb69cbd25cd8965417ba6933dc3c1327e3e8588 # 0.9.2 + uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@40488258265a24cbf54ec301c874867ebb1c31d9 # 0.11.1 with: update-all: ${{ (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')) || github.event_name == 'workflow_dispatch' }} github-app-id: ${{ vars.CI_BOT_APP_ID }} diff --git a/.github/workflows/greetings.yml b/.github/workflows/greetings.yml index 918cadb5..9628743e 100644 --- a/.github/workflows/greetings.yml +++ b/.github/workflows/greetings.yml @@ -49,7 +49,7 @@ jobs: greeting: runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }} steps: - - uses: actions/first-interaction@753c925c8d1ac6fede23781875376600628d9b5d # v3.0.0 + - uses: actions/first-interaction@1c4688942c71f71d4f5502a26ea67c331730fa4d # v3.1.0 with: repo-token: ${{ secrets.github-token || github.token }} issue-message: ${{ inputs.issue-message || 'Hi, thank for reporting an issue, we will check it out very soon' }} diff --git a/.github/workflows/linter.yml b/.github/workflows/linter.yml index ad866897..adc2c2f7 100644 --- a/.github/workflows/linter.yml +++ b/.github/workflows/linter.yml @@ -106,11 +106,11 @@ jobs: steps: - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - - uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5 + - uses: github/codeql-action/init@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7 with: languages: ${{ matrix.language }} - - uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.30.5 + - uses: github/codeql-action/analyze@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 12aa59b6..163263fe 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -68,7 +68,7 @@ jobs: runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }} steps: - - uses: actions/stale@3a9db7e6a41a89f618792c92c0e97cc736e1b13f # v10.0.0 + - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0 with: stale-issue-message: ${{ inputs.stale-issue-message || 'This issue is stale' }} stale-pr-message: ${{ inputs.stale-pr-message || 'This PR is stale' }} diff --git a/actions/create-or-update-comment/action.yml b/actions/create-or-update-comment/action.yml index 1e67f20f..64766725 100644 --- a/actions/create-or-update-comment/action.yml +++ b/actions/create-or-update-comment/action.yml @@ -47,7 +47,7 @@ runs: run: | rm -fr ./self-actions - - uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0 + - uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0 id: find-comment with: issue-number: ${{ steps.get-issue-number.outputs.issue-number }} @@ -55,7 +55,7 @@ runs: body-includes: ${{ inputs.title }} token: ${{ inputs.token || github.token }} - - uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0 + - uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0 with: edit-mode: replace comment-id: ${{ steps.find-comment.outputs.comment-id }}