From bc1f79ef2a55cb55d6d283322c2f376ed8d53bd2 Mon Sep 17 00:00:00 2001 From: Glen Date: Wed, 10 Jun 2026 14:32:31 +0200 Subject: [PATCH] Update GitHub workflow actions and npm tools to latest versions --- .github/workflows/benchmarks.yml | 4 +-- .github/workflows/ci-cleanup.yml | 2 +- .github/workflows/ci.yml | 28 ++++++++++---------- .github/workflows/coverage.yml | 8 +++--- .github/workflows/publish-website-next.yml | 8 +++--- .github/workflows/publish-website.yml | 6 ++--- .github/workflows/release.yml | 30 +++++++++++----------- 7 files changed, 43 insertions(+), 43 deletions(-) diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index 72e0b4822f2..07ba07dcf40 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -131,7 +131,7 @@ jobs: steps: - name: Checkout current repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 show-progress: false @@ -517,7 +517,7 @@ jobs: path: benchmark-results - name: Checkout performance data repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: repository: ChilliCream/graphql-platform-performance-data token: ${{ secrets.PERFORMANCE_DATA_TOKEN }} diff --git a/.github/workflows/ci-cleanup.yml b/.github/workflows/ci-cleanup.yml index 6b3c7b2bf42..9a353f0c980 100644 --- a/.github/workflows/ci-cleanup.yml +++ b/.github/workflows/ci-cleanup.yml @@ -13,7 +13,7 @@ jobs: actions: write steps: - name: Check out code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d64092cb06f..87c60fafa8b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -24,7 +24,7 @@ jobs: src_changes: ${{ steps.check-src.outputs.src_changes }} steps: - name: Checkout Repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 2 show-progress: false @@ -77,7 +77,7 @@ jobs: needs: check-changes if: needs.check-changes.outputs.website_changes == 'true' || needs.check-changes.outputs.website_next_changes == 'true' steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 name: Check out the code with: show-progress: false @@ -88,7 +88,7 @@ jobs: node-version: 24 - name: Install cspell - run: npm install -g cspell@10.0.0 + run: npm install -g cspell@10.0.1 - name: run cspell (website) if: needs.check-changes.outputs.website_changes == 'true' @@ -102,7 +102,7 @@ jobs: name: "Markdown linting" runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 name: Check out the code with: show-progress: false @@ -110,7 +110,7 @@ jobs: name: Setup node with: node-version: 24 - - run: npm install -g markdownlint-cli2@0.22.0 + - run: npm install -g markdownlint-cli2@0.22.1 name: Install markdownlint-cli2 - run: markdownlint-cli2 "*.md" "website/src/**/*.md" name: run Markdownlint @@ -122,7 +122,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false @@ -166,7 +166,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false @@ -214,7 +214,7 @@ jobs: steps: - name: Checkout to repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false @@ -236,12 +236,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false - name: Install .NET - uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5 + uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0 with: dotnet-version: | 8.x @@ -259,7 +259,7 @@ jobs: github.event_name != 'pull_request' || (github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name == github.repository) - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: username: ${{ vars.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -331,12 +331,12 @@ jobs: pull-requests: write steps: - name: Checkout Repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false - name: Validate Client - uses: ChilliCream/nitro-client-validate@e9856650fe21377cd2a7f0c82002cf121dbe9a30 # v16.0.13 + uses: ChilliCream/nitro-client-validate@4b817b3f65b7fcc09eeea7b8fa901e7abf69945c # v16.1.3 with: client-id: ${{ secrets.NITRO_API_CLIENT_ID }} operations-file: src/Nitro/Common/src/ChilliCream.Nitro.Client/persisted/operations.json @@ -351,7 +351,7 @@ jobs: if: needs.check-changes.outputs.src_changes == 'true' steps: - name: Checkout Repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 8d121d1a806..22e8d902013 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Checkout to repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false @@ -46,12 +46,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false - name: Install .NET - uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5 + uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0 with: dotnet-version: | 8.x @@ -64,7 +64,7 @@ jobs: timeout-minutes: 5 - name: Log in to Docker Hub - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: username: ${{ vars.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/publish-website-next.yml b/.github/workflows/publish-website-next.yml index d2991899b91..24e16d9b899 100644 --- a/.github/workflows/publish-website-next.yml +++ b/.github/workflows/publish-website-next.