Skip to content

Commit b112e41

Browse files
dependabot[bot]dependabot[bot]
authored
build(deps): bump the github-actions group across 1 directory with 10 updates
Bumps the github-actions group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.3` | `7.0.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `7.0.0` | | [actions/configure-pages](https://github.com/actions/configure-pages) | `5.0.0` | `6.0.0` | | [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) | `3.0.1` | `5.0.0` | | [actions/deploy-pages](https://github.com/actions/deploy-pages) | `4.0.5` | `5.0.0` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `5.1.1` | `6.2.3` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4.3.0` | `8.0.1` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2.6.2` | `3.0.2` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` | Updates `actions/checkout` from 6.0.3 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@df4cb1c...3d3c42e) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](actions/upload-artifact@ea165f8...043fb46) Updates `actions/setup-node` from 4.4.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](actions/setup-node@v4.4.0...8207627) Updates `actions/configure-pages` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/configure-pages/releases) - [Commits](actions/configure-pages@983d773...45bfe01) Updates `actions/upload-pages-artifact` from 3.0.1 to 5.0.0 - [Release notes](https://github.com/actions/upload-pages-artifact/releases) - [Commits](actions/upload-pages-artifact@56afc60...fc324d3) Updates `actions/deploy-pages` from 4.0.5 to 5.0.0 - [Release notes](https://github.com/actions/deploy-pages/releases) - [Commits](actions/deploy-pages@d6db901...cd2ce8f) Updates `aws-actions/configure-aws-credentials` from 5.1.1 to 6.2.3 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@61815dc...e6de054) Updates `actions/download-artifact` from 4.3.0 to 8.0.1 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](actions/download-artifact@d3f86a1...3e5f45b) Updates `softprops/action-gh-release` from 2.6.2 to 3.0.2 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@3bb1273...3d0d988) Updates `actions/setup-go` from 6.5.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@924ae3a...b7ad1da) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/configure-pages dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/deploy-pages dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/download-artifact dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-pages-artifact dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com>
1 parent 6b3215a commit b112e41

5 files changed

Lines changed: 58 additions & 58 deletions

File tree

‎.github/workflows/intel-engine.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
ENGINES: ${{ github.event.inputs.readiness_engines || 'dory' }}
4242
READINESS_EXTRA_ARGS: ${{ github.event.inputs.readiness_extra_args || '' }}
4343
steps:
44-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
44+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
4545
with:
4646
persist-credentials: false
4747

@@ -89,7 +89,7 @@ jobs:
8989
9090
- name: Upload readiness artifacts
9191
if: always()
92-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
92+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9393
with:
9494
name: intel-readiness
9595
path: ${{ env.READINESS_WORKDIR }}

‎.github/workflows/pages.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
name: github-pages
2929
url: ${{ steps.deployment.outputs.page_url }}
3030
steps:
31-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
31+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
3232
- name: Preserve the currently deployed Sparkle feed
3333
run: |
3434
live="$RUNNER_TEMP/live-appcast.xml"
@@ -64,7 +64,7 @@ jobs:
6464
else
6565
echo "Live appcast is missing, invalid, or not newer; retaining the checked-in macOS 14 bootstrap feed."
6666
fi
67-
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
67+
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
6868
with:
6969
node-version: 22
7070
cache: npm
@@ -75,9 +75,9 @@ jobs:
7575
working-directory: website
7676
- run: npm run build
7777
working-directory: website
78-
- uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
79-
- uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
78+
- uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
79+
- uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
8080
with:
8181
path: docs-build
8282
- id: deployment
83-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
83+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

