39
39
egress-policy : audit
40
40
41
41
- name : Checkout
42
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
42
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
43
43
with :
44
44
fetch-depth : 1
45
45
persist-credentials : false
@@ -123,7 +123,7 @@ jobs:
123
123
# runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
124
124
# steps:
125
125
# - name: Checkout
126
- # uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
126
+ # uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
127
127
# with:
128
128
# fetch-depth: 1
129
129
# # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
@@ -161,7 +161,7 @@ jobs:
161
161
egress-policy : audit
162
162
163
163
- name : Checkout
164
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
164
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
165
165
with :
166
166
fetch-depth : 1
167
167
persist-credentials : false
@@ -190,7 +190,7 @@ jobs:
190
190
191
191
# Check for any typos
192
192
- name : Check for typos
193
- uses : crate-ci/typos@52bd719c2c91f9d676e2aa359fc8e0db8925e6d8 # v1.35.3
193
+ uses : crate-ci/typos@85f62a8a84f939ae994ab3763f01a0296d61a7ee # v1.36.2
194
194
with :
195
195
config : .github/workflows/typos.toml
196
196
@@ -203,7 +203,7 @@ jobs:
203
203
204
204
# Needed for helm chart linting
205
205
- name : Install helm
206
- uses : azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4.3.0
206
+ uses : azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1
207
207
with :
208
208
version : v3.9.2
209
209
@@ -239,7 +239,7 @@ jobs:
239
239
egress-policy : audit
240
240
241
241
- name : Checkout
242
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
242
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
243
243
with :
244
244
fetch-depth : 1
245
245
persist-credentials : false
@@ -295,7 +295,7 @@ jobs:
295
295
egress-policy : audit
296
296
297
297
- name : Checkout
298
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
298
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
299
299
with :
300
300
fetch-depth : 1
301
301
persist-credentials : false
@@ -366,7 +366,7 @@ jobs:
366
366
uses : coder/setup-ramdisk-action@e1100847ab2d7bcd9d14bcda8f2d1b0f07b36f1b # v0.1.0
367
367
368
368
- name : Checkout
369
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
369
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
370
370
with :
371
371
fetch-depth : 1
372
372
persist-credentials : false
@@ -531,9 +531,6 @@ jobs:
531
531
with :
532
532
api-key : ${{ secrets.DATADOG_API_KEY }}
533
533
534
- # NOTE: this could instead be defined as a matrix strategy, but we want to
535
- # only block merging if tests on postgres 13 fail. Using a matrix strategy
536
- # here makes the check in the above `required` job rather complicated.
537
534
test-go-pg-17 :
538
535
runs-on : ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
539
536
needs :
@@ -551,7 +548,7 @@ jobs:
551
548
egress-policy : audit
552
549
553
550
- name : Checkout
554
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
551
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
555
552
with :
556
553
fetch-depth : 1
557
554
persist-credentials : false
@@ -600,7 +597,7 @@ jobs:
600
597
egress-policy : audit
601
598
602
599
- name : Checkout
603
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
600
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
604
601
with :
605
602
fetch-depth : 1
606
603
persist-credentials : false
@@ -660,7 +657,7 @@ jobs:
660
657
egress-policy : audit
661
658
662
659
- name : Checkout
663
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
660
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
664
661
with :
665
662
fetch-depth : 1
666
663
persist-credentials : false
@@ -687,7 +684,7 @@ jobs:
687
684
egress-policy : audit
688
685
689
686
- name : Checkout
690
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
687
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
691
688
with :
692
689
fetch-depth : 1
693
690
persist-credentials : false
@@ -720,7 +717,7 @@ jobs:
720
717
egress-policy : audit
721
718
722
719
- name : Checkout
723
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
720
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
724
721
with :
725
722
fetch-depth : 1
726
723
persist-credentials : false
@@ -792,7 +789,7 @@ jobs:
792
789
egress-policy : audit
793
790
794
791
- name : Checkout
795
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
792
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
796
793
with :
797
794
# 👇 Ensures Chromatic can read your full git history
798
795
fetch-depth : 0
@@ -808,7 +805,7 @@ jobs:
