This is an automated email from the ASF dual-hosted git repository.
shahar1 pushed a commit to branch v3-3-test
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/v3-3-test by this push:
new 8de09ad8ae2 Bump the github-actions-updates group with 9 updates
(#70039)
8de09ad8ae2 is described below
commit 8de09ad8ae2e039efb65a61c66bc179b6efa338c
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sat Jul 18 14:25:38 2026 +0300
Bump the github-actions-updates group with 9 updates (#70039)
Bumps the github-actions-updates group with 9 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-java](https://github.com/actions/setup-java) | `5.4.0` |
`5.5.0` |
| [actions/setup-node](https://github.com/actions/setup-node) | `6.4.0` |
`7.0.0` |
|
[slackapi/slack-github-action](https://github.com/slackapi/slack-github-action)
| `3.0.3` | `3.0.5` |
|
[aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials)
| `6.2.1` | `6.2.2` |
| [github/codeql-action/init](https://github.com/github/codeql-action) |
`4.36.3` | `4.37.0` |
| [github/codeql-action/autobuild](https://github.com/github/codeql-action)
| `4.36.3` | `4.37.0` |
| [github/codeql-action/analyze](https://github.com/github/codeql-action) |
`4.36.3` | `4.37.0` |
| [actions/stale](https://github.com/actions/stale) | `10.3.0` | `10.4.0` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) | `8.3.0` |
`8.3.2` |
Updates `actions/setup-java` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-java/releases)
-
[Commits](https://github.com/actions/setup-java/compare/1bcf9fb12cf4aa7d266a90ae39939e61372fe520...0f481fcb613427c0f801b606911222b5b6f3083a)
Updates `actions/setup-node` from 6.4.0 to 7.0.0
- [Release notes](https://github.com/actions/setup-node/releases)
-
[Commits](https://github.com/actions/setup-node/compare/48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e...820762786026740c76f36085b0efc47a31fe5020)
Updates `slackapi/slack-github-action` from 3.0.3 to 3.0.5
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
-
[Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/slackapi/slack-github-action/compare/45a88b9581bfab2566dc881e2cd66d334e621e2c...0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc)
Updates `aws-actions/configure-aws-credentials` from 6.2.1 to 6.2.2
- [Release
notes](https://github.com/aws-actions/configure-aws-credentials/releases)
-
[Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/aws-actions/configure-aws-credentials/compare/254c19bd240aabef8777f48595e9d2d7b972184b...517a711dbcd0e402f90c77e7e2f81e849156e31d)
Updates `github/codeql-action/init` from 4.36.3 to 4.37.0
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)
Updates `github/codeql-action/autobuild` from 4.36.3 to 4.37.0
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)
Updates `github/codeql-action/analyze` from 4.36.3 to 4.37.0
- [Release notes](https://github.com/github/codeql-action/releases)
-
[Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/github/codeql-action/compare/54f647b7e1bb85c95cddabcd46b0c578ec92bc1a...99df26d4f13ea111d4ec1a7dddef6063f76b97e9)
Updates `actions/stale` from 10.3.0 to 10.4.0
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/actions/stale/compare/eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899...1e223db275d687790206a7acac4d1a11bd6fe629)
Updates `astral-sh/setup-uv` from 8.3.0 to 8.3.2
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
-
[Commits](https://github.com/astral-sh/setup-uv/compare/d31148d669074a8d0a63714ba94f3201e7020bc3...11f9893b081a58869d3b5fccaea48c9e9e46f990)
---
updated-dependencies:
- dependency-name: actions/setup-java
dependency-version: 5.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: actions/setup-node
dependency-version: 7.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: github-actions-updates
- dependency-name: slackapi/slack-github-action
dependency-version: 3.0.5
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 6.2.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/init
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/autobuild
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: github/codeql-action/analyze
dependency-version: 4.37.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: actions/stale
dependency-version: 10.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: github-actions-updates
- dependency-name: astral-sh/setup-uv
dependency-version: 8.3.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: github-actions-updates
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/basic-tests.yml | 4 ++--
.github/workflows/ci-amd.yml | 8 ++++----
.github/workflows/ci-arm.yml | 8 ++++----
.github/workflows/ci-duration-monitor.yml | 2 +-
.github/workflows/ci-image-checks.yml | 8 ++++----
.github/workflows/ci-notification.yml | 6 +++---
.github/workflows/codeql-analysis.yml | 8 ++++----
.github/workflows/e2e-flaky-tests-report.yml | 2 +-