‎.github/workflows/release.yml‎

Lines changed: 45 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -110,7 +110,7 @@ jobs:
110110
DORY_BENCH_DOWNLOAD_BYTES: ${{ vars.DORY_BENCH_DOWNLOAD_BYTES }}
111111
steps:
112112
- name: Obtain short-lived ECR credentials through GitHub OIDC
113-
uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1
113+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
114114
with:
115115
role-to-assume: ${{ vars.DORY_RELEASE_AWS_ROLE_ARN }}
116116
aws-region: ${{ vars.DORY_RELEASE_ECR_REGION }}
@@ -230,7 +230,7 @@ jobs:
230230
runs-on: ubuntu-latest
231231
timeout-minutes: 30
232232
steps:
233-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
233+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
234234
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
235235
with:
236236
components: rustfmt, clippy
@@ -250,7 +250,7 @@ jobs:
250250
runs-on: ubuntu-24.04-arm
251251
timeout-minutes: 180
252252
steps:
253-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
253+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
254254
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
255255
- name: Install guest build prerequisites
256256
run: sudo apt-get update && sudo apt-get install -y binutils e2fsprogs file patchelf zstd
@@ -270,7 +270,7 @@ jobs:
270270
DORY_EXPERIMENTAL_GPU=1 guest/kernel/verify-build.sh arm64
271271
guest/initfs/verify-build.sh arm64
272272
- name: Upload same-commit arm64 guest payload
273-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
273+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
274274
with:
275275
name: dory-guest-arm64-${{ github.sha }}
276276
retention-days: 30
@@ -294,7 +294,7 @@ jobs:
294294
runs-on: macos-latest
295295
timeout-minutes: 120
296296
steps:
297-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
297+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
298298
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
299299
- name: Select newest installed Xcode
300300
run: |
@@ -362,13 +362,13 @@ jobs:
362362
appcast: ${{ steps.build.outputs.appcast }}
363363
app_update: ${{ steps.build.outputs.app_update }}
364364
steps:
365-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
365+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
366366
with:
367367
fetch-depth: 0
368368
- uses: dtolnay/rust-toolchain@4be7066ada62dd38de10e7b70166bc74ed198c30 # stable
369369

