Merge branch 'master' into snyk-fix-cdc1813a842868eceb3c5cf844647f2a

Author: Warashi

.github/copilot-instructions.md

@@ -1,42 +1,60 @@
 area/go:
-- cmd/*
-- cmd/**/*
-- pkg/*
-- pkg/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'cmd/*'
+          - 'cmd/**/*'
+          - 'pkg/*'
+          - 'pkg/**/*'
 
 area/web:
-- web/*
-- web/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'web/*'
+          - 'web/**/*'
 
 area/build:
-- hack/*
-- .github/*
-- .github/**/*
-- Makefile
-- local/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'hack/*'
+          - '.github/*'
+          - '.github/**/*'
+          - 'Makefile'
+          - 'local/*'
 
 area/manifests:
-- manifests/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'manifests/**/*'
 
 area/docs:
-- docs/*
-- docs/**/*
-- README.md
-- CONTRIBUTING.md
-- RELEASES.md
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'docs/*'
+          - 'docs/**/*'
+          - 'README.md'
+          - 'CONTRIBUTING.md'
+          - 'RELEASES.md'
 
 area/examples:
-- examples/*
-- examples/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'examples/*'
+          - 'examples/**/*'
 
 area/tool:
-- tool/*
-- tool/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'tool/*'
+          - 'tool/**/*'
 
 area/pipedv1:
-- pkg/app/pipedv1/**/*
-- pkg/configv1/*
-- pkg/configv1/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'pkg/app/pipedv1/**/*'
+          - 'pkg/configv1/*'
+          - 'pkg/configv1/**/*'
 
 area/plugin-sdk:
-- pkg/plugin/sdk/**/*
+  - changed-files:
+      - any-glob-to-any-file:
+          - 'pkg/plugin/sdk/**/*'

.github/labeler.yaml

@@ -21,15 +21,15 @@ permissions:
 
 env:
   GO_VERSION: 1.26.2
-  NODE_VERSION: 20.19.0
+  NODE_VERSION: 24.10.0
   HELM_VERSION: 3.8.2
 
 jobs:
   go:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-go@v3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}
           cache: true
@@ -39,8 +39,8 @@ jobs:
   plugin:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-go@v3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}
       - name: Build plugin
@@ -49,14 +49,14 @@ jobs:
   web:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Get yarn cache directory path
         id: yarn-cache-dir-path
         run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
-      - uses: actions/cache@v4
+      - uses: actions/cache@v6
         id: yarn-cache
         with:
           path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
@@ -71,11 +71,11 @@ jobs:
   chart:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: Install helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
           version: ${{ env.HELM_VERSION }}
       - name: Package helm charts

.github/workflows/build.yaml

@@ -39,7 +39,7 @@ jobs:
     runs-on: ${{ matrix.platform.runner }}
     timeout-minutes: 15
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: Determine version

.github/workflows/build_tool.yaml

@@ -15,7 +15,7 @@ jobs:
   tool:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           fetch-depth: 0
       - name: make a cherry-pick PR

.github/workflows/cherry_pick.yaml

@@ -15,7 +15,7 @@ jobs:
         language: [ 'go', 'javascript' ]
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: github/codeql-action/init@v3
         with:
           languages: ${{ matrix.language }}

.github/workflows/codeql-analysis.yaml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Welcome first-time contributor
-        uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
+        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
           script: |
             const owner = context.repo.owner;

.github/workflows/first-time-contributor.yaml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
     - name: Checkout repository
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
     - name: Generate code
       # NOTE: Keep this container image as same as defined in Makefile
       uses: docker://ghcr.io/pipe-cd/codegen@sha256:8b17498a7cfb58fbaf403ec7cab01a740238aaee43d030e65a40abb710f9e68a # v0.56.0-30-g0d71fd0

.github/workflows/gen.yaml

@@ -10,7 +10,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-24.04
     steps:
-    - uses: actions/labeler@v4
+    - uses: actions/labeler@v7
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         sync-labels: true

.github/workflows/labeler.yaml

@@ -15,7 +15,7 @@ concurrency:
 
 env:
   GO_VERSION: 1.26.2
-  NODE_VERSION: 20.19.0
+  NODE_VERSION: 24.10.0
   GOLANGCI_LINT_VERSION: v2.11.4
   HELM_VERSION: 3.17.3
 
@@ -25,7 +25,7 @@ jobs:
     outputs:
       modules: ${{ steps.list-go-modules.outputs.modules }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: List go modules
         id: list-go-modules
         run: |
@@ -39,9 +39,9 @@ jobs:
       matrix:
         module: ${{ fromJSON(needs.list-go-modules.outputs.modules) }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: golangci-lint
-        uses: reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71 #v2.8.0
+        uses: reviewdog/action-golangci-lint@c76cceaaab89abe74e649d2e34c6c9adc26662d2 #v2.10.0
         with:
           workdir: ${{ matrix.module }}
           go_version: ${{ env.GO_VERSION }}
@@ -66,14 +66,14 @@ jobs:
   web:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-node@v3
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@v7
         with:
           node-version: ${{ env.NODE_VERSION }}
       - name: Get yarn cache directory path
         id: yarn-cache-dir-path
         run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT
-      - uses: actions/cache@v4
+      - uses: actions/cache@v6
         id: yarn-cache
         with:
           path: ${{ steps.yarn-cache-dir-path.outputs.dir }}
@@ -88,10 +88,10 @@ jobs:
     runs-on: ubuntu-24.04
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
         with:
           version: ${{ env.HELM_VERSION }}
 
@@ -106,7 +106,7 @@ jobs:
       matrix:
         module: ${{ fromJSON(needs.list-go-modules.outputs.modules) }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}