From 53679c1273e71c088962ab265e4e0d351f4fb1bc Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:47 -0700 Subject: [PATCH 01/10] chore: update actions/cache to v4.0.2 --- .github/workflows/ci-test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml index 96dadb3..2982796 100644 --- a/.github/workflows/ci-test.yml +++ b/.github/workflows/ci-test.yml @@ -20,7 +20,7 @@ jobs: cache: true - name: Cache dependencies - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3.3.3 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 with: path: | ~/.cache/go-build From af244b5dc0961cf19f79fa47f4a86def7f3a4701 Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:49 -0700 Subject: [PATCH 02/10] chore: update actions/checkout to v4.1.4 --- .github/workflows/ci-test.yml | 2 +- .github/workflows/dependency-check.yml | 4 ++-- .github/workflows/sonar-scan.yml | 4 ++-- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml index 2982796..ccc7548 100644 --- a/.github/workflows/ci-test.yml +++ b/.github/workflows/ci-test.yml @@ -11,7 +11,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the repo - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - name: Setup Go uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml index b28ec0a..148dfae 100644 --- a/.github/workflows/dependency-check.yml +++ b/.github/workflows/dependency-check.yml @@ -11,7 +11,7 @@ jobs: changes: ${{ steps.changes.outputs.src }} steps: - name: Checkout the repo - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 id: changes @@ -26,7 +26,7 @@ jobs: needs: [changes] steps: - name: Check out code - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - name: Set up Go uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0 diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml index 7c0045d..d02bafb 100644 --- a/.github/workflows/sonar-scan.yml +++ b/.github/workflows/sonar-scan.yml @@ -13,7 +13,7 @@ jobs: if: always() steps: - name: Checkout Repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 with: ref: ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha }} @@ -37,7 +37,7 @@ jobs: if: always() steps: - name: Checkout the repo - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 with: fetch-depth: 0 # fetches all history for all tags and branches to provide more metadata for sonar reports From c6a72f034382052e7b71b1da9d512ff7453c30f9 Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:50 -0700 Subject: [PATCH 03/10] chore: update actions/upload-artifact to v4.3.3 --- .github/workflows/ci-test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml index ccc7548..0b39485 100644 --- a/.github/workflows/ci-test.yml +++ b/.github/workflows/ci-test.yml @@ -37,7 +37,7 @@ jobs: - name: Upload Go test results if: always() - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3 with: name: go-test-results path: | From 1918793157279e9a775a36dfadeed9945baf7ecf Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:50 -0700 Subject: [PATCH 04/10] chore: update dawidd6/action-download-artifact to v3.1.4 --- .github/workflows/sonar-scan.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml index d02bafb..6877988 100644 --- a/.github/workflows/sonar-scan.yml +++ b/.github/workflows/sonar-scan.yml @@ -43,7 +43,7 @@ jobs: - name: Download Golangci-lint report if: always() - uses: dawidd6/action-download-artifact@v2.27.0 + uses: dawidd6/action-download-artifact@09f2f74827fd3a8607589e5ad7f9398816f540fe # v3.1.4 with: workflow: ci-lint.yml name: golangci-lint-report @@ -51,7 +51,7 @@ jobs: - name: Download go unit test coverage reports if: always() - uses: dawidd6/action-download-artifact@v2.27.0 + uses: dawidd6/action-download-artifact@09f2f74827fd3a8607589e5ad7f9398816f540fe # v3.1.4 with: workflow: ci-test.yml name: go-test-results From 8d09bab165cf0fb2ab35d57c7d8494fba5f6d72b Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:51 -0700 Subject: [PATCH 05/10] chore: update dorny/paths-filter to v3.0.2 --- .github/workflows/dependency-check.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml index 148dfae..36664ec 100644 --- a/.github/workflows/dependency-check.yml +++ b/.github/workflows/dependency-check.yml @@ -13,7 +13,7 @@ jobs: - name: Checkout the repo uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - - uses: dorny/paths-filter@4512585405083f25c027a35db413c2b3b9006d50 # v2.11.1 + - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: changes with: filters: | From 3fd1057a54c94cb5ce867ab4347d09d4241e53b7 Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:52 -0700 Subject: [PATCH 06/10] chore: update ci-lint-go to ci-lint-go@0.2.2 --- .github/workflows/ci-lint.