diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..2a2136a --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,101 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/ci.yml': + - 'actions/checkout@v4.3.1' + - 'actions/checkout@v6.0.2' + - 'actions/github-script@v8.0.0' + - 'actions/setup-go@v5.6.0' + - 'actions/setup-node@v4.4.0' + '.github/workflows/release-please.yml': + - 'actions/create-github-app-token@v1.12.0' + - 'actions/setup-node@v4.4.0' + - 'pnpm/action-setup@v4.3.0' + '.github/workflows/semgrep.yml': [] + '.github/workflows/stlc-promote.yml': + - 'actions/checkout@v6.0.2' + - 'actions/create-github-app-token@v1.12.0' + '.github/workflows/stlc-sync.yml': + - 'actions/checkout@v6.0.2' + '.github/workflows/update-cli-coverage.yml': + - 'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5' + - 'actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547' + - 'actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093' + - 'actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16' + - 'actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020' + - 'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02' + - 'kernel/security-workflows@4144994f1d6977e07ef5a5832599ee4faaae9550' + '.github/workflows/vuln-remediation.yml': [] +dependencies: + 'actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5': + ref: 'v4.3.1' + commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5' + owner_id: 44036562 + repo_id: 197814629 + 'actions/checkout@v4.3.1': + ref: 'v4.3.1' + commit: 'sha1-34e114876b0b11c390a56381ad16ebd13914f8d5' + owner_id: 44036562 + repo_id: 197814629 + 'actions/checkout@v6.0.2': + ref: 'v6.0.2' + commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd' + owner_id: 44036562 + repo_id: 197814629 + 'actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547': + ref: 'v1.12.0' + commit: 'sha1-d72941d797fd3113feb6b93fd0dec494b13a2547' + owner_id: 44036562 + repo_id: 642580244 + 'actions/create-github-app-token@v1.12.0': + ref: 'v1.12.0' + commit: 'sha1-d72941d797fd3113feb6b93fd0dec494b13a2547' + owner_id: 44036562 + repo_id: 642580244 + 'actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093': + ref: 'v4.3.0' + commit: 'sha1-d3f86a106a0bac45b974a628896c90dbdf5c8093' + owner_id: 44036562 + repo_id: 192626254 + 'actions/github-script@v8.0.0': + ref: 'v8.0.0' + commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd' + owner_id: 44036562 + repo_id: 205262760 + 'actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16': + ref: 'v6.5.0' + commit: 'sha1-924ae3a1cded613372ab5595356fb5720e22ba16' + owner_id: 44036562 + repo_id: 192624594 + 'actions/setup-go@v5.6.0': + ref: 'v5.6.0' + commit: 'sha1-40f1582b2485089dde7abd97c1529aa768e1baff' + owner_id: 44036562 + repo_id: 192624594 + 'actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020': + ref: 'v4.4.0' + commit: 'sha1-49933ea5288caeca8642d1e84afbd3f7d6820020' + owner_id: 44036562 + repo_id: 189476904 + 'actions/setup-node@v4.4.0': + ref: 'v4.4.0' + commit: 'sha1-49933ea5288caeca8642d1e84afbd3f7d6820020' + owner_id: 44036562 + repo_id: 189476904 + 'actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02': + ref: 'v4.6.2' + commit: 'sha1-ea165f8d65b6e75b540449e92b4886f43607fa02' + owner_id: 44036562 + repo_id: 192625955 + 'kernel/security-workflows@4144994f1d6977e07ef5a5832599ee4faaae9550': + ref: 'main' + commit: 'sha1-4144994f1d6977e07ef5a5832599ee4faaae9550' + owner_id: 194616459 + repo_id: 1207196574 + 'pnpm/action-setup@v4.3.0': + ref: 'v4.3.0' + commit: 'sha1-b906affcce14559ad1aafd4ab0e942779e9f58b1' + owner_id: 21320719 + repo_id: 262289747 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index faf1456..d8b366f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,14 +26,14 @@ jobs: github.repository == 'stainless-sdks/hypeman-go' && (github.event_name == 'push' || github.event.pull_request.head.repo.fork) && (github.event_name != 'push' || github.event.head_commit.message != 'codegen metadata') steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@v6.0.2 - name: Get GitHub OIDC Token if: |- github.repository == 'stainless-sdks/hypeman-go' && !startsWith(github.ref, 'refs/heads/stl/') id: github-oidc - uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 + uses: actions/github-script@v8.0.0 with: script: core.setOutput('github_token', await core.getIDToken()); @@ -53,10 +53,10 @@ jobs: if: github.event_name == 'push' || github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@v6.0.2 - name: Setup go - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0 + uses: actions/setup-go@v5.6.0 with: go-version-file: ./go.mod @@ -68,10 +68,10 @@ jobs: runs-on: ${{ startsWith(github.repository, 'stainless-sdks/') && 'depot-ubuntu-24.04' || 'ubuntu-latest' }} if: github.event_name == 'push' || github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@v6.0.2 - name: Setup go - uses: actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff # v5.6.0 + uses: actions/setup-go@v5.6.0 with: go-version-file: ./go.mod @@ -87,8 +87,8 @@ jobs: permissions: contents: read steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 + - uses: actions/checkout@v4.3.1 + - uses: actions/setup-node@v4.4.0 with: node-version: '22' - run: node --test .github/tests/update-coverage-security.test.mjs diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 4a3c5a0..6cd3711 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Mint release token id: release-token - uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1 + uses: actions/create-github-app-token@v1.12.0 with: app-id: ${{ secrets.ADMIN_APP_ID }} private-key: ${{ secrets.ADMIN_APP_PRIVATE_KEY }} @@ -36,12 +36,12 @@ jobs: permission-workflows: write - name: Set up Node - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@v4.4.0 with: node-version: '18.20.2' - name: Set up pnpm - uses: pnpm/action-setup@f40ffcd9367d9f12939873eb1018b921a783ffaa # v4 + uses: pnpm/action-setup@v4.3.0 with: version: '9.11.0' run_install: false diff --git a/.github/workflows/stlc-promote.yml b/.github/workflows/stlc-promote.yml index fd9042d..2c418de 100644 --- a/.github/workflows/stlc-promote.yml +++ b/.github/workflows/stlc-promote.yml @@ -21,14 +21,14 @@ jobs: cancel-in-progress: true steps: - name: Check out staging - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@v6.0.2 with: fetch-depth: 0 persist-credentials: false - name: Mint production token id: production-token - uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1 + uses: actions/create-github-app-token@v1.12.0 with: app-id: ${{ secrets.ADMIN_APP_ID }} private-key: ${{ secrets.ADMIN_APP_PRIVATE_KEY }} diff --git a/.github/workflows/stlc-sync.yml b/.github/workflows/stlc-sync.yml index f45fe36..ff980d2 100644 --- a/.github/workflows/stlc-sync.yml +++ b/.github/workflows/stlc-sync.yml @@ -27,7 +27,7 @@ jobs: cancel-in-progress: true steps: - name: Check out staging - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@v6.0.2 with: fetch-depth: 0