From 863b8f9173df8be4e7069fb4d98b90f1d82af0cd Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 8 Feb 2024 09:54:20 -0700
Subject: [PATCH] chore(deps): pin dependencies (#79)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
pinDigest | -> `b4ffde6` |
| [actions/setup-node](https://togithub.com/actions/setup-node) | action
| patch | `v4.0.0` -> `v4.0.2` |
|
[actions/upload-artifact](https://togithub.com/actions/upload-artifact)
| action | major | `v3.1.3` -> `v4.3.1` |
| [docker/login-action](https://togithub.com/docker/login-action) |
action | pinDigest | -> `343f7c4` |
|
[google-github-actions/release-please-action](https://togithub.com/google-github-actions/release-please-action)
| action | major | `v3` -> `v4` |
---
### Release Notes
actions/setup-node (actions/setup-node)
###
[`v4.0.2`](https://togithub.com/actions/setup-node/releases/tag/v4.0.2)
[Compare
Source](https://togithub.com/actions/setup-node/compare/v4.0.1...v4.0.2)
#### What's Changed
- Add support for `volta.extends` by
[@ThisIsManta](https://togithub.com/ThisIsManta) in
[https://github.com/actions/setup-node/pull/921](https://togithub.com/actions/setup-node/pull/921)
- Add support for arm64 Windows by
[@dmitry-shibanov](https://togithub.com/dmitry-shibanov) in
[https://github.com/actions/setup-node/pull/927](https://togithub.com/actions/setup-node/pull/927)
#### New Contributors
- [@ThisIsManta](https://togithub.com/ThisIsManta) made their
first contribution in
[https://github.com/actions/setup-node/pull/921](https://togithub.com/actions/setup-node/pull/921)
**Full Changelog**:
https://github.com/actions/setup-node/compare/v4.0.1...v4.0.2
###
[`v4.0.1`](https://togithub.com/actions/setup-node/releases/tag/v4.0.1)
[Compare
Source](https://togithub.com/actions/setup-node/compare/v4.0.0...v4.0.1)
##### What's Changed
- Ignore engines in Yarn 1 e2e-cache tests by
[@trivikr](https://togithub.com/trivikr) in
[https://github.com/actions/setup-node/pull/882](https://togithub.com/actions/setup-node/pull/882)
- Update setup-node references in the README.md file to setup-node@v4 by
[@jwetzell](https://togithub.com/jwetzell) in
[https://github.com/actions/setup-node/pull/884](https://togithub.com/actions/setup-node/pull/884)
- Update reusable workflows to use Node.js v20 by
[@MaksimZhukov](https://togithub.com/MaksimZhukov) in
[https://github.com/actions/setup-node/pull/889](https://togithub.com/actions/setup-node/pull/889)
- Add fix for cache to resolve slow post action step by
[@aparnajyothi-y](https://togithub.com/aparnajyothi-y) in
[https://github.com/actions/setup-node/pull/917](https://togithub.com/actions/setup-node/pull/917)
- Fix README.md by [@takayamaki](https://togithub.com/takayamaki)
in
[https://github.com/actions/setup-node/pull/898](https://togithub.com/actions/setup-node/pull/898)
- Add `package.json` to `node-version-file` list of examples. by
[@TWiStErRob](https://togithub.com/TWiStErRob) in
[https://github.com/actions/setup-node/pull/879](https://togithub.com/actions/setup-node/pull/879)
- Fix node-version-file interprets entire package.json as a version by
[@NullVoxPopuli](https://togithub.com/NullVoxPopuli) in
[https://github.com/actions/setup-node/pull/865](https://togithub.com/actions/setup-node/pull/865)
##### New Contributors
- [@trivikr](https://togithub.com/trivikr) made their first
contribution in
[https://github.com/actions/setup-node/pull/882](https://togithub.com/actions/setup-node/pull/882)
- [@jwetzell](https://togithub.com/jwetzell) made their first
contribution in
[https://github.com/actions/setup-node/pull/884](https://togithub.com/actions/setup-node/pull/884)
- [@aparnajyothi-y](https://togithub.com/aparnajyothi-y) made
their first contribution in
[https://github.com/actions/setup-node/pull/917](https://togithub.com/actions/setup-node/pull/917)
- [@takayamaki](https://togithub.com/takayamaki) made their first
contribution in
[https://github.com/actions/setup-node/pull/898](https://togithub.com/actions/setup-node/pull/898)
- [@TWiStErRob](https://togithub.com/TWiStErRob) made their first
contribution in
[https://github.com/actions/setup-node/pull/879](https://togithub.com/actions/setup-node/pull/879)
