From edde2f0d86c124a1c1a24008abd34e3da4df6449 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 30 Oct 2026 13:23:51 +0000 Subject: [PATCH] chore(deps): update github actions --- .github/workflows/ask-docs-eval.yml | 2 +- .github/workflows/ci.yml | 12 ++++++------ .github/workflows/codeql.yml | 2 +- .github/workflows/coverage.yml | 4 ++-- .github/workflows/cross-platform.yml | 2 +- .github/workflows/dependency-review.yml | 4 ++-- .github/workflows/doc-bridge-index.yml | 4 ++-- .github/workflows/docs.yml | 2 +- .github/workflows/e2e.yml | 6 +++--- .github/workflows/ecosystem-sync.yml | 2 +- .github/workflows/ecosystem-visual.yml | 4 ++-- .github/workflows/guardrail-report.yml | 4 ++-- .github/workflows/indexnow.yml | 2 +- .github/workflows/lighthouse.yml | 4 ++-- .github/workflows/link-check.yml | 4 ++-- .github/workflows/models-dev-catalog.yml | 4 ++-- .github/workflows/release.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- .github/workflows/size.yml | 2 +- .github/workflows/visual.yml | 8 ++++---- 20 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.github/workflows/ask-docs-eval.yml b/.github/workflows/ask-docs-eval.yml index e2ff8ec68..26d2b0377 100644 --- a/.github/workflows/ask-docs-eval.yml +++ b/.github/workflows/ask-docs-eval.yml @@ -55,7 +55,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 169b60f7c..4f9022738 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,7 +26,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -47,7 +47,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -79,7 +79,7 @@ jobs: with: fetch-depth: 0 - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -159,7 +159,7 @@ jobs: with: fetch-depth: 0 - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -215,7 +215,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -269,7 +269,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ matrix.node }} cache: pnpm diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 82e7cbd30..ca7476011 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -20,7 +20,7 @@ concurrency: jobs: analyze: name: Analyze (javascript-typescript) - uses: AgentsKit-io/.github/.github/workflows/codeql.yml@5a584290feaaa0a800a28d24583d16f15102bea1 # main + uses: AgentsKit-io/.github/.github/workflows/codeql.yml@c6bd249105846030586215250506ce1c3cdb58b8 # main with: languages: javascript-typescript queries: security-and-quality diff --git a/.github/workflows/coverage.yml b/.github/workflows/coverage.yml index 0935204e5..5314ac76d 100644 --- a/.github/workflows/coverage.yml +++ b/.github/workflows/coverage.yml @@ -27,7 +27,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -40,7 +40,7 @@ jobs: - name: Upload coverage reports if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: coverage-reports path: packages/*/coverage/ diff --git a/.github/workflows/cross-platform.yml b/.github/workflows/cross-platform.yml index e35f1daaa..9dda4adaf 100644 --- a/.github/workflows/cross-platform.yml +++ b/.github/workflows/cross-platform.yml @@ -56,7 +56,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 # Node is needed in every row: pnpm runs on it and the smoke test spawns it. - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: ${{ matrix.runtime == 'node' && matrix.version == 'minimum' && '20.19.0' || '22' }} cache: pnpm diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index cac74b2a0..ca77cdce4 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -15,7 +15,7 @@ concurrency: jobs: review: name: Review new dependencies - uses: AgentsKit-io/.github/.github/workflows/dependency-review.yml@5a584290feaaa0a800a28d24583d16f15102bea1 # main + uses: AgentsKit-io/.github/.github/workflows/dependency-review.yml@c6bd249105846030586215250506ce1c3cdb58b8 # main with: fail-on-severity: high deny-licenses: GPL-2.0, GPL-3.0, AGPL-1.0, AGPL-3.0 @@ -25,7 +25,7 @@ jobs: audit: name: pnpm audit - uses: AgentsKit-io/.github/.github/workflows/audit.yml@5a584290feaaa0a800a28d24583d16f15102bea1 # main + uses: AgentsKit-io/.github/.github/workflows/audit.yml@c6bd249105846030586215250506ce1c3cdb58b8 # main with: package-manager: pnpm working-directories: '["."]' diff --git a/.github/workflows/doc-bridge-index.yml b/.github/workflows/doc-bridge-index.yml index cf6a06e65..e10b773b9 100644 --- a/.github/workflows/doc-bridge-index.yml +++ b/.github/workflows/doc-bridge-index.yml @@ -29,7 +29,7 @@ jobs: fetch-depth: 1 persist-credentials: false - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -57,7 +57,7 @@ jobs: - name: Create release automation token if: steps.drift.outputs.changed == 'true' id: release_app_token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 with: app-id: ${{ vars.