diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 3145baeb25c..fc6325e4966 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -32,7 +32,7 @@ jobs: - name: Run Claude Code id: claude - uses: anthropics/claude-code-action@v1 + uses: anthropics/claude-code-action@v1.0.111 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} diff --git a/.github/workflows/codeql-analysis.yaml b/.github/workflows/codeql-analysis.yaml index 018ec76c694..b6c003d1ff2 100644 --- a/.github/workflows/codeql-analysis.yaml +++ b/.github/workflows/codeql-analysis.yaml @@ -22,10 +22,10 @@ jobs: uses: actions/checkout@v6 - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@v4.35.3 with: languages: 'go, javascript' - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@v4.35.3 diff --git a/.github/workflows/compatibility-tests.yaml b/.github/workflows/compatibility-tests.yaml index 230b121eb54..a297fa844b6 100644 --- a/.github/workflows/compatibility-tests.yaml +++ b/.github/workflows/compatibility-tests.yaml @@ -31,7 +31,7 @@ jobs: java-version: "8" cache: "sbt" - - uses: sbt/setup-sbt@v1 + - uses: sbt/setup-sbt@v1.1.22 - name: Build Spark direct-access client working-directory: clients/hadoopfs @@ -213,7 +213,7 @@ jobs: java-version: ${{ matrix.spark.java_version }} cache: "sbt" - - uses: sbt/setup-sbt@v1 + - uses: sbt/setup-sbt@v1.1.22 - name: Package Spark App working-directory: test/spark/app @@ -306,7 +306,7 @@ jobs: java-version: "8" cache: "sbt" - - uses: sbt/setup-sbt@v1 + - uses: sbt/setup-sbt@v1.1.22 - name: Package Spark App working-directory: test/spark/app diff --git a/.github/workflows/docker-publish-lakefs-rclone-export.yaml b/.github/workflows/docker-publish-lakefs-rclone-export.yaml index 44470a193ce..df0eeb64d11 100644 --- a/.github/workflows/docker-publish-lakefs-rclone-export.yaml +++ b/.github/workflows/docker-publish-lakefs-rclone-export.yaml @@ -32,7 +32,7 @@ jobs: id: version - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@v6.1.0 with: aws-region: us-east-1 role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} @@ -42,7 +42,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.4 - name: Login to DockerHub uses: docker/login-action@v4 diff --git a/.github/workflows/docker-publish.yaml b/.github/workflows/docker-publish.yaml index ff5107d5437..d7a10916a1e 100644 --- a/.github/workflows/docker-publish.yaml +++ b/.github/workflows/docker-publish.yaml @@ -55,7 +55,7 @@ jobs: run: make checks-validator - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@v6.1.0 with: aws-region: us-east-1 role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} @@ -68,7 +68,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.4 - name: Login to DockerHub uses: docker/login-action@v4 diff --git a/.github/workflows/docs-pr.yaml b/.github/workflows/docs-pr.yaml index d462df9a381..8ee687cc83f 100644 --- a/.github/workflows/docs-pr.yaml +++ b/.github/workflows/docs-pr.yaml @@ -48,7 +48,7 @@ jobs: done - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@v6.1.0 with: aws-access-key-id: ${{ secrets.DOCS_PREVIEW_AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.DOCS_PREVIEW_AWS_SECRET_ACCESS_KEY }} @@ -58,7 +58,7 @@ jobs: run: aws s3 sync docs/site/ s3://lakefs-docs-pr-previews/prs/oss-pr-${{ github.event.pull_request.number }}/ - name: Comment with preview URL - uses: actions/github-script@v8 + uses: actions/github-script@v9 with: script: | const previewUrl = `https://oss-pr-${context.payload.pull_request.number}.docs-lakefs-preview.io/`; diff --git a/.github/workflows/esti.yaml b/.github/workflows/esti.yaml