diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 7de868a5ce..21c702aec5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -119,7 +119,7 @@ jobs: run: products/identifiers/scripts/generate.py --check-references - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -287,7 +287,7 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install pinned coverage tool - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-llvm-cov@${{ env.CARGO_LLVM_COV_VERSION }} @@ -429,7 +429,7 @@ jobs: workspaces: products/platform/fuzz -> target - name: Install pinned cargo-fuzz - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -488,7 +488,7 @@ jobs: workspaces: products/evidence/fuzz -> target - name: Install pinned cargo-fuzz - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -531,13 +531,13 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install cargo-deny - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-deny@0.19.8 - name: Install uv if: needs.changes.outputs.release_tool != 'true' - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -762,7 +762,7 @@ jobs: fi - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -842,7 +842,7 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1034,7 +1034,7 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1077,7 +1077,7 @@ jobs: cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1165,7 +1165,7 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1211,7 +1211,7 @@ jobs: cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1268,7 +1268,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1308,7 +1308,7 @@ jobs: cache-targets: false save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1367,7 +1367,7 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1576,7 +1576,7 @@ jobs: - name: Install uv if: matrix.lane != 'immediate-actions' - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -1746,7 +1746,7 @@ jobs: - name: Log in to Docker Hub for the PostgreSQL 18 image if: github.event_name != 'pull_request' && (github.event_name != 'workflow_dispatch' || github.ref == 'refs/heads/main') && steps.dockerhub.outputs.configured == 'true' - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 + uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_READ_TOKEN }} @@ -1953,7 +1953,7 @@ jobs: run: cargo test --locked -p registry-breg-mcp -p registry-breg-review --features registry-breg-mcp/schema,registry-breg-review/schema --lib schema::tests - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -2089,7 +2089,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -2299,7 +2299,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -2562,7 +2562,7 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -2984,7 +2984,7 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -3311,7 +3311,7 @@ jobs: done - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index da5f406330..f043026d98 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -48,7 +48,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/init@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -56,6 +56,6 @@ jobs: config-file: ./.github/codeql/codeql-config.yml - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 + uses: github/codeql-action/analyze@33d7b85da1a04171e211befe2c739303b9a4c066 # v4.39.3 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/docs-pages.yml b/.github/workflows/docs-pages.yml index 36c01b6ba3..3409d36d72 100644 --- a/.github/workflows/docs-pages.yml +++ b/.github/workflows/docs-pages.yml @@ -105,7 +105,7 @@ jobs: } >> "${GITHUB_OUTPUT}" - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" @@ -173,7 +173,7 @@ jobs: test "${checksum}" = "${DOCS_SHA256}" - name: Install cosign - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 + uses: sigstore/cosign-installer@756fe2d284c7292c4e9b62c8a28f1e5629c59532 # v4.1.3 with: cosign-release: v3.0.6 diff --git a/.github/workflows/macos-contributor.yml b/.github/workflows/macos-contributor.yml index 2fae204f64..c7f4c3923f 100644 --- a/.github/workflows/macos-contributor.yml +++ b/.github/workflows/macos-contributor.yml @@ -44,7 +44,7 @@ jobs: docs/site/package-lock.json - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" diff --git a/.github/workflows/nightly-rust-coverage.yml b/.github/workflows/nightly-rust-coverage.yml index bf7e5eb6d0..38b1576cbd 100644 --- a/.github/workflows/nightly-rust-coverage.yml +++ b/.github/workflows/nightly-rust-coverage.yml @@ -88,7 +88,7 @@ jobs: save-if: false - name: Install pinned coverage tool - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-llvm-cov@${{ env.CARGO_LLVM_COV_VERSION }} diff --git a/.github/workflows/nightly-security.yml b/.github/workflows/nightly-security.yml index 819e4e0e71..62d83f65c8 100644 --- a/.github/workflows/nightly-security.yml +++ b/.github/workflows/nightly-security.yml @@ -78,7 +78,7 @@ jobs: uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 - name: Install cargo-fuzz - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -132,7 +132,7 @@ jobs: uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 - name: Install cargo-fuzz - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} @@ -180,7 +180,7 @@ jobs: uses: Swatinem/rust-cache@c8037a86dde8214a8310e9f54a8fc61ab362aa31 # v2 - name: Install cargo-fuzz - uses: taiki-e/install-action@1e29709c0ec63babbe8f266397a465f29a825f91 # v2.87.31 + uses: taiki-e/install-action@3a3daafd3b7f23b8f65d9f5ba2db203fb59b79e2 # v2.90.2 with: tool: cargo-fuzz@${{ env.CARGO_FUZZ_VERSION }} diff --git a/.github/workflows/release-candidate.yml b/.github/workflows/release-candidate.yml index 968f938d6b..82ae8625b7 100644 --- a/.github/workflows/release-candidate.yml +++ b/.github/workflows/release-candidate.yml @@ -63,7 +63,7 @@ jobs: submodules: false - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" diff --git a/.github/workflows/release-rehearsal.yml b/.github/workflows/release-rehearsal.yml index 98b8e0ef92..4a01392c8c 100644 --- a/.github/workflows/release-rehearsal.yml +++ b/.github/workflows/release-rehearsal.yml @@ -157,7 +157,7 @@ jobs: run: npm ci --ignore-scripts - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" diff --git a/.github/workflows/release-repeatability.yml b/.github/workflows/release-repeatability.yml index 9209fd747b..e4c8cb4c6d 100644 --- a/.github/workflows/release-repeatability.yml +++ b/.github/workflows/release-repeatability.yml @@ -145,7 +145,7 @@ jobs: source/release/scripts/build-release-binaries.sh "${VERSION}" - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" diff --git a/.github/workflows/release-upgrade-rehearsal.yml b/.github/workflows/release-upgrade-rehearsal.yml index 15d8fd49e6..88c6d0adf6 100644 --- a/.github/workflows/release-upgrade-rehearsal.yml +++ b/.github/workflows/release-upgrade-rehearsal.yml @@ -56,12 +56,12 @@ jobs: save-if: ${{ github.ref == 'refs/heads/main' }} - name: Install cosign - uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 + uses: sigstore/cosign-installer@756fe2d284c7292c4e9b62c8a28f1e5629c59532 # v4.1.3 with: cosign-release: v3.0.6 - name: Install uv - uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 + uses: astral-sh/setup-uv@68559e99cc807c1eb7e9238fd43a15bba460eec2 # v10.3.3 with: version: "0.11.16" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a8a95a1790..34647f3296 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -716,7 +716,7 @@ jobs: fi - name: Log in for exact candidate promotion - uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 + uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }}