From 41821c2107074fa90994f24eba233831e746a4de Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 25 Oct 2023 10:48:33 -0700 Subject: [PATCH] chore: bump the all group with 4 updates (#1905) Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/build-push-cft-devtools.yml | 2 +- .github/workflows/codeql.yml | 8 ++++---- .github/workflows/go-fbf-test.yml | 2 +- .github/workflows/go-lint.yaml | 2 +- .github/workflows/go-module-swapper.yml | 4 ++-- .github/workflows/lint.yaml | 2 +- .github/workflows/pre-commit.yml | 4 ++-- .github/workflows/release-cli.yml | 2 +- .github/workflows/scorecard.yml | 6 +++--- .github/workflows/test-cft-devtools.yml | 2 +- .github/workflows/test-cli.yml | 2 +- .github/workflows/update-tooling.yml | 2 +- 12 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/build-push-cft-devtools.yml b/.github/workflows/build-push-cft-devtools.yml index a9f8ce6a7ad..64d0d16e988 100644 --- a/.github/workflows/build-push-cft-devtools.yml +++ b/.github/workflows/build-push-cft-devtools.yml @@ -19,7 +19,7 @@ jobs: id-token: 'write' steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - id: 'auth' name: 'Authenticate to Google Cloud' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e9fd6a5a142..8596039961d 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -50,11 +50,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2 + uses: github/codeql-action/init@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -68,7 +68,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2 + uses: github/codeql-action/autobuild@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -81,6 +81,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2 + uses: github/codeql-action/analyze@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/go-fbf-test.yml b/.github/workflows/go-fbf-test.yml index 92468aaa4a3..fb7663f99c6 100644 --- a/.github/workflows/go-fbf-test.yml +++ b/.github/workflows/go-fbf-test.yml @@ -25,7 +25,7 @@ jobs: matrix: operating-system: [ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4 with: go-version-file: infra/utils/fbf/go.mod diff --git a/.github/workflows/go-lint.yaml b/.github/workflows/go-lint.yaml index f95b8dd7492..219c7491fb7 100644 --- a/.github/workflows/go-lint.yaml +++ b/.github/workflows/go-lint.yaml @@ -23,7 +23,7 @@ jobs: matrix: folder: [cli, infra/blueprint-test] steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version-file: ${{ matrix.folder }}/go.mod diff --git a/.github/workflows/go-module-swapper.yml b/.github/workflows/go-module-swapper.yml index a1d1fbe4fc4..ab2ed248e54 100644 --- a/.github/workflows/go-module-swapper.yml +++ b/.github/workflows/go-module-swapper.yml @@ -25,7 +25,7 @@ jobs: matrix: operating-system: [ubuntu-latest, macos-latest] steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4 with: go-version-file: infra/module-swapper/go.mod @@ -38,7 +38,7 @@ jobs: strategy: fail-fast: false steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: go-version-file: infra/module-swapper/go.mod diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 752a335ade5..84e19e57f7d 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -31,7 +31,7 @@ jobs: name: 'lint-infra-terraform' runs-on: 'ubuntu-latest' steps: - - uses: 'actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608' # v4 + - uses: 'actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11' # v4 - run: docker run --rm -e EXCLUDE_LINT_DIRS -e EXCLUDE_HEADER_CHECK -v ${{ github.workspace }}:/workspace gcr.io/cloud-foundation-cicd/cft/developer-tools:1 /usr/local/bin/test_lint.sh env: EXCLUDE_LINT_DIRS: '\./dm|\./config-connector|\./cli|\./infra/build|\./infra/utils|\./infra/blueprint-test|\./infra/concourse|\./infra/modules|\./reports|\./.github|\./docs|\./infra/module-swapper' diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 97664b8ca8e..c9f447ba92a 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -9,6 +9,6 @@ jobs: pre-commit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 - - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4 - uses: pre-commit/action@646c83fcd040023954eafda54b4db0192ce70507 # v3.0.0 diff --git a/.github/workflows/release-cli.yml b/.github/workflows/release-cli.yml index 90c940598bc..a4ba00d5920 100644 --- a/.github/workflows/release-cli.yml +++ b/.github/workflows/release-cli.yml @@ -20,7 +20,7 @@ jobs: id-token: 'write' steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4 with: go-version-file: cli/go.mod diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 783a60377f3..a5b49dc0492 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,12 +32,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031 # v2.2.0 + uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 # v2.3.1 with: results_file: results.sarif results_format: sarif @@ -67,6 +67,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@ddccb873888234080b77e9bc2d4764d5ccaaccf9 # v2.21.9 + uses: github/codeql-action/upload-sarif@49abf0ba24d0b7953cb586944e918a0b92074c80 # v2.22.4 with: sarif_file: results.sarif diff --git a/.github/workflows/test-cft-devtools.yml b/.github/workflows/test-cft-devtools.yml index 5764629b965..8b9510d570e 100644 --- a/.github/workflows/test-cft-devtools.yml +++ b/.github/workflows/test-cft-devtools.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Build run: |- diff --git a/.github/workflows/test-cli.yml b/.github/workflows/test-cli.yml index 4467c20a004..f8f721da63e 100644 --- a/.github/workflows/test-cli.yml +++ b/.github/workflows/test-cli.yml @@ -31,7 +31,7 @@ jobs: matrix: operating-system: [ubuntu-latest] steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4 with: go-version-file: cli/go.mod diff --git a/.github/workflows/update-tooling.yml b/.github/workflows/update-tooling.yml index ffa54c0ab6d..8c3a1501f91 100644 --- a/.github/workflows/update-tooling.yml +++ b/.github/workflows/update-tooling.yml @@ -28,7 +28,7 @@ jobs: update-tools: runs-on: ubuntu-latest steps: - - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: ref: master - name: Update Tools