From 389bb69c278392ca234e063f253999903bf7b6b5 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 5 Nov 2024 08:10:48 +0000 Subject: [PATCH] chore(workflows): update github actions Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/chromatic.yml | 4 ++-- .github/workflows/crowdin.yml | 4 ++-- .github/workflows/lint.yml | 4 ++-- .github/workflows/nextjs_bundle_analysis.yml | 2 +- .github/workflows/njsscan.yml | 2 +- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/chromatic.yml b/.github/workflows/chromatic.yml index a3abab3cfd..74e29e790e 100644 --- a/.github/workflows/chromatic.yml +++ b/.github/workflows/chromatic.yml @@ -38,7 +38,7 @@ jobs: with: run_install: false - name: Install Node.js - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4 with: node-version-file: .nvmrc cache: pnpm @@ -50,7 +50,7 @@ jobs: # 👇 Runs Chromatic CLI in ./packages/ui - name: Publish to Chromatic - uses: chromaui/action@25f8ff36486472c2d6b5b02dc2d277f051a3ecdb # v11 + uses: chromaui/action@cbce1be7d075d5317d2193e7a3d3872dca86cf0c # v11 with: workingDir: packages/ui projectToken: ${{ secrets.CHROMATIC_PROJECT_TOKEN }} diff --git a/.github/workflows/crowdin.yml b/.github/workflows/crowdin.yml index 78e87eb795..4af5038e1e 100644 --- a/.github/workflows/crowdin.yml +++ b/.github/workflows/crowdin.yml @@ -36,7 +36,7 @@ jobs: - name: Import GPG key id: import_gpg - uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6 + uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6 with: gpg_private_key: ${{ secrets.BOT_GPG_KEY }} git_user_signingkey: true @@ -53,7 +53,7 @@ jobs: - name: Install Node.js if: github.event_name != 'pull_request' && !startsWith(github.ref_name, 'l10n_') - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4 with: node-version-file: .nvmrc cache: pnpm diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index a003ac47b2..59be5edd43 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -24,7 +24,7 @@ jobs: - name: Import GPG key id: import_gpg - uses: crazy-max/ghaction-import-gpg@01dd5d3ca463c7f10f7f4f7b4f177225ac661ee4 # v6 + uses: crazy-max/ghaction-import-gpg@cb9bde2e2525e640591a934b1fd28eef1dcaf5e5 # v6 with: gpg_private_key: ${{ secrets.BOT_GPG_KEY }} git_user_signingkey: true @@ -39,7 +39,7 @@ jobs: # standalone: true - name: Install Node.js - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4 with: node-version-file: .nvmrc cache: pnpm diff --git a/.github/workflows/nextjs_bundle_analysis.yml b/.github/workflows/nextjs_bundle_analysis.yml index 245fcdae6a..994014fd6c 100644 --- a/.github/workflows/nextjs_bundle_analysis.yml +++ b/.github/workflows/nextjs_bundle_analysis.yml @@ -41,7 +41,7 @@ jobs: run_install: false - name: Install Node.js - uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4 with: node-version-file: .nvmrc cache: pnpm diff --git a/.github/workflows/njsscan.yml b/.github/workflows/njsscan.yml index 712e5c6e29..1667b27dbf 100644 --- a/.github/workflows/njsscan.yml +++ b/.github/workflows/njsscan.yml @@ -33,7 +33,7 @@ jobs: uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: 🧐 nodejsscan scan id: njsscan - uses: ajinabraham/njsscan-action@74e5a58c1edb363b84c9ddd626b0e22f038ac09e + uses: ajinabraham/njsscan-action@231750a435d85095d33be7d192d52ec650625146 with: args: '. --sarif --output results.sarif || true' - name: Upload njsscan report