From a7499b78da03d522da92778512d77c91ad38159c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 11 Dec 2024 09:46:30 +0000 Subject: [PATCH] Bump the actions group across 1 directory with 6 updates Bumps the actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.10.1` | `2.10.2` | | [actions/checkout](https://github.com/actions/checkout) | `4.2.1` | `4.2.2` | | [chainguard-dev/digestabot](https://github.com/chainguard-dev/digestabot) | `1.2.0` | `1.2.1` | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `45.0.3` | `45.0.5` | | [chainguard-dev/setup-chainctl](https://github.com/chainguard-dev/setup-chainctl) | `0.2.3` | `0.2.4` | | [rtCamp/action-slack-notify](https://github.com/rtcamp/action-slack-notify) | `2.3.0` | `2.3.2` | Updates `step-security/harden-runner` from 2.10.1 to 2.10.2 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/91182cccc01eb5e619899d80e4e971d6181294a7...0080882f6c36860b6ba35c610c98ce87d4e2f26f) Updates `actions/checkout` from 4.2.1 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `chainguard-dev/digestabot` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/chainguard-dev/digestabot/releases) - [Commits](https://github.com/chainguard-dev/digestabot/compare/02ea60d2aeb26664ace4a9cc2ecdbea96888aaa4...cee67ce333549107c469dbe7656afda5a1e1f287) Updates `tj-actions/changed-files` from 45.0.3 to 45.0.5 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](https://github.com/tj-actions/changed-files/compare/c3a1bb2c992d77180ae65be6ae6c166cf40f857c...bab30c2299617f6615ec02a68b9a40d10bd21366) Updates `chainguard-dev/setup-chainctl` from 0.2.3 to 0.2.4 - [Release notes](https://github.com/chainguard-dev/setup-chainctl/releases) - [Commits](https://github.com/chainguard-dev/setup-chainctl/compare/598499528905f95b94e62e4831cf42035e768933...8d93dcbef466d3cf3533f67084f52eb74ef9d262) Updates `rtCamp/action-slack-notify` from 2.3.0 to 2.3.2 - [Release notes](https://github.com/rtcamp/action-slack-notify/releases) - [Commits](https://github.com/rtcamp/action-slack-notify/compare/4e5fb42d249be6a45a298f3c9543b111b02f7907...c33737706dea87cd7784c687dadc9adf1be59990) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: chainguard-dev/digestabot dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: tj-actions/changed-files dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: chainguard-dev/setup-chainctl dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: rtCamp/action-slack-notify dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/digestabot.yaml | 6 +++--- .github/workflows/presubmit-readme.yaml | 6 +++--- .github/workflows/reinstate-images.yaml | 6 +++--- .github/workflows/release.yaml | 14 +++++++------- .github/workflows/withdraw-images.yaml | 6 +++--- .github/workflows/withdraw-repos.yaml | 6 +++--- 6 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/workflows/digestabot.yaml b/.github/workflows/digestabot.yaml index 0e7d95452..e5b498568 100644 --- a/.github/workflows/digestabot.yaml +++ b/.github/workflows/digestabot.yaml @@ -19,11 +19,11 @@ jobs: id-token: write # To gitsign and federate steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - uses: octo-sts/action@6177b4481c00308b3839969c3eca88c96a91775f # v1.0.0 id: octo-sts @@ -31,7 +31,7 @@ jobs: scope: ${{ github.repository }} identity: digestabot - - uses: chainguard-dev/digestabot@02ea60d2aeb26664ace4a9cc2ecdbea96888aaa4 # v1.2.0 + - uses: chainguard-dev/digestabot@cee67ce333549107c469dbe7656afda5a1e1f287 # v1.2.1 with: token: ${{ steps.octo-sts.outputs.token }} working-dir: .github diff --git a/.github/workflows/presubmit-readme.yaml b/.github/workflows/presubmit-readme.yaml index 4bbd03f60..45f7f1e74 100644 --- a/.github/workflows/presubmit-readme.yaml +++ b/.github/workflows/presubmit-readme.yaml @@ -4,14 +4,14 @@ jobs: presubmit-readme: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - id: