diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml index 2fe035c..8c4a0c9 100644 --- a/.github/workflows/cicd.yml +++ b/.github/workflows/cicd.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Perform ShellCheck Analysis run: bash <(curl -s https://raw.githubusercontent.com/CICDToolbox/shellcheck/master/pipeline.sh) @@ -42,7 +42,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Check Job Statuses run: .github/scripts/check-jobs.sh '${{ toJson(needs) }}' diff --git a/.github/workflows/citation-validation.yml b/.github/workflows/citation-validation.yml index 919e944..83b9f55 100644 --- a/.github/workflows/citation-validation.yml +++ b/.github/workflows/citation-validation.yml @@ -41,10 +41,10 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Ruby ${{ needs.get-ruby-version.outputs.version }} - uses: ruby/setup-ruby@d5fb7a202fc07872cb44f00ba8e6197b70cb0c55 # v1.179.0 + uses: ruby/setup-ruby@bb6434c747fa7022e12fa1cae2a0951fcffcff26 # v1.253.0 with: ruby-version: ${{ needs.get-ruby-version.outputs.version }} @@ -61,7 +61,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Validate CITATION.cff uses: citation-file-format/cffconvert-github-action@4cf11baa70a673bfdf9dad0acc7ee33b3f4b6084 # v2.0.0 @@ -78,7 +78,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Check Job Statuses run: .github/scripts/check-jobs.sh '${{ toJson(needs) }}' diff --git a/.github/workflows/dependabot.yml b/.github/workflows/dependabot.yml index 247ba9d..e18ac0d 100644 --- a/.github/workflows/dependabot.yml +++ b/.github/workflows/dependabot.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Fetch Metadata id: dependabot-metadata - uses: dependabot/fetch-metadata@5e5f99653a5b510e8555840e80cbf1514ad4af38 # v2.1.0 + uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2.4.0 with: github-token: "${{ secrets.GITHUB_TOKEN }}" diff --git a/.github/workflows/document-validation.yml b/.github/workflows/document-validation.yml index 6b65173..39fd8b7 100644 --- a/.github/workflows/document-validation.yml +++ b/.github/workflows/document-validation.yml @@ -55,10 +55,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Ruby ${{ needs.get-ruby-version.outputs.version }} - uses: ruby/setup-ruby@d5fb7a202fc07872cb44f00ba8e6197b70cb0c55 # v1.179.0 + uses: ruby/setup-ruby@bb6434c747fa7022e12fa1cae2a0951fcffcff26 # v1.253.0 with: ruby-version: ${{ needs.get-ruby-version.outputs.version }} @@ -74,10 +74,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Node ${{ needs.get-node-version.outputs.version }} - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: ${{ needs.get-node-version.outputs.version }} @@ -96,7 +96,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Check Job Statuses run: .github/scripts/check-jobs.sh '${{ toJson(needs) }}' diff --git a/.github/workflows/generate-release.yml b/.github/workflows/generate-release.yml index 37682a4..e67f414 100644 --- a/.github/workflows/generate-release.yml +++ b/.github/workflows/generate-release.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -40,7 +40,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -52,7 +52,7 @@ jobs: - name: Create a Release id: create_release - uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5 + uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2 with: token: ${{ secrets.GITHUB_TOKEN }} tag_name: ${{ github.ref }} diff --git a/.github/workflows/generate-test-release.yml b/.github/workflows/generate-test-release.yml index b4b3fe7..94cceae 100644 --- a/.github/workflows/generate-test-release.yml +++ b/.github/workflows/generate-test-release.yml @@ -20,7 +20,7 @@ jobs: steps: - name: Checkout the repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -38,7 +38,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 @@ -50,7 +50,7 @@ jobs: - name: Create a Release id: create_release - uses: softprops/action-gh-release@69320dbe05506a9a39fc8ae11030b214ec2d1f87 # v2.0.5 + uses: softprops/action-gh-release@da05d552573ad5aba039eaac05058a918a7bf631 # v2.2.2 with: token: ${{ secrets.GITHUB_TOKEN }} tag_name: ${{ github.ref }} diff --git a/.github/workflows/purge-deprecated-workflow-runs.yml b/.github/workflows/purge-deprecated-workflow-runs.yml index dc6e73d..53c54c1 100644 --- a/.github/workflows/purge-deprecated-workflow-runs.yml +++ b/.github/workflows/purge-deprecated-workflow-runs.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Purge Deprecated Workflow Runs - uses: otto-de/purge-deprecated-workflow-runs@31a4e821d43e9a354cbd65845922c76e4b4b3633 # v 2.0.4 + uses: otto-de/purge-deprecated-workflow-runs@aace01752caac2b45990c06aa876a3755a5b7813 # v 3.0.3 with: token: ${{ secrets.GITHUB_TOKEN }} remove-obsolete: true diff --git a/.github/workflows/repository-validation.yml b/.github/workflows/repository-validation.yml index 8f0c10e..2e19d29 100644 --- a/.github/workflows/repository-validation.yml +++ b/.github/workflows/repository-validation.yml @@ -58,10 +58,10 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # V4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # V4.2.2 - name: Setup Go ${{ needs.get-go-version.outputs.version }} - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # V5.0.1 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # V5.5.0 with: go-version: ${{ needs.get-go-version.outputs.version }} @@ -74,10 +74,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # V4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # V4.2.2 - name: Set up Python ${{ needs.get-python-version.outputs.version }} - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # V5.1.0 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # V5.6.0 with: python-version: ${{ needs.get-python-version.outputs.version }} @@ -94,7 +94,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # V4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # V4.2.2 - name: Check Job Statuses run: .github/scripts/check-jobs.sh '${{ toJson(needs) }}' diff --git a/.github/workflows/security-hardening.yml b/.github/workflows/security-hardening.yml index 42d828d..939219c 100644 --- a/.github/workflows/security-hardening.yml +++ b/.github/workflows/security-hardening.yml @@ -27,7 +27,7 @@ jobs: steps: - name: Checkout the Repository - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Ensure SHA Pinned Actions - uses: zgosalvez/github-actions-ensure-sha-pinned-actions@2f2ebc6d914ab515939dc13f570f91baeb2c194c # v3.0.6 + uses: zgosalvez/github-actions-ensure-sha-pinned-actions@fc87bb5b5a97953d987372e74478de634726b3e5 # v3.0.25 diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 959ef4c..4a0d77c 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Handle Stale Issues & PRs - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0 + uses: actions/stale@5bef64f19d7facfb25b37b414482c7164d639639 # v9.1.0 id: stale-issues with: stale-issue-message: 'This issue is stale because it has been open 30 days with no activity. Remove stale label or comment or this will be closed in 5 days.'