diff --git a/.github/workflows/catalog-openstack-operator-upgrades.yaml b/.github/workflows/catalog-openstack-operator-upgrades.yaml index 72be8562d..de6ef3c8b 100644 --- a/.github/workflows/catalog-openstack-operator-upgrades.yaml +++ b/.github/workflows/catalog-openstack-operator-upgrades.yaml @@ -29,12 +29,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Install Go - uses: actions/setup-go@7b8cf10d4e4a01d4992d18a89f4d7dc5a3e6d6f4 # v4 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7 with: go-version: ${{ inputs.go_version }} cache: false - name: Checkout openstack-operator repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: path: ./openstack-operator - name: Set latest tag for non main branch @@ -42,18 +42,18 @@ jobs: run: | echo "latesttag=${{ github.ref_name }}-latest" >> $GITHUB_ENV - name: Install opm - uses: redhat-actions/openshift-tools-installer@144527c7d98999f2652264c048c7a9bd103f8a82 # v1 + uses: redhat-actions/openshift-tools-installer@ebd96c3fc72fc10a62663eac5e1421192152e6aa # v2 with: source: github opm: 'latest' - name: Log in to Quay Registry - uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603 # v1 + uses: redhat-actions/podman-login@50c2d9a331bb67c8fdab99b86455fad05e2e3252 # v2 with: registry: ${{ env.imageregistry }} username: ${{ secrets.QUAY_USERNAME }} password: ${{ secrets.QUAY_PASSWORD }} - name: Log in to Red Hat Registry - uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603 # v1 + uses: redhat-actions/podman-login@50c2d9a331bb67c8fdab99b86455fad05e2e3252 # v2 with: registry: registry.redhat.io username: ${{ secrets.REDHATIO_USERNAME }} @@ -69,14 +69,14 @@ jobs: BUNDLE: ${{ env.imageregistry }}/${{ env.imagenamespace }}/openstack-operator-bundle:${{ github.sha }} - name: Buildah Action id: build-operator-index-upgrade - uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2 + uses: redhat-actions/buildah-build@27e5954dfd56a621f706827f2de689dc955e8711 # v3 with: image: openstack-operator-index-upgrade tags: ${{ env.latesttag }} ${{ github.sha }} containerfiles: | ./catalog.Dockerfile - name: Push openstack-operator-index-upgrade To ${{ env.imageregistry }} - uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2 + uses: redhat-actions/push-to-registry@94ade333c38ecc0e60e94785125d9a52ca423b37 # v3 with: image: ${{ steps.build-operator-index-upgrade.outputs.image }} tags: ${{ steps.build-operator-index-upgrade.outputs.tags }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 44c1bbfc3..6b93a8b44 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -52,11 +52,11 @@ jobs: # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages steps: - name: Checkout repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@b7351df727350dca84cb9d725d57dcf5bc82ba26 # v3 + uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 with: languages: ${{ matrix.language }} build-mode: ${{ matrix.build-mode }} @@ -84,6 +84,6 @@ jobs: exit 1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b7351df727350dca84cb9d725d57dcf5bc82ba26 # v3 + uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/crd-size-badge.yaml b/.github/workflows/crd-size-badge.yaml index cac059911..e3cccd666 100644 --- a/.github/workflows/crd-size-badge.yaml +++ b/.github/workflows/crd-size-badge.yaml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ github.event.pull_request.head.sha || github.sha }} @@ -68,7 +68,7 @@ jobs: - name: Find existing comment if: github.event_name == 'pull_request_target' - uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3 + uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4 id: find_comment with: issue-number: ${{ github.event.pull_request.number }} @@ -77,7 +77,7 @@ jobs: - name: Post or update PR comment if: github.event_name == 'pull_request_target' - uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5 with: comment-id: ${{ steps.find_comment.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} diff --git a/.github/workflows/crd-sync-check.yaml b/.github/workflows/crd-sync-check.yaml index 574664d31..e9b747742 100644 --- a/.github/workflows/crd-sync-check.yaml +++ b/.github/workflows/crd-sync-check.yaml @@ -32,7 +32,7 @@ jobs: echo "branch_name=$BRANCH_NAME" >> $GITHUB_OUTPUT - name: Checkout repository - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: ${{ steps.set_branch.outputs.branch_name }} diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index 720d0b484..683487543 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -19,10 +19,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Install Go - uses: actions/setup-go@be3c94b385c4f180051c996d336f57a34c397495 # v3 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7 with: go-version: 1.26.x - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: # this fetches all branches. Needed because we need gh-pages branch for deploy to work fetch-depth: 0 diff --git a/.github/workflows/kustom.yaml b/.github/workflows/kustom.yaml index dbac8db6a..802f68f1e 100644 --- a/.github/workflows/kustom.yaml +++ b/.github/workflows/kustom.yaml @@ -14,10 +14,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Install Go - uses: actions/setup-go@be3c94b385c4f180051c996d336f57a34c397495 # v3 + uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7 with: go-version: 1.26.x - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: # this fetches all branches. Needed because we need gh-pages branch for deploy to work fetch-depth: 0 diff --git a/.github/workflows/lints.yaml b/.github/workflows/lints.yaml index 769c34f53..8a93d1438 100644 --- a/.github/workflows/lints.yaml +++ b/.github/workflows/lints.yaml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout project code - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: check for replace lines in go.mod files run: | ! egrep --invert-match -e '^replace.*/apis => \./apis|^replace.*//allow-merging$' `find . -name 'go.mod'` | egrep -e 'go.mod:replace' diff --git a/.github/workflows/release-openstack-operator.yaml b/.github/workflows/release-openstack-operator.yaml index 9382aa672..6fd24e7b7 100644 --- a/.github/workflows/release-openstack-operator.yaml +++ b/.github/workflows/release-openstack-operator.yaml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Tag image uses: tinact/docker.image-retag@684702232e2a3c29b4e5ca25d7d80f927d255c64 # 1.0.3