From 9853d4fd01d97c256826f2f64644519658b02b4f Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 21 Oct 2024 12:28:26 +0000 Subject: [PATCH] chore(deps): update all non-major github action dependencies --- .github/workflows/cache-cleanup.yml | 2 +- .github/workflows/codeql.yml | 8 ++++---- .github/workflows/cypress-component.yml | 8 ++++---- .github/workflows/cypress.yml | 8 ++++---- .github/workflows/delete-ecs-task-defs.yml | 2 +- .github/workflows/docker-vulnerability-scan.yml | 2 +- .github/workflows/eslint.yml | 12 ++++++------ .github/workflows/jest.yml | 4 ++-- .github/workflows/pr-review-client-deploy.yml | 2 +- .github/workflows/pr-review-sync-env-vars.yml | 2 +- .github/workflows/prod-build-push-container.yml | 4 ++-- .github/workflows/prod-deploy.yml | 8 ++++---- .github/workflows/release_generator.yml | 2 +- .github/workflows/staging-build-push-container.yml | 4 ++-- .github/workflows/staging-deploy.yml | 8 ++++---- .../workflows/test-container-build-production.yml | 2 +- .github/workflows/test-container-build-staging.yml | 2 +- .github/workflows/vitest.yml | 4 ++-- 18 files changed, 42 insertions(+), 42 deletions(-) diff --git a/.github/workflows/cache-cleanup.yml b/.github/workflows/cache-cleanup.yml index f3d8f1c55c..2d6ca04cb4 100644 --- a/.github/workflows/cache-cleanup.yml +++ b/.github/workflows/cache-cleanup.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Cleanup run: | diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 135a16b8d5..8ef751b221 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -25,17 +25,17 @@ jobs: steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Initialize CodeQL - uses: github/codeql-action/init@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11 + uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 with: languages: ${{ matrix.language }} - name: Autobuild - uses: github/codeql-action/autobuild@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11 + uses: github/codeql-action/autobuild@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@b611370bb5703a7efb587f9d136a52ea24c5c38c # v3.25.11 + uses: github/codeql-action/analyze@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/cypress-component.yml b/.github/workflows/cypress-component.yml index b4e222eb59..3a2ba7eb98 100644 --- a/.github/workflows/cypress-component.yml +++ b/.github/workflows/cypress-component.yml @@ -11,7 +11,7 @@ jobs: - name: Checkout uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1.2.0 - name: Node.JS Setup - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version-file: .nvmrc @@ -22,7 +22,7 @@ jobs: id: yarn-cache-dir-path run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`) with: path: ${{ steps.yarn-cache-dir-path.outputs.dir }} @@ -34,14 +34,14 @@ jobs: run: yarn workspaces focus gcforms flag_initialization - name: Cypress Component Tests - uses: cypress-io/github-action@8d3918616d8ac34caa2b49afc8b408b6a872a6f5 # v6.7.1 + uses: cypress-io/github-action@0da3c06ed8217b912deea9d8ee69630baed1737e # v6.7.6 with: # we have already installed all dependencies above install: false browser: chrome component: true headed: false - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4 + - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 if: failure() with: name: cypress-screenshots diff --git a/.github/workflows/cypress.yml b/.github/workflows/cypress.yml index 9dedadfdbe..1829669b59 100644 --- a/.github/workflows/cypress.yml +++ b/.github/workflows/cypress.yml @@ -43,7 +43,7 @@ jobs: - name: Checkout uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1.2.0 - name: Node.JS Setup - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version-file: .nvmrc @@ -54,7 +54,7 @@ jobs: id: yarn-cache-dir-path run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`) with: path: ${{ steps.yarn-cache-dir-path.outputs.dir }} @@ -66,7 +66,7 @@ jobs: run: yarn workspaces focus gcforms flag_initialization - name: Cypress Tests - uses: cypress-io/github-action@8d3918616d8ac34caa2b49afc8b408b6a872a6f5 # v6.7.1 + uses: cypress-io/github-action@0da3c06ed8217b912deea9d8ee69630baed1737e # v6.7.6 with: # we have already installed all dependencies above install: false @@ -76,7 +76,7 @@ jobs: start: yarn start:test wait-on: "http://localhost:3000" config: baseUrl=http://localhost:3000 - - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4 + - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 if: failure() with: name: cypress-screenshots diff --git a/.github/workflows/delete-ecs-task-defs.yml b/.github/workflows/delete-ecs-task-defs.yml index 045cc4a856..ab30b0cf12 100644 --- a/.github/workflows/delete-ecs-task-defs.yml +++ b/.github/workflows/delete-ecs-task-defs.