Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commit3f13859

Browse files
ci: bump the github-actions group with 4 updates (#21370)
Bumps the github-actions group with 4 updates:[step-security/harden-runner](https://github.com/step-security/harden-runner),[actions/cache](https://github.com/actions/cache),[actions/upload-artifact](https://github.com/actions/upload-artifact)and[actions/download-artifact](https://github.com/actions/download-artifact).Updates `step-security/harden-runner` from 2.13.2 to 2.14.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/step-security/harden-runner/releases">step-security/harden-runner'sreleases</a>.</em></p><blockquote><h2>v2.14.0</h2><h2>What's Changed</h2><ul><li>Selective installation: Harden-Runner now skips installation onGitHub-hosted runners when the repository has a custom propertyskip_harden_runner, allowing organizations to opt out specificrepos.</li><li>Avoid double install: The action no longer installs Harden-Runner ifit’s already present on a GitHub-hosted runner, which could happen whena composite action also installs it.</li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/step-security/harden-runner/compare/v2.13.3...v2.14.0">https://github.com/step-security/harden-runner/compare/v2.13.3...v2.14.0</a></p><h2>v2.13.3</h2><h2>What's Changed</h2><ul><li>Fixed an issue where process events were not uploaded in certainedge cases.</li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/step-security/harden-runner/compare/v2.13.2...v2.13.3">https://github.com/step-security/harden-runner/compare/v2.13.2...v2.13.3</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/step-security/harden-runner/commit/20cf305ff2072d973412fa9b1e3a4f227bda3c76"><code>20cf305</code></a>Merge pull request <ahref="https://redirect.github.com/step-security/harden-runner/issues/622">#622</a>from step-security/feature/custom-property-skip</li><li><ahref="https://github.com/step-security/harden-runner/commit/c51e8eeb6c4fdcd08f65e43a051dacdbfaa69702"><code>c51e8ee</code></a>feat: skip agent install and post step on subsequent runs forGitHub-hosted r...</li><li><ahref="https://github.com/step-security/harden-runner/commit/e152b90204c3d85cefa1441b701a47a13ed28bd7"><code>e152b90</code></a>feat: skip harden-runner based on repository custom property</li><li><ahref="https://github.com/step-security/harden-runner/commit/ee1faec052d1000061fa79a13e030db11b3f86bd"><code>ee1faec</code></a>feat: replace skip-harden-runner with skip-on-custom-property input</li><li><ahref="https://github.com/step-security/harden-runner/commit/1dc7c1764659d537dab2a854b8e165a801103eb1"><code>1dc7c17</code></a>feat: add skip-harden-runner input to conditionally skip execution</li><li><ahref="https://github.com/step-security/harden-runner/commit/df199fb7be9f65074067a9eb93f12bb4c5547cf2"><code>df199fb</code></a>Merge pull request <ahref="https://redirect.github.com/step-security/harden-runner/issues/620">#620</a>from step-security/rc-29</li><li><ahref="https://github.com/step-security/harden-runner/commit/03d096a772368b1f0222005a6899d3e35a7f62df"><code>03d096a</code></a>update agent</li><li><ahref="https://github.com/step-security/harden-runner/commit/40901073af04afd40408833437092a7467798f33"><code>4090107</code></a>fix: update agent</li><li>See full diff in <ahref="https://github.com/step-security/harden-runner/compare/95d9a5deda9de15063e7595e9719c11c38c90ae2...20cf305ff2072d973412fa9b1e3a4f227bda3c76">compareview</a></li></ul></details><br />Updates `actions/cache` from 4.3.0 to 5.0.1<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/actions/cache/releases">actions/cache'sreleases</a>.</em></p><blockquote><h2>v5.0.1</h2><blockquote><p>[!IMPORTANT]<strong><code>actions/cache@v5</code> runs on the Node.js 24 runtime andrequires a minimum Actions Runner version of<code>2.327.1</code>.</strong></p><p>If you are using self-hosted runners, ensure they are updated beforeupgrading.</p></blockquote><hr /><h1>v5.0.1</h1><h2>What's Changed</h2><ul><li>fix: update <code>@​actions/cache</code> for Node.js 24 punycodedeprecation by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/cache/pull/1685">actions/cache#1685</a></li><li>prepare release v5.0.1 by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/cache/pull/1686">actions/cache#1686</a></li></ul><h1>v5.0.0</h1><h2>What's Changed</h2><ul><li>Upgrade to use node24 by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/cache/pull/1630">actions/cache#1630</a></li><li>Prepare v5.0.0 release by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/cache/pull/1684">actions/cache#1684</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/cache/compare/v5...v5.0.1">https://github.com/actions/cache/compare/v5...v5.0.1</a></p><h2>v5.0.0</h2><blockquote><p>[!IMPORTANT]<strong><code>actions/cache@v5</code> runs on the Node.js 24 runtime andrequires a minimum Actions Runner version of<code>2.327.1</code>.</strong></p><p>If you are using self-hosted runners, ensure they are updated beforeupgrading.