Bumps the actions group with 9 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4.3.1` | `7.0.0` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `3.36.3` | `4.36.3` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `3.36.3` | `4.36.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.2` | `7.0.1` | | [actions/cache/save](https://github.com/actions/cache) | `4.3.0` | `6.1.0` | | [actions/setup-node](https://github.com/actions/setup-node) | `4.4.0` | `6.4.0` | | [actions/cache/restore](https://github.com/actions/cache) | `4.3.0` | `6.1.0` | | [actions/github-script](https://github.com/actions/github-script) | `8.0.0` | `9.0.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `3.36.3` | `4.36.3` | Updates `actions/checkout` from 4.3.1 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a56381ad16ebd13914f8d5...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) Updates `github/codeql-action/init` from 3.36.3 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/411c4c9a36b3fca4d674f06b6396b2c6d23522c6...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a) Updates `github/codeql-action/analyze` from 3.36.3 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/411c4c9a36b3fca4d674f06b6396b2c6d23522c6...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a) Updates `actions/upload-artifact` from 4.6.2 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...043fb46d1a93c77aae656e7c1c64a875d1fc6a0a) Updates `actions/cache/save` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc39830...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) Updates `actions/setup-node` from 4.4.0 to 6.4.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e) Updates `actions/cache/restore` from 4.3.0 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/0057852bfaa89a56745cba8c7296529d2fc39830...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) Updates `actions/github-script` from 8.0.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/ed597411d8f924073f98dfc5c65a23a2325f34cd...3a2844b7e9c422d3c10d287c895573f7108da1b3) Updates `github/codeql-action/upload-sarif` from 3.36.3 to 4.36.3 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/411c4c9a36b3fca4d674f06b6396b2c6d23522c6...54f647b7e1bb85c95cddabcd46b0c578ec92bc1a) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action/init dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action/analyze dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/cache/save dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/cache/restore dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.36.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ...
Unified · Split
| @@ -19,7 +19,7 @@ jobs: · 18 unmodified lines | ||
| 19 | 19 | runs-on: ubuntu-latest |
| 20 | 20 | timeout-minutes: 15 |
| 21 | 21 | steps: |
| 22 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 22 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 23 | 23 | - uses: ./.github/actions/setup-bun |
| 24 | 24 | - run: bun run typecheck |
| 25 | 25 | |
| @@ -28,7 +28,7 @@ jobs: · 2 unmodified lines | ||
| 28 | 28 | runs-on: ubuntu-latest |
| 29 | 29 | timeout-minutes: 20 |
| 30 | 30 | steps: |
| 31 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 31 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 32 | 32 | - uses: ./.github/actions/setup-bun |
| 33 | 33 | - name: Configure git for tests |
| 34 | 34 | run: | |
| @@ -42,7 +42,7 @@ jobs: · 7 unmodified lines | ||
| 42 | 42 | runs-on: ubuntu-latest |
| 43 | 43 | timeout-minutes: 20 |
| 44 | 44 | steps: |
| 45 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 45 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 46 | 46 | - uses: ./.github/actions/setup-bun |
| 47 | 47 | - name: Build workspace UI |
| 48 | 48 | run: bun run --cwd frontend/workspace build |
| @@ -56,7 +56,7 @@ jobs: · 7 unmodified lines | ||
| 56 | 56 | runs-on: ubuntu-latest |
| 57 | 57 | timeout-minutes: 15 |
| 58 | 58 | steps: |
| 59 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 59 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 60 | 60 | - uses: ./.github/actions/setup-bun |
| 61 | 61 | - name: Install |
| 62 | 62 | working-directory: frontend/landing |
| @@ -75,7 +75,7 @@ jobs: · 12 unmodified lines | ||
| 75 | 75 | runs-on: ubuntu-latest |
| 76 | 76 | timeout-minutes: 10 |
| 77 | 77 | steps: |
| 78 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 78 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 79 | 79 | - uses: ./.github/actions/setup-bun |
| 80 | 80 | - name: Launcher parses |
| 81 | 81 | run: node --check tooling/launcher/bin/synsci.mjs |
| @@ -99,5 +99,5 @@ jobs: · 17 unmodified lines | ||
| 99 | 99 | runs-on: ubuntu-latest |
| 100 | 100 | timeout-minutes: 10 |
| 101 | 101 | steps: |
| 102 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 102 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 103 | 103 | - uses: raven-actions/actionlint@3d39aea434753780c3b3d4a1a31c854b4dbf49d7 # v2 |
| @@ -29,12 +29,12 @@ jobs: · 28 unmodified lines | ||
| 29 | 29 | matrix: |
| 30 | 30 | language: ["javascript-typescript"] |
| 31 | 31 | steps: |
| 32 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 32 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 33 | 33 | - name: Initialize CodeQL |