808
805
# the check to pass. This is desired in PRs, but not in mainline.
809
806
- name : Publish to Chromatic (non-mainline)
810
807
if : github.ref != 'refs/heads/main' && github.repository_owner == 'coder'
811
- uses : chromaui/action@58d9ffb36c90c97a02d061544ecc849cc4a242a9 # v13.1.3
808
+ uses : chromaui/action@d0795df816d05c4a89c80295303970fddd247cce # v13.1.4
812
809
env :
813
810
NODE_OPTIONS : " --max_old_space_size=4096"
814
811
STORYBOOK : true
@@ -840,7 +837,7 @@ jobs:
840
837
# infinitely "in progress" in mainline unless we re-review each build.
841
838
- name : Publish to Chromatic (mainline)
842
839
if : github.ref == 'refs/heads/main' && github.repository_owner == 'coder'
843
- uses : chromaui/action@58d9ffb36c90c97a02d061544ecc849cc4a242a9 # v13.1.3
840
+ uses : chromaui/action@d0795df816d05c4a89c80295303970fddd247cce # v13.1.4
844
841
env :
845
842
NODE_OPTIONS : " --max_old_space_size=4096"
846
843
STORYBOOK : true
@@ -873,7 +870,7 @@ jobs:
873
870
egress-policy : audit
874
871
875
872
- name : Checkout
876
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
873
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
877
874
with :
878
875
# 0 is required here for version.sh to work.
879
876
fetch-depth : 0
@@ -926,6 +923,7 @@ jobs:
926
923
- lint
927
924
- gen
928
925
- test-go-pg
926
+ - test-go-pg-17
929
927
- test-go-race-pg
930
928
- test-js
931
929
- test-e2e
@@ -948,6 +946,7 @@ jobs:
948
946
echo "- lint: ${{ needs.lint.result }}"
949
947
echo "- gen: ${{ needs.gen.result }}"
950
948
echo "- test-go-pg: ${{ needs.test-go-pg.result }}"
949
+ echo "- test-go-pg-17: ${{ needs.test-go-pg-17.result }}"
951
950
echo "- test-go-race-pg: ${{ needs.test-go-race-pg.result }}"
952
951
echo "- test-js: ${{ needs.test-js.result }}"
953
952
echo "- test-e2e: ${{ needs.test-e2e.result }}"
@@ -973,7 +972,7 @@ jobs:
973
972
steps :
974
973
# Harden Runner doesn't work on macOS
975
974
- name : Checkout
976
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
975
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
977
976
with :
978
977
fetch-depth : 0
979
978
persist-credentials : false
@@ -1060,7 +1059,7 @@ jobs:
1060
1059
egress-policy : audit
1061
1060
1062
1061
- name : Checkout
1063
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1062
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
1064
1063
with :
1065
1064
fetch-depth : 0
1066
1065
persist-credentials : false
@@ -1115,7 +1114,7 @@ jobs:
1115
1114
egress-policy : audit
1116
1115
1117
1116
- name : Checkout
1118
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1117
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
1119
1118
with :
1120
1119
fetch-depth : 0
1121
1120
persist-credentials : false
@@ -1156,7 +1155,7 @@ jobs:
1156
1155
1157
1156
# Necessary for signing Windows binaries.
1158
1157
- name : Setup Java
1159
- uses : actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
1158
+ uses : actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
1160
1159
with :
1161
1160
distribution : " zulu"
1162
1161
java-version : " 11.0"
@@ -1189,14 +1188,14 @@ jobs:
1189
1188
# Setup GCloud for signing Windows binaries.
1190
1189
- name : Authenticate to Google Cloud
1191
1190
id : gcloud_auth
1192
- uses : google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5 # v2.1.12
1191
+ uses : google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
1193
1192
with :
1194
1193
workload_identity_provider : ${{ vars.GCP_CODE_SIGNING_WORKLOAD_ID_PROVIDER }}
1195
1194
service_account : ${{ vars.GCP_CODE_SIGNING_SERVICE_ACCOUNT }}
1196
1195
token_format : " access_token"
1197
1196
1198
1197
- name : Setup GCloud SDK
1199
- uses : google-github-actions/setup-gcloud@cb1e50a9932213ecece00a606661ae9ca44f3397 # v2.2.0
1198
+ uses : google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1
1200
1199
1201
1200
- name : Download dylibs
1202
1201
uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
@@ -1323,7 +1322,7 @@ jobs:
1323
1322
id : attest_main
1324
1323
if : github.ref == 'refs/heads/main'
1325
1324
continue-on-error : true
1326
- uses : actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4 .0
1325
+ uses : actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 # v3.0 .0
1327
1326
with :
1328
1327
subject-name : " ghcr.io/coder/coder-preview:main"
1329
1328
predicate-type : " https://slsa.dev/provenance/v1"
@@ -1360,7 +1359,7 @@ jobs:
1360
1359
id : attest_latest
1361
1360
if : github.ref == 'refs/heads/main'
1362
1361
continue-on-error : true
1363
- uses : actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4 .0
1362
+ uses : actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 # v3.0 .0
1364
1363
with :
1365
1364
subject-name : " ghcr.io/coder/coder-preview:latest"
1366
1365
predicate-type : " https://slsa.dev/provenance/v1"
@@ -1397,7 +1396,7 @@ jobs:
1397
1396
id : attest_version
1398
1397
if : github.ref == 'refs/heads/main'
1399
1398
continue-on-error : true
1400
- uses : actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4 .0
1399
+ uses : actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 # v3.0 .0
1401
1400
with :
1402
1401
subject-name : " ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}"
1403
1402
predicate-type : " https://slsa.dev/provenance/v1"
@@ -1490,19 +1489,19 @@ jobs:
1490
1489
egress-policy : audit
1491
1490
1492
1491
- name : Checkout
1493
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1492
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
1494
1493
with :
1495
1494
fetch-depth : 0
1496
1495
persist-credentials : false
1497
1496
1498
1497
- name : Authenticate to Google Cloud
1499
- uses : google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5 # v2.1.12
1498
+ uses : google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
1500
1499
with :
1501
1500
workload_identity_provider : ${{ vars.GCP_WORKLOAD_ID_PROVIDER }}
1502
1501
service_account : ${{ vars.GCP_SERVICE_ACCOUNT }}
1503
1502
1504
1503
- name : Set up Google Cloud SDK
1505
- uses : google-github-actions/setup-gcloud@cb1e50a9932213ecece00a606661ae9ca44f3397 # v2.2.0
1504
+ uses : google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1
1506
1505
1507
1506
- name : Set up Flux CLI
1508
1507
uses : fluxcd/flux2/action@6bf37f6a560fd84982d67f853162e4b3c2235edb # v2.6.4
@@ -1511,7 +1510,7 @@ jobs:
1511
1510
version : " 2.5.1"
1512
1511
1513
1512
- name : Get Cluster Credentials
1514
- uses : google-github-actions/get-gke-credentials@8e574c49425fa7efed1e74650a449bfa6a23308a # v2.3.4
1513
+ uses : google-github-actions/get-gke-credentials@3da1e46a907576cefaa90c484278bb5b259dd395 # v3.0.0
1515
1514
with :
1516
1515
cluster_name : dogfood-v2
1517
1516
location : us-central1-a
@@ -1555,7 +1554,7 @@ jobs:
1555
1554
egress-policy : audit
1556
1555
1557
1556
- name : Checkout
1558
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1557
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
1559
1558
with :
1560
1559
fetch-depth : 0
1561
1560
persist-credentials : false
@@ -1591,7 +1590,7 @@ jobs:
1591
1590
egress-policy : audit
1592
1591
1593
1592
- name : Checkout
1594
- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1593
+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
1595
1594
with :
1596
1595
fetch-depth : 1
1597
1596
persist-credentials : false
0 commit comments