</p></blockquote><hr /><h2>What's Changed</h2><ul><li>Upgrade to use node24 by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/cache/pull/1630">actions/cache#1630</a></li><li>Prepare v5.0.0 release by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/cache/pull/1684">actions/cache#1684</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/cache/compare/v4.3.0...v5.0.0">https://github.com/actions/cache/compare/v4.3.0...v5.0.0</a></p></blockquote></details><details><summary>Changelog</summary><p><em>Sourced from <ahref="https://github.com/actions/cache/blob/main/RELEASES.md">actions/cache'schangelog</a>.</em></p><blockquote><h1>Releases</h1><h2>Changelog</h2><h3>5.0.1</h3><ul><li>Update <code>@azure/storage-blob</code> to <code>^12.29.1</code> via<code>@actions/cache@5.0.1</code> <ahref="https://redirect.github.com/actions/cache/pull/1685">#1685</a></li></ul><h3>5.0.0</h3><blockquote><p>[!IMPORTANT]<code>actions/cache@v5</code> runs on the Node.js 24 runtime andrequires a minimum Actions Runner version of <code>2.327.1</code>.If you are using self-hosted runners, ensure they are updated beforeupgrading.</p></blockquote><h3>4.3.0</h3><ul><li>Bump <code>@actions/cache</code> to <ahref="https://redirect.github.com/actions/toolkit/pull/2132">v4.1.0</a></li></ul><h3>4.2.4</h3><ul><li>Bump <code>@actions/cache</code> to v4.0.5</li></ul><h3>4.2.3</h3><ul><li>Bump <code>@actions/cache</code> to v4.0.3 (obfuscates SAS token indebug logs for cache entries)</li></ul><h3>4.2.2</h3><ul><li>Bump <code>@actions/cache</code> to v4.0.2</li></ul><h3>4.2.1</h3><ul><li>Bump <code>@actions/cache</code> to v4.0.1</li></ul><h3>4.2.0</h3><p>TLDR; The cache backend service has been rewritten from the ground upfor improved performance and reliability. <ahref="https://github.com/actions/cache">actions/cache</a> now integrateswith the new cache service (v2) APIs.</p><p>The new service will gradually roll out as of <strong>February 1st,2025</strong>. The legacy service will also be sunset on the same date.Changes in these release are <strong>fully backwardcompatible</strong>.</p><p><strong>We are deprecating some versions of this action</strong>. Werecommend upgrading to version <code>v4</code> or <code>v3</code> assoon as possible before <strong>February 1st, 2025.</strong> (Upgradeinstructions below).</p><p>If you are using pinned SHAs, please use the SHAs of versions<code>v4.2.0</code> or <code>v3.4.0</code></p><p>If you do not upgrade, all workflow runs using any of the deprecated<a href="https://github.com/actions/cache">actions/cache</a> willfail.</p><p>Upgrading to the recommended versions will not break yourworkflows.</p><h3>4.1.2</h3><!-- raw HTML omitted --></blockquote><p>... (truncated)</p></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/actions/cache/commit/9255dc7a253b0ccc959486e2bca901246202afeb"><code>9255dc7</code></a>Merge pull request <ahref="https://redirect.github.com/actions/cache/issues/1686">#1686</a>from actions/cache-v5.0.1-release</li><li><ahref="https://github.com/actions/cache/commit/8ff5423e8b66eacab4e638ee52abbd2cb831366a"><code>8ff5423</code></a>chore: release v5.0.1</li><li><ahref="https://github.com/actions/cache/commit/9233019a152bc768059ac1768b8e4403b5da16c1"><code>9233019</code></a>Merge pull request <ahref="https://redirect.github.com/actions/cache/issues/1685">#1685</a>from salmanmkc/node24-storage-blob-fix</li><li><ahref="https://github.com/actions/cache/commit/b975f2bb844529e1063ad882c609b224bcd66eb6"><code>b975f2b</code></a>fix: add peer property to package-lock.json for dependencies</li><li><ahref="https://github.com/actions/cache/commit/d0a0e1813491d01d574c95f8d189f62622bbb2ae"><code>d0a0e18</code></a>fix: update license files for <code>@​actions/cache</code>,fast-xml-parser, and strnum</li><li><ahref="https://github.com/actions/cache/commit/74de208dcfcbe85c0e7154e7b17e4105fe2554ff"><code>74de208</code></a>fix: update <code>@​actions/cache</code> to ^5.0.1 for Node.js 24punycode fix</li><li><ahref="https://github.com/actions/cache/commit/ac7f1152ead02e89c14b5456d14ab17591e74cfb"><code>ac7f115</code></a>peer</li><li><ahref="https://github.com/actions/cache/commit/b0f846b50b6061d7a2ca6f1a2fea61d4a65d1a16"><code>b0f846b</code></a>fix: update <code>@​actions/cache</code> with storage-blob fix forNode.js 24 punycode depr...</li><li><ahref="https://github.com/actions/cache/commit/a7833574556fa59680c1b7cb190c1735db73ebf0"><code>a783357</code></a>Merge pull request <ahref="https://redirect.github.com/actions/cache/issues/1684">#1684</a>from actions/prepare-cache-v5-release</li><li><ahref="https://github.com/actions/cache/commit/3bb0d78750a39cefce0c2b5a0a9801052b4359ad"><code>3bb0d78</code></a>docs: highlight v5 runner requirement in releases</li><li>Additional commits viewable in <ahref="https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc39830...9255dc7a253b0ccc959486e2bca901246202afeb">compareview</a></li></ul></details><br />Updates `actions/upload-artifact` from 5.0.0 to 6.0.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/actions/upload-artifact/releases">actions/upload-artifact'sreleases</a>.</em></p><blockquote><h2>v6.0.0</h2><h2>v6 - What's new</h2><blockquote><p>[!IMPORTANT]actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using:node24</code>) and requires a minimum Actions Runner version of 2.327.1.If you are using self-hosted runners, ensure they are updated beforeupgrading.</p></blockquote><h3>Node.js 24</h3><p>This release updates the runtime to Node.js 24. v5 had preliminarysupport for Node.js 24, however this action was by default still runningon Node.js 20. Now this action by default will run on Node.js 24.</p><h2>What's Changed</h2><ul><li>Upload Artifact Node 24 support by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/upload-artifact/pull/719">actions/upload-artifact#719</a></li><li>fix: update <code>@​actions/artifact</code> for Node.js 24 punycodedeprecation by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/upload-artifact/pull/744">actions/upload-artifact#744</a></li><li>prepare release v6.0.0 for Node.js 24 support by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/upload-artifact/pull/745">actions/upload-artifact#745</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0">https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/actions/upload-artifact/commit/b7c566a772e6b6bfb58ed0dc250532a479d7789f"><code>b7c566a</code></a>Merge pull request <ahref="https://redirect.github.com/actions/upload-artifact/issues/745">#745</a>from actions/upload-artifact-v6-release</li><li><ahref="https://github.com/actions/upload-artifact/commit/e516bc8500aaf3d07d591fcd4ae6ab5f9c391d5b"><code>e516bc8</code></a>docs: correct description of Node.js 24 support in README</li><li><ahref="https://github.com/actions/upload-artifact/commit/ddc45ed9bca9b38dbd643978d88e3981cdc91415"><code>ddc45ed</code></a>docs: update README to correct action name for Node.js 24 support</li><li><ahref="https://github.com/actions/upload-artifact/commit/615b319bd27bb32c3d64dca6b6ed6974d5fbe653"><code>615b319</code></a>chore: release v6.0.0 for Node.js 24 support</li><li><ahref="https://github.com/actions/upload-artifact/commit/017748b48f8610ca8e6af1222f4a618e84a9c703"><code>017748b</code></a>Merge pull request <ahref="https://redirect.github.com/actions/upload-artifact/issues/744">#744</a>from actions/fix-storage-blob</li><li><ahref="https://github.com/actions/upload-artifact/commit/38d4c7997f5510fcc41fc4aae2a6b97becdbe7fc"><code>38d4c79</code></a>chore: rebuild dist</li><li><ahref="https://github.com/actions/upload-artifact/commit/7d27270e0cfd253e666c44abac0711308d2d042f"><code>7d27270</code></a>chore: add missing license cache files for <code>@​actions/core</code>,<code>@​actions/io</code>, and mi...</li><li><ahref="https://github.com/actions/upload-artifact/commit/5f643d3c9475505ccaf26d686ffbfb71a8387261"><code>5f643d3</code></a>chore: update license files for <code>@​actions/artifact</code><ahref="https://github.com/5"><code>@​5</code></a>.0.1 dependencies</li><li><ahref="https://github.com/actions/upload-artifact/commit/1df1684032c88614064493e1a0478fcb3583e1d0"><code>1df1684</code></a>chore: update package-lock.json with <code>@​actions/artifact</code><ahref="https://github.com/5"><code>@​5</code></a>.0.1</li><li><ahref="https://github.com/actions/upload-artifact/commit/b5b1a918401ee270935b6b1d857ae66c85f3be6f"><code>b5b1a91</code></a>fix: update <code>@​actions/artifact</code> to ^5.0.0 for Node.js 24punycode fix</li><li>Additional commits viewable in <ahref="https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f">compareview</a></li></ul></details><br />Updates `actions/download-artifact` from 6.0.0 to 7.0.0<details><summary>Release notes</summary><p><em>Sourced from <ahref="https://github.com/actions/download-artifact/releases">actions/download-artifact'sreleases</a>.</em></p><blockquote><h2>v7.0.0</h2><h2>v7 - What's new</h2><blockquote><p>[!IMPORTANT]actions/download-artifact@v7 now runs on Node.js 24 (<code>runs.using:node24</code>) and requires a minimum Actions Runner version of 2.327.1.If you are using self-hosted runners, ensure they are updated beforeupgrading.</p></blockquote><h3>Node.js 24</h3><p>This release updates the runtime to Node.js 24. v6 had preliminarysupport for Node 24, however this action was by default still running onNode.js 20. Now this action by default will run on Node.js 24.