diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 44759444..d719ba80 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -41,7 +41,7 @@ jobs: pre_commit: runs-on: ubuntu-latest steps: - - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v9.3.1 + - uses: Alfresco/alfresco-build-tools/.github/actions/pre-commit@v18.21.0 test_run_check: name: "Test run check" @@ -66,10 +66,10 @@ jobs: - test_run_check if: needs.test_run_check.outputs.tests == 'true' && github.event_name == 'pull_request' steps: - - uses: actions/checkout@v4 - - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v9.3.1 - - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v9.3.1 - - uses: Alfresco/ya-pmd-scan@v4.1.0 + - uses: actions/checkout@v7 + - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v18.21.0 + - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.21.0 + - uses: Alfresco/ya-pmd-scan@v4.4.1 with: classpath-build-command: "mvn -ntp package -DskipTests" @@ -81,16 +81,16 @@ jobs: - test_run_check if: needs.test_run_check.outputs.tests == 'true' steps: - - uses: actions/checkout@v4 - - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v9.3.1 - - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v9.3.1 + - uses: actions/checkout@v7 + - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.21.0 + - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.21.0 - name: "Login to Docker Hub" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: "Login to Quay.io" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: quay.io username: ${{ secrets.QUAY_USERNAME }} @@ -140,16 +140,16 @@ jobs: buildProfile: full-build testProfile: aio-test steps: - - uses: actions/checkout@v4 - - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v9.3.1 - - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v9.3.1 + - uses: actions/checkout@v7 + - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.21.0 + - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.21.0 - name: "Login to Docker Hub" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: "Login to Quay.io" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: quay.io username: ${{ secrets.QUAY_USERNAME }} @@ -181,16 +181,16 @@ jobs: matrix: java: [ '21', '25' ] steps: - - uses: actions/checkout@v4 - - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v9.3.1 - - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v9.3.1 + - uses: actions/checkout@v7 + - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.21.0 + - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.21.0 - name: "Login to Docker Hub" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: "Login to Quay.io" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: quay.io username: ${{ secrets.QUAY_USERNAME }} @@ -224,23 +224,23 @@ jobs: github.event_name != 'pull_request' && (github.ref_name == 'master' || startsWith(github.ref_name, 'SP/') || startsWith(github.ref_name, 'HF/')) steps: - - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v9.3.1 - - uses: actions/checkout@v4 + - uses: Alfresco/alfresco-build-tools/.github/actions/free-hosted-runner-disk-space@v18.21.0 + - uses: actions/checkout@v7 with: persist-credentials: false - - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v9.3.1 - - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v9.3.1 + - uses: Alfresco/alfresco-build-tools/.github/actions/get-build-info@v18.21.0 + - uses: Alfresco/alfresco-build-tools/.github/actions/setup-java-build@v18.21.0 - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 with: platforms: linux/amd64,linux/arm64 - name: "Login to Docker Hub" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: "Login to Quay.io" - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: quay.io username: ${{ secrets.QUAY_USERNAME }} @@ -251,7 +251,7 @@ jobs: sudo service docker restart - name: "Clean-up SNAPSHOT artifacts" run: find "${HOME}/.m2/repository/" -type d -name "*-SNAPSHOT*" | xargs -r -l rm -rf - - uses: Alfresco/alfresco-build-tools/.github/actions/configure-git-author@v9.3.1 + - uses: Alfresco/alfresco-build-tools/.github/actions/configure-git-author@v18.21.0 with: username: ${{ env.GIT_USERNAME }} email: ${{ env.GIT_EMAIL }} diff --git a/.github/workflows/dependency-graph.yml b/.github/workflows/dependency-graph.yml index 7d626553..7244bf60 100644 --- a/.github/workflows/dependency-graph.yml +++ b/.github/workflows/dependency-graph.yml @@ -18,8 +18,8 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v15.9.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: Alfresco/alfresco-build-tools/.github/actions/maven-dependency-scan@v18.21.0 with: java-version: '21' maven-version: '3.9.9' diff --git a/.github/workflows/precommit_formatter.yml b/.github/workflows/precommit_formatter.yml index c0aecb64..28e62f01 100644 --- a/.github/workflows/precommit_formatter.yml +++ b/.github/workflows/precommit_formatter.yml @@ -16,9 +16,9 @@ jobs: contents: write if: contains(github.event.head_commit.message, '[reformat code]') steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Python ${{ inputs.python-version }} - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.9" - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1 @@ -27,7 +27,7 @@ jobs: extra_args: --all-files - name: Update secrets baseline run: pip install detect-secrets && detect-secrets scan --baseline .secrets.baseline - - uses: Alfresco/alfresco-build-tools/.github/actions/git-commit-changes@v8.26.0 + - uses: Alfresco/alfresco-build-tools/.github/actions/git-commit-changes@v18.21.0 with: username: ${{ secrets.BOT_GITHUB_USERNAME }} add-options: -u diff --git a/.github/workflows/update-pdf-renderer.yml b/.github/workflows/update-pdf-renderer.yml index 4aa5f813..6b16e128 100644 --- a/.github/workflows/update-pdf-renderer.yml +++ b/.github/workflows/update-pdf-renderer.yml @@ -29,7 +29,7 @@ jobs: alfresco-pdf-renderer - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: token: ${{ steps.app-token.outputs.token }}