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Configure AWS credentials using OIDC uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2 diff --git a/.github/workflows/docker-vulnerability-scan.yml b/.github/workflows/docker-vulnerability-scan.yml index a55d09fb29..198a0a908b 100644 --- a/.github/workflows/docker-vulnerability-scan.yml +++ b/.github/workflows/docker-vulnerability-scan.yml @@ -28,7 +28,7 @@ jobs: - name: Login to Staging Amazon ECR id: login-ecr-staging - uses: aws-actions/amazon-ecr-login@8308922cec0e5e898b1f51cf0908258552976578 + uses: aws-actions/amazon-ecr-login@6f9c6fad87720db87041e25e3ecf5b609c0368a0 - name: Docker vulnerability scan uses: cds-snc/security-tools/.github/actions/docker-scan@34794baf2af592913bb5b51d8df4f8d0acc49b6f # v3.2.0 diff --git a/.github/workflows/eslint.yml b/.github/workflows/eslint.yml index 6dc5530739..3c1a2706a5 100644 --- a/.github/workflows/eslint.yml +++ b/.github/workflows/eslint.yml @@ -9,9 +9,9 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'push' steps: - - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Node.JS Setup - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version-file: .nvmrc @@ -22,7 +22,7 @@ jobs: id: yarn-cache-dir-path run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`) with: path: ${{ steps.yarn-cache-dir-path.outputs.dir }} @@ -46,7 +46,7 @@ jobs: steps: - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1.2.0 - name: Node.JS Setup - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version-file: .nvmrc @@ -57,7 +57,7 @@ jobs: id: yarn-cache-dir-path run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`) with: path: ${{ steps.yarn-cache-dir-path.outputs.dir }} @@ -86,7 +86,7 @@ jobs: report-json: "eslint_report.json" continue-on-error: true - name: Upload ESLint report - uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b # v4.3.4 + uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3 with: name: eslint_report.json path: eslint_report.json diff --git a/.github/workflows/jest.yml b/.github/workflows/jest.yml index c94581b7ce..ca82db4a3f 100644 --- a/.github/workflows/jest.yml +++ b/.github/workflows/jest.yml @@ -10,7 +10,7 @@ jobs: steps: - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1.2.0 - name: Node.JS Setup - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version-file: .nvmrc - name: Yarn update to V4 @@ -20,7 +20,7 @@ jobs: id: yarn-cache-dir-path run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`) with: path: ${{ steps.yarn-cache-dir-path.outputs.dir }} diff --git a/.github/workflows/pr-review-client-deploy.yml b/.github/workflows/pr-review-client-deploy.yml index 7f8afe49e9..81a5a1cc9f 100644 --- a/.github/workflows/pr-review-client-deploy.yml +++ b/.github/workflows/pr-review-client-deploy.yml @@ -49,7 +49,7 @@ jobs: run: echo "PR_NUMBER=$(jq --raw-output .pull_request.number "$GITHUB_EVENT_PATH")" >> $GITHUB_ENV - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Configure AWS credentials using OIDC uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2 diff --git a/.github/workflows/pr-review-sync-env-vars.yml b/.github/workflows/pr-review-sync-env-vars.yml index 7a86b56bdd..6efdc46cf8 100644 --- a/.github/workflows/pr-review-sync-env-vars.yml +++ b/.github/workflows/pr-review-sync-env-vars.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Configure AWS credentials using OIDC uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2 diff --git a/.github/workflows/prod-build-push-container.yml b/.github/workflows/prod-build-push-container.yml index ffc7fd8fdd..12ac9bd6fb 100644 --- a/.github/workflows/prod-build-push-container.yml +++ b/.github/workflows/prod-build-push-container.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 with: ref: ${{ env.TAG_VERSION }} @@ -41,7 +41,7 @@ jobs: - name: Login to Production Amazon ECR id: login-ecr-production - uses: aws-actions/amazon-ecr-login@8308922cec0e5e898b1f51cf0908258552976578 + uses: aws-actions/amazon-ecr-login@6f9c6fad87720db87041e25e3ecf5b609c0368a0 - name: Tag Images for Production env: diff --git a/.github/workflows/prod-deploy.yml b/.github/workflows/prod-deploy.yml index bfb6703d28..f6e2f4ffa7 100644 --- a/.github/workflows/prod-deploy.yml +++ b/.github/workflows/prod-deploy.yml @@ -32,7 +32,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Configure AWS credentials using OIDC uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2 @@ -44,7 +44,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr # v1 as of Jan 28 2021 - uses: aws-actions/amazon-ecr-login@8308922cec0e5e898b1f51cf0908258552976578 + uses: aws-actions/amazon-ecr-login@6f9c6fad87720db87041e25e3ecf5b609c0368a0 - name: Download Form Viewer task definition id: download-taskdef-form-viewer @@ -55,7 +55,7 @@ jobs: - name: Render image for form viewer service id: taskdef-form-viewer # v1.0.10 - uses: aws-actions/amazon-ecs-render-task-definition@39c13cf530718ffeb524ec8ee0c15882bcb13842 + uses: aws-actions/amazon-ecs-render-task-definition@6296a9f73edea146c3ac3c4d405f47ae35fdbe85 with: task-definition: form_viewer.json container-name: ${{ steps.download-taskdef-form-viewer.outputs.container_name }} @@ -71,7 +71,7 @@ jobs: - name: Deploy image for Form Viewer timeout-minutes: 10 # v1.4.11 - uses: aws-actions/amazon-ecs-deploy-task-definition@3e7310352de91b71a906e60c22af629577546002 + uses: aws-actions/amazon-ecs-deploy-task-definition@dea4e45eacafa8bd6d31ad4d4bb4038816ab0edc with: task-definition: ${{ steps.taskdef-form-viewer.outputs.task-definition }} service: form-viewer diff --git a/.github/workflows/release_generator.yml b/.github/workflows/release_generator.yml index 96fccbd771..4e83ddae41 100644 --- a/.github/workflows/release_generator.yml +++ b/.github/workflows/release_generator.yml @@ -13,7 +13,7 @@ jobs: release-please: runs-on: ubuntu-latest steps: - - uses: actions/create-github-app-token@31c86eb3b33c9b601a1f60f98dcbfd1d70f379b4 # v1.10.3 + - uses: actions/create-github-app-token@5d869da34e18e7287c1daad50e0b8ea0f506ce69 # v1.11.0 id: sre_app_token with: app-id: ${{ secrets.SRE_APP_ID }} diff --git a/.github/workflows/staging-build-push-container.yml b/.github/workflows/staging-build-push-container.yml index 14bb02666d..eafca3d06c 100644 --- a/.github/workflows/staging-build-push-container.yml +++ b/.github/workflows/staging-build-push-container.yml @@ -27,7 +27,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build Form Viewer run: | @@ -44,7 +44,7 @@ jobs: - name: Login to Staging Amazon ECR id: login-ecr-staging - uses: aws-actions/amazon-ecr-login@8308922cec0e5e898b1f51cf0908258552976578 + uses: aws-actions/amazon-ecr-login@6f9c6fad87720db87041e25e3ecf5b609c0368a0 - name: Tag Images for Staging env: diff --git a/.github/workflows/staging-deploy.yml b/.github/workflows/staging-deploy.yml index b1a4946ad2..ada9b9435b 100644 --- a/.github/workflows/staging-deploy.yml +++ b/.github/workflows/staging-deploy.yml @@ -33,7 +33,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Configure AWS credentials using OIDC uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2 @@ -45,7 +45,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr # v1 as of Jan 28 2021 - uses: aws-actions/amazon-ecr-login@8308922cec0e5e898b1f51cf0908258552976578 + uses: aws-actions/amazon-ecr-login@6f9c6fad87720db87041e25e3ecf5b609c0368a0 - name: Download Form Viewer task definition id: download-taskdef-form-viewer @@ -56,7 +56,7 @@ jobs: - name: Render image for form viewer service id: taskdef-form-viewer # v1.0.10 - uses: aws-actions/amazon-ecs-render-task-definition@39c13cf530718ffeb524ec8ee0c15882bcb13842 + uses: aws-actions/amazon-ecs-render-task-definition@6296a9f73edea146c3ac3c4d405f47ae35fdbe85 with: task-definition: form_viewer.json container-name: ${{ steps.download-taskdef-form-viewer.outputs.container_name }} @@ -72,7 +72,7 @@ jobs: - name: Deploy image for Form Viewer timeout-minutes: 10 # v1.4.11 - uses: aws-actions/amazon-ecs-deploy-task-definition@3e7310352de91b71a906e60c22af629577546002 + uses: aws-actions/amazon-ecs-deploy-task-definition@dea4e45eacafa8bd6d31ad4d4bb4038816ab0edc with: task-definition: ${{ steps.taskdef-form-viewer.outputs.task-definition }} service: form-viewer diff --git a/.github/workflows/test-container-build-production.yml b/.github/workflows/test-container-build-production.yml index 023d0f585c..1693e6d027 100644 --- a/.github/workflows/test-container-build-production.yml +++ b/.github/workflows/test-container-build-production.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build Container run: | diff --git a/.github/workflows/test-container-build-staging.yml b/.github/workflows/test-container-build-staging.yml index 31cf744075..d14b3bb276 100644 --- a/.github/workflows/test-container-build-staging.yml +++ b/.github/workflows/test-container-build-staging.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 - name: Build Container run: | diff --git a/.github/workflows/vitest.yml b/.github/workflows/vitest.yml index fc2f9eab87..27834eb325 100644 --- a/.github/workflows/vitest.yml +++ b/.github/workflows/vitest.yml @@ -10,7 +10,7 @@ jobs: steps: - uses: actions/checkout@50fbc622fc4ef5163becd7fab6573eac35f8462e # v1.2.0 - name: Node.JS Setup - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 + uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4 with: node-version-file: .nvmrc - name: Yarn update to V4 @@ -20,7 +20,7 @@ jobs: id: yarn-cache-dir-path run: echo "dir=$(yarn config get cacheFolder)" >> $GITHUB_OUTPUT - - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 + - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4.1.1 id: yarn-cache # use this to check for `cache-hit` (`steps.yarn-cache.outputs.cache-hit != 'true'`) with: path: ${{ steps.yarn-cache-dir-path.outputs.dir }}