3939 egress-policy : audit
4040
4141 - name : Checkout
42- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
42+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
4343 with :
4444 fetch-depth : 1
4545 persist-credentials : false
@@ -123,7 +123,7 @@ jobs:
123123 # runs-on: ${{ github.repository_owner == 'coder' && 'depot-ubuntu-22.04-8' || 'ubuntu-latest' }}
124124 # steps:
125125 # - name: Checkout
126- # uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
126+ # uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
127127 # with:
128128 # fetch-depth: 1
129129 # # See: https://github.com/stefanzweifel/git-auto-commit-action?tab=readme-ov-file#commits-made-by-this-action-do-not-trigger-new-workflow-runs
@@ -161,7 +161,7 @@ jobs:
161161 egress-policy : audit
162162
163163 - name : Checkout
164- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
164+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
165165 with :
166166 fetch-depth : 1
167167 persist-credentials : false
@@ -190,7 +190,7 @@ jobs:
190190
191191# Check for any typos
192192 - name : Check for typos
193- uses : crate-ci/typos@52bd719c2c91f9d676e2aa359fc8e0db8925e6d8 # v1.35.3
193+ uses : crate-ci/typos@85f62a8a84f939ae994ab3763f01a0296d61a7ee # v1.36.2
194194 with :
195195 config : .github/workflows/typos.toml
196196
@@ -203,7 +203,7 @@ jobs:
203203
204204# Needed for helm chart linting
205205 - name : Install helm
206- uses : azure/setup-helm@b9e51907a09c216f16ebe8536097933489208112 # v4.3.0
206+ uses : azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 # v4.3.1
207207 with :
208208 version : v3.9.2
209209
@@ -239,7 +239,7 @@ jobs:
239239 egress-policy : audit
240240
241241 - name : Checkout
242- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
242+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
243243 with :
244244 fetch-depth : 1
245245 persist-credentials : false
@@ -295,7 +295,7 @@ jobs:
295295 egress-policy : audit
296296
297297 - name : Checkout
298- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
298+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
299299 with :
300300 fetch-depth : 1
301301 persist-credentials : false
@@ -366,7 +366,7 @@ jobs:
366366 uses : coder/setup-ramdisk-action@e1100847ab2d7bcd9d14bcda8f2d1b0f07b36f1b # v0.1.0
367367
368368 - name : Checkout
369- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
369+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
370370 with :
371371 fetch-depth : 1
372372 persist-credentials : false
@@ -548,7 +548,7 @@ jobs:
548548 egress-policy : audit
549549
550550 - name : Checkout
551- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
551+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
552552 with :
553553 fetch-depth : 1
554554 persist-credentials : false
@@ -597,7 +597,7 @@ jobs:
597597 egress-policy : audit
598598
599599 - name : Checkout
600- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
600+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
601601 with :
602602 fetch-depth : 1
603603 persist-credentials : false
@@ -657,7 +657,7 @@ jobs:
657657 egress-policy : audit
658658
659659 - name : Checkout
660- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
660+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
661661 with :
662662 fetch-depth : 1
663663 persist-credentials : false
@@ -684,7 +684,7 @@ jobs:
684684 egress-policy : audit
685685
686686 - name : Checkout
687- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
687+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
688688 with :
689689 fetch-depth : 1
690690 persist-credentials : false
@@ -717,7 +717,7 @@ jobs:
717717 egress-policy : audit
718718
719719 - name : Checkout
720- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
720+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
721721 with :
722722 fetch-depth : 1
723723 persist-credentials : false
@@ -789,7 +789,7 @@ jobs:
789789 egress-policy : audit
790790
791791 - name : Checkout
792- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
792+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
793793 with :
794794 # 👇 Ensures Chromatic can read your full git history
795795 fetch-depth : 0
@@ -805,7 +805,7 @@ jobs:
805805 # the check to pass. This is desired in PRs, but not in mainline.
806806 - name : Publish to Chromatic (non-mainline)
807807 if : github.ref != 'refs/heads/main' && github.repository_owner == 'coder'
808- uses : chromaui/action@58d9ffb36c90c97a02d061544ecc849cc4a242a9 # v13.1.3
808+ uses : chromaui/action@d0795df816d05c4a89c80295303970fddd247cce # v13.1.4
809809 env :
810810 NODE_OPTIONS : " --max_old_space_size=4096"
811811 STORYBOOK : true
@@ -837,7 +837,7 @@ jobs:
837837 # infinitely "in progress" in mainline unless we re-review each build.
838838 - name : Publish to Chromatic (mainline)
839839 if : github.ref == 'refs/heads/main' && github.repository_owner == 'coder'
840- uses : chromaui/action@58d9ffb36c90c97a02d061544ecc849cc4a242a9 # v13.1.3
840+ uses : chromaui/action@d0795df816d05c4a89c80295303970fddd247cce # v13.1.4
841841 env :
842842 NODE_OPTIONS : " --max_old_space_size=4096"
843843 STORYBOOK : true
@@ -870,7 +870,7 @@ jobs:
870870 egress-policy : audit
871871
872872 - name : Checkout
873- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
873+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
874874 with :
875875 # 0 is required here for version.sh to work.
876876 fetch-depth : 0
@@ -972,7 +972,7 @@ jobs:
972972 steps :
973973 # Harden Runner doesn't work on macOS
974974 - name : Checkout
975- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
975+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
976976 with :
977977 fetch-depth : 0
978978 persist-credentials : false
@@ -1059,7 +1059,7 @@ jobs:
10591059 egress-policy : audit
10601060
10611061 - name : Checkout
1062- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1062+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
10631063 with :
10641064 fetch-depth : 0
10651065 persist-credentials : false
@@ -1114,7 +1114,7 @@ jobs:
11141114 egress-policy : audit
11151115
11161116 - name : Checkout
1117- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1117+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
11181118 with :
11191119 fetch-depth : 0
11201120 persist-credentials : false
@@ -1155,7 +1155,7 @@ jobs:
11551155
11561156 # Necessary for signing Windows binaries.
11571157 - name : Setup Java
1158- uses : actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
1158+ uses : actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v5.0.0
11591159 with :
11601160 distribution : " zulu"
11611161 java-version : " 11.0"
@@ -1188,14 +1188,14 @@ jobs:
11881188 # Setup GCloud for signing Windows binaries.
11891189 - name : Authenticate to Google Cloud
11901190 id : gcloud_auth
1191- uses : google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5 # v2.1.12
1191+ uses : google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
11921192 with :
11931193 workload_identity_provider : ${{ vars.GCP_CODE_SIGNING_WORKLOAD_ID_PROVIDER }}
11941194 service_account : ${{ vars.GCP_CODE_SIGNING_SERVICE_ACCOUNT }}
11951195 token_format : " access_token"
11961196
11971197 - name : Setup GCloud SDK
1198- uses : google-github-actions/setup-gcloud@cb1e50a9932213ecece00a606661ae9ca44f3397 # v2.2.0
1198+ uses : google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1
11991199
12001200 - name : Download dylibs
12011201 uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
@@ -1322,7 +1322,7 @@ jobs:
13221322 id : attest_main
13231323 if : github.ref == 'refs/heads/main'
13241324 continue-on-error : true
1325- uses : actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4 .0
1325+ uses : actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 # v3.0 .0
13261326 with :
13271327 subject-name : " ghcr.io/coder/coder-preview:main"
13281328 predicate-type : " https://slsa.dev/provenance/v1"
@@ -1359,7 +1359,7 @@ jobs:
13591359 id : attest_latest
13601360 if : github.ref == 'refs/heads/main'
13611361 continue-on-error : true
1362- uses : actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4 .0
1362+ uses : actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 # v3.0 .0
13631363 with :
13641364 subject-name : " ghcr.io/coder/coder-preview:latest"
13651365 predicate-type : " https://slsa.dev/provenance/v1"
@@ -1396,7 +1396,7 @@ jobs:
13961396 id : attest_version
13971397 if : github.ref == 'refs/heads/main'
13981398 continue-on-error : true
1399- uses : actions/attest@ce27ba3b4a9a139d9a20a4a07d69fabb52f1e5bc # v2.4 .0
1399+ uses : actions/attest@daf44fb950173508f38bd2406030372c1d1162b1 # v3.0 .0
14001400 with :
14011401 subject-name : " ghcr.io/coder/coder-preview:${{ steps.build-docker.outputs.tag }}"
14021402 predicate-type : " https://slsa.dev/provenance/v1"
@@ -1489,19 +1489,19 @@ jobs:
14891489 egress-policy : audit
14901490
14911491 - name : Checkout
1492- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1492+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
14931493 with :
14941494 fetch-depth : 0
14951495 persist-credentials : false
14961496
14971497 - name : Authenticate to Google Cloud
1498- uses : google-github-actions/auth@b7593ed2efd1c1617e1b0254da33b86225adb2a5 # v2.1.12
1498+ uses : google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093 # v3.0.0
14991499 with :
15001500 workload_identity_provider : ${{ vars.GCP_WORKLOAD_ID_PROVIDER }}
15011501 service_account : ${{ vars.GCP_SERVICE_ACCOUNT }}
15021502
15031503 - name : Set up Google Cloud SDK
1504- uses : google-github-actions/setup-gcloud@cb1e50a9932213ecece00a606661ae9ca44f3397 # v2.2.0
1504+ uses : google-github-actions/setup-gcloud@aa5489c8933f4cc7a4f7d45035b3b1440c9c10db # v3.0.1
15051505
15061506 - name : Set up Flux CLI
15071507 uses : fluxcd/flux2/action@6bf37f6a560fd84982d67f853162e4b3c2235edb # v2.6.4
@@ -1510,7 +1510,7 @@ jobs:
15101510 version : " 2.5.1"
15111511
15121512 - name : Get Cluster Credentials
1513- uses : google-github-actions/get-gke-credentials@8e574c49425fa7efed1e74650a449bfa6a23308a # v2.3.4
1513+ uses : google-github-actions/get-gke-credentials@3da1e46a907576cefaa90c484278bb5b259dd395 # v3.0.0
15141514 with :
15151515 cluster_name : dogfood-v2
15161516 location : us-central1-a
@@ -1554,7 +1554,7 @@ jobs:
15541554 egress-policy : audit
15551555
15561556 - name : Checkout
1557- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1557+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
15581558 with :
15591559 fetch-depth : 0
15601560 persist-credentials : false
@@ -1590,7 +1590,7 @@ jobs:
15901590 egress-policy : audit
15911591
15921592 - name : Checkout
1593- uses : actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3 .0
1593+ uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0 .0
15941594 with :
15951595 fetch-depth : 1
15961596 persist-credentials : false
0 commit comments