diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 87bd5a560..28cbb61ed 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -44,7 +44,7 @@ jobs: uses: gradle/actions/setup-gradle@9c971963bec38e04b3d30dcc455b5382be2fdbfb # v6.3.0 - name: Initialize CodeQL - uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: languages: ${{ matrix.language }} # using "linked" helps to keep up with the latest Kotlin support @@ -61,7 +61,7 @@ jobs: DEVELOCITY_ACCESS_KEY: ${{ secrets.DEVELOCITY_ACCESS_KEY }} - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: category: "/language:${{matrix.language}}" @@ -71,6 +71,6 @@ jobs: needs: - analyze if: always() && github.event_name == 'schedule' - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@62d5939b47144252763c5ff9fffe8c20d76cd806 # v0.4.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@f13d0cb656d7244ca8c1638b6996dbaef1083bdd # v0.6.0 with: success: ${{ needs.analyze.result == 'success' }} diff --git a/.github/workflows/fossa.yml b/.github/workflows/fossa.yml index 1e550339c..bcaebac87 100644 --- a/.github/workflows/fossa.yml +++ b/.github/workflows/fossa.yml @@ -27,6 +27,6 @@ jobs: needs: - fossa if: always() - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@62d5939b47144252763c5ff9fffe8c20d76cd806 # v0.4.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@f13d0cb656d7244ca8c1638b6996dbaef1083bdd # v0.6.0 with: success: ${{ needs.fossa.result == 'success' }} diff --git a/.github/workflows/issue-management-stale-action.yml b/.github/workflows/issue-management-stale-action.yml index 824edddc7..56d124f23 100644 --- a/.github/workflows/issue-management-stale-action.yml +++ b/.github/workflows/issue-management-stale-action.yml @@ -72,6 +72,6 @@ jobs: needs: - stale if: always() - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@62d5939b47144252763c5ff9fffe8c20d76cd806 # v0.4.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@f13d0cb656d7244ca8c1638b6996dbaef1083bdd # v0.6.0 with: success: ${{ needs.stale.result == 'success' }} diff --git a/.github/workflows/ossf-scorecard.yml b/.github/workflows/ossf-scorecard.yml index 983d0ee22..bee5b068b 100644 --- a/.github/workflows/ossf-scorecard.yml +++ b/.github/workflows/ossf-scorecard.yml @@ -24,6 +24,6 @@ jobs: needs: - analysis if: always() - uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@62d5939b47144252763c5ff9fffe8c20d76cd806 # v0.4.0 + uses: open-telemetry/shared-workflows/.github/workflows/workflow-failure-issue.yml@f13d0cb656d7244ca8c1638b6996dbaef1083bdd # v0.6.0 with: success: ${{ needs.analysis.result == 'success' }} diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index 7bb8f4ef5..ce8e9a819 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -15,4 +15,4 @@ jobs: permissions: contents: read # for actions/checkout security-events: write # for zizmor to upload SARIF results - uses: open-telemetry/shared-workflows/.github/workflows/zizmor.yml@62d5939b47144252763c5ff9fffe8c20d76cd806 # v0.4.0 + uses: open-telemetry/shared-workflows/.github/workflows/zizmor.yml@f13d0cb656d7244ca8c1638b6996dbaef1083bdd # v0.6.0