diff --git a/.github/workflows/PR.yaml b/.github/workflows/PR.yaml index 1c1d7a41a..b2e3be8c3 100644 --- a/.github/workflows/PR.yaml +++ b/.github/workflows/PR.yaml @@ -25,10 +25,10 @@ jobs: testsNeeded: ${{ steps.testsNeeded.outputs.testsNeeded }} steps: - name: checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: setup id: setup - uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v1 + uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v2 - name: testsNeeded id: testsNeeded uses: dorny/paths-filter@v3 @@ -44,12 +44,12 @@ jobs: name: Lint needs: [workflow-setup] if: ${{ needs.workflow-setup.outputs.testsNeeded == 'true' }} - uses: hyperledger/indy-shared-gha/.github/workflows/lint.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/lint.yaml@v2 build-docker-image: name: Create Builder Image needs: [workflow-setup, lint] - uses: hyperledger/indy-shared-gha/.github/workflows/buildimage.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/buildimage.yaml@v2 with: CACHE_KEY_BUILD: ${{ needs.workflow-setup.outputs.CACHE_KEY_BUILD }} DOCKER_IMAGE: ghcr.io/${{ needs.workflow-setup.outputs.GITHUB_REPOSITORY_NAME }}/plenum-build @@ -58,7 +58,7 @@ jobs: build_packages: name: Build Packages needs: [workflow-setup, build-docker-image] - uses: hyperledger/indy-shared-gha/.github/workflows/buildpackages.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/buildpackages.yaml@v2 with: DOCKER_IMAGE: ghcr.io/${{ needs.workflow-setup.outputs.GITHUB_REPOSITORY_NAME }}/plenum-build:${{ needs.workflow-setup.outputs.UBUNTU_VERSION }} UBUNTU_VERSION: ${{ needs.workflow-setup.outputs.UBUNTU_VERSION }} diff --git a/.github/workflows/Push.yaml b/.github/workflows/Push.yaml index a6fa151ef..512204ef7 100644 --- a/.github/workflows/Push.yaml +++ b/.github/workflows/Push.yaml @@ -25,19 +25,19 @@ jobs: publish: ${{ steps.setup.outputs.publish }} steps: - name: checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: setup id: setup - uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v1 + uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v2 lint: name: Lint - uses: hyperledger/indy-shared-gha/.github/workflows/lint.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/lint.yaml@v2 build-docker-image: name: Create Builder Image needs: [workflow-setup, lint] - uses: hyperledger/indy-shared-gha/.github/workflows/buildimage.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/buildimage.yaml@v2 with: CACHE_KEY_BUILD: ${{ needs.workflow-setup.outputs.CACHE_KEY_BUILD }} DOCKER_IMAGE: ghcr.io/${{ needs.workflow-setup.outputs.GITHUB_REPOSITORY_NAME }}/plenum-build @@ -46,7 +46,7 @@ jobs: build_packages: name: Build Packages needs: [workflow-setup, build-docker-image] - uses: hyperledger/indy-shared-gha/.github/workflows/buildpackages.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/buildpackages.yaml@v2 with: DOCKER_IMAGE: ghcr.io/${{ needs.workflow-setup.outputs.GITHUB_REPOSITORY_NAME }}/plenum-build:${{ needs.workflow-setup.outputs.UBUNTU_VERSION }} UBUNTU_VERSION: ${{ needs.workflow-setup.outputs.UBUNTU_VERSION }} @@ -66,7 +66,7 @@ jobs: name: Publish Artifacts needs: [workflow-setup, plenum_tests] if: needs.workflow-setup.outputs.publish == 'true' - uses: hyperledger/indy-shared-gha/.github/workflows/publish_artifacts.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/publish_artifacts.yaml@v2 with: COMPONENT: 'dev' UBUNTU_VERSION: ${{ needs.workflow-setup.outputs.UBUNTU_VERSION }} diff --git a/.github/workflows/publishRelease.yaml b/.github/workflows/publishRelease.yaml index 9ead335a5..9188deaae 100644 --- a/.github/workflows/publishRelease.yaml +++ b/.github/workflows/publishRelease.yaml @@ -31,15 +31,15 @@ jobs: publish: ${{ steps.workflow-setup.outputs.publish }} steps: - name: checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: get-release-info id: get-release-info - uses: hyperledger/indy-shared-gha/.github/actions/get-release-info@v1 + uses: hyperledger/indy-shared-gha/.github/actions/get-release-info@v2 with: versionString: "${{ github.event.head_commit.message }}" - name: workflow-setup id: workflow-setup - uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v1 + uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v2 createRelease: name: Create Release @@ -48,10 +48,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Download Plenum deb Artifacts from Github Action Artifacts - uses: dawidd6/action-download-artifact@v6 + uses: dawidd6/action-download-artifact@v11 with: github_token: ${{ secrets.GITHUB_TOKEN }} workflow: releasepr.yaml @@ -59,7 +59,7 @@ jobs: name: plenum-deb path: artifacts/plenum-deb - name: Download Plenum python Artifacts from Github Action Artifacts - uses: dawidd6/action-download-artifact@v6 + uses: dawidd6/action-download-artifact@v11 with: github_token: ${{ secrets.GITHUB_TOKEN }} workflow: releasepr.yaml @@ -67,24 +67,24 @@ jobs: name: plenum-python path: artifacts/plenum-python - name: Download Plenum third party