diff --git a/.github/workflows/add_issue_to_project.yaml b/.github/workflows/add_issue_to_project.yaml index b8d377f9..cf539c84 100644 --- a/.github/workflows/add_issue_to_project.yaml +++ b/.github/workflows/add_issue_to_project.yaml @@ -3,13 +3,12 @@ on: issues: types: - opened - jobs: add-to-project: name: Add issue to Updatecli project runs-on: ubuntu-latest steps: - - uses: actions/add-to-project@v1.0.2 + - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2 with: project-url: https://github.com/orgs/updatecli/projects/2 github-token: ${{ secrets.ADD_TO_PROJECT_PAT }} diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index d6d8f139..b4e47a92 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -1,47 +1,36 @@ name: Build - on: merge_group: branches: master push: branches: master pull_request: - jobs: build: runs-on: ubuntu-latest - steps: - - uses: actions/checkout@v4 - - - name: Use Node.js - uses: actions/setup-node@v4.4.0 - with: - node-version: 24 - - - name: Install Hugo - uses: peaceiris/actions-hugo@v3 - with: - hugo-version: 0.159.1 - extended: true - - - name: Install Bundler - uses: ruby/setup-ruby@v1 - with: - ruby-version: 2.7 - bundler-cache: true - - - name: Install asciidoctor - run: gem install asciidoctor - - - name: Show Hugo Version - run: hugo version - - - name: Install dependencies - run: npm install - - - name: Run Hyas test script - run: npm test - - - name: Build production website - run: npm run build + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - name: Use Node.js + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 + with: + node-version: 24 + - name: Install Hugo + uses: peaceiris/actions-hugo@75d2e84710de30f6ff7268e08f310b60ef14033f # v3.0.0 + with: + hugo-version: 0.159.1 + extended: true + - name: Install Bundler + uses: ruby/setup-ruby@e65c17d16e57e481586a6a5a0282698790062f92 # v1 + with: + ruby-version: 2.7 + bundler-cache: true + - name: Install asciidoctor + run: gem install asciidoctor + - name: Show Hugo Version + run: hugo version + - name: Install dependencies + run: npm install + - name: Run Hyas test script + run: npm test + - name: Build production website + run: npm run build diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 4e2ae931..31004bd2 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -4,7 +4,6 @@ # You may wish to alter this file to override the set of languages analyzed, # or to provide custom queries or build logic. name: "CodeQL" - on: merge_group: branches: master @@ -15,12 +14,10 @@ on: branches: [master] schedule: - cron: '0 11 * * 5' - jobs: analyze: name: Analyze runs-on: ubuntu-latest - strategy: fail-fast: false matrix: @@ -29,36 +26,30 @@ jobs: language: ['javascript'] # Learn more... # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection - steps: - - name: Checkout repository - uses: actions/checkout@v4 - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@v3 - with: - languages: ${{ matrix.language }} - # If you wish to specify custom queries, you can do so here or in a config file. - # By default, queries listed here will override any specified in a config file. - # Prefix the list here with "+" to use these queries and those in the config file. - # queries: ./path/to/local/query, your-org/your-repo/queries@main - - # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). - # If this step fails, then you should remove it and run the build manually (see below) - - name: Autobuild - uses: github/codeql-action/autobuild@v3 - - # ℹī¸ Command-line programs to run using the OS shell. - # 📚 https://git.io/JvXDl - - # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines - # and modify them (or add more) to build your code if your project - # uses a compiled language - - #- run: | - # make bootstrap - # make release - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + - name: Checkout repository + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + with: + languages: ${{ matrix.language }} + # If you wish to specify custom queries, you can do so here or in a config file. + # By default, queries listed here will override any specified in a config file. + # Prefix the list here with "+" to use these queries and those in the config file. + # queries: ./path/to/local/query, your-org/your-repo/queries@main + # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). + # If this step fails, then you should remove it and run the build manually (see below) + - name: Autobuild + uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 + #- run: | + # make bootstrap + # make release + - name: Perform CodeQL Analysis + # ℹī¸ Command-line programs to run using the OS shell. + # 📚 https://git.io/JvXDl + + # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines + # and modify them (or add more) to build your code if your project + # uses a compiled language + uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 diff --git a/.github/workflows/typos.yaml b/.github/workflows/typos.yaml index 188e7ebc..c3844b84 100644 --- a/.github/workflows/typos.yaml +++ b/.github/workflows/typos.yaml @@ -9,6 +9,6 @@ jobs: contents: read steps: - name: Checkout Actions Repository - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Check spelling of file.txt - uses: crate-ci/typos@631208b7aac2daa8b707f55e7331f9112b0e062d # v1.44.0 + uses: crate-ci/typos@02ea592e44b3a53c302f697cddca7641cd051c3d # v1.45.0 diff --git a/.github/workflows/updatecli.yaml b/.github/workflows/updatecli.yaml index 3867b969..fb0ae688 100644 --- a/.github/workflows/updatecli.yaml +++ b/.github/workflows/updatecli.yaml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout" - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0 + uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2 - name: "Setup updatecli" uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0 with: diff --git a/.github/workflows/updatecli_release.yaml b/.github/workflows/updatecli_release.yaml index 922083ed..15f0d987 100644 --- a/.github/workflows/updatecli_release.yaml +++ b/.github/workflows/updatecli_release.yaml @@ -18,7 +18,7 @@ jobs: pull-requests: write steps: - name: "Checkout" - uses: "actions/checkout@v4" + uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2 - name: "Install Updatecli" uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0 with: @@ -26,7 +26,7 @@ jobs: # releasepost is required by the Updatecli # * policy ghcr.io/updatecli/policies/releasepost/releasepost - name: "Install Releasepost" - uses: "updatecli/releasepost-action@v0.5.0" + uses: "updatecli/releasepost-action@864390bddae97db06ee881ab4a08d159b4464643" # v0.5.0 - name: "Run updatecli only on release pipelines" run: updatecli compose apply --clean-git-branches=true --labels="release:updatecli" --experimental env: diff --git a/.github/workflows/updatecli_test.yaml b/.github/workflows/updatecli_test.yaml index 7932cdb9..50eae416 100644 --- a/.github/workflows/updatecli_test.yaml +++ b/.github/workflows/updatecli_test.yaml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout" - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0 + uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2 - name: "Setup updatecli" uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0 with: diff --git a/.github/workflows/updatecli_update.yaml b/.github/workflows/updatecli_update.yaml index 37346be6..b9e39ce5 100644 --- a/.github/workflows/updatecli_update.yaml +++ b/.github/workflows/updatecli_update.yaml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - name: "Checkout" - uses: "actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3" # v6.0.0 + uses: "actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd" # v6.0.2 - name: "Setup updatecli" uses: "updatecli/updatecli-action@2cc8e6d8e356d76b0280cdd03766c36596a0614e" # v3.0.0 with: