34
34
tailnet-integration :${{ steps.filter.outputs.tailnet-integration }}
35
35
steps :
36
36
-name :Harden Runner
37
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
37
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
38
38
with :
39
39
egress-policy :audit
40
40
@@ -155,7 +155,7 @@ jobs:
155
155
runs-on :${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
156
156
steps :
157
157
-name :Harden Runner
158
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
158
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
159
159
with :
160
160
egress-policy :audit
161
161
@@ -178,7 +178,7 @@ jobs:
178
178
echo "LINT_CACHE_DIR=$dir" >> $GITHUB_ENV
179
179
180
180
-name :golangci-lint cache
181
- uses :actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
181
+ uses :actions/cache@0c907a75c2c80ebcb7f088228285e798b750cf8f # v4.2.1
182
182
with :
183
183
path :|
184
184
${{ env.LINT_CACHE_DIR }}
@@ -188,7 +188,7 @@ jobs:
188
188
189
189
# Check for any typos
190
190
-name :Check for typos
191
- uses :crate-ci/typos@11ca4583f2f3f74c7e7785c0ecb20fe2c99a4308 # v1.29.5
191
+ uses :crate-ci/typos@212923e4ff05b7fc2294a204405eec047b807138 # v1.29.9
192
192
with :
193
193
config :.github/workflows/typos.toml
194
194
@@ -201,7 +201,7 @@ jobs:
201
201
202
202
# Needed for helm chart linting
203
203
-name :Install helm
204
- uses :azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2 .0
204
+ uses :azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4.3 .0
205
205
with :
206
206
version :v3.9.2
207
207
@@ -227,7 +227,7 @@ jobs:
227
227
if :always()
228
228
steps :
229
229
-name :Harden Runner
230
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
230
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
231
231
with :
232
232
egress-policy :audit
233
233
@@ -290,7 +290,7 @@ jobs:
290
290
timeout-minutes :7
291
291
steps :
292
292
-name :Harden Runner
293
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
293
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
294
294
with :
295
295
egress-policy :audit
296
296
@@ -331,7 +331,7 @@ jobs:
331
331
-windows-2022
332
332
steps :
333
333
-name :Harden Runner
334
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
334
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
335
335
with :
336
336
egress-policy :audit
337
337
@@ -391,7 +391,7 @@ jobs:
391
391
-windows-2022
392
392
steps :
393
393
-name :Harden Runner
394
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
394
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
395
395
with :
396
396
egress-policy :audit
397
397
@@ -447,7 +447,7 @@ jobs:
447
447
-ubuntu-latest
448
448
steps :
449
449
-name :Harden Runner
450
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
450
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
451
451
with :
452
452
egress-policy :audit
453
453
@@ -504,7 +504,7 @@ jobs:
504
504
timeout-minutes :25
505
505
steps :
506
506
-name :Harden Runner
507
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
507
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
508
508
with :
509
509
egress-policy :audit
510
510
@@ -541,7 +541,7 @@ jobs:
541
541
timeout-minutes :25
542
542
steps :
543
543
-name :Harden Runner
544
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
544
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
545
545
with :
546
546
egress-policy :audit
547
547
@@ -579,7 +579,7 @@ jobs:
579
579
timeout-minutes :25
580
580
steps :
581
581
-name :Harden Runner
582
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
582
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
583
583
with :
584
584
egress-policy :audit
585
585
@@ -627,7 +627,7 @@ jobs:
627
627
timeout-minutes :20
628
628
steps :
629
629
-name :Harden Runner
630
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
630
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
631
631
with :
632
632
egress-policy :audit
633
633
@@ -653,7 +653,7 @@ jobs:
653
653
timeout-minutes :20
654
654
steps :
655
655
-name :Harden Runner
656
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
656
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
657
657
with :
658
658
egress-policy :audit
659
659
@@ -685,7 +685,7 @@ jobs:
685
685
name :${{ matrix.variant.name }}
686
686
steps :
687
687
-name :Harden Runner
688
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
688
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
689
689
with :
690
690
egress-policy :audit
691
691
@@ -733,15 +733,15 @@ jobs:
733
733
734
734
-name :Upload Playwright Failed Tests
735
735
if :always() && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && !github.event.pull_request.head.repo.fork
