From a4d1cdf17dd628d311b9d2ff3787b1862b0d1f17 Mon Sep 17 00:00:00 2001 From: "hashicorp-tsccr[bot]" Date: Mon, 28 Oct 2024 06:09:03 +0000 Subject: [PATCH] Result of tsccr-helper -log-level=info gha update -latest .github/ --- .github/workflows/build.yml | 6 ++--- .../workflows/cdktf-provider-docs-rollout.yml | 2 +- .github/workflows/docker.yml | 8 +++--- .github/workflows/examples.yml | 10 +++---- .github/workflows/integration.yml | 26 +++++++++---------- .github/workflows/linting.yml | 4 +-- .github/workflows/pr-copyright.yml | 2 +- .github/workflows/pr-depcheck.yml | 2 +- .github/workflows/provider-integration.yml | 20 +++++++------- .github/workflows/registry-docs-pr-based.yml | 14 +++++----- .github/workflows/release.yml | 12 ++++----- .github/workflows/release_next.yml | 10 +++---- .github/workflows/unit.yml | 8 +++--- .github/workflows/website-release.yml | 2 +- .github/workflows/yarn-upgrade.yml | 22 ++++++++-------- 15 files changed, 74 insertions(+), 74 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 61fcdb134e..5eab3068b5 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -22,7 +22,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk - name: ensure correct user @@ -34,14 +34,14 @@ jobs: echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT mkdir -p /usr/local/share/.cache/go echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-build restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.go }} key: go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}-build diff --git a/.github/workflows/cdktf-provider-docs-rollout.yml b/.github/workflows/cdktf-provider-docs-rollout.yml index 9394b141f2..dc9a645462 100644 --- a/.github/workflows/cdktf-provider-docs-rollout.yml +++ b/.github/workflows/cdktf-provider-docs-rollout.yml @@ -55,7 +55,7 @@ jobs: if: failure() steps: - name: Send failures to Slack - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0 with: payload: | { diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 98e69ba995..71f4cf0ec4 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -16,11 +16,11 @@ jobs: if: github.repository == 'hashicorp/terraform-cdk' runs-on: ubuntu-latest steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1 + uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1 - name: Cache Docker layers - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-buildx-${{ hashFiles('/Dockerfile', '.terraform.versions.json') }} @@ -46,7 +46,7 @@ jobs: GIT_SHA=$(git rev-parse HEAD) echo "git-sha=$GIT_SHA" >> $GITHUB_OUTPUT - name: Build and push - uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0 + uses: docker/build-push-action@4f58ea79222b3b9dc2c8bbdd6debcef730109a75 # v6.9.0 with: pull: true push: true diff --git a/.github/workflows/examples.yml b/.github/workflows/examples.yml index 5b78379a8f..c8f3fbd9ac 100644 --- a/.github/workflows/examples.yml +++ b/.github/workflows/examples.yml @@ -24,7 +24,7 @@ jobs: examples: ${{ steps.set-examples.outputs.examples }} steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - id: set-examples run: | tfDefault=$(cat .terraform.versions.json | jq -r '.default') @@ -45,7 +45,7 @@ jobs: CHECKPOINT_DISABLE: "1" timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk - name: ensure correct user @@ -59,20 +59,20 @@ jobs: echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT mkdir -p /usr/local/share/.cache/go echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-examples restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.terraform }} key: terraform-${{ runner.os }}-${{ matrix.terraform }}-examples restore-keys: | terraform-${{ runner.os }}-${{ matrix.terraform }} - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.go }} key: go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}-examples diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index 932a855a16..13563ad513 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -28,7 +28,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk - name: ensure correct user @@ -40,14 +40,14 @@ jobs: echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT mkdir -p /usr/local/share/.cache/go echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-integration restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.go }} key: go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}-integration @@ -68,13 +68,13 @@ jobs: SENTRY_DSN: ${{ secrets.SENTRY_DSN }} GOCACHE: ${{ steps.global-cache-dir-path.outputs.go }} - name: Upload dist - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 if: ${{ !inputs.skip_setup }} with: name: dist path: dist - name: Upload edge-provider bindings - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 if: ${{ !inputs.skip_setup }} with: name: edge-provider-bindings @@ -103,7 +103,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: ensure correct user run: chown -R root /__w/terraform-cdk # Setup caches for yarn, terraform, and go @@ -116,21 +116,21 @@ jobs: mkdir -p /usr/local/share/.cache/go echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT # only restore as an individual cache as per matrix explodes our cache usage - - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache/restore@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-integration restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.terraform }} # put matrix before integration to not restore caches from other sibling matrix jobs key: terraform-${{ runner.os }}-${{ matrix.terraform }}-matrix-integration-${{ matrix.target }} restore-keys: | terraform-${{ runner.os }}-${{ matrix.terraform }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.go }} # put matrix before integration to not restore caches from other sibling matrix jobs @@ -176,7 +176,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 # Setup caches for yarn, terraform, and go - name: Get cache directory paths id: global-cache-dir-path @@ -188,21 +188,21 @@ jobs: mkdir -p /usr/local/share/.cache/go echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT # only restore as an individual cache as