Skip to content

Commit 5d08539

Browse files
dependabot[bot]dependabot[bot]
authored
Bump the github-actions group with 24 updates
Updates the requirements on [actions/checkout](https://github.com/actions/checkout), [actions/setup-java](https://github.com/actions/setup-java), [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels), [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action), [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action), [actions/cache](https://github.com/actions/cache), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials), [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login), [docker/build-push-action](https://github.com/docker/build-push-action), [peter-evans/create-or-update-comment](https://github.com/peter-evans/create-or-update-comment), [github/codeql-action](https://github.com/github/codeql-action), [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action), [actions/download-artifact](https://github.com/actions/download-artifact), [docker/setup-docker-action](https://github.com/docker/setup-docker-action), [actions/upload-artifact](https://github.com/actions/upload-artifact), [docker/login-action](https://github.com/docker/login-action), [actions/setup-node](https://github.com/actions/setup-node), [awalsh128/cache-apt-pkgs-action](https://github.com/awalsh128/cache-apt-pkgs-action), [pnpm/action-setup](https://github.com/pnpm/action-setup), [Ilshidur/action-discord](https://github.com/ilshidur/action-discord), [svenstaro/upload-release-action](https://github.com/svenstaro/upload-release-action), [peter-evans/repository-dispatch](https://github.com/peter-evans/repository-dispatch), [release-drafter/release-drafter](https://github.com/release-drafter/release-drafter) and [actions/first-interaction](https://github.com/actions/first-interaction) to permit the latest version. Updates `actions/checkout` from 4.0.0 to 6.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...1af3b93) Updates `actions/setup-java` from 4.7.0 to 5.0.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](actions/setup-java@3a4f6e1...dded088) Updates `mheap/github-action-required-labels` from 5.5.0 to 5.5.1 - [Release notes](https://github.com/mheap/github-action-required-labels/releases) - [Commits](mheap/github-action-required-labels@388fd6a...8afbe8a) Updates `docker/setup-qemu-action` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](docker/setup-qemu-action@2910929...c7c5346) Updates `docker/setup-buildx-action` from 3.10.0 to 3.11.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@b5ca514...e468171) Updates `actions/cache` from 4.2.2 to 4.3.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](actions/cache@d4323d4...0057852) Updates `aws-actions/configure-aws-credentials` from 4.0.2 to 5.1.1 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@e3dd6a4...61815dc) Updates `aws-actions/amazon-ecr-login` from 9238dd443b7a5941caf19ffbe68be34d4dbd61df to d63b14614fe5d7fc5e5e52c523dea4e876816cc4 - [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases) - [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md) - [Commits](aws-actions/amazon-ecr-login@9238dd4...d63b146) Updates `docker/build-push-action` from 6.15.0 to 6.18.0 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](docker/build-push-action@471d1dc...2634353) Updates `peter-evans/create-or-update-comment` from 4.0.0 to 5.0.0 - [Release notes](https://github.com/peter-evans/create-or-update-comment/releases) - [Commits](peter-evans/create-or-update-comment@71345be...e8674b0) Updates `github/codeql-action` to ecec1f88769052ebc45aa0affc53ea30d474cffa - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/commits/ecec1f88769052ebc45aa0affc53ea30d474cffa) Updates `aquasecurity/trivy-action` from 0.32.0 to 0.33.