From 85f554d212b48ab611df6e315cd1824b14d58f3d Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 25 Apr 2024 17:46:18 +0000 Subject: [PATCH 1/2] chore(deps): update actions/checkout digest to 0ad4b8f --- .github/workflows/depup.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/reviewdog.yml | 4 ++-- .github/workflows/test.yml | 4 ++-- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/depup.yml b/.github/workflows/depup.yml index d69a1c6..c601c79 100644 --- a/.github/workflows/depup.yml +++ b/.github/workflows/depup.yml @@ -9,7 +9,7 @@ jobs: reviewdog: runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 - uses: haya14busa/action-depup@v1 id: depup with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5bf0f23..69fed74 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ jobs: if: github.event.action != 'labeled' runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 # Bump version on merging Pull Requests with specific labels. # (bump:major,bump:minor,bump:patch) @@ -51,6 +51,6 @@ jobs: if: github.event.action == 'labeled' runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 - name: Post bumpr status comment uses: haya14busa/action-bumpr@v1 diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml index 7fe8633..08acc2d 100644 --- a/.github/workflows/reviewdog.yml +++ b/.github/workflows/reviewdog.yml @@ -10,7 +10,7 @@ jobs: name: runner / shellcheck runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 - uses: haya14busa/action-cond@v1 id: reporter with: @@ -27,7 +27,7 @@ jobs: name: runner / misspell runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 - uses: reviewdog/action-misspell@v1 with: github_token: ${{ secrets.github_token }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 7b0de67..7add1f1 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,7 +9,7 @@ jobs: name: runner / staticcheck (github-check) runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 - uses: actions/setup-go@v5 with: go-version: "1.18" @@ -25,7 +25,7 @@ jobs: name: runner / staticcheck (github-pr-review) runs-on: ubuntu-latest steps: - - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 - uses: actions/setup-go@v5 with: go-version: "1.18" From 2cceda6098b59dc635268a1832a29517970ccca0 Mon Sep 17 00:00:00 2001 From: sksat Date: Thu, 2 May 2024 16:18:12 +0900 Subject: [PATCH 2/2] specify actions/checkout minor, patch version --- .github/workflows/depup.yml | 2 +- .github/workflows/release.yml | 4 ++-- .github/workflows/reviewdog.yml | 4 ++-- .github/workflows/test.yml | 4 ++-- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/depup.yml b/.github/workflows/depup.yml index c601c79..bd9f27a 100644 --- a/.github/workflows/depup.yml +++ b/.github/workflows/depup.yml @@ -9,7 +9,7 @@ jobs: reviewdog: runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - uses: haya14busa/action-depup@v1 id: depup with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 69fed74..d5a9049 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -14,7 +14,7 @@ jobs: if: github.event.action != 'labeled' runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 # Bump version on merging Pull Requests with specific labels. # (bump:major,bump:minor,bump:patch) @@ -51,6 +51,6 @@ jobs: if: github.event.action == 'labeled' runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - name: Post bumpr status comment uses: haya14busa/action-bumpr@v1 diff --git a/.github/workflows/reviewdog.yml b/.github/workflows/reviewdog.yml index 08acc2d..8b5bfe3 100644 --- a/.github/workflows/reviewdog.yml +++ b/.github/workflows/reviewdog.yml @@ -10,7 +10,7 @@ jobs: name: runner / shellcheck runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - uses: haya14busa/action-cond@v1 id: reporter with: @@ -27,7 +27,7 @@ jobs: name: runner / misspell runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - uses: reviewdog/action-misspell@v1 with: github_token: ${{ secrets.github_token }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 7add1f1..e4ab17a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -9,7 +9,7 @@ jobs: name: runner / staticcheck (github-check) runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - uses: actions/setup-go@v5 with: go-version: "1.18" @@ -25,7 +25,7 @@ jobs: name: runner / staticcheck (github-pr-review) runs-on: ubuntu-latest steps: - - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4 - uses: actions/setup-go@v5 with: go-version: "1.18"