From e80f50bf76c7d5fab97945f7f99fb25b00015b1f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 8 Jun 2026 14:38:03 +0000 Subject: [PATCH 1/2] ci: bump the actions-all group across 1 directory with 10 updates Bumps the actions-all group with 10 updates in the /.github/workflows directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [tj-actions/changed-files](https://github.com/tj-actions/changed-files) | `41` | `47` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `5` | `7` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `4` | `8` | | [softprops/action-gh-release](https://github.com/softprops/action-gh-release) | `2` | `3` | | [zgosalvez/github-actions-report-lcov](https://github.com/zgosalvez/github-actions-report-lcov) | `4.1.2` | `7.0.12` | | [guibranco/github-status-action-v2](https://github.com/guibranco/github-status-action-v2) | `1.1.13` | `1.2.4` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v6) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `tj-actions/changed-files` from 41 to 47 - [Release notes](https://github.com/tj-actions/changed-files/releases) - [Changelog](https://github.com/tj-actions/changed-files/blob/main/HISTORY.md) - [Commits](https://github.com/tj-actions/changed-files/compare/v41...v47) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) Updates `docker/build-push-action` from 5 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v5...v7) Updates `actions/download-artifact` from 4 to 8 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) Updates `softprops/action-gh-release` from 2 to 3 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v2...v3) Updates `zgosalvez/github-actions-report-lcov` from 4.1.2 to 7.0.12 - [Release notes](https://github.com/zgosalvez/github-actions-report-lcov/releases) - [Commits](https://github.com/zgosalvez/github-actions-report-lcov/compare/v4.1.2...v7.0.12) Updates `guibranco/github-status-action-v2` from 1.1.13 to 1.2.4 - [Release notes](https://github.com/guibranco/github-status-action-v2/releases) - [Commits](https://github.com/guibranco/github-status-action-v2/compare/v1.1.13...v1.2.4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: tj-actions/changed-files dependency-version: '47' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: zgosalvez/github-actions-report-lcov dependency-version: 7.0.12 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-all - dependency-name: guibranco/github-status-action-v2 dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-all ... Signed-off-by: dependabot[bot] --- .github/workflows/build-sdk.yml | 6 +++--- .github/workflows/build.yml | 10 +++++----- .github/workflows/builder.yml | 22 +++++++++++----------- .github/workflows/check.yml | 2 +- .github/workflows/release.yml | 22 +++++++++++----------- .github/workflows/test.yml | 12 ++++++------ 6 files changed, 37 insertions(+), 37 deletions(-) diff --git a/.github/workflows/build-sdk.yml b/.github/workflows/build-sdk.yml index c48a491..33b3958 100644 --- a/.github/workflows/build-sdk.yml +++ b/.github/workflows/build-sdk.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: ${{ inputs.ref }} @@ -98,12 +98,12 @@ jobs: working-directory: src/python-evp-app-sdk run: python setup.py --command-packages=stdeb.command bdist_deb - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: python-sdk-${{ matrix.name }}-${{ matrix.platform }}-${{ github.run_id }} path: lib/python/* - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: python-sdk-deb-${{ matrix.name }}-${{ matrix.platform }}-${{ github.run_id }} path: src/python-evp-app-sdk/deb_dist/*.deb diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 949e4a1..18aa8db 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -45,7 +45,7 @@ jobs: platform: amd64 steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: ${{ inputs.ref }} @@ -62,19 +62,19 @@ jobs: run: make dist - name: Upload agent debian package - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: agent-deb-${{ matrix.name }}-${{ matrix.platform }}-${{ github.run_id }} path: evp-agent*.deb - name: Upload sdk debian package - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: libevp-app-sdk-dev-${{ matrix.name }}-${{ matrix.platform }}-${{ github.run_id }} path: libevp-app-sdk-dev*.deb - name: Upload SBOM - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: sbom-agent-${{ matrix.name }}-${{ matrix.platform }}-${{ github.run_id }} path: | @@ -94,7 +94,7 @@ jobs: steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: ${{ inputs.ref }} diff --git a/.github/workflows/builder.yml b/.github/workflows/builder.yml index 1a0f657..e3d535f 100644 --- a/.github/workflows/builder.yml +++ b/.github/workflows/builder.yml @@ -43,12 +43,12 @@ jobs: build: ${{ steps.changed-files.outputs.all_changed_and_modified_files != '' || github.event_name == 'workflow_dispatch' }} builder-tag: ${{ steps.builder-tag.outputs.tag }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 ref: ${{ inputs.ref }} - - uses: tj-actions/changed-files@v41 + - uses: tj-actions/changed-files@v47 id: changed-files with: files: | @@ -80,20 +80,20 @@ jobs: steps: - name: Checkout the code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Login to Github Registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ github.actor }} password: ${{ github.token }} registry: ghcr.io - name: Build and push raspios bookworm builder - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: context: .devcontainer/raspi file: .devcontainer/raspi/Dockerfile @@ -117,20 +117,20 @@ jobs: steps: - name: Checkout the