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@dc5a429...b6643a2) Updates `actions/download-artifact` from 4.1.9 to 6.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@cc20338...018cc2c) Updates `docker/setup-docker-action` from 4.5.0 to 4.6.0 - [Release notes](https://github.com/docker/setup-docker-action/releases) - [Commits](docker/setup-docker-action@efe9e38...e61617a) Updates `actions/upload-artifact` from 4.6.1 to 5.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@4cec3d8...330a01c) Updates `docker/login-action` from 3.4.0 to 3.6.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@74a5d14...5e57cd1) Updates `actions/setup-node` from 3 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v3...v6) Updates `awalsh128/cache-apt-pkgs-action` from 1.4.3 to 1.6.0 - [Release notes](https://github.com/awalsh128/cache-apt-pkgs-action/releases) - [Commits](awalsh128/cache-apt-pkgs-action@5902b33...acb598e) Updates `pnpm/action-setup` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](pnpm/action-setup@a7487c7...41ff726) Updates `Ilshidur/action-discord` from 0.3.2 to 0.4.0 - [Release notes](https://github.com/ilshidur/action-discord/releases) - [Commits](Ilshidur/action-discord@0c4b278...d259407) Updates `svenstaro/upload-release-action` from 2.9.0 to 2.11.3 - [Release notes](https://github.com/svenstaro/upload-release-action/releases) - [Changelog](https://github.com/svenstaro/upload-release-action/blob/master/CHANGELOG.md) - [Commits](svenstaro/upload-release-action@04733e0...6b7fa9f) Updates `peter-evans/repository-dispatch` from 3.0.0 to 4.0.1 - [Release notes](https://github.com/peter-evans/repository-dispatch/releases) - [Commits](peter-evans/repository-dispatch@ff45666...28959ce) Updates `release-drafter/release-drafter` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/release-drafter/release-drafter/releases) - [Commits](release-drafter/release-drafter@3f0f870...b1476f6) Updates `actions/first-interaction` from 1 to 3 - [Release notes](https://github.com/actions/first-interaction/releases) - [Commits](actions/first-interaction@3c71ce7...1c46889) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: mheap/github-action-required-labels dependency-version: 5.5.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 3.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/cache dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 5.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: aws-actions/amazon-ecr-login dependency-version: d63b14614fe5d7fc5e5e52c523dea4e876816cc4 dependency-type: direct:production dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: 6.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: peter-evans/create-or-update-comment dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: github/codeql-action dependency-version: ecec1f88769052ebc45aa0affc53ea30d474cffa dependency-type: direct:production dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-docker-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: 3.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: awalsh128/cache-apt-pkgs-action dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: pnpm/action-setup dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Ilshidur/action-discord dependency-version: 0.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: svenstaro/upload-release-action dependency-version: 2.11.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: peter-evans/repository-dispatch dependency-version: 4.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: release-drafter/release-drafter dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/first-interaction dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 13381b7 commit 5d08539