</p><h2>What's Changed</h2><ul><li>Update GHES guidance to include reference to Node 20 version by <ahref="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>in <ahref="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li><li>Download Artifact Node24 support by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li><li>fix: update <code>@​actions/artifact</code> to fix Node.js 24punycode deprecation by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/451">actions/download-artifact#451</a></li><li>prepare release v7.0.0 for Node.js 24 support by <ahref="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <ahref="https://redirect.github.com/actions/download-artifact/pull/452">actions/download-artifact#452</a></li></ul><h2>New Contributors</h2><ul><li><ahref="https://github.com/patrikpolyak"><code>@​patrikpolyak</code></a>made their first contribution in <ahref="https://redirect.github.com/actions/download-artifact/pull/440">actions/download-artifact#440</a></li><li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>made their first contribution in <ahref="https://redirect.github.com/actions/download-artifact/pull/415">actions/download-artifact#415</a></li></ul><p><strong>Full Changelog</strong>: <ahref="https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0">https://github.com/actions/download-artifact/compare/v6.0.0...v7.0.0</a></p></blockquote></details><details><summary>Commits</summary><ul><li><ahref="https://github.com/actions/download-artifact/commit/37930b1c2abaa49bbe596cd826c3c89aef350131"><code>37930b1</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/452">#452</a>from actions/download-artifact-v7-release</li><li><ahref="https://github.com/actions/download-artifact/commit/72582b9e0acd370909e83fa4a1fd0fca3ad452d8"><code>72582b9</code></a>doc: update readme</li><li><ahref="https://github.com/actions/download-artifact/commit/0d2ec9d4cbcefe257d822f108de2a1f15f8da9f6"><code>0d2ec9d</code></a>chore: release v7.0.0 for Node.js 24 support</li><li><ahref="https://github.com/actions/download-artifact/commit/fd7ae8fda6dc16277a9ffbc91cdb0eedf156e912"><code>fd7ae8f</code></a>Merge pull request <ahref="https://redirect.github.com/actions/download-artifact/issues/451">#451</a>from actions/fix-storage-blob</li><li><ahref="https://github.com/actions/download-artifact/commit/d484700543354b15886d6a52910cf61b7f1d2b27"><code>d484700</code></a>chore: restore minimatch.dep.yml license file</li><li><ahref="https://github.com/actions/download-artifact/commit/03a808050efe42bb6ad85281890afd4e4546672c"><code>03a8080</code></a>chore: remove obsolete dependency license files</li><li><ahref="https://github.com/actions/download-artifact/commit/56fe6d904b0968950f8b68ea17774c54973ed5e2"><code>56fe6d9</code></a>chore: update <code>@​actions/artifact</code> license file to 5.0.1</li><li><ahref="https://github.com/actions/download-artifact/commit/8e3ebc4ab4d2e095e5eb44ba1a4a53b6b03976ad"><code>8e3ebc4</code></a>chore: update package-lock.json with <code>@​actions/artifact</code><ahref="https://github.com/5"><code>@​5</code></a>.0.1</li><li><ahref="https://github.com/actions/download-artifact/commit/1e3c4b4d4906c98ab57453c24efefdf16c078044"><code>1e3c4b4</code></a>fix: update <code>@​actions/artifact</code> to ^5.0.0 for Node.js 24punycode fix</li><li><ahref="https://github.com/actions/download-artifact/commit/458627d354794c71bc386c8d5839d20b5885fe2a"><code>458627d</code></a>chore: use local <code>@​actions/artifact</code> package for Node.js 24testing</li><li>Additional commits viewable in <ahref="https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...37930b1c2abaa49bbe596cd826c3c89aef350131">compareview</a></li></ul></details><br />Dependabot will resolve any conflicts with this PR as long as you don'talter it yourself. You can also trigger a rebase manually by commenting`@dependabot rebase`.[//]: # (dependabot-automerge-start)[//]: # (dependabot-automerge-end)---<details><summary>Dependabot commands and options</summary><br />You can trigger Dependabot actions by commenting on this PR:- `@dependabot rebase` will rebase this PR- `@dependabot recreate` will recreate this PR, overwriting any editsthat have been made to it- `@dependabot merge` will merge this PR after your CI passes on it- `@dependabot squash and merge` will squash and merge this PR afteryour CI passes on it- `@dependabot cancel merge` will cancel a previously requested mergeand block automerging- `@dependabot reopen` will reopen this PR if it is closed- `@dependabot close` will close this PR and stop Dependabot recreatingit. You can achieve the same result by closing it manually- `@dependabot show <dependency name> ignore conditions` will show allof the ignore conditions of the specified dependency- `@dependabot ignore <dependency name> major version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's major version (unless you unignore this specificdependency's major version or upgrade to it yourself)- `@dependabot ignore <dependency name> minor version` will close thisgroup update PR and stop Dependabot creating any more for the specificdependency's minor version (unless you unignore this specificdependency's minor version or upgrade to it yourself)- `@dependabot ignore <dependency name>` will close this group update PRand stop Dependabot creating any more for the specific dependency(unless you unignore this specific dependency or upgrade to it yourself)- `@dependabot unignore <dependency name>` will remove all of the ignoreconditions of the specified dependency- `@dependabot unignore <dependency name> <ignore condition>` willremove the ignore condition of the specified dependency and ignoreconditions</details>Signed-off-by: dependabot[bot] <support@github.com>Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent77c41a0 commit3f13859

