diff --git a/.github/workflows/asa-sample-helloworld-create-release.yml b/.github/workflows/asa-sample-helloworld-create-release.yml index 7aad7f9..72d70ae 100644 --- a/.github/workflows/asa-sample-helloworld-create-release.yml +++ b/.github/workflows/asa-sample-helloworld-create-release.yml @@ -23,12 +23,12 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'spring-guides/gs-spring-boot-for-azure' ref: ${{ github.event.inputs.commit-sha }} - name: Setup Java JDK - uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: '17' distribution: 'temurin' diff --git a/.github/workflows/asa-sample-helloworld-docker-image.yml b/.github/workflows/asa-sample-helloworld-docker-image.yml index d2b6192..5ae7de3 100644 --- a/.github/workflows/asa-sample-helloworld-docker-image.yml +++ b/.github/workflows/asa-sample-helloworld-docker-image.yml @@ -25,12 +25,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'spring-guides/gs-spring-boot-for-azure' ref: ${{ github.event.inputs.commit-sha }} - name: Setup Java JDK - uses: actions/setup-java@cd89f46ac9d01407894225f350157564c9c7cee2 # v3.12.0 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: '17' distribution: 'temurin' @@ -42,15 +42,15 @@ jobs: run: ./mvnw clean package working-directory: ./complete - name: Set up Docker Buildx - uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2.10.0 + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 - name: Log into registry - uses: docker/login-action@dd4fa0671be5250ee6f50aedf4cb05514abda2c7 # v1.14.1 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: registry: ${{ secrets.ACR_ENDPOINT }} username: ${{ secrets.ACR_USERNAME }} password: ${{ secrets.ACR_PASSWORD }} - name: Build and push Docker images - uses: docker/build-push-action@2eb1c1961a95fc15694676618e422e8ba1d63825 # v4.1.1 + uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 with: context: ./complete platforms: linux/amd64, linux/arm64 diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 47b1fe4..4ee8d25 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -10,9 +10,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up JDK 11 - uses: actions/setup-java@cf277c60eb25467037889841efdb72551f06f6c3 # v4.9.1 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: distribution: 'temurin' java-version: '11' diff --git a/.github/workflows/sonar-spring-cloud-azure.yml b/.github/workflows/sonar-spring-cloud-azure.yml index 8aa051c..bb0343b 100644 --- a/.github/workflows/sonar-spring-cloud-azure.yml +++ b/.github/workflows/sonar-spring-cloud-azure.yml @@ -12,18 +12,18 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/azure-sdk-for-java' fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis - name: Set up JDK 17 - uses: actions/setup-java@e9fbacdec3bb3b6036605a3e6f7995d66773a8c6 # v3.14.2 + uses: actions/setup-java@dd06d9cba3e5552c54d9f8ea23572deb30010f7c # v6.0.0 with: java-version: '17' distribution: 'temurin' cache: maven - name: Cache SonarCloud packages - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3.5.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.sonar/cache key: ${{ runner.os }}-sonar diff --git a/.github/workflows/test-spring-boot-rc-version.yml b/.github/workflows/test-spring-boot-rc-version.yml index 9cd929d..215165e 100644 --- a/.github/workflows/test-spring-boot-rc-version.yml +++ b/.github/workflows/test-spring-boot-rc-version.yml @@ -6,7 +6,7 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/spring-cloud-azure-tools' - name: Generate Version File @@ -35,7 +35,7 @@ jobs: else echo "No RC version,cancel update!" fi - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 if: ${{ env.need_update_version == 'true' }} with: repository: 'Azure/azure-sdk-for-java' @@ -95,7 +95,7 @@ jobs: PULL_REQUEST_DRAFT: true - name: Comment on Pull Requests if: ${{ env.need_update_version == 'true' }} - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | diff --git a/.github/workflows/update-spring-cloud-azure-support-file.yml b/.github/workflows/update-spring-cloud-azure-support-file.yml index 5006d19..af8ccb7 100644 --- a/.github/workflows/update-spring-cloud-azure-support-file.yml +++ b/.github/workflows/update-spring-cloud-azure-support-file.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Check for Existing Open Pull Request id: check - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | @@ -41,14 +41,14 @@ jobs: if: ${{ needs.check-open-pr.outputs.has_open_pr == 'false' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/spring-cloud-azure-tools' - name: Generate Spring Cloud Azure Support File run: | mvn compile mvn exec:java -P github-actions -ntp -Dupdate-spring-cloud-azure-support-file=true - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/azure-sdk-for-java' path: 'azure-sdk-for-java' @@ -141,7 +141,7 @@ jobs: PULL_REQUEST_BODY: "${{ env.PULL_REQUEST_BODY }}" - name: Comment on Pull Requests if: ${{ env.NEED_UPDATE_FILE == 'true' }} - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | diff --git a/.github/workflows/update-spring-dependencies.yml b/.github/workflows/update-spring-dependencies.yml index 9ea9b19..7b7e3bd 100644 --- a/.github/workflows/update-spring-dependencies.yml +++ b/.github/workflows/update-spring-dependencies.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Check for Open Spring Boot Upgrade PRs id: check_prs - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: | @@ -51,7 +51,7 @@ jobs: needs: check if: ${{ needs.check.outputs.skip_pipeline != 'true' }} steps: - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: 'Azure/spring-cloud-azure-tools' - name: Generate Version File @@ -74,7 +74,7 @@ jobs: echo "pr_descriptions=$(cat pr-descriptions.txt)" >> $GITHUB_ENV echo "PR_TITLE=${PR_TITLE_PREFIX} $(sed -n '1p' spring-versions.txt) and Spring Cloud $(sed -n '2p' spring-versions.txt)" >> $GITHUB_ENV fi - - uses: actions/checkout@a37ce9120846195fa4ece8f58b268e6043cb2f26 # v3.7.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 if: ${{ env.need_update_version == 'true' }} with: repository: 'Azure/azure-sdk-for-java' @@ -132,7 +132,7 @@ jobs: PULL_REQUEST_DRAFT: false - name: Comment on Pull Requests if: ${{ env.need_update_version == 'true' }} - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0 with: github-token: ${{ secrets.ACCESS_TOKEN }} script: |