From 3732ccaf1b3251bf8cdaae9b76a6f1aed96a1573 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 8 Jul 2026 12:49:54 +0000 Subject: [PATCH] chore(deps): update all github action dependencies Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/build-envoy-image-ci.yaml | 10 +++++----- .../build-envoy-images-release-base.yaml | 20 +++++++++---------- .github/workflows/ci-check-format.yaml | 4 ++-- .github/workflows/ci-tests.yaml | 6 +++--- .../workflows/cilium-integration-tests.yaml | 2 +- .github/workflows/codeql.yml | 6 +++--- 6 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/build-envoy-image-ci.yaml b/.github/workflows/build-envoy-image-ci.yaml index 867c3c43d..15e71478b 100644 --- a/.github/workflows/build-envoy-image-ci.yaml +++ b/.github/workflows/build-envoy-image-ci.yaml @@ -25,12 +25,12 @@ jobs: sha: ${{ steps.tag.outputs.sha }} steps: - name: Set up QEMU - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 with: image: tonistiigi/binfmt:qemu-v7.0.0-28 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Cache Docker layers uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 @@ -40,7 +40,7 @@ jobs: restore-keys: docker-cache-main - name: Login to quay.io - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: quay.io username: ${{ secrets.QUAY_ENVOY_USERNAME_DEV }} @@ -77,7 +77,7 @@ jobs: fi - name: PR Multi-arch build & push of Builder image (dev) - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 if: steps.cilium-builder-tag-in-repositories.outputs.exists == 'false' id: docker_build_builder_ci with: @@ -96,7 +96,7 @@ jobs: echo "quay.io/${{ github.repository_owner }}/cilium-envoy-builder-dev:${{ env.BUILDER_DOCKER_HASH }}@${{ steps.docker_build_builder_ci.outputs.digest }}" - name: PR Multi-arch build & push of cilium-envoy - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 id: docker_build_ci with: provenance: false diff --git a/.github/workflows/build-envoy-images-release-base.yaml b/.github/workflows/build-envoy-images-release-base.yaml index d77fff9dd..4c8d1c0e7 100644 --- a/.github/workflows/build-envoy-images-release-base.yaml +++ b/.github/workflows/build-envoy-images-release-base.yaml @@ -35,15 +35,15 @@ jobs: runs-on: ${{ vars.PROXY_BUILD_GITHUB_RUNNER }} steps: - name: Set up QEMU - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 with: image: tonistiigi/binfmt:qemu-v7.0.0-28 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Login to quay.io - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: quay.io username: ${{ secrets.QUAY_ENVOY_USERNAME }} @@ -78,7 +78,7 @@ jobs: images: cilium-envoy-builder - name: Run integration tests on amd64 & push of test artifact archive - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 id: docker_tests_ci_cache_update with: provenance: false @@ -105,14 +105,14 @@ jobs: runs-on: ${{ vars.PROXY_BUILD_GITHUB_RUNNER }} steps: - name: Set up QEMU - uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 with: image: tonistiigi/binfmt:qemu-v7.0.0-28 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Login to quay.io - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 + uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: quay.io username: ${{ secrets.QUAY_ENVOY_USERNAME }} @@ -139,7 +139,7 @@ jobs: fi - name: Multi-arch build & push of Builder image - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 if: steps.cilium-builder-tag-in-repositories.outputs.exists == 'false' id: docker_build_builder with: @@ -152,7 +152,7 @@ jobs: quay.io/${{ github.repository_owner }}/cilium-envoy-builder:${{ env.BUILDER_DOCKER_HASH }} quay.io/${{ github.repository_owner }}/cilium-envoy-builder:latest - name: Multi-arch build & push of build artifact archive - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: . file: ./Dockerfile @@ -178,7 +178,7 @@ jobs: docker buildx prune -f - name: Multi-arch build & push main latest - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 id: docker_build_cd with: provenance: false diff --git a/.github/workflows/ci-check-format.yaml b/.github/workflows/ci-check-format.yaml index be6987702..7fe937427 100644 --- a/.github/workflows/ci-check-format.yaml +++ b/.github/workflows/ci-check-format.yaml @@ -36,7 +36,7 @@ jobs: images: cilium-envoy-builder-dev - name: Check format - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 id: docker_format_ciak with: target: format @@ -86,7 +86,7 @@ jobs: images: cilium-envoy-builder-dev - name: Run clang-tidy - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 # skip if nothing changed if: ${{ env.TIDY_SOURCES != '' }} id: docker_clang_tidy diff --git a/.github/workflows/ci-tests.yaml b/.github/workflows/ci-tests.yaml index 42c9c946b..3ea87077f 100644 --- a/.github/workflows/ci-tests.yaml +++ b/.github/workflows/ci-tests.yaml @@ -21,7 +21,7 @@ jobs: uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: # renovate: datasource=golang-version depName=go - go-version: 1.26.4 + go-version: 1.26.5 - name: Checkout code uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: @@ -41,7 +41,7 @@ jobs: runs-on: ${{ vars.PROXY_BUILD_GITHUB_RUNNER || 'oracle-vm-32cpu-128gb-x86-64' }} steps: - name: Set up Docker Buildx - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Cache Docker layers uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 @@ -69,7 +69,7 @@ jobs: images: cilium-envoy-builder-dev - name: Run integration tests on amd64 - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 id: docker_tests_ci with: provenance: false diff --git a/.github/workflows/cilium-integration-tests.yaml b/.github/workflows/cilium-integration-tests.yaml index 5b15e354d..1b76cc661 100644 --- a/.github/workflows/cilium-integration-tests.yaml +++ b/.github/workflows/cilium-integration-tests.yaml @@ -89,7 +89,7 @@ jobs: uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: # renovate: datasource=golang-version depName=go - go-version: 1.26.4 + go-version: 1.26.5 - name: Install Cilium timeout-minutes: 10 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index a73b44f8e..1de16d86e 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -28,7 +28,7 @@ jobs: - name: Checkout repository uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 - name: Initialize CodeQL - uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 with: languages: ${{ matrix.config.language }} @@ -65,10 +65,10 @@ jobs: - name: Autobuild if: matrix.config.language != 'cpp' - uses: github/codeql-action/autobuild@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4 + uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4 with: category: '/language:${{matrix.config.language}}' output: sarif-output-${{ matrix.config.language }}.sarif