14 files changed

+56
-56
lines changed

‎.github/workflows/ci.yaml‎

Lines changed: 24 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
tailnet-integration:${{ steps.filter.outputs.tailnet-integration }}
3636
steps:
3737
-name:Harden Runner
38-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
38+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
3939
with:
4040
egress-policy:audit
4141

@@ -157,7 +157,7 @@ jobs:
157157
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
158158
steps:
159159
-name:Harden Runner
160-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
160+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
161161
with:
162162
egress-policy:audit
163163

@@ -181,7 +181,7 @@ jobs:
181181
echo "LINT_CACHE_DIR=$dir" >> "$GITHUB_ENV"
182182
183183
-name:golangci-lint cache
184-
uses:actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830#v4.3.0
184+
uses:actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb#v5.0.1
185185
with:
186186
path:|
187187
${{ env.LINT_CACHE_DIR }}
@@ -251,7 +251,7 @@ jobs:
251251
if:${{ !cancelled() }}
252252
steps:
253253
-name:Harden Runner
254-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
254+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
255255
with:
256256
egress-policy:audit
257257

@@ -308,7 +308,7 @@ jobs:
308308
timeout-minutes:20
309309
steps:
310310
-name:Harden Runner
311-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
311+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
312312
with:
313313
egress-policy:audit
314314

