diff --git a/.github/workflows/all_solutions.yml b/.github/workflows/all_solutions.yml index 05565996bf..9060212ce4 100644 --- a/.github/workflows/all_solutions.yml +++ b/.github/workflows/all_solutions.yml @@ -313,13 +313,13 @@ jobs: shell: pwsh #this doesn't work with normal powershell due to UTF-8 BOM handling - name: Download Agent Home Folders - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: homefolders path: src/Agent - name: Download Integration Test Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: integrationtests # Should not need a path because the integration test artifacts are archived with the full directory structure @@ -414,13 +414,13 @@ jobs: fetch-depth: 0 - name: Download Agent Home Folders - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: homefolders path: src/Agent - name: Download Unbounded Integration Test Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: unboundedintegrationtests # Should not need a path because the integration test artifacts are archived with the full directory structure @@ -519,13 +519,13 @@ jobs: fetch-depth: 0 - name: Download msi _build Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: msi-build-folder-artifacts path: src/_build - name: Download Agent Home Folders - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: homefolders path: src/Agent @@ -586,13 +586,13 @@ jobs: fetch-depth: 0 - name: Download Agent Home Folders - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: homefolders path: src/Agent - name: Download msi _build Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: msi-build-folder-artifacts path: src/_build @@ -633,37 +633,37 @@ jobs: fetch-depth: 0 - name: Download Agent Home Folders - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: homefolders path: src/Agent - name: Download msi _build Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: msi-build-folder-artifacts path: src/_build - name: Download Debian _build Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: debian-build-artifacts path: src/_build/CoreArtifacts - name: Download RPM _build Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: rpm-build-artifacts path: src/_build/CoreArtifacts - name: Download NewRelic.Agent.Extensions - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: NewRelic.Agent.Extensions path: src/Agent/NewRelic/Agent/Extensions/NewRelic.Agent.Extensions/bin/Release - name: Download NewRelic.OpenTracing.AmazonLambda.Tracer - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: NewRelic.OpenTracing.AmazonLambda.Tracer path: src/AwsLambda/AwsLambdaOpenTracer/bin/Release/netstandard2.0-ILRepacked diff --git a/.github/workflows/awslambda_release.yml b/.github/workflows/awslambda_release.yml index 6c891cfa8b..42ff32de5c 100644 --- a/.github/workflows/awslambda_release.yml +++ b/.github/workflows/awslambda_release.yml @@ -114,7 +114,7 @@ jobs: fetch-depth: 0 - name: Download NewRelic.OpenTracing.AmazonLambda.Tracer - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: NewRelic.OpenTracing.AmazonLambda.Tracer path: src/AwsLambda/AwsLambdaOpenTracer/bin/Release/netstandard2.0-ILRepacked diff --git a/.github/workflows/build_profiler.yml b/.github/workflows/build_profiler.yml index 1c196f5248..42da2eb4b0 100644 --- a/.github/workflows/build_profiler.yml +++ b/.github/workflows/build_profiler.yml @@ -269,19 +269,19 @@ jobs: fetch-depth: 0 - name: Download Windows Profiler Artifacts to working Directory - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: profiler-windows path: ${{ github.workspace }}/_workingDir - name: Download Linux amd64 Profiler Artifacts to working Directory - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: profiler-amd64 path: ${{ github.workspace }}/_workingDir - name: Download Linux arm64 Profiler Artifacts to working Directory - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: profiler-arm64 path: ${{ github.workspace }}/_workingDir diff --git a/.github/workflows/check_modified_files.yml b/.github/workflows/check_modified_files.yml index 6683715abd..dd8f907396 100644 --- a/.github/workflows/check_modified_files.yml +++ b/.github/workflows/check_modified_files.yml @@ -31,7 +31,7 @@ jobs: with: fetch-depth: 0 - name: Verify which files were modified - uses: dorny/paths-filter@ebc4d7e9ebcb0b1eb21480bb8f43113e996ac77a # v3.0.1 + uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2 id: filter with: base: ${{ github.ref }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 2fb2fb1aa4..a0d243b09c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -39,7 +39,7 @@ jobs: fetch-depth: 0 - name: Initialize CodeQL - uses: github/codeql-action/init@47b3d888fe66b639e431abf22ebca059152f1eea # v3.24.5 + uses: github/codeql-action/init@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 with: languages: csharp @@ -49,7 +49,7 @@ jobs: shell: powershell - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@47b3d888fe66b639e431abf22ebca059152f1eea # v3.24.5 + uses: github/codeql-action/analyze@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 with: category: "/language:csharp" @@ -72,7 +72,7 @@ jobs: fetch-depth: 0 - name: Initialize CodeQL - uses: github/codeql-action/init@47b3d888fe66b639e431abf22ebca059152f1eea # v3.24.5 + uses: github/codeql-action/init@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 with: languages: c-cpp @@ -88,6 +88,6 @@ jobs: shell: powershell - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@47b3d888fe66b639e431abf22ebca059152f1eea # v3.24.5 + uses: github/codeql-action/analyze@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 with: category: "/language:c-cpp" diff --git a/.github/workflows/deploy_agent.yml b/.github/workflows/deploy_agent.yml index 1d3f49c657..af5348489f 100644 --- a/.github/workflows/deploy_agent.yml +++ b/.github/workflows/deploy_agent.yml @@ -161,7 +161,7 @@ jobs: egress-policy: audit - name: Download Deploy Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ needs.get-release-info.outputs.workflow_run_id }} @@ -184,7 +184,7 @@ jobs: steps: - name: Download Deploy Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: deploy-artifacts path: ${{ github.workspace }}\staging_dir @@ -259,7 +259,7 @@ jobs: steps: - name: Download Deploy Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: deploy-artifacts path: ${{ github.workspace }}\working_dir @@ -362,7 +362,7 @@ jobs: fetch-depth: 0 - name: Download Deploy Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: deploy-artifacts path: ${{ github.workspace }}/ diff --git a/.github/workflows/deploy_awslambda.yml b/.github/workflows/deploy_awslambda.yml index f2900f46fb..e031d87f8b 100644 --- a/.github/workflows/deploy_awslambda.yml +++ b/.github/workflows/deploy_awslambda.yml @@ -28,7 +28,7 @@ jobs: steps: - name: Download Deploy Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} diff --git a/.github/workflows/deploy_siteextension.yml b/.github/workflows/deploy_siteextension.yml index 298caab929..dd1bff1ff5 100644 --- a/.github/workflows/deploy_siteextension.yml +++ b/.github/workflows/deploy_siteextension.yml @@ -29,7 +29,7 @@ jobs: steps: - name: Download Deploy Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} diff --git a/.github/workflows/multiverse_run.yml b/.github/workflows/multiverse_run.yml index 62376b36f7..67c95eb8df 100644 --- a/.github/workflows/multiverse_run.yml +++ b/.github/workflows/multiverse_run.yml @@ -47,7 +47,7 @@ jobs: - name: Cache Multiverse Testing Suite id: cache-multiverse - uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0 + uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1 with: path: ${{ env.multiverse_path }} key: multiverse-${{ hashFiles('**/tests/Agent/MultiverseTesting') }} @@ -118,7 +118,7 @@ jobs: fetch-depth: 0 - name: Download MVS - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: mvs path: ${{ env.multiverse_path }} diff --git a/.github/workflows/publish_release_notes.yml b/.github/workflows/publish_release_notes.yml index 0128bd2def..36a26ca146 100644 --- a/.github/workflows/publish_release_notes.yml +++ b/.github/workflows/publish_release_notes.yml @@ -45,7 +45,7 @@ jobs: fetch-depth: 0 - name: Download Deploy Artifacts - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} diff --git a/.github/workflows/run_integration_tests.yml b/.github/workflows/run_integration_tests.yml index 5b77049abd..0671121f2c 100644 --- a/.github/workflows/run_integration_tests.yml +++ b/.github/workflows/run_integration_tests.yml @@ -131,7 +131,7 @@ jobs: shell: pwsh #this doesn't work with normal powershell due to UTF-8 BOM handling - name: Download Agent Home Folders - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} @@ -140,7 +140,7 @@ jobs: repository: ${{ github.repository }} - name: Download Integration Tests - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} @@ -224,7 +224,7 @@ jobs: fetch-depth: 0 - name: Download Agent Home Folders - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} @@ -233,7 +233,7 @@ jobs: repository: ${{ github.repository }} - name: Download Integration Tests - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} diff --git a/.github/workflows/run_linux_container_tests.yml b/.github/workflows/run_linux_container_tests.yml index 2248cee1be..256e600a9e 100644 --- a/.github/workflows/run_linux_container_tests.yml +++ b/.github/workflows/run_linux_container_tests.yml @@ -56,14 +56,14 @@ jobs: - name: Download Agent Home Folders (Call) if: ${{ inputs.external_call }} - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: name: homefolders path: src/Agent - name: Download Agent Home Folders (Dispatch) if: ${{ !inputs.external_call }} - uses: actions/download-artifact@87c55149d96e628cc2ef7e6fc2aab372015aec85 # v4.1.3 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4 with: github-token: ${{ secrets.GITHUB_TOKEN }} run-id: ${{ inputs.run_id }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index bd9dd2cd60..6786b6a2ac 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -73,6 +73,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@47b3d888fe66b639e431abf22ebca059152f1eea # v2.13.4 + uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v2.13.4 with: sarif_file: results.sarif