22 files changed

+82
-82
lines changed

‎.github/workflows/backend_tests.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,14 +19,14 @@ jobs:
1919
steps:
2020

2121
- name: Checkout
22-
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
22+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # infered from @v4
2323
with:
2424
token: ${{ github.token }}
2525
fetch-depth: 0
2626
ref: ${{ github.event.pull_request.head.sha }}
2727

2828
- name: Set up JDK
29-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
29+
uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # infered from @v4
3030
with:
3131
java-version-file: '.java-version'
3232
distribution: 'zulu'

‎.github/workflows/block_merge.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ jobs:
66
block_merge:
77
runs-on: ubuntu-latest
88
steps:
9-
- uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # infered from @v5
9+
- uses: mheap/github-action-required-labels@8afbe8ae6ab7647d0c9f0cfa7c2f939650d22509 # infered from @v5
1010
with:
1111
mode: exactly
1212
count: 0

‎.github/workflows/branch-deploy.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
if: ${{ github.event.label.name == 'status/feature_testing' || github.event.label.name == 'status/feature_testing_public' }}
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
18+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # infered from @v4
1919
with:
2020
ref: ${{ github.event.pull_request.head.sha }}
2121
token: ${{ github.token }}
@@ -27,7 +27,7 @@ jobs:
2727
env:
2828
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
2929
- name: Set up JDK
30-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
30+
uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # infered from @v4
3131
with:
3232
java-version-file: '.java-version'
3333
distribution: 'zulu'
@@ -40,29 +40,29 @@ jobs:
4040
export VERSION=$(./mvnw -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)
4141
echo "version=${VERSION}" >> $GITHUB_OUTPUT
4242
- name: Set up QEMU
43-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
43+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # infered from @v3
4444
- name: Set up Docker Buildx
4545
id: buildx
46-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
46+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # infered from @v3
4747
- name: Cache Docker layers
48-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
48+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # infered from @v4
4949
with:
5050
path: /tmp/.buildx-cache
5151
key: ${{ runner.os }}-buildx-${{ github.sha }}
5252
restore-keys: |
5353
${{ runner.os }}-buildx-
5454
- name: Configure AWS credentials for Kafka-UI account
55-
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
55+
uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # infered from @v4
5656
with:
5757
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
5858
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
5959
aws-region: eu-central-1
6060
- name: Login to Amazon ECR
6161
id: login-ecr
62-
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
62+
uses: aws-actions/amazon-ecr-login@d63b14614fe5d7fc5e5e52c523dea4e876816cc4 # infered from @v4
6363
- name: Build and push
6464
id: docker_build_and_push
65-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
65+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # infered from @v6
6666
with:
6767
builder: ${{ steps.buildx.outputs.name }}
6868
context: api

‎.github/workflows/branch-remove.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
if: ${{ (github.event.label.name == 'status/feature_testing' || github.event.label.name == 'status/feature_testing_public') || (github.event.action == 'closed' && (contains(github.event.pull_request.labels.*.name, 'status/feature_testing') || contains(github.event.pull_request.labels.*.name, 'status/feature_testing_public'))) }}
1515
steps:
16-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
16+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # infered from @v4
1717
with:
1818
token: ${{ github.token }}
1919
- name: clone

‎.github/workflows/build-public-image.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
if: ${{ github.event.label.name == 'status/image_testing' }}
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
18+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # infered from @v4
1919
with:
2020
ref: ${{ github.event.pull_request.head.sha }}
2121
token: ${{ github.token }}
@@ -25,7 +25,7 @@ jobs:
2525
tag='${{ github.event.pull_request.number }}'
2626
echo "tag=${tag}" >> $GITHUB_OUTPUT
2727
- name: Set up JDK
28-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
28+
uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # infered from @v4
2929
with:
3030
java-version-file: '.java-version'
3131
distribution: 'zulu'
@@ -38,30 +38,30 @@ jobs:
3838
export VERSION=$(./mvnw -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)
3939
echo "version=${VERSION}" >> $GITHUB_OUTPUT
4040
- name: Set up QEMU
41-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
41+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # infered from @v3
4242
- name: Set up Docker Buildx
4343
id: buildx
44-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
44+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # infered from @v3
4545
- name: Cache Docker layers
46-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
46+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # infered from @v4
4747
with:
4848
path: /tmp/.buildx-cache
4949
key: ${{ runner.os }}-buildx-${{ github.sha }}
5050
restore-keys: |
5151
${{ runner.os }}-buildx-
5252
- name: Configure AWS Credentials
53-
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
53+
uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # infered from @v4
5454
with:
5555
aws-region: us-east-1
5656
role-to-assume: ${{ secrets.AWS_ROLE }}
5757
- name: Login to Amazon ECR
5858
id: login-ecr
59-
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
59+
uses: aws-actions/amazon-ecr-login@d63b14614fe5d7fc5e5e52c523dea4e876816cc4 # infered from @v4
6060
with:
6161
registry-type: 'public'
6262
- name: Build and push
6363
id: docker_build_and_push
64-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
64+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # infered from @v6
6565
with:
6666
builder: ${{ steps.buildx.outputs.name }}
6767
context: api
@@ -72,7 +72,7 @@ jobs:
7272
cache-from: type=local,src=/tmp/.buildx-cache
7373
cache-to: type=local,dest=/tmp/.buildx-cache
7474
- name: make comment with private deployment link
75-
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # infered from @v4
75+
uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # infered from @v4
7676
with:
7777
issue-number: ${{ github.event.pull_request.number }}
7878
body: |