736
- uses :actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
736
+ uses :actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
737
737
with :
738
738
name :failed-test-videos${{ matrix.variant.premium && '-premium' || '' }}
739
739
path :./site/test-results/**/*.webm
740
740
retention-days :7
741
741
742
742
-name :Upload pprof dumps
743
743
if :always() && github.actor != 'dependabot[bot]' && runner.os == 'Linux' && !github.event.pull_request.head.repo.fork
744
- uses :actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
744
+ uses :actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
745
745
with :
746
746
name :debug-pprof-dumps${{ matrix.variant.premium && '-premium' || '' }}
747
747
path :./site/test-results/**/debug-pprof-*.txt
@@ -754,7 +754,7 @@ jobs:
754
754
if :needs.changes.outputs.ts == 'true' || needs.changes.outputs.ci == 'true'
755
755
steps :
756
756
-name :Harden Runner
757
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
757
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
758
758
with :
759
759
egress-policy :audit
760
760
@@ -831,7 +831,7 @@ jobs:
831
831
832
832
steps :
833
833
-name :Harden Runner
834
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
834
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
835
835
with :
836
836
egress-policy :audit
837
837
@@ -905,7 +905,7 @@ jobs:
905
905
if :always()
906
906
steps :
907
907
-name :Harden Runner
908
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
908
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
909
909
with :
910
910
egress-policy :audit
911
911
@@ -1000,7 +1000,7 @@ jobs:
1000
1000
1001
1001
-name :Upload build artifacts
1002
1002
if :${{ github.repository_owner == 'coder' && github.ref == 'refs/heads/main' }}
1003
- uses :actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
1003
+ uses :actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
1004
1004
with :
1005
1005
name :dylibs
1006
1006
path :|
@@ -1028,7 +1028,7 @@ jobs:
1028
1028
IMAGE :ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}
1029
1029
steps :
1030
1030
-name :Harden Runner
1031
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
1031
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1032
1032
with :
1033
1033
egress-policy :audit
1034
1034
@@ -1140,7 +1140,7 @@ jobs:
1140
1140
1141
1141
-name :Upload build artifacts
1142
1142
if :github.ref == 'refs/heads/main'
1143
- uses :actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
1143
+ uses :actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
1144
1144
with :
1145
1145
name :coder
1146
1146
path :|
@@ -1164,7 +1164,7 @@ jobs:
1164
1164
id-token :write
1165
1165
steps :
1166
1166
-name :Harden Runner
1167
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
1167
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1168
1168
with :
1169
1169
egress-policy :audit
1170
1170
@@ -1183,7 +1183,7 @@ jobs:
1183
1183
uses :google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a # v2.1.4
1184
1184
1185
1185
-name :Set up Flux CLI
1186
- uses :fluxcd/flux2/action@5350425cdcd5fa015337e09fa502153c0275bd4b # v2.4 .0
1186
+ uses :fluxcd/flux2/action@af67405ee43a6cd66e0b73f4b3802e8583f9d961 # v2.5 .0
1187
1187
with :
1188
1188
# Keep this and the github action up to date with the version of flux installed in dogfood cluster
1189
1189
version :" 2.2.1"
@@ -1219,14 +1219,16 @@ jobs:
1219
1219
kubectl --namespace coder rollout status deployment/coder
1220
1220
kubectl --namespace coder rollout restart deployment/coder-provisioner
1221
1221
kubectl --namespace coder rollout status deployment/coder-provisioner
1222
+ kubectl --namespace coder rollout restart deployment/coder-provisioner-tagged
1223
+ kubectl --namespace coder rollout status deployment/coder-provisioner-tagged
1222
1224
1223
1225
deploy-wsproxies :
1224
1226
runs-on :ubuntu-latest
1225
1227
needs :build
1226
1228
if :github.ref == 'refs/heads/main' && !github.event.pull_request.head.repo.fork
1227
1229
steps :
1228
1230
-name :Harden Runner
1229
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
1231
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1230
1232
with :
1231
1233
egress-policy :audit
1232
1234
@@ -1261,7 +1263,7 @@ jobs:
1261
1263
if :needs.changes.outputs.db == 'true' || needs.changes.outputs.ci == 'true' || github.ref == 'refs/heads/main'
1262
1264
steps :
1263
1265
-name :Harden Runner
1264
- uses :step-security/harden-runner@cb605e52c26070c328afc4562f0b4ada7618a84e # v2.10.4
1266
+ uses :step-security/harden-runner@4d991eb9b905ef189e4c376166672c3f2f230481 # v2.11.0
1265
1267
with :
1266
1268
egress-policy :audit
1267
1269