- [@NullVoxPopuli](https://togithub.com/NullVoxPopuli) made their
first contribution in
[https://github.com/actions/setup-node/pull/865](https://togithub.com/actions/setup-node/pull/865)
**Full Changelog**:
https://github.com/actions/setup-node/compare/v4...v4.0.1
actions/upload-artifact (actions/upload-artifact)
###
[`v4.3.1`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.1)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.3.0...v4.3.1)
- Bump
[@actions/artifacts](https://togithub.com/actions/artifacts) to
latest version to include [updated GHES host
check](https://togithub.com/actions/toolkit/pull/1648)
###
[`v4.3.0`](https://togithub.com/actions/upload-artifact/releases/tag/v4.3.0)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.2.0...v4.3.0)
##### What's Changed
- Reorganize upload code in prep for merge logic & add more tests by
[@robherley](https://togithub.com/robherley) in
[https://github.com/actions/upload-artifact/pull/504](https://togithub.com/actions/upload-artifact/pull/504)
- Add sub-action to merge artifacts by
[@robherley](https://togithub.com/robherley) in
[https://github.com/actions/upload-artifact/pull/505](https://togithub.com/actions/upload-artifact/pull/505)
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.3.0
###
[`v4.2.0`](https://togithub.com/actions/upload-artifact/releases/tag/v4.2.0)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.1.0...v4.2.0)
##### What's Changed
- Ability to overwrite an Artifact by
[@robherley](https://togithub.com/robherley) in
[https://github.com/actions/upload-artifact/pull/501](https://togithub.com/actions/upload-artifact/pull/501)
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.2.0
###
[`v4.1.0`](https://togithub.com/actions/upload-artifact/releases/tag/v4.1.0)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v4.0.0...v4.1.0)
#### What's Changed
- Add migrations docs by
[@robherley](https://togithub.com/robherley) in
[https://github.com/actions/upload-artifact/pull/482](https://togithub.com/actions/upload-artifact/pull/482)
- Update README.md by
[@samuelwine](https://togithub.com/samuelwine) in
[https://github.com/actions/upload-artifact/pull/492](https://togithub.com/actions/upload-artifact/pull/492)
- Support artifact-url output by
[@konradpabjan](https://togithub.com/konradpabjan) in
[https://github.com/actions/upload-artifact/pull/496](https://togithub.com/actions/upload-artifact/pull/496)
- Update readme to reflect new 500 artifact per job limit by
[@robherley](https://togithub.com/robherley) in
[https://github.com/actions/upload-artifact/pull/497](https://togithub.com/actions/upload-artifact/pull/497)
#### New Contributors
- [@samuelwine](https://togithub.com/samuelwine) made their first
contribution in
[https://github.com/actions/upload-artifact/pull/492](https://togithub.com/actions/upload-artifact/pull/492)
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v4...v4.1.0
###
[`v4.0.0`](https://togithub.com/actions/upload-artifact/releases/tag/v4.0.0)
[Compare
Source](https://togithub.com/actions/upload-artifact/compare/v3.1.3...v4.0.0)
#### What's Changed
The release of upload-artifact@v4 and download-artifact@v4 are major
changes to the backend architecture of Artifacts. They have numerous
performance and behavioral improvements.
For more information, see the
[@actions/artifact](https://togithub.com/actions/toolkit/tree/main/packages/artifact)
documentation.
#### New Contributors
- [@vmjoseph](https://togithub.com/vmjoseph) made their first
contribution in
[https://github.com/actions/upload-artifact/pull/464](https://togithub.com/actions/upload-artifact/pull/464)
**Full Changelog**:
https://github.com/actions/upload-artifact/compare/v3...v4.0.0
google-github-actions/release-please-action
(google-github-actions/release-please-action)
###
[`v4`](https://togithub.com/google-github-actions/release-please-action/compare/v3...v4)
[Compare
Source](https://togithub.com/google-github-actions/release-please-action/compare/v3...v4)
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
â™» **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/defenseunicorns/uds-core).