370370
- name: Download same-commit arm64 guest payload
371-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
371+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
372372
with:
373373
name: dory-guest-arm64-${{ github.sha }}
374374
path: guest/out
@@ -658,7 +658,7 @@ jobs:
658658
659659
- name: Upload live release-gate evidence
660660
if: always()
661-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
661+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
662662
with:
663663
name: dory-live-release-evidence-${{ github.sha }}-${{ github.run_attempt }}
664664
retention-days: 30
@@ -669,7 +669,7 @@ jobs:
669669
${{ runner.temp }}/dory-release-live-*
670670
671671
- name: Stage immutable public candidate for long qualification
672-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
672+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
673673
with:
674674
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
675675
retention-days: 30
@@ -691,11 +691,11 @@ jobs:
691691
permissions:
692692
contents: read
693693
steps:
694-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
694+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
695695
with:
696696
persist-credentials: false
697697
- name: Download the immutable candidate
698-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
698+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
699699
with:
700700
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
701701
path: release-build
@@ -713,7 +713,7 @@ jobs:
713713
--confirm CLEAN-RELEASE-USER-HOMEBREW-INSTALL
714714
- name: Retain Homebrew install evidence
715715
if: always()
716-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
716+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
717717
with:
718718
name: dory-homebrew-install-evidence-${{ github.sha }}-${{ github.run_attempt }}
719719
retention-days: 90
@@ -729,11 +729,11 @@ jobs:
729729
contents: read
730730
id-token: write
731731
steps:
732-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
732+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
733733
with:
734734
persist-credentials: false
735735
- name: Download immutable public candidate before the job token expires
736-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
736+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
737737
with:
738738
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
739739
path: release-build
@@ -744,7 +744,7 @@ jobs:
744744
echo "selected: $xcode_app"
745745
echo "DEVELOPER_DIR=$xcode_app/Contents/Developer" >> "$GITHUB_ENV"
746746
- name: Obtain short-lived ECR credentials through GitHub OIDC
747-
uses: aws-actions/configure-aws-credentials@61815dcd50bd041e203e49132bacad1fd04d2708 # v5.1.1
747+
uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3
748748
with:
749749
role-to-assume: ${{ vars.DORY_RELEASE_AWS_ROLE_ARN }}
750750
aws-region: ${{ vars.DORY_RELEASE_ECR_REGION }}
@@ -774,11 +774,11 @@ jobs:
774774
permissions:
775775
contents: read
776776
steps:
777-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
777+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
778778
with:
779779
persist-credentials: false
780780
- name: Download immutable public candidate
781-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
781+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
782782
with:
783783
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
784784
path: release-build
@@ -806,7 +806,7 @@ jobs:
806806
--download-bytes "${{ vars.DORY_BENCH_DOWNLOAD_BYTES }}" \
807807
--confirm CLEAN-BENCHMARK-USER-DELETE-ENGINE-DATA
808808
- name: Retain exact performance evidence for publication
809-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
809+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
810810
with:
811811
name: dory-performance-evidence-${{ github.sha }}-${{ github.run_attempt }}
812812
retention-days: 90
@@ -822,11 +822,11 @@ jobs:
822822
permissions:
823823
contents: read
824824
steps:
825-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
825+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
826826
with:
827827
persist-credentials: false
828828
- name: Download immutable public candidate
829-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
829+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
830830
with:
831831
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
832832
path: release-build
@@ -893,7 +893,7 @@ jobs:
893893
--source-confirm PHYSICAL-VZ-SOURCE-PRESERVATION
894894
- name: Upload Sonoma certification evidence
895895
if: always()
896-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
896+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
897897
with:
898898
name: dory-sonoma-vz-evidence-${{ github.sha }}-${{ github.run_attempt }}
899899
retention-days: 90
@@ -910,11 +910,11 @@ jobs:
910910
permissions:
911911
contents: read
912912
steps:
913-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
913+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
914914
with:
915915
persist-credentials: false
916916
- name: Download immutable public candidate
917-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
917+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
918918
with:
919919
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
920920
path: release-build
@@ -972,7 +972,7 @@ jobs:
972972
--confirm PHYSICAL-SOURCE-PRESERVATION
973973
- name: Upload source-preservation evidence
974974
if: always()
975-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
975+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
976976
with:
977977
name: dory-source-lan-evidence-${{ github.sha }}-${{ github.run_attempt }}
978978
retention-days: 90
@@ -989,11 +989,11 @@ jobs:
989989
permissions:
990990
contents: read
991991
steps:
992-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
992+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
993993
with:
994994
persist-credentials: false
995995
- name: Download immutable candidate for checksum binding
996-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
996+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
997997
with:
998998
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
999999
path: release-build
@@ -1032,7 +1032,7 @@ jobs:
10321032
"$GITHUB_SHA" "$GITHUB_RUN_ID" "$GITHUB_RUN_ATTEMPT" "$VERSION" "$ARM64_SHA256" \
10331033
> "$evidence/manifest.txt"
10341034
- name: Retain exact-cask audit evidence
1035-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
1035+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
10361036
with:
10371037
name: dory-homebrew-audit-evidence-${{ github.sha }}-${{ github.run_attempt }}
10381038
retention-days: 90
@@ -1050,39 +1050,39 @@ jobs:
10501050
version: ${{ needs.release_candidate.outputs.version }}
10511051
sha256: ${{ needs.release_candidate.outputs.sha256 }}
10521052
steps:
1053-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1053+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
10541054
- name: Download the exact candidate with fresh job credentials
1055-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1055+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
10561056
with:
10571057
name: dory-release-candidate-${{ github.sha }}-${{ github.run_attempt }}
10581058
path: release-build
10591059
- name: Download exact-candidate physical sleep/wake evidence
1060-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1060+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
10611061
with:
10621062
name: dory-live-release-evidence-${{ github.sha }}-${{ github.run_attempt }}
10631063
path: live-release-evidence
10641064
- name: Download exact-candidate Sonoma VZ evidence
1065-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1065+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
10661066
with:
10671067
name: dory-sonoma-vz-evidence-${{ github.sha }}-${{ github.run_attempt }}
10681068
path: sonoma-vz-evidence
10691069
- name: Download exact-candidate LAN/Tailscale source-preservation evidence
1070-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1070+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
10711071
with:
10721072
name: dory-source-lan-evidence-${{ github.sha }}-${{ github.run_attempt }}
10731073
path: source-lan-evidence
10741074
- name: Download exact-candidate Homebrew audit evidence
1075-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1075+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
10761076
with:
10771077
name: dory-homebrew-audit-evidence-${{ github.sha }}-${{ github.run_attempt }}
10781078
path: homebrew-audit-evidence
10791079
- name: Download exact-candidate Homebrew install evidence
1080-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1080+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
10811081
with:
10821082
name: dory-homebrew-install-evidence-${{ github.sha }}-${{ github.run_attempt }}
10831083
path: homebrew-install-evidence
10841084
- name: Download exact-candidate performance evidence
1085-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1085+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
10861086
with:
10871087
name: dory-performance-evidence-${{ github.sha }}-${{ github.run_attempt }}
10881088
path: performance-evidence
@@ -1467,7 +1467,7 @@ jobs:
14671467
test ! -s "$(dirname "$manifest")/new-host-panic-reports.txt"
14681468
done
14691469
- name: Upload final qualification evidence
1470-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
1470+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
14711471
with:
14721472
name: dory-release-qualification-${{ github.sha }}-${{ github.run_attempt }}
14731473
retention-days: 90
@@ -1522,14 +1522,14 @@ jobs:
15221522
shasum -a 256 -c "$(basename "$archive").sha256"
15231523
)
15241524
- name: Upload generated appcast
1525-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
1525+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
15261526
with:
15271527
name: dory-appcast
15281528
path: release-build/appcast.xml
15291529
if-no-files-found: error
15301530