@@ -360,7 +360,7 @@ jobs:
360360
-windows-2022
361361
steps:
362362
-name:Harden Runner
363-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
363+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
364364
with:
365365
egress-policy:audit
366366

@@ -512,7 +512,7 @@ jobs:
512512
embedded-pg-cache:${{ steps.embedded-pg-cache.outputs.embedded-pg-cache }}
513513

514514
-name:Upload failed test db dumps
515-
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
515+
uses:actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f#v6.0.0
516516
with:
517517
name:failed-test-db-dump-${{matrix.os}}
518518
path:"**/*.test.sql"
@@ -550,7 +550,7 @@ jobs:
550550
timeout-minutes:25
551551
steps:
552552
-name:Harden Runner
553-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
553+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
554554
with:
555555
egress-policy:audit
556556

@@ -612,7 +612,7 @@ jobs:
612612
timeout-minutes:25
613613
steps:
614614
-name:Harden Runner
615-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
615+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
616616
with:
617617
egress-policy:audit
618618

@@ -684,7 +684,7 @@ jobs:
684684
timeout-minutes:20
685685
steps:
686686
-name:Harden Runner
687-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
687+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
688688
with:
689689
egress-policy:audit
690690

@@ -711,7 +711,7 @@ jobs:
711711
timeout-minutes:20
712712
steps:
713713
-name:Harden Runner
714-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
714+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
715715
with:
716716
egress-policy:audit
717717

@@ -744,7 +744,7 @@ jobs:
744744
name:${{ matrix.variant.name }}
745745
steps:
746746
-name:Harden Runner
747-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
747+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
748748
with:
749749
egress-policy:audit
750750

@@ -793,23 +793,23 @@ jobs:
793793

794794
-name:Upload Playwright Failed Tests
795795
if:always() && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && !github.event.pull_request.head.repo.fork
796-
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
796+
uses:actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f#v6.0.0
797797
with:
798798
name:failed-test-videos${{ matrix.variant.premium && '-premium' || '' }}
799799
path:./site/test-results/**/*.webm
800800
retention-days:7
801801

802802
-name:Upload debug log
803803
if:always() && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && !github.event.pull_request.head.repo.fork
804-
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
804+
uses:actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f#v6.0.0
805805
with:
806806
name:coderd-debug-logs${{ matrix.variant.premium && '-premium' || '' }}
807807
path:./site/e2e/test-results/debug.log
808808
retention-days:7
809809

810810
-name:Upload pprof dumps
811811
if:always() && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && !github.event.pull_request.head.repo.fork
812-
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
812+
uses:actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f#v6.0.0
813813
with:
814814
name:debug-pprof-dumps${{ matrix.variant.premium && '-premium' || '' }}
815815
path:./site/test-results/**/debug-pprof-*.txt
@@ -824,7 +824,7 @@ jobs:
824824
if:needs.changes.outputs.site == 'true' || needs.changes.outputs.ci == 'true'
825825
steps:
826826
-name:Harden Runner
827-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
827+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
828828
with:
829829
egress-policy:audit
830830

@@ -905,7 +905,7 @@ jobs:
905905

906906
steps:
907907
-name:Harden Runner
908-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
908+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
909909
with:
910910
egress-policy:audit
911911

@@ -976,7 +976,7 @@ jobs:
976976
if:always()
977977
steps:
978978
-name:Harden Runner
979-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
979+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
980980
with:
981981
egress-policy:audit
982982

@@ -1075,7 +1075,7 @@ jobs:
10751075

10761076
-name:Upload build artifacts
10771077
if:${{ github.repository_owner == 'coder' && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/heads/release/')) }}
1078-
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
1078+
uses:actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f#v6.0.0
10791079
with:
10801080
name:dylibs
10811081
path:|
@@ -1096,7 +1096,7 @@ jobs:
10961096
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
10971097
steps:
10981098
-name:Harden Runner
1099-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
1099+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
11001100
with:
11011101
egress-policy:audit
11021102

@@ -1151,7 +1151,7 @@ jobs:
11511151
IMAGE:ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}
11521152
steps:
11531153
-name:Harden Runner
1154-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
1154+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
11551155
with:
11561156
egress-policy:audit
11571157

@@ -1240,7 +1240,7 @@ jobs:
12401240
uses:google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db# v3.0.1
12411241