changed - uses: tj-actions/changed-files@c3a1bb2c992d77180ae65be6ae6c166cf40f857c # v45.0.3 + uses: tj-actions/changed-files@bab30c2299617f6615ec02a68b9a40d10bd21366 # v45.0.5 with: files_yaml: | automated: diff --git a/.github/workflows/reinstate-images.yaml b/.github/workflows/reinstate-images.yaml index b52b51a69..3efe923d1 100644 --- a/.github/workflows/reinstate-images.yaml +++ b/.github/workflows/reinstate-images.yaml @@ -16,11 +16,11 @@ jobs: id-token: write contents: read steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 - - uses: chainguard-dev/setup-chainctl@598499528905f95b94e62e4831cf42035e768933 # v0.2.3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: chainguard-dev/setup-chainctl@8d93dcbef466d3cf3533f67084f52eb74ef9d262 # v0.2.4 with: identity: 720909c9f5279097d847ad02a2f24ba8f59de36a/b6461e99e132298f - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 05f19ef69..1cc4527f8 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -30,11 +30,11 @@ jobs: shard: runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - id: shard name: Shard @@ -84,7 +84,7 @@ jobs: contents: read actions: read steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit @@ -93,7 +93,7 @@ jobs: terraform_version: "1.8.*" terraform_wrapper: false - - uses: chainguard-dev/setup-chainctl@598499528905f95b94e62e4831cf42035e768933 # v0.2.3 + - uses: chainguard-dev/setup-chainctl@8d93dcbef466d3cf3533f67084f52eb74ef9d262 # v0.2.4 with: # This allows chainguard-images/images-private to publish images to cgr.dev/chainguard-private # We maintain this identity here: @@ -108,7 +108,7 @@ jobs: - uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0 - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4 - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Terraform apply timeout-minutes: 60 @@ -151,7 +151,7 @@ jobs: name: "mega-module-${{ matrix.shard.index }}-imagetest-logs" path: imagetest-logs - - uses: rtCamp/action-slack-notify@4e5fb42d249be6a45a298f3c9543b111b02f7907 # v2.3.0 + - uses: rtCamp/action-slack-notify@c33737706dea87cd7784c687dadc9adf1be59990 # v2.3.2 if: ${{ failure() && github.event_name == 'schedule' }} env: SLACK_ICON: http://github.com/chainguard-dev.png?size=48 @@ -174,7 +174,7 @@ jobs: needs: build steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit diff --git a/.github/workflows/withdraw-images.yaml b/.github/workflows/withdraw-images.yaml index d9e7989b7..397933677 100644 --- a/.github/workflows/withdraw-images.yaml +++ b/.github/workflows/withdraw-images.yaml @@ -16,12 +16,12 @@ jobs: id-token: write contents: read steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 - - uses: chainguard-dev/setup-chainctl@598499528905f95b94e62e4831cf42035e768933 # v0.2.3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: chainguard-dev/setup-chainctl@8d93dcbef466d3cf3533f67084f52eb74ef9d262 # v0.2.4 with: identity: 720909c9f5279097d847ad02a2f24ba8f59de36a/b6461e99e132298f - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4 diff --git a/.github/workflows/withdraw-repos.yaml b/.github/workflows/withdraw-repos.yaml index f32e2cdad..10a6b8f09 100644 --- a/.github/workflows/withdraw-repos.yaml +++ b/.github/workflows/withdraw-repos.yaml @@ -16,12 +16,12 @@ jobs: id-token: write contents: read steps: - - uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1 + - uses: step-security/harden-runner@0080882f6c36860b6ba35c610c98ce87d4e2f26f # v2.10.2 with: egress-policy: audit - - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 - - uses: chainguard-dev/setup-chainctl@598499528905f95b94e62e4831cf42035e768933 # v0.2.3 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: chainguard-dev/setup-chainctl@8d93dcbef466d3cf3533f67084f52eb74ef9d262 # v0.2.4 with: identity: 720909c9f5279097d847ad02a2f24ba8f59de36a/b6461e99e132298f - run: |