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -38,24 +38,24 @@ jobs:
3838

3939
steps:
4040
- name: Checkout repository
41-
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
41+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # infered from @v4
4242
with:
4343
token: ${{ github.token }}
4444

4545
- name: Initialize CodeQL
46-
uses: github/codeql-action/init@1a7989f3955e0c69f0e0ccc14aee54a387a0fd31 # infered from @v3
46+
uses: github/codeql-action/init@ecec1f88769052ebc45aa0affc53ea30d474cffa # infered from @v3
4747
with:
4848
languages: ${{ matrix.language }}
4949

5050
- name: Set up JDK
51-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
51+
uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # infered from @v4
5252
with:
5353
java-version-file: '.java-version'
5454
distribution: 'zulu'
5555
cache: 'gradle'
5656

5757
- name: Autobuild
58-
uses: github/codeql-action/autobuild@bed2a47f201e917459bc40343380c570a730ff06 # infered from @v3
58+
uses: github/codeql-action/autobuild@ecec1f88769052ebc45aa0affc53ea30d474cffa # infered from @v3
5959

6060
- name: Perform CodeQL Analysis
61-
uses: github/codeql-action/analyze@86b04fb0e47484f7282357688f21d5d0e32175fe # infered from @v3
61+
uses: github/codeql-action/analyze@ecec1f88769052ebc45aa0affc53ea30d474cffa # infered from @v3

‎.github/workflows/cve_checks.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-latest
1919

2020
steps:
21-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
21+
- uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # infered from @v4
2222
with:
2323
token: ${{ github.token }}
2424

2525
- name: Set up JDK
26-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
26+
uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # infered from @v4
2727
with:
2828
java-version-file: '.java-version'
2929
distribution: 'zulu'
@@ -39,21 +39,21 @@ jobs:
3939
-Pversion=latest
4040
4141
- name: Set up QEMU
42-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
42+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # infered from @v3
4343

4444
- name: Set up Docker Buildx
45-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
45+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # infered from @v3
4646

4747
- name: Cache Docker layers
48-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
48+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # infered from @v4
4949
with:
5050
path: /tmp/.buildx-cache
5151
key: ${{ runner.os }}-buildx-${{ github.sha }}
5252
restore-keys: |
5353
${{ runner.os }}-buildx-
5454
5555
- name: Build docker image
56-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
56+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # infered from @v6
5757
with:
5858
builder: ${{ steps.buildx.outputs.name }}
5959
context: api
@@ -68,7 +68,7 @@ jobs:
6868
cache-to: type=local,dest=/tmp/.buildx-cache
6969

7070
- name: Run CVE checks
71-
uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # infered from @v0.32.0
71+
uses: aquasecurity/trivy-action@b6643a29fecd7f34b3597bc6acb0a98b03d33ff8 # infered from @v0.33.1
7272
with:
7373
image-ref: "ghcr.io/kafbat/kafka-ui:latest"
7474
format: "table"

‎.github/workflows/delete-public-image.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,14 @@ jobs:
1515
tag='${{ github.event.pull_request.number }}'
1616
echo "tag=${tag}" >> $GITHUB_OUTPUT
1717
- name: Configure AWS credentials for Kafka-UI account
18-
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
18+
uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # infered from @v4
1919
with:
2020
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
2121
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
2222
aws-region: us-east-1
2323
- name: Login to Amazon ECR
2424
id: login-ecr
25-
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
25+
uses: aws-actions/amazon-ecr-login@d63b14614fe5d7fc5e5e52c523dea4e876816cc4 # infered from @v4
2626
with:
2727
registry-type: 'public'
2828
- name: Remove from ECR

‎.github/workflows/docker_build.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -18,26 +18,26 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Checkout
21-
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
21+
uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # infered from @v4
2222
with:
2323
ref: ${{ github.event.pull_request.head.sha }}
2424
token: ${{ github.token }}
2525