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci-lint.yml b/.github/workflows/ci-lint.yml index 46f174d..2479dc1 100644 --- a/.github/workflows/ci-lint.yml +++ b/.github/workflows/ci-lint.yml @@ -15,7 +15,7 @@ jobs: actions: read steps: - name: ci-lint - uses: smartcontractkit/.github/actions/ci-lint-go@19659dbe77426f23915b80aed6948dd4698b53ba # ci-lint-go@0.2.0 + uses: smartcontractkit/.github/actions/ci-lint-go@7ac9af09dda8c553593d2153a975b43b6958fa9f # ci-lint-go@0.2.2 with: golangci-lint-version: v1.55.2 golangci-lint-args: --enable=gofmt --tests=false --exclude-use-default --timeout=5m0s --out-format checkstyle:golangci-lint-report.xml From 5af484e7434fad98d9c7b4c86958cb961f8aef4f Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:55 -0700 Subject: [PATCH 07/10] chore: update cicd-changesets to cicd-changesets@0.3.3 --- .github/workflows/cd-release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/cd-release.yml b/.github/workflows/cd-release.yml index c165a38..741931b 100644 --- a/.github/workflows/cd-release.yml +++ b/.github/workflows/cd-release.yml @@ -13,7 +13,7 @@ jobs: contents: read steps: - name: cd-release - uses: smartcontractkit/.github/actions/cicd-changesets@6b08487b176ef7cad086526d0b54ddff6691c044 # cicd-changesets@0.2.1 + uses: smartcontractkit/.github/actions/cicd-changesets@6da79c7b9f14bec077df2c1ad40d53823b409d9c # cicd-changesets@0.3.3 with: # general inputs git-user: app-token-issuer-infra-releng[bot] From cf4e1958e434c144353882b7a0031126240065b6 Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:56 -0700 Subject: [PATCH 08/10] chore: update utils/wait-for-workflows to v2.3.16 --- .github/workflows/sonar-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml index 6877988..fb86698 100644 --- a/.github/workflows/sonar-scan.yml +++ b/.github/workflows/sonar-scan.yml @@ -18,7 +18,7 @@ jobs: ref: ${{ github.event.pull_request.head.sha || github.event.merge_group.head_sha }} - name: Wait for workflows - uses: smartcontractkit/chainlink-github-actions/utils/wait-for-workflows@main + uses: smartcontractkit/chainlink-github-actions/utils/wait-for-workflows@e29366cdecfe6befff9ab8c3cfe4825218505d58 # v2.3.16 with: max-timeout: "900" polling-interval: "30" From 8ec4044eccb6e6638ecf9966dd9df212c822a896 Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:57 -0700 Subject: [PATCH 09/10] chore: update smartcontractkit/push-gha-metrics-action to v3.0.0 --- .github/workflows/ci-test.yml | 2 +- .github/workflows/dependency-check.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml index 0b39485..0f2951f 100644 --- a/.github/workflows/ci-test.yml +++ b/.github/workflows/ci-test.yml @@ -47,7 +47,7 @@ jobs: - name: Collect Metrics if: always() id: collect-gha-metrics - uses: smartcontractkit/push-gha-metrics-action@v2.1.0 + uses: smartcontractkit/push-gha-metrics-action@dea9b546553cb4ca936607c2267a09c004e4ab3f # v3.0.0 with: this-job-name: ci-test basic-auth: ${{ secrets.GRAFANA_INTERNAL_BASIC_AUTH }} diff --git a/.github/workflows/dependency-check.yml b/.github/workflows/dependency-check.yml index 36664ec..47202d5 100644 --- a/.github/workflows/dependency-check.yml +++ b/.github/workflows/dependency-check.yml @@ -45,7 +45,7 @@ jobs: - name: Collect Metrics if: always() id: collect-gha-metrics - uses: smartcontractkit/push-gha-metrics-action@v2.1.0 + uses: smartcontractkit/push-gha-metrics-action@dea9b546553cb4ca936607c2267a09c004e4ab3f # v3.0.0 with: this-job-name: Go basic-auth: ${{ secrets.GRAFANA_INTERNAL_BASIC_AUTH }} From eb33837a059652dc91053e2e02d514c02a02e94b Mon Sep 17 00:00:00 2001 From: Erik Burton Date: Tue, 30 Apr 2024 16:57:58 -0700 Subject: [PATCH 10/10] chore: update sonarsource/sonarqube-scan-action to v2.0.2 --- .github/workflows/sonar-scan.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/sonar-scan.yml b/.github/workflows/sonar-scan.yml index fb86698..fbe9df9 100644 --- a/.github/workflows/sonar-scan.yml +++ b/.github/workflows/sonar-scan.yml @@ -67,7 +67,7 @@ jobs: - name: SonarQube Scan if: always() - uses: sonarsource/sonarqube-scan-action@v2.0.1 + uses: sonarsource/sonarqube-scan-action@53c3e3207fe4b8d52e2f1ac9d6eb1d2506f626c0 # v2.0.2 with: args: > -Dsonar.go.coverage.reportPaths=${{ steps.sonarqube_report_paths.outputs.sonarqube_go_coverage_report_paths }}