Skip to content

Commit e00f734

Browse files
TechassiTechassi
authored
chore: Bump various actions to latest versions (#510)
* chore: Bump cachix/install-nix-action to 31.2.0 * chore: Bump stackabletech/actions/run-pre-commit to 0.8.0 * chore(template): Bump dtolnay/rust-toolchain * chore(template): Bump Swatinem/rust-cache to 2.7.8 squash me * chore(template): Bump EmbarkStudios/cargo-deny-action to 2.0.11 * chore(template): Bump actions/setup-python to 5.6.0 * chore(template): Bump azure/setup-helm to 4.3.0 * chore(template): Bump sigstore/cosign-installer to 3.8.2 * chore(template): Bump rustsec/audit-check to 2.0.0 * chore(template): Add TODO comments to build workflow
1 parent e3613f8 commit e00f734

File tree

5 files changed

+28
-22
lines changed

5 files changed

+28
-22
lines changed

‎.github/workflows/generate_prs.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,7 @@ jobs:
108108
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
109109
with:
110110
persist-credentials: false
111-
- uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72 # v30
111+
- uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31.2.0
112112
- name: Install Ansible
113113
env:
114114
DEBIAN_FRONTEND: noninteractive

‎.github/workflows/pr_pre-commit.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
with:
1919
persist-credentials: false
2020
fetch-depth: 0
21-
- uses: stackabletech/actions/run-pre-commit@2d3d7ddad981ae09901d45a0f6bf30c2658b1b78 # v0.7.0
21+
- uses: stackabletech/actions/run-pre-commit@4bfd3b65f22af597fe784599c077dc34bf5894a7 # v0.8.0
2222
with:
2323
python-version: ${{ env.PYTHON_VERSION }}
2424
hadolint: ${{ env.HADOLINT_VERSION }}

‎template/.github/workflows/build.yml.j2

+24-18
Original file line numberDiff line numberDiff line change
@@ -50,10 +50,10 @@ jobs:
5050
with:
5151
persist-credentials: false
5252
submodules: recursive
53-
- uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c
53+
- uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0
5454
with:
5555
toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
56-
- uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
56+
- uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
5757
with:
5858
key: udeps
5959
cache-all-crates: "true"
@@ -114,7 +114,7 @@ jobs:
114114
with:
115115
persist-credentials: false
116116
submodules: recursive
117-
- uses: EmbarkStudios/cargo-deny-action@8d73959fce1cdc8989f23fdf03bec6ae6a6576ef # v2.0.7
117+
- uses: EmbarkStudios/cargo-deny-action@34899fc7ba81ca6268d5947a7a16b4649013fea1 # v2.0.11
118118
with:
119119
command: check ${{ matrix.checks }}
120120

@@ -126,7 +126,7 @@ jobs:
126126
with:
127127
persist-credentials: false
128128
submodules: recursive
129-
- uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c
129+
- uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0
130130
with:
131131
toolchain: ${{ env.RUST_NIGHTLY_TOOLCHAIN_VERSION }}
132132
components: rustfmt
@@ -147,14 +147,15 @@ jobs:
147147
with:
148148
persist-credentials: false
149149
submodules: recursive
150-
- uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c
150+
- uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0
151151
with:
152152
toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
153153
components: clippy
154-
- uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
154+
- uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
155155
with:
156156
key: clippy
157157
cache-all-crates: "true"
158+
# TODO (@Techassi): Remove this step (unmaintained action, kinda useless step anyway)
158159
- name: Run clippy action to produce annotations
159160
uses: giraffate/clippy-action@13b9d32482f25d29ead141b79e7e04e7900281e0 # v1.0.1
160161
env:
@@ -164,12 +165,14 @@ jobs:
164165
clippy_flags: --all-targets -- -D warnings
165166
reporter: 'github-pr-review'
166167
github_token: ${{ secrets.GITHUB_TOKEN }}
168+
# TODO (@Techassi): Remove, done by pre-commit
167169
- name: Run clippy manually without annotations
168170
env:
169171
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
170172
if: env.GITHUB_TOKEN == null
171173
run: cargo clippy --color never -q --all-targets -- -D warnings
172174

175+
# TODO (@Techassi): Can be done by pre-commit
173176
run_rustdoc:
174177
name: Run RustDoc
175178
runs-on: ubuntu-latest
@@ -182,16 +185,17 @@ jobs:
182185
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
183186
with:
184187
submodules: recursive
185-
- uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c
188+
- uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0
186189
with:
187190
toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
188191
components: rustfmt
189-
- uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
192+
- uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
190193
with:
191194
key: doc
192195
cache-all-crates: "true"
193196
- run: cargo doc --document-private-items
194197

