From a3f67ae2630a6b7b193aec5d44e6a654a1286bef Mon Sep 17 00:00:00 2001 From: project516 <138796702+Project516@users.noreply.github.com> Date: Sat, 1 Aug 2026 00:55:25 -0500 Subject: [PATCH] ci: update GitHub Actions to latest versions - actions/checkout v6.0.2 -> v7.0.1 (SHA-pinned) - actions/setup-node v6 -> v7.0.0 (SHA-pinned) - SocketDev/action v1 -> v1.3.2 (SHA-pinned) - oven-sh/setup-bun comment corrected to v2.2.0 (commit already current) --- .github/workflows/container-ci.yml | 2 +- .github/workflows/container-release.yml | 10 +++++----- .github/workflows/node-ci.yml | 6 +++--- .github/workflows/node-github-release.yml | 4 ++-- .github/workflows/node-release-cut.yml | 4 ++-- .github/workflows/node-release.yml | 12 ++++++------ 6 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/container-ci.yml b/.github/workflows/container-ci.yml index 18390979..43454e5e 100644 --- a/.github/workflows/container-ci.yml +++ b/.github/workflows/container-ci.yml @@ -39,7 +39,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/container-release.yml b/.github/workflows/container-release.yml index 1b5939fa..01e39f2a 100644 --- a/.github/workflows/container-release.yml +++ b/.github/workflows/container-release.yml @@ -40,7 +40,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -240,7 +240,7 @@ jobs: steps: - name: Checkout release source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false @@ -321,7 +321,7 @@ jobs: steps: - name: Checkout approved release source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -417,7 +417,7 @@ jobs: steps: - name: Checkout approved customer configuration - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -564,7 +564,7 @@ jobs: steps: - name: Checkout approved immutable-version verifier - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml index c3b41308..c0476391 100644 --- a/.github/workflows/node-ci.yml +++ b/.github/workflows/node-ci.yml @@ -34,7 +34,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -46,14 +46,14 @@ jobs: cache_dependency_path: sdk/typescript/pnpm-lock.yaml - name: Set up Node.js - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: ${{ matrix.node }} cache: npm cache-dependency-path: sdk/typescript/pnpm-lock.yaml - name: Set up Bun - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 + uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: "1.3.14" diff --git a/.github/workflows/node-github-release.yml b/.github/workflows/node-github-release.yml index df48d264..240fa23f 100644 --- a/.github/workflows/node-github-release.yml +++ b/.github/workflows/node-github-release.yml @@ -38,14 +38,14 @@ jobs: steps: - name: Checkout release automation - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false ref: refs/heads/main - name: Set up Node.js - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24.15.0" registry-url: "https://registry.npmjs.org" diff --git a/.github/workflows/node-release-cut.yml b/.github/workflows/node-release-cut.yml index ef3e8a43..a85a7a74 100644 --- a/.github/workflows/node-release-cut.yml +++ b/.github/workflows/node-release-cut.yml @@ -25,13 +25,13 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false - name: Set up Node.js - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24.15.0" package-manager-cache: false diff --git a/.github/workflows/node-release.yml b/.github/workflows/node-release.yml index 8cb36aae..e4d20054 100644 --- a/.github/workflows/node-release.yml +++ b/.github/workflows/node-release.yml @@ -29,19 +29,19 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 persist-credentials: false - name: Set up Socket Firewall - uses: SocketDev/action@937f824ec476dfd164d4a4d9995751427b0be143 # v1 + uses: SocketDev/action@ba6de6cc0565af1f42295590380973573297e31f # v1.3.2 with: mode: firewall-free firewall-version: "1.15.0" - name: Set up Node.js - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "22.13.0" package-manager-cache: false @@ -67,7 +67,7 @@ jobs: } >> "$GITHUB_ENV" - name: Set up Bun - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2 + uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: "1.3.14" no-cache: true @@ -220,13 +220,13 @@ jobs: steps: - name: Checkout release verification source - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 persist-credentials: false - name: Set up Node.js - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: "24.15.0" registry-url: "https://registry.npmjs.org"