.github/workflows/k8s-tests.yml | 2 +-
.github/workflows/publish-docs-to-s3.yml | 2 +-
.github/workflows/recheck-old-bug-report.yml | 2 +-
.github/workflows/registry-backfill.yml | 6 +++---
.github/workflows/registry-build.yml | 4 ++--
.github/workflows/registry-tests.yml | 2 +-
.github/workflows/scheduled-verify-release-calendar.yml | 2 +-
.github/workflows/stale.yml | 4 ++--
.github/workflows/ui-e2e-tests.yml | 2 +-
.github/workflows/update-constraints-on-push-stable.yml | 2 +-
.github/workflows/update-constraints-on-push.yml | 2 +-
.github/workflows/upgrade-check.yml | 4 ++--
20 files changed, 40 insertions(+), 40 deletions(-)
diff --git a/.github/workflows/basic-tests.yml
b/.github/workflows/basic-tests.yml
index 0912b0722ec..065868d6cc2 100644
--- a/.github/workflows/basic-tests.yml
+++ b/.github/workflows/basic-tests.yml
@@ -115,7 +115,7 @@ jobs:
- name: "Install SVN"
run: sudo apt-get update && sudo apt-get install -y subversion
- name: "Install Java (for Apache RAT)"
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 #
v5.4.0
+ uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #
v5.5.0
with:
distribution: 'temurin'
java-version: '17'
@@ -197,7 +197,7 @@ jobs:
version: 9
run_install: false
- name: "Setup node"
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
cache: 'pnpm'
diff --git a/.github/workflows/ci-amd.yml b/.github/workflows/ci-amd.yml
index 8c1bceaec11..43ee4a8de13 100644
--- a/.github/workflows/ci-amd.yml
+++ b/.github/workflows/ci-amd.yml
@@ -985,7 +985,7 @@ jobs:
with:
persist-credentials: false
- name: Setup Java
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 #
v5.4.0
+ uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #
v5.5.0
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
@@ -1155,7 +1155,7 @@ jobs:
overwrite: true
- name: "Notify Slack (new/changed failures)"
if: steps.notification.outputs.action == 'notify_new'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1171,7 +1171,7 @@ jobs:
# yamllint enable rule:line-length
- name: "Notify Slack (still not fixed)"
if: steps.notification.outputs.action == 'notify_reminder'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1187,7 +1187,7 @@ jobs:
# yamllint enable rule:line-length
- name: "Notify Slack (all tests passing)"
if: steps.notification.outputs.action == 'notify_recovery'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ci-arm.yml b/.github/workflows/ci-arm.yml
index 7fc429bda2d..4532576e117 100644
--- a/.github/workflows/ci-arm.yml
+++ b/.github/workflows/ci-arm.yml
@@ -978,7 +978,7 @@ jobs:
with:
persist-credentials: false
- name: Setup Java
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 #
v5.4.0
+ uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #
v5.5.0
with:
distribution: 'temurin'
java-version: ${{ env.JAVA_VERSION }}
@@ -1148,7 +1148,7 @@ jobs:
overwrite: true
- name: "Notify Slack (new/changed failures)"
if: steps.notification.outputs.action == 'notify_new'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1164,7 +1164,7 @@ jobs:
# yamllint enable rule:line-length
- name: "Notify Slack (still not fixed)"
if: steps.notification.outputs.action == 'notify_reminder'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -1180,7 +1180,7 @@ jobs:
# yamllint enable rule:line-length
- name: "Notify Slack (all tests passing)"
if: steps.notification.outputs.action == 'notify_recovery'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ci-duration-monitor.yml
b/.github/workflows/ci-duration-monitor.yml
index 08e6b6b2657..f4cc2c38e56 100644
--- a/.github/workflows/ci-duration-monitor.yml
+++ b/.github/workflows/ci-duration-monitor.yml
@@ -67,7 +67,7 @@ jobs:
- name: "Post duration alert to Slack"
if: steps.analyze.outputs.has-regression == 'true'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/ci-image-checks.yml
b/.github/workflows/ci-image-checks.yml
index 9f845ebb0d5..45c6b36308a 100644
--- a/.github/workflows/ci-image-checks.yml
+++ b/.github/workflows/ci-image-checks.yml
@@ -266,7 +266,7 @@ jobs:
inputs.canary-run == 'true' &&
matrix.flag == '--docs-only' &&
steps.inventory-notification.outputs.action == 'notify_new'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -282,7 +282,7 @@ jobs:
inputs.canary-run == 'true' &&
matrix.flag == '--docs-only' &&
steps.inventory-notification.outputs.action == 'notify_reminder'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -298,7 +298,7 @@ jobs:
inputs.canary-run == 'true' &&
matrix.flag == '--docs-only' &&
steps.inventory-notification.outputs.action == 'notify_recovery'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -441,7 +441,7 @@ jobs:
inputs.canary-run == 'true' &&
(github.event_name == 'schedule' || github.event_name ==
'workflow_dispatch')
- name: Configure AWS credentials
- uses:
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b
# v6.2.1
+ uses:
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d
