From 5fbaba5d184f0bd1c685d696ab6099c27de8e981 Mon Sep 17 00:00:00 2001
From: Vincent Demeester <vdemeest@redhat.com>
Date: Tue, 10 Sep 2024 15:07:18 +0200
Subject: [PATCH] =?UTF-8?q?.github:=20add=20github-actions=20to=20dependab?=
 =?UTF-8?q?ot=E2=80=A6=20(#1194)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

* .github: add github-actions to dependabot…

… so that we also get dependabot actions updates. Today, we seems to
be using deprecated actions.

Signed-off-by: Vincent Demeester <vdemeest@redhat.com>

* .github/workflows: update some action versions

Signed-off-by: Vincent Demeester <vdemeest@redhat.com>

---------

Signed-off-by: Vincent Demeester <vdemeest@redhat.com>
---
 .github/dependabot.yml              | 14 ++++++++++++++
 .github/workflows/goclean.yml       |  4 ++--
 .github/workflows/lint.yaml         |  6 +++---
 .github/workflows/reusable-e2e.yaml | 22 ++++------------------
 4 files changed, 23 insertions(+), 23 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6366d88723..152cc073d4 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -10,3 +10,17 @@ updates:
       all:
         patterns:
           - "*"
+    labels:
+    - "ok-to-test"
+    - "dependencies"
+    - "release-note-none"
+    - "kind/misc"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels:
+    - "ok-to-test"
+    - "dependencies"
+    - "release-note-none"
+    - "kind/misc"
diff --git a/.github/workflows/goclean.yml b/.github/workflows/goclean.yml
index 89af75b5b3..23feae022a 100644
--- a/.github/workflows/goclean.yml
+++ b/.github/workflows/goclean.yml
@@ -24,10 +24,10 @@ jobs:
   goclean:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v3 # check-out repository
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
     - name: Setup Go
-      uses: actions/setup-go@v3
+      uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         go-version: '1.22'
 
diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml
index fd7a604c45..a449f23464 100644
--- a/.github/workflows/lint.yaml
+++ b/.github/workflows/lint.yaml
@@ -17,14 +17,14 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
           go-version: "1.22"
 
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v4
+        uses: golangci/golangci-lint-action@v6.1.0
         with:
           # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
           version: latest
diff --git a/.github/workflows/reusable-e2e.yaml b/.github/workflows/reusable-e2e.yaml
index bf0da78ceb..7a18e297eb 100644
--- a/.github/workflows/reusable-e2e.yaml
+++ b/.github/workflows/reusable-e2e.yaml
@@ -34,26 +34,12 @@ jobs:
       TEKTON_CLI_RELEASE: "0.30.0"
 
     steps:
-    # https://github.com/mvdan/github-actions-golang#how-do-i-set-up-caching-between-builds
-    - uses: actions/cache@v2
-      with:
-        # In order:
-        # * Module download cache
-        # * Build cache (Linux)
-        path: |
-          ~/go/pkg/mod
-          ~/.cache/go-build
-          ${{ env.KOCACHE }}
-        key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }}
-        restore-keys: |
-          ${{ runner.os }}-go-
-
     - name: Set up Go
-      uses: actions/setup-go@v2
+      uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
         go-version: 1.22.x
 
-    - uses: imjasonh/setup-ko@v0.6
+    - uses: ko-build/setup-ko@v0.7
       with:
         version: tip
 
@@ -64,7 +50,7 @@ jobs:
         chmod u+x ./tkn
 
     - name: Check out our repo
-      uses: actions/checkout@v2
+      uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         path: ./src/github.com/tektoncd/chains
 
@@ -140,7 +126,7 @@ jobs:
 
     - name: Collect diagnostics
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@84c993eaf02da1c325854fb272a4df9184bd80fc # main
+      uses: chainguard-dev/actions/kind-diag@9ba949ac63357c725a9438f3e05a1e33d313498e # main
       with:
         cluster-resources: nodes
         namespace-resources: pods,taskruns,jobs