diff --git a/.github/workflows/_checks.yml b/.github/workflows/_checks.yml index 9dd6ea6..2ed2ccc 100644 --- a/.github/workflows/_checks.yml +++ b/.github/workflows/_checks.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Secret scan (fail-closed, allowlist-aware) @@ -51,7 +51,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 @@ -111,7 +111,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 5 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: URL convention gate diff --git a/.github/workflows/public-repo-guard.yml b/.github/workflows/public-repo-guard.yml index 719718a..fab8ae5 100644 --- a/.github/workflows/public-repo-guard.yml +++ b/.github/workflows/public-repo-guard.yml @@ -42,7 +42,7 @@ jobs: name: Secrets + content policy runs-on: ubuntu-latest steps: - - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # gitleaks' GitHub Action requires a paid license for organizations; the CLI # itself is MIT-licensed and free. Pin the version AND verify the release diff --git a/.github/workflows/publish-crates.yml b/.github/workflows/publish-crates.yml index 9b1405b..ff92134 100644 --- a/.github/workflows/publish-crates.yml +++ b/.github/workflows/publish-crates.yml @@ -28,7 +28,7 @@ jobs: run: working-directory: sdk-rust steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@stable - name: Build + test run: cargo build --all && cargo test --all @@ -48,7 +48,7 @@ jobs: run: working-directory: sdk-rust steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@stable - name: Mint short-lived crates.io token (OIDC) uses: rust-lang/crates-io-auth-action@v1 diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml index 3146afb..7759323 100644 --- a/.github/workflows/publish-npm.yml +++ b/.github/workflows/publish-npm.yml @@ -27,7 +27,7 @@ jobs: run: working-directory: sdk-typescript steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: pnpm/action-setup@v4 with: version: 9 diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml index ef099b4..8059f5b 100644 --- a/.github/workflows/publish-pypi.yml +++ b/.github/workflows/publish-pypi.yml @@ -25,7 +25,7 @@ jobs: run: working-directory: sdk-python steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-python@v5 with: python-version: "3.12" diff --git a/.github/workflows/publish-rubygems.yml b/.github/workflows/publish-rubygems.yml index 385b6ef..89c2403 100644 --- a/.github/workflows/publish-rubygems.yml +++ b/.github/workflows/publish-rubygems.yml @@ -25,7 +25,7 @@ jobs: run: working-directory: sdk-ruby steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: ruby-version: "3.3" @@ -46,7 +46,7 @@ jobs: run: working-directory: sdk-ruby steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: persist-credentials: false - uses: ruby/setup-ruby@v1 diff --git a/.github/workflows/registry-parity.yml b/.github/workflows/registry-parity.yml index ccabbfc..5be52c3 100644 --- a/.github/workflows/registry-parity.yml +++ b/.github/workflows/registry-parity.yml @@ -24,7 +24,7 @@ jobs: parity: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-node@v4 with: node-version: "22" diff --git a/.github/workflows/release-go.yml b/.github/workflows/release-go.yml index d8bd3b5..7862149 100644 --- a/.github/workflows/release-go.yml +++ b/.github/workflows/release-go.yml @@ -19,7 +19,7 @@ jobs: run: working-directory: sdk-go steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-go@v5 with: go-version: "1.22" diff --git a/.github/workflows/test-go.yml b/.github/workflows/test-go.yml index ddda24f..fbc2ad8 100644 --- a/.github/workflows/test-go.yml +++ b/.github/workflows/test-go.yml @@ -28,7 +28,7 @@ jobs: run: working-directory: sdk-go steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-go@v5 with: go-version: "1.22" diff --git a/.github/workflows/test-python.yml b/.github/workflows/test-python.yml index 5eb72d5..0aaed3a 100644 --- a/.github/workflows/test-python.yml +++ b/.github/workflows/test-python.yml @@ -29,7 +29,7 @@ jobs: run: working-directory: sdk-python steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-python@v5 with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/test-ruby.yml b/.github/workflows/test-ruby.yml index 0cf093b..a315194 100644 --- a/.github/workflows/test-ruby.yml +++ b/.github/workflows/test-ruby.yml @@ -29,7 +29,7 @@ jobs: run: working-directory: sdk-ruby steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ruby/setup-ruby@v1 with: ruby-version: ${{ matrix.ruby-version }} diff --git a/.github/workflows/test-rust.yml b/.github/workflows/test-rust.yml index e400873..f7df1c6 100644 --- a/.github/workflows/test-rust.yml +++ b/.github/workflows/test-rust.yml @@ -27,7 +27,7 @@ jobs: run: working-directory: sdk-rust steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: dtolnay/rust-toolchain@stable with: components: rustfmt, clippy