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false # Full history so doc pages get accurate last-updated dates. @@ -82,17 +82,17 @@ jobs: NEXT_PUBLIC_GTM_ID: ${{ secrets.NEXT_PUBLIC_GTM_ID }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 - name: Docker Login - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ${{ secrets.CONTAINER_REG_URL }} username: ${{ secrets.CONTAINER_REG_USERNAME }} password: ${{ secrets.CONTAINER_REG_PASSWORD }} - name: Build Website Container - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 + uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 with: context: ./website-next file: ./website-next/Dockerfile diff --git a/.github/workflows/publish-website.yml b/.github/workflows/publish-website.yml index 47ea761f3ea..e9cdbb00a23 100644 --- a/.github/workflows/publish-website.yml +++ b/.github/workflows/publish-website.yml @@ -19,12 +19,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false - name: Docker Login - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: registry: ${{ secrets.CONTAINER_REG_URL }} username: ${{ secrets.CONTAINER_REG_USERNAME }} @@ -75,7 +75,7 @@ jobs: NEXT_PUBLIC_GTM_ID: ${{ secrets.NEXT_PUBLIC_GTM_ID }} - name: Build WebSite Container - uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 + uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 with: context: ./website file: .docker/website/dockerfile diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2996b101ef8..6b3b9ff4184 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -114,12 +114,12 @@ jobs: steps: - name: 📦 Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: show-progress: false - name: 🛠 Install .NET - uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5 + uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0 with: dotnet-version: | 8.x @@ -155,7 +155,7 @@ jobs: NitroIdentityScopes: ${{ secrets.NITRO_IDENTITY_SCOPES }} - name: 📤 Upload Nitro CLI client operations - uses: ChilliCream/nitro-client-upload@877527c3e690daa0e7e8ad400e4950617b5f6f8d # v16.0.13 + uses: ChilliCream/nitro-client-upload@a783713782de320181e63a16e46b65fa45eedafe # v16.1.3 with: tag: ${{ env.GIT_TAG }} operations-file: src/Nitro/Common/src/ChilliCream.Nitro.Client/persisted/operations.json @@ -163,7 +163,7 @@ jobs: api-key: ${{ secrets.NITRO_API_KEY }} - name: 🚀 Publish Nitro CLI client (Dev) - uses: ChilliCream/nitro-client-publish@f25bbe5bf209f3432ede55b482a2df1b0fa714f0 # v16.0.13 + uses: ChilliCream/nitro-client-publish@f6c3f4187804f89ee11c4f06feb8b87818be413e # v16.1.3 with: tag: ${{ env.GIT_TAG }} stage: Dev @@ -172,7 +172,7 @@ jobs: force: true - name: 🚀 Publish Nitro CLI client (Prod) - uses: ChilliCream/nitro-client-publish@f25bbe5bf209f3432ede55b482a2df1b0fa714f0 # v16.0.13 + uses: ChilliCream/nitro-client-publish@f6c3f4187804f89ee11c4f06feb8b87818be413e # v16.1.3 with: tag: ${{ env.GIT_TAG }} stage: Prod @@ -240,10 +240,10 @@ jobs: steps: - name: 📦 Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: 🛠 Install .NET - uses: actions/setup-dotnet@c2fa09f4bde5ebb9d1777cf28262a3eb3db3ced7 # v5 + uses: actions/setup-dotnet@9a946fdbd5fb07b82b2f5a4466058b876ab72bb2 # v5.3.0 with: dotnet-version: 10.x @@ -275,7 +275,7 @@ jobs: creds: ${{ secrets.SIGNING_CREDENTIALS }} - name: 🖋️ Sign binary (Windows) - uses: azure/artifact-signing-action@b443cf8ea4124818d2ea9f043cba29fc3ec47b16 # v1 + uses: azure/artifact-signing-action@c7ab2a863ab5f9a846ddb8265964877ef296ee82 # v2.0.0 if: runner.os == 'Windows' with: endpoint: ${{ vars.AZURE_TRUSTED_SIGNING_ACCOUNT_ENDPOINT }} @@ -414,7 +414,7 @@ jobs: steps: - name: 📦 Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: 🧰 Setup Node uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 @@ -507,7 +507,7 @@ jobs: steps: - name: 📦 Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: 🧰 Setup Node uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6 @@ -628,14 +628,14 @@ jobs: steps: - name: 📦 Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: sparse-checkout: .github/actions show-progress: false - name: 🔐 Create GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.ACTIONS_APP_ID }} private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }} @@ -678,14 +678,14 @@ jobs: steps: - name: 📦 Checkout - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: sparse-checkout: .github/actions show-progress: false - name: 🔐 Create GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.ACTIONS_APP_ID }} private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }} @@ -711,7 +711,7 @@ jobs: steps: - name: 🔐 Create GitHub App token id: app-token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.ACTIONS_APP_ID }} private-key: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}