198+
# TODO (@Techassi): Remove, done by pre-commit
195199
run_tests:
196200
name: Run Cargo Tests
197201
runs-on: ubuntu-latest
@@ -205,10 +209,10 @@ jobs:
205209
with:
206210
persist-credentials: false
207211
submodules: recursive
208-
- uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c
212+
- uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0
209213
with:
210214
toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
211-
- uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
215+
- uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
212216
with:
213217
key: test
214218
cache-all-crates: "true"
@@ -226,7 +230,7 @@ jobs:
226230
with:
227231
persist-credentials: false
228232
submodules: recursive
229-
- uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
233+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
230234
with:
231235
python-version: ${{ env.PYTHON_VERSION }}
232236
- name: Install jinja2-cli
@@ -266,14 +270,14 @@ jobs:
266270
persist-credentials: false
267271
submodules: recursive
268272
- name: Set up Helm
269-
uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v4.2.0
273+
uses: azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4.3.0
270274
with:
271275
version: v3.16.1
272276
- name: Set up cargo
273-
uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c
277+
uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0
274278
with:
275279
toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
276-
- uses: Swatinem/rust-cache@f0deed1e0edfc6a9be95417288c0e1099b1eeec3 # v2.7.7
280+
- uses: Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
277281
with:
278282
key: charts
279283
cache-all-crates: "true"
@@ -304,6 +308,8 @@ jobs:
304308
- name: log
305309
run: echo All tests have passed!
306310

311+
# TODO (@Techassi): Most of these publishing and signing tasks can be done by our own actions.
312+
# Make use of them just like we do in docker-images.
307313
package_and_publish:
308314
name: Package Charts, Build Docker Image and publish them - ${{ matrix.runner }}
309315
needs:
@@ -334,8 +340,8 @@ jobs:
334340
with:
335341
persist-credentials: false
336342
submodules: recursive
337-
- uses: cachix/install-nix-action@08dcb3a5e62fa31e2da3d490afc4176ef55ecd72 # v30
338-
- uses: dtolnay/rust-toolchain@c5a29ddb4d9d194e7c84ec8c3fba61b1c31fee8c
343+
- uses: cachix/install-nix-action@754537aaedb35f72ab11a60cc162c49ef3016495 # v31.2.0
344+
- uses: dtolnay/rust-toolchain@56f84321dbccf38fb67ce29ab63e4754056677e0
339345
with:
340346
toolchain: ${{ env.RUST_TOOLCHAIN_VERSION }}
341347
components: rustfmt
@@ -370,7 +376,7 @@ jobs:
370376

371377
# Recreate charts and publish charts and docker image.
372378
- name: Install cosign
373-
uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
379+
uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
374380
- name: Install syft
375381
uses: anchore/sbom-action/download-syft@f325610c9f50a54015d37c8d16cb3b0e2c8f4de0 # v0.18.0
376382
- name: Build Docker image and Helm chart
@@ -415,7 +421,7 @@ jobs:
415421
OCI_REGISTRY_SDP_CHARTS_USERNAME: "robot$sdp-charts+github-action-build"
416422
steps:
417423
- name: Install cosign
418-
uses: sigstore/cosign-installer@d7d6bc7722e3daa8354c50bcb52f4837da5e9b6a # v3.8.1
424+
uses: sigstore/cosign-installer@3454372f43399081ed03b604cb2d021dabca52bb # v3.8.2
419425
- name: Checkout
420426
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
421427
with:

‎template/.github/workflows/general_daily_security.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -19,6 +19,6 @@ jobs:
1919
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
2020
with:
2121
persist-credentials: false
22-
- uses: rustsec/audit-check@dd51754d4e59da7395a4cd9b593f0ff2d61a9b95 # v1.4.1
22+
- uses: rustsec/audit-check@69366f33c96575abad1ee0dba8212993eecbe998 # v2.0.0
2323
with:
2424
token: ${{ secrets.GITHUB_TOKEN }}

‎template/.github/workflows/pr_pre-commit.yaml.j2

+1-1
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
persist-credentials: false
2525
submodules: recursive
2626
fetch-depth: 0
27-
- uses: stackabletech/actions/run-pre-commit@2d3d7ddad981ae09901d45a0f6bf30c2658b1b78 # v0.7.0
27+
- uses: stackabletech/actions/run-pre-commit@4bfd3b65f22af597fe784599c077dc34bf5894a7 # v0.8.0
2828
with:
2929
python-version: ${{ env.PYTHON_VERSION }}
3030
rust: ${{ env.RUST_TOOLCHAIN_VERSION }}

0 commit comments

Comments
 (0)