15311531
- name: Publish GitHub Release
1532-
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
1532+
uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
15331533
with:
15341534
tag_name: v${{ needs.release_candidate.outputs.version }}
15351535
name: Dory ${{ needs.release_candidate.outputs.version }}
@@ -1620,9 +1620,9 @@ jobs:
16201620
name: github-pages
16211621
url: ${{ steps.deployment.outputs.page_url }}
16221622
steps:
1623-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1623+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
16241624
- name: Download the appcast generated from the signed update ZIP
1625-
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
1625+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
16261626
with:
16271627
name: dory-appcast
16281628
path: appcast-artifact
@@ -1651,7 +1651,7 @@ jobs:
16511651
name = os.path.basename(urllib.parse.urlparse(enclosure.attrib["url"]).path)
16521652
assert name == f"Dory-{version}-app-update.zip", f"generated appcast points at {name}"
16531653
PY
1654-
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
1654+
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
16551655
with:
16561656
node-version: 22
16571657
cache: npm
@@ -1665,12 +1665,12 @@ jobs:
16651665
test -d docs-build
16661666
cp appcast-artifact/appcast.xml docs-build/appcast.xml
16671667
cmp appcast-artifact/appcast.xml docs-build/appcast.xml
1668-
- uses: actions/configure-pages@983d7736d9b0ae728b81ab479565c72886d7745b # v5
1669-
- uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3
1668+
- uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
1669+
- uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
16701670
with:
16711671
path: docs-build
16721672
- id: deployment
1673-
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
1673+
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
16741674
- name: Verify the actual SUFeedURL serves this release
16751675
run: |
16761676
expected='<sparkle:shortVersionString>${{ needs.publish_release.outputs.version }}</sparkle:shortVersionString>'
@@ -1693,7 +1693,7 @@ jobs:
16931693
permissions:
16941694
contents: write
16951695
steps:
1696-
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1696+
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
16971697
with:
16981698
ref: main
16991699
- name: Bump cask to the released version

0 commit comments

Comments
 (0)