Skip to content

Commit 850cca7

Browse files
committed
chore(deps): update github-actions
1 parent d04f6a0 commit 850cca7

File tree

11 files changed

+41
-41
lines changed

11 files changed

+41
-41
lines changed

.github/actions/build-base-image/action.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -74,7 +74,7 @@ runs:
7474

7575
- name: Download pre-built src
7676
if: inputs.BUILD_IMAGE == 'true' && steps.cache-src.outputs.cache-hit != 'true'
77-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
77+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
7878
with:
7979
name: otp_prebuilt
8080

@@ -88,7 +88,7 @@ runs:
8888

8989
- name: Download pre-built binaries
9090
if: inputs.BUILD_IMAGE == 'true' && steps.cache-binary.outputs.cache-hit != 'true'
91-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/download-artifact@v4
91+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
9292
with:
9393
name: otp_prebuilt
9494

.github/actions/ossf-compiler-flags-scanner/action.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ inputs:
2828
runs:
2929
using: composite
3030
steps:
31-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
31+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3232
with:
3333
repository: ossf/wg-best-practices-os-developers
3434
sparse-checkout: docs/Compiler-Hardening-Guides/compiler-options-scraper

.github/workflows/github-actions-checker.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ jobs:
3434
runs-on: 'ubuntu-latest'
3535
name: 'ratchet'
3636
steps:
37-
- uses: 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683' # ratchet:actions/[email protected]
37+
- uses: 'actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8' # v5.0.0
3838
- id: files
3939
run: |
4040
FILES=$(find .github/ -name "*.yml" -o -name "*.yaml" -printf "%p ")

.github/workflows/license-scanner.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
run-scan:
3636
runs-on: ubuntu-latest
3737
steps:
38-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
38+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3939
with:
4040
fetch-depth: '0'
4141
- uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # ratchet:actions/[email protected]

.github/workflows/main.yaml

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
build-c-code: ${{ steps.c-code-changes.outputs.changes != '[]' || env.FULL_BUILD_AND_CHECK == 'true' }}
6969
all: ${{ steps.apps.outputs.all }}
7070
steps:
71-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
71+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
7272
- uses: ./.github/actions/build-base-image
7373
with:
7474
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -197,10 +197,10 @@ jobs:
197197
WXWIDGETS_VERSION: 3.2.6
198198
MACOS_VERSION: 15
199199
steps:
200-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
200+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
201201

202202
- name: Download source archive
203-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
203+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
204204
with:
205205
name: otp_prebuilt
206206

@@ -246,9 +246,9 @@ jobs:
246246
needs: pack
247247
if: needs.pack.outputs.build-c-code == 'true'
248248
steps:
249-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
249+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
250250
- name: Download source archive
251-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
251+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
252252
with:
253253
name: otp_prebuilt
254254

@@ -279,11 +279,11 @@ jobs:
279279
env:
280280
WXWIDGETS_VERSION: 3.2.6
281281
name: Build Erlang/OTP (Windows)
282-
runs-on: windows-2022
282+
runs-on: windows-2025
283283
needs: pack
284284
if: needs.pack.outputs.build-c-code == 'true'
285285
steps:
286-
- uses: Vampire/setup-wsl@3b46b44374d5d0ae94654c45d114a3ed7a0e07a8 # ratchet:Vampire/setup-wsl@v5.0.1
286+
- uses: Vampire/setup-wsl@6a8db447be7ed35f2f499c02c6e60ff77ef11278 # v6.0.0
287287
with:
288288
distribution: Ubuntu-18.04
289289

@@ -339,7 +339,7 @@ jobs:
339339
nmake TARGET_CPU=amd64 BUILD=release SHARED=0 DIR_SUFFIX_CPU= -f makefile.vc
340340
341341
- name: Download source archive
342-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
342+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
343343
with:
344344
name: otp_prebuilt
345345

@@ -385,7 +385,7 @@ jobs:
385385
fail-fast: false
386386

387387
steps:
388-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
388+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
389389
- uses: ./.github/actions/build-base-image
390390
with:
391391
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -438,7 +438,7 @@ jobs:
438438
fail-fast: false
439439

440440
steps:
441-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
441+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
442442
- uses: ./.github/actions/build-base-image
443443
with:
444444
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -451,7 +451,7 @@ jobs:
451451
if: needs.pack.outputs.build-c-code == 'true'
452452
steps:
453453
- name: Download source archive
454-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
454+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
455455
with:
456456
name: otp_prebuilt
457457
- name: Build on FreeBSD
@@ -479,7 +479,7 @@ jobs:
479479
runs-on: ubuntu-latest
480480
needs: pack
481481
steps:
482-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
482+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
483483
- uses: ./.github/actions/build-base-image
484484
with:
485485
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -533,7 +533,7 @@ jobs:
533533
runs-on: ubuntu-latest
534534
needs: pack
535535
steps:
536-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
536+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
537537
- uses: ./.github/actions/build-base-image
538538
with:
539539
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -558,7 +558,7 @@ jobs:
558558
# type: ["os_mon","sasl"]
559559
fail-fast: false
560560
steps:
561-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
561+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
562562
- uses: ./.github/actions/build-base-image
563563
with:
564564
BASE_BRANCH: ${{ env.BASE_BRANCH }}
@@ -611,12 +611,12 @@ jobs:
611611
if: ${{ !cancelled() }} # Run even if the need has failed
612612
needs: test
613613
steps:
614-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
614+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
615615
- uses: ./.github/actions/build-base-image
616616
with:
617617
BASE_BRANCH: ${{ env.BASE_BRANCH }}
618618
- name: Download test results
619-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
619+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
620620
- name: Merge test results
621621
run: |
622622
shopt -s nullglob
@@ -688,13 +688,13 @@ jobs:
688688
- name: Use HTTPS instead of SSH for Git cloning
689689
run: git config --global url.https://github.com/.insteadOf ssh://[email protected]/
690690