code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Login to Github Registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ github.actor }} password: ${{ github.token }} registry: ghcr.io - name: Build and push ubuntu builder - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v7 with: context: .devcontainer/ubuntu file: .devcontainer/ubuntu/Dockerfile @@ -148,7 +148,7 @@ jobs: steps: - name: Login to Github Registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ github.actor }} password: ${{ github.token }} diff --git a/.github/workflows/check.yml b/.github/workflows/check.yml index cb23b93..7ab5140 100644 --- a/.github/workflows/check.yml +++ b/.github/workflows/check.yml @@ -29,7 +29,7 @@ jobs: timeout-minutes: 3 # the worst case is < 1 minute steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: ${{ inputs.ref }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 96b26ee..73fec13 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -36,7 +36,7 @@ jobs: test -z $last_run_id && echo "cannot find last successful run_id" && exit 1 || echo "last_run_id=$last_run_id" && echo "last_run_id=$last_run_id" >> $GITHUB_OUTPUT - name: Download Python SDK (RaspiOS bookworm ARM64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -46,7 +46,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Python SDK deb (RaspiOS bookworm ARM64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -56,7 +56,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Agent deb (RaspiOS bookworm ARM64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -66,7 +66,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Python SDK (Ubuntu noble ARM64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -76,7 +76,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Python SDK deb (Ubuntu noble ARM64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -86,7 +86,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Agent deb (Ubuntu noble ARM64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -96,7 +96,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Python SDK (Ubuntu noble AMD64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -106,7 +106,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Python SDK deb (Ubuntu noble AMD64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -116,7 +116,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download Agent deb (Ubuntu noble AMD64) - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -126,7 +126,7 @@ jobs: github-token: ${{ github.event.repository.private && secrets.MIDOJENKINS_ARTIFACT_READ_EVP_AGENT_OSS || github.token }} - name: Download SBOM - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 env: LAST_RUN_ID: ${{ steps.run-id.outputs.last_run_id }} with: @@ -166,7 +166,7 @@ jobs: run: ls -la dist-raspios-bookworm-arm64 - name: Push artifacts to release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: prerelease: false files: | diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index e670e01..124723d 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -46,7 +46,7 @@ jobs: steps: - name: Checkout source - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: ${{ inputs.ref }} @@ -112,14 +112,14 @@ jobs: # Upload test logs upon failure. - name: Upload logs - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: test-log-${{ matrix.name }}-${{ matrix.platform }}-${{ github.run_id }}-${{ github.run_attempt }} path: test/logs/**/*.log retention-days: ${{ job.status == 'success' && '7' || '14' }} - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: test-modules-${{ matrix.name }}-${{ matrix.platform }}-${{ github.run_id }} path: | @@ -129,7 +129,7 @@ jobs: test_modules/python/*.zip - name: Upload coverage results - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: # Use a specific folder to not overwrite log files name: coverage-report-${{ matrix.name }}-${{ matrix.platform }}-${{github.run_id}} @@ -139,7 +139,7 @@ jobs: - name: Report code coverage if: ${{ matrix.name == 'raspios-bookworm' && matrix.platform == 'arm64' }} id: report-action-lcov - uses: zgosalvez/github-actions-report-lcov@v4.1.2 + uses: zgosalvez/github-actions-report-lcov@v7.0.12 with: title-prefix: ${{ matrix.name }}-${{ matrix.platform }} coverage-files: coverage/filtered.lcov @@ -149,7 +149,7 @@ jobs: - name: Report summary coverage to status if: ${{ matrix.name == 'raspios-bookworm' && matrix.platform == 'arm64' }} - uses: guibranco/github-status-action-v2@v1.1.13 + uses: guibranco/github-status-action-v2@v1.2.4 with: authToken: ${{ github.token }} context: "Coverage line level: " From 30cba721421dee3f031cb18e8f642f6e6caa1137 Mon Sep 17 00:00:00 2001 From: TE-ShungoHigashi Date: Thu, 18 Jun 2026 18:40:56 +0900 Subject: [PATCH 2/2] fix: Change version tag of actions from semver to major only --- .github/workflows/test.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 124723d..df4a586 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -139,7 +139,7 @@ jobs: - name: Report code coverage if: ${{ matrix.name == 'raspios-bookworm' && matrix.platform == 'arm64' }} id: report-action-lcov - uses: zgosalvez/github-actions-report-lcov@v7.0.12 + uses: zgosalvez/github-actions-report-lcov@v7 with: title-prefix: ${{ matrix.name }}-${{ matrix.platform }} coverage-files: coverage/filtered.lcov @@ -149,7 +149,7 @@ jobs: - name: Report summary coverage to status if: ${{ matrix.name == 'raspios-bookworm' && matrix.platform == 'arm64' }} - uses: guibranco/github-status-action-v2@v1.2.4 + uses: guibranco/github-status-action-v2@v1 with: authToken: ${{ github.token }} context: "Coverage line level: "