2626
- name: Download artifacts
27-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
27+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # infered from @v4
2828
with:
2929
name: kafbat-ui-${{ inputs.version }}
3030
path: api/build/libs
3131

3232
- name: Set up QEMU
33-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
33+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # infered from @v3
3434

3535
- name: Set up Docker Buildx
3636
id: buildx
37-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
37+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # infered from @v3
3838

3939
- name: Cache Docker layers
40-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
40+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # infered from @v4
4141
with:
4242
path: /tmp/.buildx-cache
4343
key: ${{ runner.os }}-buildx-${{ inputs.sha }}
@@ -49,7 +49,7 @@ jobs:
4949
# Also containerd is one of the option to allow preserving provenance attestations:
5050
# https://docs.docker.com/build/attestations/#creating-attestations
5151
- name: Setup docker with containerd
52-
uses: docker/setup-docker-action@efe9e3891a4f7307e689f2100b33a155b900a608 # infered from @v4.5.0
52+
uses: docker/setup-docker-action@e61617a16c407a86262fb923c35a616ddbe070b3 # infered from @v4.6.0
5353
with:
5454
daemon-config: |
5555
{
@@ -60,7 +60,7 @@ jobs:
6060
6161
- name: Build docker image
6262
id: docker_build
63-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
63+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # infered from @v6
6464
with:
6565
builder: ${{ steps.buildx.outputs.name }}
6666
context: api
@@ -81,7 +81,7 @@ jobs:
8181
docker image save kafka-ui:temp > /tmp/image.tar
8282
8383
- name: Upload docker image
84-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # infered from @v4
84+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # infered from @v4
8585
with:
8686
name: image
8787
path: /tmp/image.tar

‎.github/workflows/docker_publish.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -26,14 +26,14 @@ jobs:
2626
steps:
2727

2828
- name: Download docker image
29-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
29+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # infered from @v4
3030
with:
3131
name: image
3232
path: /tmp
3333

3434
# setup containerd to preserve provenance attestations :https://docs.docker.com/build/attestations/#creating-attestations
3535
- name: Setup docker with containerd
36-
uses: docker/setup-docker-action@efe9e3891a4f7307e689f2100b33a155b900a608 # infered from @v4.5.0
36+
uses: docker/setup-docker-action@e61617a16c407a86262fb923c35a616ddbe070b3 # infered from @v4.6.0
3737
with:
3838
daemon-config: |
3939
{
@@ -48,31 +48,31 @@ jobs:
4848
4949
- name: Login to docker.io
5050
if: matrix.registry == 'docker.io'
51-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # infered from @v3
51+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # infered from @v3
5252
with:
5353
registry: ${{ matrix.registry }}
5454
username: ${{ secrets.DOCKERHUB_USERNAME }}
5555
password: ${{ secrets.DOCKERHUB_TOKEN }}
5656

5757
- name: Login to ghcr.io
5858
if: matrix.registry == 'ghcr.io'
59-
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # infered from @v3
59+
uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # infered from @v3
6060
with:
6161
registry: ${{ matrix.registry }}
6262
username: ${{ github.actor }}
6363
password: ${{ secrets.GITHUB_TOKEN }}
6464

6565
- name: Configure AWS credentials
6666
if: matrix.registry == 'ecr'
67-
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
67+
uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # infered from @v4
6868
with:
6969
aws-region: us-east-1 # This region only for public ECR
7070
role-to-assume: ${{ secrets.AWS_ROLE }}
7171

7272
- name: Login to public ECR
7373
if: matrix.registry == 'ecr'
7474
id: login-ecr-public
75-
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v2
75+
uses: aws-actions/amazon-ecr-login@d63b14614fe5d7fc5e5e52c523dea4e876816cc4 # infered from @v2
7676
with:
7777
registry-type: public
7878

0 commit comments

Comments
 (0)