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index f717a6a88..22b42540b 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -33,7 +33,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml index e6b37f50d..8e26c67a3 100644 --- a/.github/workflows/e2e.yml +++ b/.github/workflows/e2e.yml @@ -27,7 +27,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -57,7 +57,7 @@ jobs: - run: pnpm exec playwright test - if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: playwright-report path: playwright-report/ @@ -65,7 +65,7 @@ jobs: if-no-files-found: ignore - if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: test-results path: test-results/ diff --git a/.github/workflows/ecosystem-sync.yml b/.github/workflows/ecosystem-sync.yml index b1e024811..895f983eb 100644 --- a/.github/workflows/ecosystem-sync.yml +++ b/.github/workflows/ecosystem-sync.yml @@ -31,7 +31,7 @@ jobs: ECOSYSTEM_SYNC_TOKEN: ${{ secrets.ECOSYSTEM_SYNC_TOKEN }} steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 diff --git a/.github/workflows/ecosystem-visual.yml b/.github/workflows/ecosystem-visual.yml index 8691b5b2b..6f659ac2a 100644 --- a/.github/workflows/ecosystem-visual.yml +++ b/.github/workflows/ecosystem-visual.yml @@ -47,7 +47,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -89,7 +89,7 @@ jobs: - name: Upload screenshots and results if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ecosystem-visual-${{ github.run_id }} path: test-results/ecosystem-visual/ diff --git a/.github/workflows/guardrail-report.yml b/.github/workflows/guardrail-report.yml index 8578e5846..c82a1f242 100644 --- a/.github/workflows/guardrail-report.yml +++ b/.github/workflows/guardrail-report.yml @@ -26,7 +26,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -65,7 +65,7 @@ jobs: echo 'Guardrail report generation did not produce a Markdown report.' >> "$GITHUB_STEP_SUMMARY" fi - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: guardrail-report diff --git a/.github/workflows/indexnow.yml b/.github/workflows/indexnow.yml index 5a6470abf..23087a919 100644 --- a/.github/workflows/indexnow.yml +++ b/.github/workflows/indexnow.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 diff --git a/.github/workflows/lighthouse.yml b/.github/workflows/lighthouse.yml index 5f9ee6d3b..eb9cc4c22 100644 --- a/.github/workflows/lighthouse.yml +++ b/.github/workflows/lighthouse.yml @@ -22,9 +22,9 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v4 + - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm diff --git a/.github/workflows/link-check.yml b/.github/workflows/link-check.yml index de076eaf9..c2101790a 100644 --- a/.github/workflows/link-check.yml +++ b/.github/workflows/link-check.yml @@ -34,7 +34,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -43,7 +43,7 @@ jobs: - run: pnpm --filter @agentskit/docs-next gen:changelog - name: Restore lychee cache - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: .lycheecache key: lychee-cache-${{ runner.os }} diff --git a/.github/workflows/models-dev-catalog.yml b/.github/workflows/models-dev-catalog.yml index 3f9167e92..fa5fd700c 100644 --- a/.github/workflows/models-dev-catalog.yml +++ b/.github/workflows/models-dev-catalog.yml @@ -20,8 +20,8 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 - - uses: pnpm/action-setup@0ebf47130e4866e96fce0953f49152a61190b271 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 - run: pnpm install --frozen-lockfile diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 29a44ad36..90a4c5b89 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -31,7 +31,7 @@ jobs: fetch-depth: 2 persist-credentials: false - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 package-manager-cache: false @@ -55,7 +55,7 @@ jobs: rm -f npm-11.18.0.tgz - name: Create release app token id: release_app_token - uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 with: app-id: ${{ vars.RELEASE_APP_ID }} private-key: ${{ secrets.RELEASE_APP_PRIVATE_KEY }} @@ -157,7 +157,7 @@ jobs: --ignore-npm-errors - name: Upload SBOM artifact if: steps.changesets.outputs.published == 'true' || steps.recovery_publish.outputs.published == 'true' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: sbom-cyclonedx path: sbom.cdx.json diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 1305de351..431fbe61a 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -12,7 +12,7 @@ permissions: jobs: analysis: name: Scorecard analysis - uses: AgentsKit-io/.github/.github/workflows/scorecard.yml@5a584290feaaa0a800a28d24583d16f15102bea1 # main + uses: AgentsKit-io/.github/.github/workflows/scorecard.yml@c6bd249105846030586215250506ce1c3cdb58b8 # main permissions: contents: read id-token: write diff --git a/.github/workflows/size.yml b/.github/workflows/size.yml index 9ed12e67e..8d9739634 100644 --- a/.github/workflows/size.yml +++ b/.github/workflows/size.yml @@ -27,7 +27,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm diff --git a/.github/workflows/visual.yml b/.github/workflows/visual.yml index e043362e5..9d2b52de1 100644 --- a/.github/workflows/visual.yml +++ b/.github/workflows/visual.yml @@ -42,7 +42,7 @@ jobs: - uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7 with: node-version: 22 cache: pnpm @@ -50,7 +50,7 @@ jobs: - run: pnpm install --frozen-lockfile - name: Cache Playwright browsers - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.cache/ms-playwright key: ${{ runner.os }}-playwright-${{ hashFiles('pnpm-lock.yaml') }} @@ -76,7 +76,7 @@ jobs: - name: Upload diffs on failure if: failure() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: visual-report path: | @@ -86,7 +86,7 @@ jobs: - name: Upload baselines (when bootstrapping) if: env.UPDATE_BASELINES == 'true' - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: visual-baselines-linux path: apps/visual-react/tests/visual.spec.ts-snapshots