@@ -54,12 +54,12 @@ jobs:
5454
5555 steps :
5656 - name : Checkout
57- uses : actions/checkout@v4
57+ uses : actions/checkout@v6
5858 with :
5959 ref : ${{ inputs.ref || github.ref }}
6060
6161 - name : Configure AWS Credentials
62- uses : aws-actions/configure-aws-credentials@v4
62+ uses : aws-actions/configure-aws-credentials@v6
6363 with :
6464 role-to-assume : ${{ env.ECR_ROLE_ARN }}
6565 aws-region : ${{ env.ECR_REGION }}
@@ -74,11 +74,11 @@ jobs:
7474 echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
7575
7676 - name : Set up Docker Buildx
77- uses : docker/setup-buildx-action@v3
77+ uses : docker/setup-buildx-action@v4
7878
7979 - name : Docker meta for Pro
8080 id : meta-pro
81- uses : docker/metadata-action@v5
81+ uses : docker/metadata-action@v6
8282 with :
8383 images : ${{ format('{0}.dkr.ecr.{1}.amazonaws.com/riverqueue/riverproui', env.ECR_ACCOUNT_ID, env.ECR_REGION) }}
8484 labels : |
8888
8989 - name : Build & push (by digest)
9090 id : build-pro
91- uses : docker/build-push-action@v6
91+ uses : docker/build-push-action@v7
9292 with :
9393 context : .
9494 file : Dockerfile.pro
@@ -109,7 +109,7 @@ jobs:
109109 touch "/tmp/digests/${digest#sha256:}"
110110
111111 - name : Upload digest
112- uses : actions/upload-artifact@v4
112+ uses : actions/upload-artifact@v7
113113 with :
114114 name : pro-digests-${{ env.PLATFORM_PAIR }}
115115 path : /tmp/digests/*
@@ -141,7 +141,7 @@ jobs:
141141
142142 steps :
143143 - name : Checkout full history (no tags yet)
144- uses : actions/checkout@v4
144+ uses : actions/checkout@v6
145145 with :
146146 ref : ${{ inputs.ref || github.ref }}
147147 fetch-depth : 0 # full history
@@ -151,16 +151,16 @@ jobs:
151151 run : git fetch --tags --force
152152
153153 - name : Set up Docker Buildx
154- uses : docker/setup-buildx-action@v3
154+ uses : docker/setup-buildx-action@v4
155155
156156 - name : Set up ORAS CLI
157- uses : oras-project/setup-oras@v1
157+ uses : oras-project/setup-oras@v2
158158
159159 - name : Install Cosign
160- uses : sigstore/cosign-installer@v3
160+ uses : sigstore/cosign-installer@v4.1.1
161161
162162 - name : Configure AWS Credentials
163- uses : aws-actions/configure-aws-credentials@v4
163+ uses : aws-actions/configure-aws-credentials@v6
164164 with :
165165 role-to-assume : ${{ env.ECR_ROLE_ARN }}
166166 aws-region : ${{ env.ECR_REGION }}
@@ -170,7 +170,7 @@ jobs:
170170 uses : aws-actions/amazon-ecr-login@v2
171171
172172 - name : Download digests
173- uses : actions/download-artifact@v4
173+ uses : actions/download-artifact@v8
174174 with :
175175 path : /tmp/digests
176176 pattern : pro-digests-*
@@ -207,7 +207,7 @@ jobs:
207207
208208 - name : Docker meta
209209 id : meta
210- uses : docker/metadata-action@v5
210+ uses : docker/metadata-action@v6
211211 with :
212212 images : ${{ env.ECR_IMAGE }}
213213 tags : |
@@ -292,7 +292,7 @@ jobs:
292292 fi
293293
294294 - name : Install crane
295- uses : imjasonh/setup-crane@v0.4
295+ uses : imjasonh/setup-crane@v0.5
296296
297297 - name : Compute manifest digest for attestation
298298 id : manifest_digest
@@ -302,7 +302,7 @@ jobs:
302302
303303 - name : Generate build provenance attestation (not pushed)
304304 id : attest
305- uses : actions/attest-build-provenance@v2
305+ uses : actions/attest-build-provenance@v4
306306 with :
307307 push-to-registry : false
308308 subject-digest : ${{ steps.manifest_digest.outputs.digest }}
@@ -367,7 +367,7 @@ jobs:
367367 contents : read
368368 steps :
369369 - name : Checkout
370- uses : actions/checkout@v4
370+ uses : actions/checkout@v6
371371 with :
372372 ref : ${{ inputs.ref || github.ref }}
373373 fetch-depth : 0 # full history
@@ -432,20 +432,20 @@ jobs:
432432 done
433433
434434 - name : Login to live registry
435- uses : docker/login-action@v3
435+ uses : docker/login-action@v4
436436 with :
437437 registry : riverqueue.com
438438 username : river
439439 password : ${{ secrets.RIVERPRO_GO_MOD_CREDENTIAL }}
440440
441441 - name : Install crane
442- uses : imjasonh/setup-crane@v0.4
442+ uses : imjasonh/setup-crane@v0.5
443443
444444 - name : Set up ORAS CLI
445- uses : oras-project/setup-oras@v1
445+ uses : oras-project/setup-oras@v2
446446
447447 - name : Install Cosign
448- uses : sigstore/cosign-installer@v3
448+ uses : sigstore/cosign-installer@v4.1.1
449449
450450 - name : Resolve manifest digest
451451 id : resolve-digest
@@ -584,7 +584,7 @@ jobs:
584584
585585 - name : Upload debug artifacts
586586 if : failure() || cancelled()
587- uses : actions/upload-artifact@v4
587+ uses : actions/upload-artifact@v7
588588 with :
589589 name : prefetch-debug
590590 path : |
0 commit comments