index 3b56c2b883e..fe09fa7b88a 100644 --- a/.github/workflows/esti.yaml +++ b/.github/workflows/esti.yaml @@ -100,13 +100,13 @@ jobs: tag: ${{ needs.gen-code.outputs.tag }} steps: - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@v6.1.0 with: role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} aws-region: us-east-1 - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.4 - name: Checkout uses: actions/checkout@v6 @@ -156,14 +156,14 @@ jobs: if: needs.check-secrets.outputs.secretsavailable == 'true' steps: - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@v6.1.0 with: role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} aws-region: us-east-1 mask-aws-account-id: 'false' - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.4 with: mask-password: 'false' @@ -346,13 +346,13 @@ jobs: tag: ${{ steps.version.outputs.tag }} steps: - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@v6.1.0 with: role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} aws-region: us-east-1 - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@v2 + uses: aws-actions/amazon-ecr-login@v2.1.4 - name: Checkout uses: actions/checkout@v6 @@ -439,7 +439,7 @@ jobs: java-version: "8" cache: "sbt" - - uses: sbt/setup-sbt@v1 + - uses: sbt/setup-sbt@v1.1.22 - name: Start lakeFS for Spark tests uses: ./.github/actions/bootstrap-test-lakefs @@ -495,7 +495,7 @@ jobs: java-version: "8" cache: "sbt" - - uses: sbt/setup-sbt@v1 + - uses: sbt/setup-sbt@v1.1.22 - name: Build lakeFS HadoopFS working-directory: clients/hadoopfs @@ -519,7 +519,7 @@ jobs: java-version: "8" cache: "sbt" - - uses: sbt/setup-sbt@v1 + - uses: sbt/setup-sbt@v1.1.22 - name: Package Spark 2 and 3 Apps working-directory: test/spark/app @@ -739,7 +739,7 @@ jobs: java-version: "17" cache: "sbt" - - uses: sbt/setup-sbt@v1 + - uses: sbt/setup-sbt@v1.1.22 if: steps.restore-cache.outputs.cache-hit != 'true' - name: Package Metaclient @@ -1352,7 +1352,7 @@ jobs: name: playwright-report path: webui/test-results/ retention-days: 7 - - uses: test-summary/action@v2 + - uses: test-summary/action@v2.4 if: ${{ github.event_name == 'pull_request' && (success() || failure()) }} with: paths: webui/test-results.xml @@ -1428,7 +1428,7 @@ jobs: name: playwright-report path: webui/test-results/ retention-days: 7 - - uses: test-summary/action@v2 + - uses: test-summary/action@v2.4 if: ${{ github.event_name == 'pull_request' && (success() || failure()) }} with: paths: webui/test-results.xml diff --git a/.github/workflows/goreleaser.yaml b/.github/workflows/goreleaser.yaml index 656b4436963..8e2d80dd7c6 100644 --- a/.github/workflows/goreleaser.yaml +++ b/.github/workflows/goreleaser.yaml @@ -48,7 +48,7 @@ jobs: go-version-file: 'go.mod' - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v6 + uses: aws-actions/configure-aws-credentials@v6.1.0 with: aws-region: us-east-1 role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }} diff --git a/.github/workflows/labeler.yaml b/.github/workflows/labeler.yaml index 4356214d57d..9db478a27eb 100644 --- a/.github/workflows/labeler.yaml +++ b/.github/workflows/labeler.yaml @@ -12,6 +12,6 @@ jobs: label: runs-on: ubuntu-latest steps: - - uses: actions/labeler@v6 + - uses: actions/labeler@v6.0.1 with: sync-labels: true diff --git a/.github/workflows/publish-hadoop-lakefs.yaml b/.github/workflows/publish-hadoop-lakefs.yaml index 7fe0634d1a1..551f1651597 100644 --- a/.github/workflows/publish-hadoop-lakefs.yaml +++ b/.github/workflows/publish-hadoop-lakefs.yaml @@ -49,7 +49,7 @@ jobs: run: sed -i.bak 's/.*<\/version>