# v6.2.2
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/ci-notification.yml
b/.github/workflows/ci-notification.yml
index c896a94a937..768ede8cdba 100644
--- a/.github/workflows/ci-notification.yml
+++ b/.github/workflows/ci-notification.yml
@@ -79,7 +79,7 @@ jobs:
- name: "Send Slack notification (new/changed failures)"
if: steps.notification.outputs.action == 'notify_new'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -100,7 +100,7 @@ jobs:
- name: "Send Slack notification (still not fixed)"
if: steps.notification.outputs.action == 'notify_reminder'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -121,7 +121,7 @@ jobs:
- name: "Send Slack notification (all passing)"
if: steps.notification.outputs.action == 'notify_recovery'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/codeql-analysis.yml
b/.github/workflows/codeql-analysis.yml
index e35889da18c..a815d8b310b 100644
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -116,19 +116,19 @@ jobs:
- name: Setup Java
if: matrix.language == 'java'
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 #
v5.4.0
+ uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #
v5.5.0
with:
distribution: 'temurin'
java-version: '11'
- name: Initialize CodeQL
- uses:
github/codeql-action/init@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
+ uses:
github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with:
languages: ${{ matrix.language }}
- name: Autobuild
if: matrix.language != 'java'
- uses:
github/codeql-action/autobuild@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a #
v4.36.3
+ uses:
github/codeql-action/autobuild@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 #
v4.37.0
- name: Build Java SDK
if: matrix.language == 'java'
@@ -136,7 +136,7 @@ jobs:
run: ./gradlew classes testClasses
- name: Perform CodeQL Analysis
- uses:
github/codeql-action/analyze@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4.36.3
+ uses:
github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with:
# Provide more context to the SARIF output (shows up in
run.automationDetails.id field)
category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/e2e-flaky-tests-report.yml
b/.github/workflows/e2e-flaky-tests-report.yml
index b4408985236..34cb70f971e 100644
--- a/.github/workflows/e2e-flaky-tests-report.yml
+++ b/.github/workflows/e2e-flaky-tests-report.yml
@@ -55,7 +55,7 @@ jobs:
- name: "Post report to Slack"
if: always() && steps.analyze.outcome == 'success'
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/k8s-tests.yml b/.github/workflows/k8s-tests.yml
index 54b4d3dc9c4..5aafb0a792a 100644
--- a/.github/workflows/k8s-tests.yml
+++ b/.github/workflows/k8s-tests.yml
@@ -203,7 +203,7 @@ jobs:
restore-keys: |
lang-sdk-go-v1-${{ runner.os }}-${{ runner.arch }}-
- name: "Setup Java for lang-SDK build"
- uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 #
v5.4.0
+ uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #
v5.5.0
with:
distribution: 'temurin'
java-version: ${{ inputs.java-sdk-version }}
diff --git a/.github/workflows/publish-docs-to-s3.yml
b/.github/workflows/publish-docs-to-s3.yml
index e89b1cc9db2..70b99090625 100644
--- a/.github/workflows/publish-docs-to-s3.yml
+++ b/.github/workflows/publish-docs-to-s3.yml
@@ -507,7 +507,7 @@ jobs:
sudo /tmp/aws/install --update
rm -rf /tmp/aws/
- name: Configure AWS credentials
- uses:
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b
# v6.2.1
+ uses:
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d
# v6.2.2
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/recheck-old-bug-report.yml
b/.github/workflows/recheck-old-bug-report.yml
index a322f9b945d..03032d75e11 100644
--- a/.github/workflows/recheck-old-bug-report.yml
+++ b/.github/workflows/recheck-old-bug-report.yml
@@ -28,7 +28,7 @@ jobs:
recheck-old-bug-report:
runs-on: ["ubuntu-22.04"]
steps:
- - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
+ - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0
with:
only-issue-labels: 'kind:bug'
stale-issue-label: 'Stale Bug Report'
diff --git a/.github/workflows/registry-backfill.yml
b/.github/workflows/registry-backfill.yml
index 69ae19e8401..33d0bdba9ac 100644
--- a/.github/workflows/registry-backfill.yml
+++ b/.github/workflows/registry-backfill.yml
@@ -162,7 +162,7 @@ jobs:
rm -rf /tmp/aws/
- name: "Configure AWS credentials"
- uses:
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b
# v6.2.1
+ uses:
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d
# v6.2.2
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -222,7 +222,7 @@ jobs:
version: 10
- name: "Setup Node.js"
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
cache: 'pnpm'
@@ -304,7 +304,7 @@ jobs:
rm -rf /tmp/aws/
- name: "Configure AWS credentials"
- uses:
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b
# v6.2.1
+ uses:
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d
# v6.2.2
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
diff --git a/.github/workflows/registry-build.yml
b/.github/workflows/registry-build.yml
index a6f138bd444..b4c3b4596c4 100644
--- a/.github/workflows/registry-build.yml
+++ b/.github/workflows/registry-build.yml
@@ -138,7 +138,7 @@ jobs:
rm -rf /tmp/aws/
- name: "Configure AWS credentials"
- uses:
aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b
# v6.2.1
+ uses:
aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d
# v6.2.2
with:
aws-access-key-id: ${{ secrets.DOCS_AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.DOCS_AWS_SECRET_ACCESS_KEY }}
@@ -236,7 +236,7 @@ jobs:
version: 10
- name: "Setup Node.js"
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
cache: 'pnpm'
diff --git a/.github/workflows/registry-tests.yml
b/.github/workflows/registry-tests.yml
index 42ad21192b3..5281c271d43 100644
--- a/.github/workflows/registry-tests.yml
+++ b/.github/workflows/registry-tests.yml
@@ -50,7 +50,7 @@ jobs:
persist-credentials: false
- name: "Install uv"
- uses: astral-sh/setup-uv@d31148d669074a8d0a63714ba94f3201e7020bc3 #
v8.3.0
+ uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 #
v8.3.2
with:
python-version: "3.12"
diff --git a/.github/workflows/scheduled-verify-release-calendar.yml
b/.github/workflows/scheduled-verify-release-calendar.yml
index 36fd1b938dd..a713c25c247 100644
--- a/.github/workflows/scheduled-verify-release-calendar.yml
+++ b/.github/workflows/scheduled-verify-release-calendar.yml
@@ -50,7 +50,7 @@ jobs:
# yamllint disable rule:line-length
- name: "Notify Slack on failure"
if: failure()
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc
with:
method: chat.postMessage
token: ${{ secrets.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 41d0ea52050..a7b7b83ecb0 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -30,7 +30,7 @@ jobs:
runs-on: ["ubuntu-22.04"]
steps:
# Handle all PRs (45-day stale) and pending-response issues (14-day
stale)
- - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
+ - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0
with:
stale-pr-message: >
This pull request has been automatically marked as stale because
it has not had
@@ -50,7 +50,7 @@ jobs:
close-issue-message: >
This issue has been closed because it has not received response
from the issue author.
# Handle PRs with pending-response label (7-day stale, faster response
expected)
- - uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
+ - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0
with:
only-pr-labels: 'pending-response'
days-before-pr-stale: 7
diff --git a/.github/workflows/ui-e2e-tests.yml
b/.github/workflows/ui-e2e-tests.yml
index ee0e417d963..f33ee0fcfc7 100644
--- a/.github/workflows/ui-e2e-tests.yml
+++ b/.github/workflows/ui-e2e-tests.yml
@@ -126,7 +126,7 @@ jobs:
version: 9
run_install: false
- name: "Setup node"
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
+ uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 #
v7.0.0
with:
node-version: 24
- name: "Compile UI assets (for image build fallback)"
diff --git a/.github/workflows/update-constraints-on-push-stable.yml
b/.github/workflows/update-constraints-on-push-stable.yml
index 2ad9cbf85bc..f46f98c3a29 100644
--- a/.github/workflows/update-constraints-on-push-stable.yml
+++ b/.github/workflows/update-constraints-on-push-stable.yml
@@ -164,7 +164,7 @@ jobs:
SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
steps:
- name: "Send Slack notification"
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/update-constraints-on-push.yml
b/.github/workflows/update-constraints-on-push.yml
index b65168c53da..318e3cf6fe1 100644
--- a/.github/workflows/update-constraints-on-push.yml
+++ b/.github/workflows/update-constraints-on-push.yml
@@ -213,7 +213,7 @@ jobs:
SLACK_BOT_TOKEN: ${{ secrets.SLACK_BOT_TOKEN }}
steps:
- name: "Send Slack notification"
- uses:
slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3
+ uses:
slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc # v3.0.5
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
diff --git a/.github/workflows/upgrade-check.yml
b/.github/workflows/upgrade-check.yml
index cd3dce4d4e5..ea0f1d57c3a 100644
--- a/.github/workflows/upgrade-check.yml
+++ b/.github/workflows/upgrade-check.yml
@@ -103,7 +103,7 @@ jobs:
[${{ inputs.target-branch }}] Notify Slack on success
if: success() && steps.find-pr.outputs.pr-url != ''
uses: >-
- slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c
+ slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}
@@ -132,7 +132,7 @@ jobs:
[${{ inputs.target-branch }}] Notify Slack on failure
if: failure()
uses: >-
- slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c
+ slackapi/slack-github-action@0d95c9a7becc1e6e297d76df9bc735c44f4cbcbc
with:
method: chat.postMessage
token: ${{ env.SLACK_BOT_TOKEN }}