diff --git a/.github/workflows/build-push.yml b/.github/workflows/build-push.yml index 5f42967..dd75621 100644 --- a/.github/workflows/build-push.yml +++ b/.github/workflows/build-push.yml @@ -22,7 +22,7 @@ jobs: uses: actions/checkout@v6 - name: Log in to the Container registry - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ${{ env.REGISTRY }} username: ${{ github.actor }} @@ -30,7 +30,7 @@ jobs: - name: Build and push image id: plotting_service_build - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: file: ./plotting-service/Dockerfile context: ./plotting-service @@ -38,7 +38,7 @@ jobs: tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}/plotting-service:${{ github.sha }} - name: Build and push image - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 id: data_viewer_build with: file: ./data-viewer/Dockerfile @@ -53,12 +53,12 @@ jobs: token: ${{ secrets.GITOPS_STAGING_EDIT_TOKEN }} - name: Edit the YAML plotting-service file for staging - uses: mikefarah/yq@v4.52.2 + uses: mikefarah/yq@v4.52.4 with: cmd: yq e -i '.spec.template.spec.containers[] |= select(.name == "plotting-service").image = "ghcr.io/fiaisis/plotting-service@${{ steps.plotting_service_build.outputs.digest }}"' './components/plotting-service/envs/staging/plotting-service.yml' - name: Edit the YAML data-viewer file for staging - uses: mikefarah/yq@v4.52.2 + uses: mikefarah/yq@v4.52.4 with: cmd: yq e -i '.spec.template.spec.containers[] |= select(.name == "data-viewer").image = "ghcr.io/fiaisis/data-viewer@${{ steps.data_viewer_build.outputs.digest }}"' './components/data-viewer/envs/staging/data-viewer.yml' diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 743373a..f45fe18 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,14 +33,14 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3 + uses: github/codeql-action/init@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3 + uses: github/codeql-action/autobuild@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3 + uses: github/codeql-action/analyze@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 with: category: "/language:${{matrix.language}}" \ No newline at end of file diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index ef15780..adf7660 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -11,4 +11,4 @@ jobs: - name: 'Checkout Repository' uses: actions/checkout@0c366fd6a839edf440554fa01a7085ccba70ac98 # v4.1.5 - name: 'Dependency Review' - uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2 \ No newline at end of file + uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0 \ No newline at end of file diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 6a85eb7..f225cd6 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -45,7 +45,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 with: name: SARIF file path: results.sarif @@ -53,6 +53,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@9e907b5e64f6b83e7804b09294d44122997950d6 # v4.32.3 + uses: github/codeql-action/upload-sarif@0d579ffd059c29b07949a3cce3983f0780820c98 # v4.32.6 with: sarif_file: results.sarif \ No newline at end of file diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index bead368..a408953 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -57,7 +57,7 @@ jobs: browser: chrome - name: Upload screenshots - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@v7 if: failure() with: name: cypress-snapshots