12421242
-name:Download dylibs
1243-
uses:actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53#v6.0.0
1243+
uses:actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131#v7.0.0
12441244
with:
12451245
name:dylibs
12461246
path:./build
@@ -1507,7 +1507,7 @@ jobs:
15071507

15081508
-name:Upload build artifacts
15091509
if:github.ref == 'refs/heads/main'
1510-
uses:actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4#v5.0.0
1510+
uses:actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f#v6.0.0
15111511
with:
15121512
name:coder
15131513
path:|
@@ -1548,7 +1548,7 @@ jobs:
15481548
if:needs.changes.outputs.db == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
15491549
steps:
15501550
-name:Harden Runner
1551-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
1551+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
15521552
with:
15531553
egress-policy:audit
15541554

‎.github/workflows/deploy.yaml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -36,7 +36,7 @@ jobs:
3636
verdict:${{ steps.check.outputs.verdict }}# DEPLOY or NOOP
3737
steps:
3838
-name:Harden Runner
39-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
39+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
4040
with:
4141
egress-policy:audit
4242

@@ -65,7 +65,7 @@ jobs:
6565
packages:write# to retag image as dogfood
6666
steps:
6767
-name:Harden Runner
68-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
68+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
6969
with:
7070
egress-policy:audit
7171

@@ -146,7 +146,7 @@ jobs:
146146
needs:deploy
147147
steps:
148148
-name:Harden Runner
149-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
149+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
150150
with:
151151
egress-policy:audit
152152

‎.github/workflows/docker-base.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
if:github.repository_owner == 'coder'
3939
steps:
4040
-name:Harden Runner
41-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
41+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
4242
with:
4343
egress-policy:audit
4444

‎.github/workflows/dogfood.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
runs-on:${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-4' || 'ubuntu-latest' }}
2727
steps:
2828
-name:Harden Runner
29-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
29+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
3030
with:
3131
egress-policy:audit
3232

@@ -125,7 +125,7 @@ jobs:
125125
id-token:write
126126
steps:
127127
-name:Harden Runner
128-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
128+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
129129
with:
130130
egress-policy:audit
131131

‎.github/workflows/nightly-gauntlet.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
-windows-2022
2929
steps:
3030
-name:Harden Runner
31-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
31+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
3232
with:
3333
egress-policy:audit
3434

‎.github/workflows/pr-auto-assign.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
runs-on:ubuntu-latest
1616
steps:
1717
-name:Harden Runner
18-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
18+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
1919
with:
2020
egress-policy:audit
2121

‎.github/workflows/pr-cleanup.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
packages:write
2020
steps:
2121
-name:Harden Runner
22-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
22+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
2323
with:
2424
egress-policy:audit
2525

‎.github/workflows/pr-deploy.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,7 @@ jobs:
3939
PR_OPEN:${{ steps.check_pr.outputs.pr_open }}
4040
steps:
4141
-name:Harden Runner
42-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
42+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
4343
with:
4444
egress-policy:audit
4545

@@ -76,7 +76,7 @@ jobs:
7676
runs-on:"ubuntu-latest"
7777
steps:
7878
-name:Harden Runner
79-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
79+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
8080
with:
8181
egress-policy:audit
8282

@@ -184,7 +184,7 @@ jobs:
184184
pull-requests:write# needed for commenting on PRs
185185
steps:
186186
-name:Harden Runner
187-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
187+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
188188
with:
189189
egress-policy:audit
190190

@@ -228,7 +228,7 @@ jobs:
228228
CODER_IMAGE_TAG:${{ needs.get_info.outputs.CODER_IMAGE_TAG }}
229229
steps:
230230
-name:Harden Runner
231-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
231+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
232232
with:
233233
egress-policy:audit
234234

@@ -288,7 +288,7 @@ jobs:
288288
PR_HOSTNAME:"pr${{ needs.get_info.outputs.PR_NUMBER }}.${{ secrets.PR_DEPLOYMENTS_DOMAIN }}"
289289
steps:
290290
-name:Harden Runner
291-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
291+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
292292
with:
293293
egress-policy:audit
294294

‎.github/workflows/release-validation.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414

1515
steps:
1616
-name:Harden Runner
17-
uses:step-security/harden-runner@95d9a5deda9de15063e7595e9719c11c38c90ae2# v2.13.2
17+
uses:step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76# v2.14.0
1818
with:
1919
egress-policy:audit
2020

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp