From 3b7b7e699182496e62c1d604c79ffde06af1f344 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 May 2024 22:55:06 +0000 Subject: [PATCH] --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-patch dependency-group: action-dependencies - dependency-name: google-github-actions/auth dependency-type: direct:production update-type: version-update:semver-patch dependency-group: action-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/_test.yml | 2 +- .github/workflows/cd.yml | 2 +- .github/workflows/check-upstream-ed25519.yml | 2 +- .github/workflows/test-kms-aws.yml | 2 +- .github/workflows/test-kms.yml | 4 ++-- .github/workflows/test-sigstore.yml | 2 +- .github/workflows/test-vault.yaml | 2 +- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/_test.yml b/.github/workflows/_test.yml index 0a6f1770..63cdb58b 100644 --- a/.github/workflows/_test.yml +++ b/.github/workflows/_test.yml @@ -38,7 +38,7 @@ jobs: steps: - name: Checkout securesystemslib - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Set up Python ${{ matrix.python-version }} uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 3e073c6f..3ae59c56 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -19,7 +19,7 @@ jobs: needs: test steps: - name: Checkout release tag - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5 + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6 with: ref: ${{ github.event.workflow_run.head_branch }} diff --git a/.github/workflows/check-upstream-ed25519.yml b/.github/workflows/check-upstream-ed25519.yml index 1ce08f70..ee5109d0 100644 --- a/.github/workflows/check-upstream-ed25519.yml +++ b/.github/workflows/check-upstream-ed25519.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Check out repository - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Test if ed25519 upstream main HEAD is what we expect id: test_ed25519 run: | diff --git a/.github/workflows/test-kms-aws.yml b/.github/workflows/test-kms-aws.yml index 9c96682b..65a26c35 100644 --- a/.github/workflows/test-kms-aws.yml +++ b/.github/workflows/test-kms-aws.yml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout securesystemslib - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Set up Python uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d diff --git a/.github/workflows/test-kms.yml b/.github/workflows/test-kms.yml index 0b2102ef..6385bfda 100644 --- a/.github/workflows/test-kms.yml +++ b/.github/workflows/test-kms.yml @@ -17,7 +17,7 @@ jobs: steps: - name: Checkout securesystemslib - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Set up Python uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d @@ -32,7 +32,7 @@ jobs: pip install --upgrade tox - name: Authenticate to Google Cloud - uses: google-github-actions/auth@55bd3a7c6e2ae7cf1877fd1ccb9d54c0503c457c + uses: google-github-actions/auth@71fee32a0bb7e97b4d33d548e7d957010649d8fa with: token_format: access_token workload_identity_provider: projects/843741030650/locations/global/workloadIdentityPools/securesystemslib-tests/providers/securesystemslib-tests diff --git a/.github/workflows/test-sigstore.yml b/.github/workflows/test-sigstore.yml index 5d6f44b3..55c7cd28 100644 --- a/.github/workflows/test-sigstore.yml +++ b/.github/workflows/test-sigstore.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Checkout securesystemslib - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Set up Python uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d diff --git a/.github/workflows/test-vault.yaml b/.github/workflows/test-vault.yaml index 73975fd2..36974705 100644 --- a/.github/workflows/test-vault.yaml +++ b/.github/workflows/test-vault.yaml @@ -9,7 +9,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout securesystemslib - uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b + uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 - name: Set up Python uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d