diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000000..1ce7be0db8 --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,90 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/build.yaml': + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + - 'docker/build-push-action@v7.4.0' + - 'docker/setup-buildx-action@v4.4.1' + '.github/workflows/chore-lock-closed-issues-discussions-and-prs.yml': + - 'dessant/lock-threads@v6.0.2' + '.github/workflows/chore-manage-pr-branch.yaml': + - 'actions/github-script@v9.0.0' + '.github/workflows/chore-manage-stale-issues-and-prs.yml': + - 'actions/stale@v11.0.0' + '.github/workflows/chore-pr-comments.yml': [] + '.github/workflows/clean-manifests.yaml': + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + '.github/workflows/main.yaml': + - 'actions/checkout@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'docker/login-action@v4.7.0' + '.github/workflows/merge-forward.yaml': + - 'actions/checkout@v7.0.1' + '.github/workflows/nightly.yaml': + - 'actions/checkout@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'docker/login-action@v4.7.0' + '.github/workflows/pr-quality.yaml': + - 'peakoss/anti-slop@v0.3.0' + '.github/workflows/pull-request.yaml': + - 'actions/download-artifact@v8.0.2' + - 'docker/login-action@v4.7.0' + '.github/workflows/release.yaml': + - 'actions/checkout@v7.0.1' + - 'actions/download-artifact@v8.0.2' + - 'docker/login-action@v4.7.0' +dependencies: + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v8.0.2': + ref: 'v8.0.2' + commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333' + owner_id: 44036562 + repo_id: 192626254 + 'actions/github-script@v9.0.0': + ref: 'v9.0.0' + commit: 'sha1-3a2844b7e9c422d3c10d287c895573f7108da1b3' + owner_id: 44036562 + repo_id: 205262760 + 'actions/stale@v11.0.0': + ref: 'v11.0.0' + commit: 'sha1-4391f3da665fdf50b6810c1a66712fb9ba21aa93' + owner_id: 44036562 + repo_id: 200437066 + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' + owner_id: 44036562 + repo_id: 192625955 + 'dessant/lock-threads@v6.0.2': + ref: 'v6.0.2' + commit: 'sha1-89ae32b08ed1a541efecbab17912962a5e38981c' + owner_id: 7513068 + repo_id: 113918130 + 'docker/build-push-action@v7.4.0': + ref: 'v7.4.0' + commit: 'sha1-c3c9e263c25d99ce0380d002d59b67737d91b0dc' + owner_id: 5429470 + repo_id: 241092383 + 'docker/login-action@v4.7.0': + ref: 'v4.7.0' + commit: 'sha1-81c6f93d4bc991e510b342a00b419b3bb4efc5c6' + owner_id: 5429470 + repo_id: 287743349 + 'docker/setup-buildx-action@v4.4.1': + ref: 'v4.4.1' + commit: 'sha1-f87e5991a6d7451dcb8d9637bfbc97413f497069' + owner_id: 5429470 + repo_id: 288485773 + 'peakoss/anti-slop@v0.3.0': + ref: 'v0.3.0' + commit: 'sha1-57858eead489d08b255fab2af45a506c2ca6eab2' + owner_id: 227272980 + repo_id: 1153153658 diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml index 71efd82429..5e79fe2c4e 100644 --- a/.github/workflows/build.yaml +++ b/.github/workflows/build.yaml @@ -38,7 +38,7 @@ jobs: coolify: ${{ inputs.coolify || steps.plan.outputs.coolify }} steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: ref: ${{ inputs.ref }} persist-credentials: false @@ -71,7 +71,7 @@ jobs: runner: ubuntu-26.04-arm steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: ref: ${{ inputs.ref }} persist-credentials: false @@ -85,12 +85,12 @@ jobs: } >> "$GITHUB_OUTPUT" - name: Set up Buildx - uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # https://github.com/docker/setup-buildx-action/releases/tag/v4.4.1 + uses: docker/setup-buildx-action@v4.4.1 with: cache-binary: false - name: Build the image - uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # https://github.com/docker/build-push-action/releases/tag/v7.4.0 + uses: docker/build-push-action@v7.4.0 with: context: . file: docker/production/Dockerfile @@ -103,7 +103,7 @@ jobs: GIT_SHA=${{ steps.args.outputs.sha }} - name: Upload the image - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # https://github.com/actions/upload-artifact/releases/tag/v7.0.2 + uses: actions/upload-artifact@v7.0.2 with: name: image-${{ matrix.arch }} path: ${{ runner.temp }}/image diff --git a/.github/workflows/chore-lock-closed-issues-discussions-and-prs.yml b/.github/workflows/chore-lock-closed-issues-discussions-and-prs.yml index 6fd8212e61..2ce86310e0 100644 --- a/.github/workflows/chore-lock-closed-issues-discussions-and-prs.yml +++ b/.github/workflows/chore-lock-closed-issues-discussions-and-prs.