diff --git a/.github/workflows/renovatebot.yml b/.github/workflows/renovatebot.yml index 250424c..75fd926 100644 --- a/.github/workflows/renovatebot.yml +++ b/.github/workflows/renovatebot.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-24.04 environment: security steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Run renovatebot uses: ConsenSys/github-actions/renovatebot@264745c22708ce547d5c6978cccbcb6101d8331b # main diff --git a/.github/workflows/test_docker_image_sanitize_input.yml b/.github/workflows/test_docker_image_sanitize_input.yml index 2942ce0..1ec4b69 100644 --- a/.github/workflows/test_docker_image_sanitize_input.yml +++ b/.github/workflows/test_docker_image_sanitize_input.yml @@ -25,7 +25,7 @@ jobs: - 'custom_image.name:v1.0.0-beta' steps: - name: Checkout Code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 # Run the action. If it fails, the job naturally stops and turns red. - name: Validate String @@ -62,7 +62,7 @@ jobs: - 'registry.com/image:INVALID_TAG_!!!!' # Violates regex character limits steps: - name: Checkout Code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 # continue-on-error prevents the bad string from instantly halting the job, # allowing us to test its exit status in the next step. diff --git a/dockerhub-scan-push/action.yml b/dockerhub-scan-push/action.yml index 3da1d23..6ffebb7 100644 --- a/dockerhub-scan-push/action.yml +++ b/dockerhub-scan-push/action.yml @@ -17,7 +17,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/docs-build/action.yml b/docs-build/action.yml index 4442cc3..3b92b6e 100644 --- a/docs-build/action.yml +++ b/docs-build/action.yml @@ -7,7 +7,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions @@ -18,7 +18,7 @@ runs: id: nvm - name: Use Node.js ${{ steps.nvm.outputs.NODE_VERSION }} - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: registry-url: https://registry.npmjs.org/ node-version-file: '.nvmrc' diff --git a/docs-case-check/action.yml b/docs-case-check/action.yml index 616f266..fae058e 100644 --- a/docs-case-check/action.yml +++ b/docs-case-check/action.yml @@ -17,7 +17,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/docs-firecrawl-llm/action.yml b/docs-firecrawl-llm/action.yml index a676dc0..a81a9d3 100644 --- a/docs-firecrawl-llm/action.yml +++ b/docs-firecrawl-llm/action.yml @@ -26,7 +26,7 @@ runs: using: "composite" steps: - name: checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions @@ -37,7 +37,7 @@ runs: id: nvm - name: Use Node.js ${{ steps.nvm.outputs.NODE_VERSION }} - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: registry-url: https://registry.npmjs.org/ node-version-file: '.nvmrc' diff --git a/docs-link-check/action.yml b/docs-link-check/action.yml index 51bf212..e2d0e78 100644 --- a/docs-link-check/action.yml +++ b/docs-link-check/action.yml @@ -12,13 +12,13 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions - name: Use Node.js - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: node-version: 20 diff --git a/docs-lint-all/action.yml b/docs-lint-all/action.yml index fa0ba2a..c3b53ce 100644 --- a/docs-lint-all/action.yml +++ b/docs-lint-all/action.yml @@ -12,7 +12,7 @@ runs: id: nvm - name: Use Node.js ${{ steps.nvm.outputs.NODE_VERSION }} - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: registry-url: https://registry.npmjs.org/ node-version-file: '.nvmrc' diff --git a/docs-lint-markdown/action.yml b/docs-lint-markdown/action.yml index e8e4bac..0e2ef89 100644 --- a/docs-lint-markdown/action.yml +++ b/docs-lint-markdown/action.yml @@ -18,7 +18,7 @@ runs: steps: # Also set `fetch-depth: 0` on the source repo so the action can compare the current head against the base branch. - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/docs-pages-deploy/action.yml b/docs-pages-deploy/action.yml index 239254d..0f7a19c 100644 --- a/docs-pages-deploy/action.yml +++ b/docs-pages-deploy/action.yml @@ -12,7 +12,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions @@ -23,7 +23,7 @@ runs: id: nvm - name: Use Node.js ${{ steps.nvm.outputs.NODE_VERSION }} - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: node-version: ${{ steps.nvm.outputs.NODE_VERSION }} registry-url: https://registry.npmjs.org/ diff --git a/docs-pages-pr-deploy/action.yml b/docs-pages-pr-deploy/action.yml index 1614f59..2b01b95 100644 --- a/docs-pages-pr-deploy/action.yml +++ b/docs-pages-pr-deploy/action.yml @@ -12,7 +12,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions @@ -36,7 +36,7 @@ runs: id: nvm - name: Use Node.js ${{ steps.nvm.outputs.NODE_VERSION }} - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: node-version: ${{ steps.nvm.outputs.NODE_VERSION }} registry-url: https://registry.npmjs.org/ diff --git a/docs-release/action.yml b/docs-release/action.yml index f9d214d..1593e64 100644 --- a/docs-release/action.yml +++ b/docs-release/action.yml @@ -16,7 +16,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions @@ -27,7 +27,7 @@ runs: id: nvm - name: Use Node.js ${{ steps.nvm.outputs.NODE_VERSION }} - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 with: registry-url: https://registry.npmjs.org/ node-version-file: '.nvmrc' diff --git a/docs-spelling-check/action.yml b/docs-spelling-check/action.yml index 82bcc48..bb3b70d 100644 --- a/docs-spelling-check/action.yml +++ b/docs-spelling-check/action.yml @@ -17,7 +17,7 @@ runs: steps: # Also set `fetch-depth: 0` on the source repo so the action can compare the current head against the base branch. - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions @@ -38,7 +38,7 @@ runs: echo "${{ steps.changed-files.outputs.all_changed_files }}" # need this for vale - - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7 with: python-version: '3.12' diff --git a/ecr-scan-push/action.yml b/ecr-scan-push/action.yml index 25c6cc9..a7ec2fd 100644 --- a/ecr-scan-push/action.yml +++ b/ecr-scan-push/action.yml @@ -20,7 +20,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/js-dependency-review/action.yml b/js-dependency-review/action.yml index f7c9225..7a22bc1 100644 --- a/js-dependency-review/action.yml +++ b/js-dependency-review/action.yml @@ -6,7 +6,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/mm-security-scanner/action.yml b/mm-security-scanner/action.yml index 0c8285e..88a6233 100644 --- a/mm-security-scanner/action.yml +++ b/mm-security-scanner/action.yml @@ -15,7 +15,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/renovatebot/action.yml b/renovatebot/action.yml index 57ea35e..084cdc3 100644 --- a/renovatebot/action.yml +++ b/renovatebot/action.yml @@ -18,7 +18,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/slack-notify/action.yml b/slack-notify/action.yml index c7fa02b..52c3a2c 100644 --- a/slack-notify/action.yml +++ b/slack-notify/action.yml @@ -35,7 +35,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions diff --git a/trivy-update-cache/action.yml b/trivy-update-cache/action.yml index b821cb5..d5362b1 100644 --- a/trivy-update-cache/action.yml +++ b/trivy-update-cache/action.yml @@ -8,7 +8,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions @@ -41,7 +41,7 @@ runs: # v5.0.4 - name: Cache DBs - uses: actions/cache/save@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5 + uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6 with: path: ${{ github.workspace }}/.cache/trivy key: cache-trivy-${{ steps.date.outputs.date }} diff --git a/trivy/action.yml b/trivy/action.yml index 6096c5a..b649fd4 100644 --- a/trivy/action.yml +++ b/trivy/action.yml @@ -18,7 +18,7 @@ runs: using: "composite" steps: - name: Checkout tools repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: repository: Consensys/github-actions path: .github-actions