From 0f740b376ccad45a264380bd823e6135aabec0d2 Mon Sep 17 00:00:00 2001 From: Ana Martinez Gomez Date: Wed, 28 Feb 2024 18:20:23 +0100 Subject: [PATCH 1/7] [ci] Update actions/checkout Update the action to the latest version as v3 uses a deprecated version of Node. Use an immutable release by using the commit hash. --- .github/workflows/ci.yml | 4 ++-- .github/workflows/daily.yml | 4 ++-- .github/workflows/new_package.yml | 2 +- .github/workflows/sync_badge.yml | 2 +- .github/workflows/update_package.yml | 2 +- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2a38fc551..29a1efda5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -11,7 +11,7 @@ jobs: runs-on: windows-2019 steps: - name: Checkout code - uses: actions/checkout@v3 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: # fetch all history for all branches fetch-depth: 0 @@ -29,7 +29,7 @@ jobs: os: [windows-2019, windows-2022] steps: - name: Checkout code - uses: actions/checkout@v3 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Get changed files id: files uses: Ana06/get-changed-files@v2.2.0 diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml index 4e3fea505..7e2449426 100644 --- a/.github/workflows/daily.yml +++ b/.github/workflows/daily.yml @@ -23,7 +23,7 @@ jobs: os_name: Win19 steps: - name: Checkout code - uses: actions/checkout@v3 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Build and test all packages run: scripts/test/test_install.ps1 -all -max_tries 3 - name: Upload logs to artifacts @@ -31,7 +31,7 @@ jobs: if: always() - name: Checkout wiki code if: always() - uses: actions/checkout@v3 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 with: repository: ${{ github.repository }}.wiki path: wiki diff --git a/.github/workflows/new_package.yml b/.github/workflows/new_package.yml index 413572a42..585146c8d 100644 --- a/.github/workflows/new_package.yml +++ b/.github/workflows/new_package.yml @@ -14,7 +14,7 @@ jobs: with: labels: send PR - name: Checkout code - uses: actions/checkout@v3 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Parse issue uses: stefanbuck/github-issue-parser@v2 id: issue-parser diff --git a/.github/workflows/sync_badge.yml b/.github/workflows/sync_badge.yml index ae6291453..ec815ac86 100644 --- a/.github/workflows/sync_badge.yml +++ b/.github/workflows/sync_badge.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Count packages run: | # Counts all packages in /packages including installer.vm diff --git a/.github/workflows/update_package.yml b/.github/workflows/update_package.yml index 6cfdabf73..e5b531cad 100644 --- a/.github/workflows/update_package.yml +++ b/.github/workflows/update_package.yml @@ -12,7 +12,7 @@ jobs: runs-on: windows-2022 steps: - name: Checkout code - uses: actions/checkout@v3 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Install python dependency 'requests' run: pip install requests - name: Set git up From 9124a6ae932246dc2515d458546a443337b4fda8 Mon Sep 17 00:00:00 2001 From: Ana Martinez Gomez Date: Wed, 28 Feb 2024 18:26:02 +0100 Subject: [PATCH 2/7] [ci] Update Ana06/get-changed-files Update the action to the latest version as the old version was using a deprecated version of Node. Use an immutable release by using the commit hash. --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 29a1efda5..ff5cccb72 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,7 +32,7 @@ jobs: uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Get changed files id: files - uses: Ana06/get-changed-files@v2.2.0 + uses: Ana06/get-changed-files@25f79e676e7ea1868813e21465014798211fad8c # v2.3.0 with: filter: '*.nuspec' - name: Build and test all modified packages From 1c50725e4c683bbec6cd94fa68c63b65979cc1d0 Mon Sep 17 00:00:00 2001 From: Ana Martinez Gomez Date: Wed, 28 Feb 2024 18:31:30 +0100 Subject: [PATCH 3/7] [ci] Update actions/upload-artifact Update the action to the latest version as v3 uses a deprecated version of Node. Use an immutable release by using the commit hash. --- .github/actions/upload-logs/action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/upload-logs/action.yml b/.github/actions/upload-logs/action.yml index ce55bdc14..1631d3aec 100644 --- a/.github/actions/upload-logs/action.yml +++ b/.github/actions/upload-logs/action.yml @@ -5,13 +5,13 @@ runs: using: "composite" steps: - name: Upload VM logs to artifacts - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 if: always() with: name: log-VM-${{ matrix.os }}.zip path: C:\ProgramData\_VM\log.txt - name: Upload chocolatey logs to artifacts - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 if: always() with: name: logs-choco-${{ matrix.os }}.zip From b57c5735fbc1ee894ceb12de45482a2c6d8aa9a8 Mon Sep 17 00:00:00 2001 From: Ana Martinez Gomez Date: Wed, 28 Feb 2024 18:36:50 +0100 Subject: [PATCH 4/7] [ci] Update actions-ecosystem/action-remove-labels Use an immutable release by using the commit hash. Note this is an old version using a deprecated version of Node (forced by GH to run in a newer version), but it seems to still work fine. --- .github/workflows/new_package.