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Lock threads after 30 days of inactivity - uses: dessant/lock-threads@89ae32b08ed1a541efecbab17912962a5e38981c # v6.0.2 + uses: dessant/lock-threads@v6.0.2 with: github-token: ${{ secrets.GITHUB_TOKEN }} issue-inactive-days: '30' diff --git a/.github/workflows/clean-manifests.yaml b/.github/workflows/clean-manifests.yaml index 1679ad669f..a0b8287afe 100644 --- a/.github/workflows/clean-manifests.yaml +++ b/.github/workflows/clean-manifests.yaml @@ -28,7 +28,7 @@ jobs: timeout-minutes: 60 steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false @@ -41,7 +41,7 @@ jobs: - name: Upload the list of manifests to delete if: ${{ always() }} - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 + uses: actions/upload-artifact@v7.0.2 with: name: manifests-to-delete path: scripts/manifests-to-delete.tsv diff --git a/.github/workflows/main.yaml b/.github/workflows/main.yaml index 8f64941d57..f0dbd9a07c 100644 --- a/.github/workflows/main.yaml +++ b/.github/workflows/main.yaml @@ -29,7 +29,7 @@ jobs: build: ${{ steps.plan.outputs.build }} steps: - name: Check out main - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: ref: main fetch-depth: 0 @@ -67,13 +67,13 @@ jobs: timeout-minutes: 30 steps: - name: Download the built images - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # https://github.com/actions/download-artifact/releases/tag/v8.0.2 + uses: actions/download-artifact@v8.0.2 with: pattern: image-* path: ${{ runner.temp }}/images - name: Log in to ghcr.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/merge-forward.yaml b/.github/workflows/merge-forward.yaml index cd18c98edb..9d948ea118 100644 --- a/.github/workflows/merge-forward.yaml +++ b/.github/workflows/merge-forward.yaml @@ -26,7 +26,7 @@ jobs: timeout-minutes: 10 steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 persist-credentials: false diff --git a/.github/workflows/nightly.yaml b/.github/workflows/nightly.yaml index 49755a44e7..e21e1269f1 100644 --- a/.github/workflows/nightly.yaml +++ b/.github/workflows/nightly.yaml @@ -29,7 +29,7 @@ jobs: nightly: ${{ steps.plan.outputs.nightly }} steps: - name: Check out next - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: ref: next fetch-depth: 0 @@ -73,20 +73,20 @@ jobs: line: ${{ fromJSON(needs.plan.outputs.nightly).lines }} steps: - name: Download the built images - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # https://github.com/actions/download-artifact/releases/tag/v8.0.2 + uses: actions/download-artifact@v8.0.2 with: pattern: image-* path: ${{ runner.temp }}/images - name: Log in to ghcr.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Log in to docker.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -118,7 +118,7 @@ jobs: timeout-minutes: 10 steps: - name: Check out the nightly - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: ref: ${{ fromJSON(needs.plan.outputs.nightly).revision }} persist-credentials: false diff --git a/.github/workflows/pr-quality.yaml b/.github/workflows/pr-quality.yaml index 5913496ddc..b61bf8d86c 100644 --- a/.github/workflows/pr-quality.yaml +++ b/.github/workflows/pr-quality.yaml @@ -13,7 +13,7 @@ jobs: pr-quality: runs-on: ubuntu-latest steps: - - uses: peakoss/anti-slop@v0 + - uses: peakoss/anti-slop@v0.3.0 with: # General Settings max-failures: 4 diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml index 0f511c716d..42a585f23d 100644 --- a/.github/workflows/pull-request.yaml +++ b/.github/workflows/pull-request.yaml @@ -61,13 +61,13 @@ jobs: timeout-minutes: 30 steps: - name: Download the built images - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # https://github.com/actions/download-artifact/releases/tag/v8.0.2 + uses: actions/download-artifact@v8.0.2 with: pattern: image-* path: ${{ runner.temp }}/images - name: Log in to ghcr.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index d6614d9027..ab98ab102a 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -37,7 +37,7 @@ jobs: releases: ${{ steps.plan.outputs.releases }} steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 persist-credentials: false @@ -74,25 +74,25 @@ jobs: release: ${{ fromJSON(needs.plan.outputs.releases) }} steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false - name: Download the built images - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # https://github.com/actions/download-artifact/releases/tag/v8.0.2 + uses: actions/download-artifact@v8.0.2 with: pattern: image-* path: ${{ runner.temp }}/images - name: Log in to ghcr.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Log in to docker.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -136,7 +136,7 @@ jobs: tags: ${{ steps.plan.outputs.tags }} steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 persist-credentials: false @@ -148,14 +148,14 @@ jobs: echo "tags=$tags" | tee -a "$GITHUB_OUTPUT" - name: Log in to ghcr.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Log in to docker.io - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # https://github.com/docker/login-action/releases/tag/v4.7.0 + uses: docker/login-action@v4.7.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -190,7 +190,7 @@ jobs: timeout-minutes: 10 steps: - name: Check out the repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # https://github.com/actions/checkout/releases/tag/v7.0.1 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 persist-credentials: false