diff --git a/.github/workflows/actions.yml b/.github/workflows/actions.yml index dea8269d5758b..f7b742b6055c8 100644 --- a/.github/workflows/actions.yml +++ b/.github/workflows/actions.yml @@ -15,12 +15,12 @@ jobs: timeout-minutes: 10 steps: - uses: linkerd/dev/actions/setup-tools@v43 - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: just-dev lint-actions devcontainer-versions: runs-on: ubuntu-22.04 steps: - uses: linkerd/dev/actions/setup-tools@v43 - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: just-dev check-action-images diff --git a/.github/workflows/choco.yml b/.github/workflows/choco.yml index 98bdf7f9a213b..cd76015f83635 100644 --- a/.github/workflows/choco.yml +++ b/.github/workflows/choco.yml @@ -13,7 +13,7 @@ jobs: timeout-minutes: 10 runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: devblackops/github-action-psscriptanalyzer@854038567344559afaaa8ccb7a014452b99d86ee env: # https://github.com/devblackops/github-action-psscriptanalyzer/pull/3/files diff --git a/.github/workflows/codecov.yml b/.github/workflows/codecov.yml index 45d52ea820ae5..e4c90c6c63f0d 100644 --- a/.github/workflows/codecov.yml +++ b/.github/workflows/codecov.yml @@ -16,7 +16,7 @@ jobs: container: image: golang:1.22 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: go install gotest.tools/gotestsum@v0.4.2 - run: gotestsum -- -cover -coverprofile=coverage.out -v -mod=readonly ./... - uses: codecov/codecov-action@6d798873df2b1b8e5846dba6fb86631229fbcb17 @@ -31,7 +31,7 @@ jobs: container: image: node:20-stretch steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Yarn setup shell: bash run: bin/scurl -o- https://yarnpkg.com/install.sh | bash -s -- --version 1.21.1 --network-concurrency 1 @@ -54,7 +54,7 @@ jobs: image: docker://rust:1.76.0 options: --security-opt seccomp=unconfined steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - shell: bash run: mkdir -p target && cd target && bin/scurl -v https://github.com/xd009642/tarpaulin/releases/download/0.27.3/cargo-tarpaulin-x86_64-unknown-linux-musl.tar.gz | tar zxvf - && chmod 755 cargo-tarpaulin - run: target/cargo-tarpaulin tarpaulin --workspace --out Xml diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index f4278b2713c90..09dce002666e9 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -40,7 +40,7 @@ jobs: with: go-version: "1.22" - name: Checkout - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Initialize # Unpinned action version so that we automatically get analyzer updates. diff --git a/.github/workflows/devcontainer.yml b/.github/workflows/devcontainer.yml index 811e494693bd8..6756f883f5a98 100644 --- a/.github/workflows/devcontainer.yml +++ b/.github/workflows/devcontainer.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-22.04 container: ghcr.io/linkerd/dev:v43-rust steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - shell: bash run: | # Extract current Rust version from the toolchain file. @@ -40,5 +40,5 @@ jobs: runs-on: ubuntu-22.04 steps: - uses: linkerd/dev/actions/setup-tools@v43 - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: just-dev pull-dev-image diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 9c2f4ef59b535..29567e0d3b907 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -8,7 +8,7 @@ jobs: meta: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: tj-actions/changed-files@a29e8b565651ce417abb5db7164b4a2ad8b6155c id: changed with: @@ -31,7 +31,7 @@ jobs: runs-on: ubuntu-22.04 container: ghcr.io/linkerd/dev:v43-go steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: just go-lint --verbose --timeout=10m @@ -42,7 +42,7 @@ jobs: runs-on: ubuntu-22.04 container: ghcr.io/linkerd/dev:v43-go steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: just go-fmt @@ -53,7 +53,7 @@ jobs: runs-on: ubuntu-22.04 container: ghcr.io/linkerd/dev:v43-go steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: just go-fetch - run: just go-test diff --git a/.github/workflows/helm.yml b/.github/workflows/helm.yml index 50272b6e27556..2c05000ef953b 100644 --- a/.github/workflows/helm.yml +++ b/.github/workflows/helm.yml @@ -16,6 +16,6 @@ jobs: timeout-minutes: 5 steps: - uses: linkerd/dev/actions/setup-tools@v43 - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: helm-docs - run: git diff --exit-code -- **/charts/**/README.md diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index a178cf5fdf798..faba3859c8e85 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -25,7 +25,7 @@ jobs: meta: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - id: tag run: echo "tag=$(CI_FORCE_CLEAN=1 bin/root-tag)" >> "$GITHUB_OUTPUT" - uses: tj-actions/changed-files@a29e8b565651ce417abb5db7164b4a2ad8b6155c @@ -65,7 +65,7 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 15 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: ./.github/actions/docker-build id: build with: @@ -103,7 +103,7 @@ jobs: - proxy timeout-minutes: 20 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: ./.github/actions/docker-build id: build env: @@ -134,7 +134,7 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 15 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 with: go-version: "1.22" @@ -169,7 +169,7 @@ jobs: env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - uses: olix0r/cargo-action-fmt/setup@9269f3aa1ff01775d95efc97037e2cbdb41d9684 - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e with: pattern: image-archives-* @@ -227,7 +227,7 @@ jobs: - web timeout-minutes: 15 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: ./.github/actions/docker-build id: build with: @@ -261,7 +261,7 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 15 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 with: go-version: "1.22" @@ -286,7 +286,7 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 15 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 with: go-version: "1.22" @@ -320,7 +320,7 @@ jobs: - uses: extractions/setup-just@dd310ad5a97d8e7b41793f8ef055398d51ad4de6 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 with: go-version: "1.22" diff --git a/.github/workflows/js.yml b/.github/workflows/js.yml index 502282a2a8c29..2b6099817bcbe 100644 --- a/.github/workflows/js.yml +++ b/.github/workflows/js.yml @@ -19,7 +19,7 @@ jobs: env: NODE_ENV: test steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Yarn setup shell: bash run: | diff --git a/.github/workflows/markdown.yml b/.github/workflows/markdown.yml index 3d16d1d6e13db..e4028d16e4c9e 100644 --- a/.github/workflows/markdown.yml +++ b/.github/workflows/markdown.yml @@ -14,7 +14,7 @@ jobs: timeout-minutes: 5 runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: DavidAnson/markdownlint-cli2-action@b4c9feab76d8025d1e83c653fa3990936df0e6c8 with: globs: | diff --git a/.github/workflows/proto.yml b/.github/workflows/proto.yml index 0231aa363e94b..7105d7984587c 100644 --- a/.github/workflows/proto.yml +++ b/.github/workflows/proto.yml @@ -18,6 +18,6 @@ jobs: container: ghcr.io/linkerd/dev:v43-go steps: - run: apt update && apt install -y unzip - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: bin/protoc-diff diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index cf52ac05b512a..b74ffcd9f259a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -21,7 +21,7 @@ jobs: tag: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: echo "tag=$(CI_FORCE_CLEAN=1 bin/root-tag)" >> "$GITHUB_OUTPUT" id: tag outputs: @@ -48,7 +48,7 @@ jobs: # policy-controller docker builds have occasionally hit a 30-minute timeout. timeout-minutes: 45 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Set tag run: echo 'TAG=${{ needs.tag.outputs.tag }}' >> "$GITHUB_ENV" - uses: ./.github/actions/docker-build @@ -95,7 +95,7 @@ jobs: needs: [docker_build] steps: - name: Checkout code - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 with: go-version: "1.22" @@ -127,7 +127,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout code - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 with: go-version: "1.22" @@ -156,7 +156,7 @@ jobs: steps: - name: Checkout code if: startsWith(github.ref, 'refs/tags/stable') - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Chocolatey - update nuspec if: startsWith(github.ref, 'refs/tags/stable') run: | @@ -186,7 +186,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # - name: Download choco package # if: startsWith(github.ref, 'refs/tags/stable') # uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e @@ -234,7 +234,7 @@ jobs: if: startsWith(github.ref, 'refs/tags/stable') || startsWith(github.ref, 'refs/tags/edge') runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Set install target for stable if: startsWith(github.ref, 'refs/tags/stable') run: echo "INSTALL=install" >> "$GITHUB_ENV" @@ -262,7 +262,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout code - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Log into GCP uses: "google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa" with: diff --git a/.github/workflows/rust.yml b/.github/workflows/rust.yml index ef2c9351e5c5c..2aa72b1114aa6 100644 --- a/.github/workflows/rust.yml +++ b/.github/workflows/rust.yml @@ -35,7 +35,7 @@ jobs: # Prevent sudden announcement of a new advisory from failing Ci. continue-on-error: ${{ matrix.checks == 'advisories' }} steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - uses: EmbarkStudios/cargo-deny-action@3f4a782664881cf5725d0ffd23969fcce89fd868 with: command: check ${{ matrix.checks }} @@ -45,7 +45,7 @@ jobs: runs-on: ubuntu-22.04 container: ghcr.io/linkerd/dev:v43-rust steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: just rs-check-fmt @@ -54,7 +54,7 @@ jobs: runs-on: ubuntu-22.04 container: ghcr.io/linkerd/dev:v43-rust steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: just rs-fetch - run: just rs-clippy @@ -65,7 +65,7 @@ jobs: runs-on: ubuntu-22.04 container: ghcr.io/linkerd/dev:v43-rust steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: just rs-fetch - run: just rs-check-dirs @@ -76,7 +76,7 @@ jobs: timeout-minutes: 15 container: ghcr.io/linkerd/dev:v43-rust steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: git config --global --add safe.directory "$PWD" # actions/runner#2033 - run: just rs-fetch - run: just rs-test-build @@ -87,7 +87,7 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 2 steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - shell: bash run: | toolchain_version="$(./bin/rust-toolchain-version)" diff --git a/.github/workflows/shell.yml b/.github/workflows/shell.yml index 3bc52dae45bc0..ea383514f3c71 100644 --- a/.github/workflows/shell.yml +++ b/.github/workflows/shell.yml @@ -17,5 +17,5 @@ jobs: runs-on: ubuntu-22.04 steps: - uses: linkerd/dev/actions/setup-tools@v43 - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - run: just sh-lint diff --git a/.github/workflows/sync-proxy.yml b/.github/workflows/sync-proxy.yml index bc7ac8f4caf8f..f1fd907f1aae7 100644 --- a/.github/workflows/sync-proxy.yml +++ b/.github/workflows/sync-proxy.yml @@ -64,7 +64,7 @@ jobs: env: VERSION: ${{ needs.meta.outputs.name }} steps: - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 with: token: ${{ secrets.LINKERD2_PROXY_GITHUB_TOKEN || github.token }} - name: Check if proxy version has changed @@ -98,7 +98,7 @@ jobs: git config --global --add safe.directory "$PWD" # actions/runner#2033 git config --global user.name "$GITHUB_USERNAME" git config --global user.email "$GITHUB_USERNAME"@users.noreply.github.com - - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 with: token: ${{ secrets.LINKERD2_PROXY_GITHUB_TOKEN || github.token }} - name: Commit proxy version