diff --git a/.github/workflows/dart-ci.yml b/.github/workflows/dart-ci.yml index 1410a0e..16a988d 100644 --- a/.github/workflows/dart-ci.yml +++ b/.github/workflows/dart-ci.yml @@ -312,7 +312,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -400,7 +400,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -601,7 +601,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -699,7 +699,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -878,7 +878,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -959,7 +959,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/dart-compile.yml b/.github/workflows/dart-compile.yml index 8089446..b7ee4b5 100644 --- a/.github/workflows/dart-compile.yml +++ b/.github/workflows/dart-compile.yml @@ -170,7 +170,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/dartdoc.yml b/.github/workflows/dartdoc.yml index 4561acd..1e6185c 100644 --- a/.github/workflows/dartdoc.yml +++ b/.github/workflows/dartdoc.yml @@ -120,7 +120,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/flutter-build.yml b/.github/workflows/flutter-build.yml index f089d2c..39299fe 100644 --- a/.github/workflows/flutter-build.yml +++ b/.github/workflows/flutter-build.yml @@ -282,7 +282,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/github-release.yml b/.github/workflows/github-release.yml index 939d4b2..7ed6e02 100644 --- a/.github/workflows/github-release.yml +++ b/.github/workflows/github-release.yml @@ -139,7 +139,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -269,7 +269,7 @@ jobs: - name: Release id: release - uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3.0.3 + uses: softprops/action-gh-release@8a0cd651e5b2365bd640854a3fa5dfc70e4875f3 # v3.0.4 with: tag_name: ${{ env.TAG }} name: ${{ steps.describe.outputs.name }} diff --git a/.github/workflows/inspectra.yml b/.github/workflows/inspectra.yml index 108772a..41a70b1 100644 --- a/.github/workflows/inspectra.yml +++ b/.github/workflows/inspectra.yml @@ -226,7 +226,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -309,7 +309,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner && runner.os == 'Linux' - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -455,7 +455,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -545,7 +545,7 @@ jobs: - name: Upload the configuration findings if: ${{ !cancelled() && inputs.config-lint-enabled && env.SARIF == 'true' && hashFiles(format('{0}/inspectra-config.sarif', runner.temp)) != '' }} - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: sarif_file: ${{ runner.temp }}/inspectra-config.sarif category: ${{ inputs.sarif-category }}-config @@ -587,7 +587,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 1fa0946..52b652d 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -79,7 +79,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/pr-lint.yml b/.github/workflows/pr-lint.yml index 6002c8a..423dab9 100644 --- a/.github/workflows/pr-lint.yml +++ b/.github/workflows/pr-lint.yml @@ -95,7 +95,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -145,7 +145,7 @@ jobs: - name: Check the title if: inputs.title-enabled - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6.1.1 + uses: amannn/action-semantic-pull-request@2252a14e810aa9b85c2d560bd7070c802206ecf6 # v6.1.2 env: GITHUB_TOKEN: ${{ github.token }} with: diff --git a/.github/workflows/pub-publish.yml b/.github/workflows/pub-publish.yml index c8dfe5f..6f16fba 100644 --- a/.github/workflows/pub-publish.yml +++ b/.github/workflows/pub-publish.yml @@ -130,7 +130,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -205,7 +205,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index bcfd35e..16d26af 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -106,7 +106,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/release-tag.yml b/.github/workflows/release-tag.yml index 826ef36..1ce8e57 100644 --- a/.github/workflows/release-tag.yml +++ b/.github/workflows/release-tag.yml @@ -269,7 +269,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} @@ -347,7 +347,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/.github/workflows/self-lint.yml b/.github/workflows/self-lint.yml index 9a010cb..ae50693 100644 --- a/.github/workflows/self-lint.yml +++ b/.github/workflows/self-lint.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit @@ -117,7 +117,7 @@ jobs: - name: Upload the audit if: ${{ !cancelled() && (github.event.pull_request.head.repo.full_name == '' || github.event.pull_request.head.repo.full_name == github.repository) }} - uses: github/codeql-action/upload-sarif@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/upload-sarif@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: sarif_file: ${{ runner.temp }}/zizmor.sarif category: zizmor diff --git a/.github/workflows/self-release.yml b/.github/workflows/self-release.yml index fc95150..fa5b390 100644 --- a/.github/workflows/self-release.yml +++ b/.github/workflows/self-release.yml @@ -37,7 +37,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit diff --git a/.github/workflows/self-update-pins.yml b/.github/workflows/self-update-pins.yml index 57d9370..60975b4 100644 --- a/.github/workflows/self-update-pins.yml +++ b/.github/workflows/self-update-pins.yml @@ -30,7 +30,7 @@ jobs: steps: - name: Harden the runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: audit diff --git a/.github/workflows/test-report.yml b/.github/workflows/test-report.yml index 4542991..abc5067 100644 --- a/.github/workflows/test-report.yml +++ b/.github/workflows/test-report.yml @@ -64,7 +64,7 @@ jobs: - name: Publish the results if: steps.found.outputs.count != '0' - uses: dorny/test-reporter@a43b3a5f7366b97d083190328d2c652e1a8b6aa2 # v3.0.0 + uses: dorny/test-reporter@d1b5dff021aa968b288b02285a8bf47471c5928a # v3.2.0 with: name: ${{ inputs.name }} (${{ matrix.toolchain }}) path: ${{ runner.temp }}/davils-reports/**/*.json diff --git a/.github/workflows/writerside.yml b/.github/workflows/writerside.yml index b06f466..5be27e2 100644 --- a/.github/workflows/writerside.yml +++ b/.github/workflows/writerside.yml @@ -160,7 +160,7 @@ jobs: steps: - name: Harden the runner if: inputs.harden-runner - uses: step-security/harden-runner@dc2769abcc0fcfbadfc1df54081c1608579ef6b2 # v2.22.2 + uses: step-security/harden-runner@1d88384fd173af6ecb012dfd0264a306b711241a # v2.22.4 with: egress-policy: ${{ inputs.harden-runner-egress-policy }} allowed-endpoints: ${{ inputs.harden-runner-allowed-endpoints }} diff --git a/actions/setup-flutter-env/action.yml b/actions/setup-flutter-env/action.yml index 062a485..c9a2d96 100644 --- a/actions/setup-flutter-env/action.yml +++ b/actions/setup-flutter-env/action.yml @@ -123,7 +123,7 @@ runs: - name: Set up Java ${{ inputs.java-version }} if: inputs.java-version != '' - uses: actions/setup-java@de7274f081f381c8f8158605e0321c36c376e2e6 # v6.0.1 + uses: actions/setup-java@77dd5b2ce225ea11469928ac317850245a74ae78 # v6.2.0 with: distribution: temurin java-version: ${{ inputs.java-version }}