691-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
691+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
692692
- uses: ./.github/actions/build-base-image
693693
with:
694694
BASE_BRANCH: ${{ env.BASE_BRANCH }}
695695

696696
- name: Fetch Default ORT Config
697-
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/checkout@v4
697+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
698698
with:
699699
repository: oss-review-toolkit/ort-config
700700
ref: "d2978deb230beae095bb6cfec074b94f1a74fd34"
@@ -861,13 +861,13 @@ jobs:
861861
id-token: write
862862

863863
steps:
864-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
864+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
865865
- uses: ./.github/actions/build-base-image
866866
with:
867867
BASE_BRANCH: ${{ env.BASE_BRANCH }}
868868

869869
- name: Download SBoM
870-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
870+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
871871
with:
872872
name: ort-results-otp-${{ env.OTP_SBOM_VERSION }}
873873

@@ -906,19 +906,19 @@ jobs:
906906
echo "tag=${TAG}" >> $GITHUB_OUTPUT
907907
echo "vsn=${VSN}" >> $GITHUB_OUTPUT
908908
909-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
909+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
910910

911911
## Publish the pre-built archive and docs
912912
- name: Download source archive
913-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
913+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
914914
with:
915915
name: otp_prebuilt
916916
- name: Download html docs
917-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
917+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
918918
with:
919919
name: otp_doc_html
920920
- name: Download man docs
921-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
921+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
922922
with:
923923
name: otp_doc_man
924924

@@ -937,12 +937,12 @@ jobs:
937937
sha256sum $FILES > SHA256.txt
938938
939939
- name: Download SBoM
940-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
940+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
941941
with:
942942
name: ort-results-otp-${{ env.OTP_SBOM_VERSION }}
943943

944944
- name: Download ORT Scan Results
945-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # ratchet:actions/[email protected].0
945+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
946946
with:
947947
name: ort-results-otp-${{ env.OTP_SBOM_VERSION }}-scan-result.json.zip
948948

.github/workflows/ossf-compiler-flags-scanner.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
# Only need to read contents
4545
contents: read
4646
steps:
47-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
47+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4848
- name: Create initial pre-release tar
4949
run: .github/scripts/init-pre-release.sh otp_src.tar.gz
5050
- uses: ./.github/actions/build-base-image

.github/workflows/osv-scanner-scheduled.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ jobs:
4040
outputs:
4141
versions: ${{ steps.get-versions.outputs.versions }}
4242
steps:
43-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
43+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4444
- id: get-versions
4545
name: Fetch latest 3 OTP versions
4646
run: |
@@ -60,7 +60,7 @@ jobs:
6060
permissions:
6161
actions: write
6262
steps:
63-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
63+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6464
with:
6565
ref: ${{ matrix.type }}
6666

.github/workflows/pr-comment.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,7 @@ jobs:
4444
outputs:
4545
result: ${{ steps.pr-number.outputs.result }}
4646
steps:
47-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
47+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4848
- uses: erlef/setup-beam@5304e04ea2b355f03681464e683d92e3b2f18451 # ratchet:actions/[email protected]
4949
with:
5050
otp-version: '27'
@@ -64,7 +64,7 @@ jobs:
6464
pull-requests: write
6565
if: github.event.action == 'requested' && needs.pr-number.outputs.result != ''
6666
steps:
67-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
67+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6868
## We create an initial comment with some useful help to the user
6969
- uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # ratchet:actions/[email protected]
7070
with:
@@ -87,7 +87,7 @@ jobs:
8787
needs.pr-number.outputs.result != '' &&
8888
github.event.workflow_run.conclusion != 'skipped'
8989
steps:
90-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
90+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
9191
- name: Download and Extract Artifacts
9292
id: extract
9393
env:

.github/workflows/sync-github-releases.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ jobs:
4343
contents: write
4444
actions: write
4545
steps:
46-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
46+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
4747
## We need to login to the package registry in order to pull
4848
## the base debian image.
4949
- name: Docker login

.github/workflows/update-base.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
fail-fast: false
5050

5151
steps:
52-
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # ratchet:actions/[email protected]
52+
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
5353
with:
5454
ref: ${{ matrix.branch }}
5555
- name: Cleanup GH Runner

0 commit comments

Comments
 (0)