per matrix explodes our cache usage - - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache/restore@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-integration restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.terraform }} # put matrix before integration to not restore caches from other sibling matrix jobs key: terraform-${{ runner.os }}-${{ matrix.terraform }}-matrix-integration-${{ matrix.target }} restore-keys: | terraform-${{ runner.os }}-${{ matrix.terraform }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.go }} # put matrix before integration to not restore caches from other sibling matrix jobs diff --git a/.github/workflows/linting.yml b/.github/workflows/linting.yml index b827c7f2e1..1fea458852 100644 --- a/.github/workflows/linting.yml +++ b/.github/workflows/linting.yml @@ -20,7 +20,7 @@ jobs: container: image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: installing dependencies run: | yarn install --frozen-lockfile @@ -33,7 +33,7 @@ jobs: container: image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: installing dependencies run: | yarn install --frozen-lockfile diff --git a/.github/workflows/pr-copyright.yml b/.github/workflows/pr-copyright.yml index 80858eb420..7790918894 100644 --- a/.github/workflows/pr-copyright.yml +++ b/.github/workflows/pr-copyright.yml @@ -18,7 +18,7 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ github.event.pull_request.head.ref }} repository: ${{ github.event.pull_request.head.repo.full_name }} diff --git a/.github/workflows/pr-depcheck.yml b/.github/workflows/pr-depcheck.yml index fa7fd1783d..a7eda9a9ec 100644 --- a/.github/workflows/pr-depcheck.yml +++ b/.github/workflows/pr-depcheck.yml @@ -28,7 +28,7 @@ jobs: ] steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: "Run Depcheck" run: | npx lerna exec --scope '${{ matrix.package }}' -- npx -y depcheck --ignores="@types/*,jsii,jsii-pacmak,jsii-docgen,yoga-layout-prebuilt,eslint,jest,tsc-files,typescript,esbuild,esbuild-jest,graphology-types" diff --git a/.github/workflows/provider-integration.yml b/.github/workflows/provider-integration.yml index 32ff2b852e..45748545de 100644 --- a/.github/workflows/provider-integration.yml +++ b/.github/workflows/provider-integration.yml @@ -33,7 +33,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk - name: ensure correct user @@ -45,14 +45,14 @@ jobs: echo "yarn=$(yarn cache dir)" >> $GITHUB_OUTPUT mkdir -p /usr/local/share/.cache/go echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-provider-integration restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.go }} key: go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}-provider-integration @@ -73,7 +73,7 @@ jobs: cd test && yarn - name: Upload dist if: ${{ !inputs.skip_setup }} - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: dist path: dist @@ -96,7 +96,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Download dist uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 with: @@ -111,14 +111,14 @@ jobs: mkdir -p /usr/local/share/.cache/terraform echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT # Only restoring yarn caches as the dependencies are not indiviual to each matrix job - - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache/restore@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-provider-integration restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.terraform }} # put matrix before provider-integration to not restore caches from other sibling matrix jobs @@ -147,7 +147,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: HashiCorp - Setup Terraform uses: hashicorp/setup-terraform@633666f66e0061ca3b725c73b2ec20cd13a8fdd1 with: @@ -172,14 +172,14 @@ jobs: mkdir -p /usr/local/share/.cache/terraform echo "terraform=/usr/local/share/.cache/terraform" >> $GITHUB_OUTPUT # Only restoring yarn caches to save available cache storage size - - uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache/restore@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-provider-integration restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.terraform }} # put matrix before provider-integration to not restore caches from other sibling matrix jobs diff --git a/.github/workflows/registry-docs-pr-based.yml b/.github/workflows/registry-docs-pr-based.yml index 0c42a92711..96f52e11d8 100644 --- a/.github/workflows/registry-docs-pr-based.yml +++ b/.github/workflows/registry-docs-pr-based.yml @@ -69,7 +69,7 @@ jobs: cdktfDocsCleanupBranches: runs-on: ubuntu-latest steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: ${{ inputs.repository }} ref: ${{ inputs.branch }} @@ -88,7 +88,7 @@ jobs: needs: - cdktfDocsCleanupBranches steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: ${{ inputs.repository }} ref: ${{ inputs.branch }} @@ -110,14 +110,14 @@ jobs: CHECKPOINT_DISABLE: "1" timeout-minutes: 120 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: ${{ inputs.repository }} ref: ${{ inputs.branch }} token: ${{ secrets.GH_PR_TOKEN }} - name: Setup Node.js - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version: "20.x" @@ -150,7 +150,7 @@ jobs: CHECKPOINT_DISABLE: "1" timeout-minutes: 360 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: ${{ inputs.repository }} ref: ${{ inputs.branch }} @@ -162,7 +162,7 @@ jobs: git config --global --add safe.directory $(pwd) - name: Setup Node.js - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version: "20.x" @@ -200,7 +200,7 @@ jobs: - cdktfDocsConvert runs-on: ubuntu-latest steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: ${{ inputs.repository }} fetch-depth: 0 # complete checkout diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 58991d1efb..324897105b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: env: CHECKPOINT_DISABLE: "1" steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 # gives sentry access to all previous commits - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this @@ -68,12 +68,12 @@ jobs: env: SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_TOKEN }} - name: Upload artifact - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: dist path: dist - name: Upload edge-provider bindings - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 if: ${{ !inputs.skip_setup }} with: name: edge-provider-bindings @@ -155,7 +155,7 @@ jobs: container: image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: installing dependencies run: | yarn install --frozen-lockfile @@ -320,7 +320,7 @@ jobs: container: image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: version id: get_version run: | @@ -360,7 +360,7 @@ jobs: - unit_test steps: - name: Send failures to Slack - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0 with: payload: | { diff --git a/.github/workflows/release_next.yml b/.github/workflows/release_next.yml index 5bf90eee12..d27b48ea9b 100644 --- a/.github/workflows/release_next.yml +++ b/.github/workflows/release_next.yml @@ -24,7 +24,7 @@ jobs: env: CHECKPOINT_DISABLE: "1" steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: fetch-depth: 0 # gives standard-version access to all previous commits - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this @@ -74,12 +74,12 @@ jobs: env: SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_TOKEN }} - name: Upload artifact - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: dist path: dist - name: Upload edge-provider bindings - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 if: ${{ !inputs.skip_setup }} with: name: edge-provider-bindings @@ -286,7 +286,7 @@ jobs: container: image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: version id: get_version run: | @@ -324,7 +324,7 @@ jobs: - unit_test steps: - name: Send failures to Slack - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@37ebaef184d7626c5f204ab8d3baff4262dd30f0 # v1.27.0 with: payload: | { diff --git a/.github/workflows/unit.yml b/.github/workflows/unit.yml index 92249d850a..595d9a0fef 100644 --- a/.github/workflows/unit.yml +++ b/.github/workflows/unit.yml @@ -27,7 +27,7 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: "Add Git safe.directory" # Go 1.18+ started embedding repo info in the build and e.g. building @cdktf/hcl2json fails without this run: git config --global --add safe.directory /__w/terraform-cdk/terraform-cdk - name: ensure correct user @@ -42,21 +42,21 @@ jobs: echo "go=/usr/local/share/.cache/go" >> $GITHUB_OUTPUT mkdir -p /usr/local/share/.cache/providerSchema echo "providerSchema=/usr/local/share/.cache/providerSchema" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.yarn }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-unit restore-keys: | yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}- yarn-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.go }} key: go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}-unit restore-keys: | go-${{ runner.os }}-${{ hashFiles('**/go.sum') }}- go-${{ runner.os }}- - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.providerSchema }} key: providerSchema-${{ runner.os }}-${{ inputs.terraform_version }}-unit-${{ inputs.package }} diff --git a/.github/workflows/website-release.yml b/.github/workflows/website-release.yml index 413c87d9ee..5e7d9e43fe 100644 --- a/.github/workflows/website-release.yml +++ b/.github/workflows/website-release.yml @@ -12,7 +12,7 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GH_TOKEN_WEBSITE_RELEASE }} steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: repository: hashicorp/terraform-website token: ${{ secrets.GH_TOKEN_WEBSITE_RELEASE }} diff --git a/.github/workflows/yarn-upgrade.yml b/.github/workflows/yarn-upgrade.yml index 7a535cc493..8b90c473bd 100644 --- a/.github/workflows/yarn-upgrade.yml +++ b/.github/workflows/yarn-upgrade.yml @@ -24,11 +24,11 @@ jobs: image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform steps: - name: Check Out - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Get yarn cache directory path id: global-cache-dir-path run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.dir }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-upgrade @@ -63,7 +63,7 @@ jobs: git add . git diff --patch --staged > ./upgrade.patch - name: Upload Patch - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4.3.6 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: upgrade.patch path: ./upgrade.patch @@ -74,7 +74,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Download patch uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8 @@ -88,7 +88,7 @@ jobs: run: rm -f ./upgrade.patch - name: Make Pull Request - uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0 + uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5 with: # Git commit details branch: automation/yarn-upgrade @@ -148,11 +148,11 @@ jobs: ] steps: - name: Check Out - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Get yarn cache directory path id: global-cache-dir-path run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.dir }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-upgrade @@ -185,7 +185,7 @@ jobs: git config --global user.name "team-tf-cdk" - name: Make Pull Request - uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0 + uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5 with: # Git commit details branch: automation/yarn-upgrade-${{ matrix.pr.name }} @@ -214,11 +214,11 @@ jobs: image: docker.mirror.hashicorp.services/hashicorp/jsii-terraform steps: - name: Check Out - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Get yarn cache directory path id: global-cache-dir-path run: echo "dir=$(yarn cache dir)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 with: path: ${{ steps.global-cache-dir-path.outputs.dir }} key: yarn-${{ runner.os }}-${{ hashFiles('**/yarn.lock') }}-upgrade @@ -249,7 +249,7 @@ jobs: git config --global user.name "team-tf-cdk" - name: Make Pull Request - uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6.1.0 + uses: peter-evans/create-pull-request@5e914681df9dc83aa4e4905692ca88beb2f9e91f # v7.0.5 with: # Git commit details branch: automation/yarn-upgrade-jsii