From bf2b94cd81e66843bfb29b3578e8d3c642ae6b21 Mon Sep 17 00:00:00 2001 From: Angular Robot Date: Thu, 8 Oct 2026 13:05:46 +0000 Subject: [PATCH] build: update all github actions See associated pull request for more information. --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/reusable-release.yml | 4 ++-- .github/workflows/rules_sass-compiler-updates.yml | 4 ++-- .github/workflows/scorecard.yml | 4 ++-- github-actions/npm/checkout-and-setup-node/action.yml | 2 +- github-actions/previews/pack-and-upload-artifact/action.yml | 2 +- 6 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index bec8e42c52..f69faeb4ea 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,10 +28,10 @@ jobs: - name: Checkout repository uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/init@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: languages: ${{ matrix.language }} - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/analyze@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: category: '/language:${{matrix.language}}' diff --git a/.github/workflows/reusable-release.yml b/.github/workflows/reusable-release.yml index e1257bec46..fceeef3f0f 100644 --- a/.github/workflows/reusable-release.yml +++ b/.github/workflows/reusable-release.yml @@ -111,7 +111,7 @@ jobs: - name: Archive built packages if: steps.check-commit.outputs.is-release == 'true' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: release-packages path: dist/packages-tgz/ @@ -162,7 +162,7 @@ jobs: skip-checkout: true - name: Download built packages - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: release-packages path: dist/packages-dist/ diff --git a/.github/workflows/rules_sass-compiler-updates.yml b/.github/workflows/rules_sass-compiler-updates.yml index 69b6856f91..92728d7ede 100644 --- a/.github/workflows/rules_sass-compiler-updates.yml +++ b/.github/workflows/rules_sass-compiler-updates.yml @@ -34,7 +34,7 @@ jobs: - run: dart pub get --enforce-lockfile - run: mkdir -p src/compiler/built/ - run: dart compile exe src/compiler/bin/x_sass.dart -o src/compiler/built/${{ matrix.bin_name }} - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.bin_name }} path: bazel/rules/rules_sass/src/compiler/built/${{ matrix.bin_name }} @@ -54,7 +54,7 @@ jobs: with: persist-credentials: false - run: mkdir -p src/compiler/built/ - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: bazel/rules/rules_sass/src/compiler/built/ merge-multiple: true diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 9f2bbd60f5..eeac7ff2a1 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -37,7 +37,7 @@ jobs: # Upload the results as artifacts. - name: 'Upload artifact' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: SARIF file path: results.sarif @@ -45,6 +45,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: 'Upload to code-scanning' - uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 + uses: github/codeql-action/upload-sarif@24c54180a607b1449ed407dd24f251e4e9147c8d # v4.38.3 with: sarif_file: results.sarif diff --git a/github-actions/npm/checkout-and-setup-node/action.yml b/github-actions/npm/checkout-and-setup-node/action.yml index fd3874b6fe..ce3aa63def 100644 --- a/github-actions/npm/checkout-and-setup-node/action.yml +++ b/github-actions/npm/checkout-and-setup-node/action.yml @@ -69,7 +69,7 @@ runs: cache_dependency_path: ${{ inputs.cache-dependency-path }} cache: ${{ inputs.disable-package-manager-cache != 'true' }} - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version-file: ${{ inputs.node-version-file-path }} node-version: ${{ inputs.node-version }} diff --git a/github-actions/previews/pack-and-upload-artifact/action.yml b/github-actions/previews/pack-and-upload-artifact/action.yml index fe9d0c8d01..a4fb6772d3 100644 --- a/github-actions/previews/pack-and-upload-artifact/action.yml +++ b/github-actions/previews/pack-and-upload-artifact/action.yml @@ -61,7 +61,7 @@ runs: tar -chzvf "$pkg" -C '${{steps.copy.outputs.deploy-dir}}' . echo "artifact-path=$pkg" >> $GITHUB_OUTPUT - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: '${{inputs.workflow-artifact-name}}' path: '${{steps.pack.outputs.artifact-path}}'