| 34 | − uses: github/codeql-action/init@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 # v3 | |
| 34 | + uses: github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 | |
| 35 | 35 | with: |
| 36 | 36 | languages: ${{ matrix.language }} |
| 37 | 37 | - name: Analyze |
| 38 | − uses: github/codeql-action/analyze@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 # v3 | |
| 38 | + uses: github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 | |
| 39 | 39 | with: |
| 40 | 40 | category: "/language:${{ matrix.language }}" |
| @@ -37,7 +37,7 @@ jobs: · 36 unmodified lines | ||
| 37 | 37 | shell: bash |
| 38 | 38 | steps: |
| 39 | 39 | - name: Checkout repository |
| 40 | − uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 40 | + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 41 | 41 | with: |
| 42 | 42 | token: ${{ secrets.GITHUB_TOKEN }} |
| 43 | 43 | |
| @@ -160,7 +160,7 @@ jobs: · 116 unmodified lines | ||
| 160 | 160 | |
| 161 | 161 | - name: Upload Playwright artifacts |
| 162 | 162 | if: failure() |
| 163 | − uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| 163 | + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| 164 | 164 | with: |
| 165 | 165 | name: playwright-${{ matrix.settings.name }}-${{ github.run_attempt }} |
| 166 | 166 | if-no-files-found: ignore |
| @@ -24,7 +24,7 @@ jobs: · 23 unmodified lines | ||
| 24 | 24 | runs-on: ubuntu-latest |
| 25 | 25 | timeout-minutes: 15 |
| 26 | 26 | steps: |
| 27 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 27 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 28 | 28 | with: |
| 29 | 29 | fetch-depth: 0 |
| 30 | 30 | - name: Install gitleaks |
| @@ -37,7 +37,7 @@ jobs: · 36 unmodified lines | ||
| 37 | 37 | echo "::error::Provide 'bump' or 'version'. An empty dispatch would publish a 0.0.0-main preview to npm as if it were a release." |
| 38 | 38 | exit 1 |
| 39 | 39 | |
| 40 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 40 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 41 | 41 | with: |
| 42 | 42 | fetch-depth: 0 |
| 43 | 43 | |
| @@ -59,7 +59,7 @@ jobs: · 15 unmodified lines | ||
| 59 | 59 | runs-on: ubuntu-latest |
| 60 | 60 | timeout-minutes: 90 |
| 61 | 61 | steps: |
| 62 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 62 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 63 | 63 | with: |
| 64 | 64 | fetch-tags: true |
| 65 | 65 | |
| @@ -73,7 +73,7 @@ jobs: · 7 unmodified lines | ||
| 73 | 73 | GH_TOKEN: ${{ github.token }} |
| 74 | 74 | |
| 75 | 75 | - name: Cache CLI build |
| 76 | − uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 | |
| 76 | + uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| 77 | 77 | with: |
| 78 | 78 | path: backend/cli/dist |
| 79 | 79 | key: cli-build-${{ github.run_id }} |
| @@ -88,13 +88,13 @@ jobs: · 8 unmodified lines | ||
| 88 | 88 | runs-on: ubuntu-latest |
| 89 | 89 | timeout-minutes: 60 |
| 90 | 90 | steps: |
| 91 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 91 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 92 | 92 | with: |
| 93 | 93 | fetch-depth: 0 |
| 94 | 94 | |
| 95 | 95 | - uses: ./.github/actions/setup-bun |
| 96 | 96 | |
| 97 | − - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 | |
| 97 | + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 | |
| 98 | 98 | with: |
| 99 | 99 | node-version: "24" |
| 100 | 100 | registry-url: "https://registry.npmjs.org" |
| @@ -105,7 +105,7 @@ jobs: · 4 unmodified lines | ||
| 105 | 105 | git config user.name "openscience" |
| 106 | 106 | |
| 107 | 107 | - name: Restore CLI build |
| 108 | − uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 | |
| 108 | + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 | |
| 109 | 109 | with: |
| 110 | 110 | path: backend/cli/dist |
| 111 | 111 | key: cli-build-${{ github.run_id }} |
| @@ -137,7 +137,7 @@ jobs: · 25 unmodified lines | ||
| 137 | 137 | permissions: |
| 138 | 138 | deployments: write |
| 139 | 139 | steps: |
| 140 | − - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 | |
| 140 | + - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 | |
| 141 | 141 | env: |
| 142 | 142 | VERSION: ${{ needs.version.outputs.version }} |
| 143 | 143 | TAG: ${{ needs.version.outputs.tag }} |
| @@ -18,7 +18,7 @@ jobs: · 17 unmodified lines | ||
| 18 | 18 | security-events: write |
| 19 | 19 | id-token: write |
| 20 | 20 | steps: |
| 21 | − - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 | |
| 21 | + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| 22 | 22 | with: |
| 23 | 23 | persist-credentials: false |
| 24 | 24 | - name: Run analysis |
| @@ -28,12 +28,12 @@ jobs: · 3 unmodified lines | ||
| 28 | 28 | results_format: sarif |
| 29 | 29 | publish_results: true |
| 30 | 30 | - name: Upload artifact |
| 31 | − uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 | |
| 31 | + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| 32 | 32 | with: |
| 33 | 33 | name: SARIF file |
| 34 | 34 | path: results.sarif |
| 35 | 35 | retention-days: 5 |
| 36 | 36 | - name: Upload to code scanning |
| 37 | − uses: github/codeql-action/upload-sarif@411c4c9a36b3fca4d674f06b6396b2c6d23522c6 # v3 | |
| 37 | + uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3 | |
| 38 | 38 | with: |
| 39 | 39 | sarif_file: results.sarif |