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/new_package.yml b/.github/workflows/new_package.yml index 585146c8d..5618c0fc1 100644 --- a/.github/workflows/new_package.yml +++ b/.github/workflows/new_package.yml @@ -10,7 +10,7 @@ jobs: if: github.event.label.name == 'send PR' steps: - name: Remove 'send PR' label - uses: actions-ecosystem/action-remove-labels@v1 + uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1.3.0 with: labels: send PR - name: Checkout code From b29da1b766827278a8dc969dd6a0aef77a9ebc28 Mon Sep 17 00:00:00 2001 From: Ana Martinez Gomez Date: Wed, 28 Feb 2024 18:49:20 +0100 Subject: [PATCH 5/7] [ci] Update peter-evans/create-pull-request Update the action to the latest version as the old version was using a deprecated version of Node. Use an immutable release by using the commit hash. --- .github/workflows/new_package.yml | 2 +- .github/workflows/update_package.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/new_package.yml b/.github/workflows/new_package.yml index 5618c0fc1..07bab8fab 100644 --- a/.github/workflows/new_package.yml +++ b/.github/workflows/new_package.yml @@ -38,7 +38,7 @@ jobs: uses: ./.github/actions/upload-logs if: always() - name: Create Pull Request - uses: peter-evans/create-pull-request@v4 + uses: peter-evans/create-pull-request@a4f52f8033a6168103c2538976c07b467e8163bc # v6.0.1 if: steps.test.outcome == 'success' with: title: ':robot: Add ${{env.pkg_name}}.vm' diff --git a/.github/workflows/update_package.yml b/.github/workflows/update_package.yml index e5b531cad..a87d2b0cc 100644 --- a/.github/workflows/update_package.yml +++ b/.github/workflows/update_package.yml @@ -57,7 +57,7 @@ jobs: uses: ./.github/actions/upload-logs if: always() - name: Create Pull Request - uses: peter-evans/create-pull-request@v4 + uses: peter-evans/create-pull-request@a4f52f8033a6168103c2538976c07b467e8163bc # v6.0.1 with: title: ':robot: Package update' body: 'Automated package update' From 6bd05e8abdbe51871c51a4595b91a35dac36a176 Mon Sep 17 00:00:00 2001 From: Ana Martinez Gomez Date: Wed, 28 Feb 2024 18:51:38 +0100 Subject: [PATCH 6/7] [ci] Update stefanbuck/github-issue-parser Update the action to the latest version as the old version was using a deprecated version of Node. Use an immutable release by using the commit hash. --- .github/workflows/new_package.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/new_package.yml b/.github/workflows/new_package.yml index 07bab8fab..cf779bb34 100644 --- a/.github/workflows/new_package.yml +++ b/.github/workflows/new_package.yml @@ -16,7 +16,7 @@ jobs: - name: Checkout code uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Parse issue - uses: stefanbuck/github-issue-parser@v2 + uses: stefanbuck/github-issue-parser@1e5bdee70d4b3e066a33aa0669ab782943825f94 # v3.1.0 id: issue-parser with: template-path: .github/ISSUE_TEMPLATE/new_package.yml From 7cde5bb382b0ca69aa8ddf43d48443cc5b25de38 Mon Sep 17 00:00:00 2001 From: Ana Martinez Gomez Date: Wed, 28 Feb 2024 18:54:13 +0100 Subject: [PATCH 7/7] [ci] Update schneegans/dynamic-badges-action Use an immutable release by using the commit hash. --- .github/workflows/daily.yml | 2 +- .github/workflows/sync_badge.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/daily.yml b/.github/workflows/daily.yml index 7e2449426..1cb551470 100644 --- a/.github/workflows/daily.yml +++ b/.github/workflows/daily.yml @@ -60,7 +60,7 @@ jobs: echo "message=$message" >> $env:GITHUB_ENV - name: Update dynamic badge gist if: always() - uses: schneegans/dynamic-badges-action@v1.7.0 + uses: schneegans/dynamic-badges-action@e9a478b16159b4d31420099ba146cdc50f134483 # v1.7.0 with: auth: ${{ secrets.REPO_TOKEN }} gistID: 7d6b2592948d916eb5529350308f01d1 diff --git a/.github/workflows/sync_badge.yml b/.github/workflows/sync_badge.yml index ec815ac86..0d16e4f02 100644 --- a/.github/workflows/sync_badge.yml +++ b/.github/workflows/sync_badge.yml @@ -16,7 +16,7 @@ jobs: num_packages=$(ls packages | wc -l) echo "num_packages=$num_packages" >> $GITHUB_ENV - name: Update dynamic badge gist - uses: schneegans/dynamic-badges-action@v1.7.0 + uses: schneegans/dynamic-badges-action@e9a478b16159b4d31420099ba146cdc50f134483 # v1.7.0 with: auth: ${{ secrets.REPO_TOKEN }} gistID: 0e28118f551692f3401ac669e1d6761d