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Micah Nagel
Co-authored-by: Micah Nagel
---
.github/actions/save-logs/action.yaml | 10 ++++++++--
.github/actions/setup/action.yaml | 6 +++---
.github/workflows/commitlint.yaml | 2 +-
.github/workflows/pull-request-conditionals.yaml | 4 ++--
.github/workflows/tag-and-release.yml | 4 +++-
.github/workflows/test.yaml | 2 ++
6 files changed, 19 insertions(+), 9 deletions(-)
diff --git a/.github/actions/save-logs/action.yaml b/.github/actions/save-logs/action.yaml
index fbb3bfce..82e23aee 100644
--- a/.github/actions/save-logs/action.yaml
+++ b/.github/actions/save-logs/action.yaml
@@ -1,6 +1,12 @@
name: save-logs
description: "Save debug logs"
+inputs:
+ suffix:
+ description: 'Suffix to append to the debug log'
+ required: false
+ default: ''
+
runs:
using: composite
steps:
@@ -10,9 +16,9 @@ runs:
sudo chown $USER /tmp/uds-*.log || echo ""
shell: bash
- - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+ - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
with:
- name: debug-log
+ name: debug-log${{ inputs.suffix }}
path: |
/tmp/zarf-*.log
/tmp/uds-*.log
diff --git a/.github/actions/setup/action.yaml b/.github/actions/setup/action.yaml
index 456e55ec..a6f1170e 100644
--- a/.github/actions/setup/action.yaml
+++ b/.github/actions/setup/action.yaml
@@ -16,7 +16,7 @@ runs:
using: "composite"
steps:
- name: Use Node.js latest
- uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+ uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
with:
node-version: 20
@@ -33,14 +33,14 @@ runs:
run: brew install defenseunicorns/tap/uds@0.8.1
- name: Login to GHCR
- uses: docker/login-action@v3
+ uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
with:
registry: ghcr.io
username: dummy
password: ${{ inputs.gh_token }}
- name: Login to registry1
- uses: docker/login-action@v3
+ uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3
with:
registry: registry1.dso.mil
username: ${{ inputs.ib_user }}
diff --git a/.github/workflows/commitlint.yaml b/.github/workflows/commitlint.yaml
index 09fadf87..d28f3813 100644
--- a/.github/workflows/commitlint.yaml
+++ b/.github/workflows/commitlint.yaml
@@ -19,7 +19,7 @@ jobs:
fetch-depth: 0
- name: Setup Node.js
- uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+ uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
- name: Install commitlint
run: npm install --save-dev @commitlint/{config-conventional,cli}
diff --git a/.github/workflows/pull-request-conditionals.yaml b/.github/workflows/pull-request-conditionals.yaml
index ade17b10..6176a758 100644
--- a/.github/workflows/pull-request-conditionals.yaml
+++ b/.github/workflows/pull-request-conditionals.yaml
@@ -24,9 +24,9 @@ jobs:
lint-check:
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@v4
+ - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
- name: Use Node.js latest
- uses: actions/setup-node@8f152de45cc393bb48ce5d89d36b731f54556e65 # v4.0.0
+ uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
with:
node-version: 20
- name: Set up Homebrew
diff --git a/.github/workflows/tag-and-release.yml b/.github/workflows/tag-and-release.yml
index 3b4a32ad..0cc3ed6e 100644
--- a/.github/workflows/tag-and-release.yml
+++ b/.github/workflows/tag-and-release.yml
@@ -15,7 +15,7 @@ jobs:
steps:
- name: Create release tag
id: tag
- uses: google-github-actions/release-please-action@v3
+ uses: google-github-actions/release-please-action@cc61a07e2da466bebbc19b3a7dd01d6aecb20d1e # v4
with:
command: manifest # use configs in release-please-config.json
- id: release-flag
@@ -54,3 +54,5 @@ jobs:
- name: Save logs
if: always()
uses: ./.github/actions/save-logs
+ with:
+ suffix: -${{ matrix.flavor }}
diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml
index a700587b..e4e91995 100644
--- a/.github/workflows/test.yaml
+++ b/.github/workflows/test.yaml
@@ -84,3 +84,5 @@ jobs:
- name: Save logs
if: always()
uses: ./.github/actions/save-logs
+ with:
+ suffix: -${{ inputs.test_type }}-${{ inputs.package }}-${{ inputs.flavor }}