dependency Artifacts from Github Action Artifacts - uses: dawidd6/action-download-artifact@v6 + uses: dawidd6/action-download-artifact@v11 with: github_token: ${{ secrets.GITHUB_TOKEN }} workflow: releasepr.yaml workflow_conclusion: success name: third-party-dependencies path: artifacts/third-party-dependencies - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v5 with: name: third-party-dependencies path: artifacts/third-party-dependencies retention-days: 5 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v5 with: name: plenum-deb path: artifacts/plenum-deb retention-days: 5 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v5 with: name: plenum-python path: artifacts/plenum-python @@ -111,7 +111,7 @@ jobs: name: Publish Artifacts needs: [release-infos, createRelease] if: needs.release-infos.outputs.isVersionBump == 'true' && needs.release-infos.outputs.publish == 'true' - uses: hyperledger/indy-shared-gha/.github/workflows/publish_artifacts.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/publish_artifacts.yaml@v2 with: COMPONENT: ${{ needs.release-infos.outputs.component }} UBUNTU_VERSION: ${{ needs.release-infos.outputs.UBUNTU_VERSION }} @@ -124,7 +124,7 @@ jobs: convertPyVersion: name: "Convert to python version flavour" needs: [release-infos, publish_artifacts] - uses: hyperledger/indy-shared-gha/.github/workflows/pyVersionConversion.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/pyVersionConversion.yaml@v2 with: VERSIONTAG: ${{ needs.release-infos.outputs.VERSIONTAG }} @@ -133,7 +133,7 @@ jobs: needs: [release-infos, publish_artifacts, convertPyVersion] steps: - name: Repository Dispatch - uses: peter-evans/repository-dispatch@v3 + uses: peter-evans/repository-dispatch@v4 with: token: ${{ secrets.BOT_PR_PAT }} repository: hyperledger/indy-node diff --git a/.github/workflows/releasepr.yaml b/.github/workflows/releasepr.yaml index a44e90992..322b699b1 100644 --- a/.github/workflows/releasepr.yaml +++ b/.github/workflows/releasepr.yaml @@ -23,27 +23,27 @@ jobs: distribution: ${{ steps.workflow-setup.outputs.distribution }} steps: - name: checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: get-release-info id: get-release-info - uses: hyperledger/indy-shared-gha/.github/actions/get-release-info@v1 + uses: hyperledger/indy-shared-gha/.github/actions/get-release-info@v2 with: versionString: "${{ github.event.pull_request.body }}" - name: workflow-setup id: workflow-setup - uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v1 + uses: hyperledger/indy-shared-gha/.github/actions/workflow-setup@v2 lint: name: Lint needs: [release-infos] if: needs.release-infos.outputs.isVersionBump == 'true' - uses: hyperledger/indy-shared-gha/.github/workflows/lint.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/lint.yaml@v2 build-docker-image: name: Create Builder Image needs: [release-infos, lint] if: needs.release-infos.outputs.isVersionBump == 'true' - uses: hyperledger/indy-shared-gha/.github/workflows/buildimage.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/buildimage.yaml@v2 with: CACHE_KEY_BUILD: ${{ needs.release-infos.outputs.CACHE_KEY_BUILD }} DOCKER_IMAGE: ghcr.io/${{ needs.release-infos.outputs.GITHUB_REPOSITORY_NAME }}/plenum-build @@ -53,7 +53,7 @@ jobs: name: Build Packages needs: [release-infos, build-docker-image] if: needs.release-infos.outputs.isVersionBump == 'true' - uses: hyperledger/indy-shared-gha/.github/workflows/buildpackages.yaml@v1 + uses: hyperledger/indy-shared-gha/.github/workflows/buildpackages.yaml@v2 with: DOCKER_IMAGE: ghcr.io/${{ needs.release-infos.outputs.GITHUB_REPOSITORY_NAME }}/plenum-build:${{ needs.release-infos.outputs.UBUNTU_VERSION }} UBUNTU_VERSION: ${{ needs.release-infos.outputs.UBUNTU_VERSION }} diff --git a/.github/workflows/reuseable_test.yaml b/.github/workflows/reuseable_test.yaml index 485de6a82..f9536fe5d 100644 --- a/.github/workflows/reuseable_test.yaml +++ b/.github/workflows/reuseable_test.yaml @@ -32,7 +32,7 @@ jobs: fail-fast: false steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Cache pip uses: actions/cache@v4 @@ -45,7 +45,7 @@ jobs: ${{ runner.os }}-pip- - name: Download plenum deb build - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v6 with: name: plenum-deb @@ -77,7 +77,7 @@ jobs: - name: Upload Detailed Test Failure Results # The test runner only emits the detailed test results if the tests fail. if: (steps.plenum-test.outcome == 'failure') && failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: detailed-test-result-slice-${{ matrix.slice }} path: test-result-plenum-${{ matrix.slice }}.txt @@ -97,7 +97,7 @@ jobs: fail-fast: false steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Cache pip uses: actions/cache@v4 @@ -110,7 +110,7 @@ jobs: ${{ runner.os }}-pip- - name: Download plenum deb build - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v6 with: name: plenum-deb diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index b26a238f5..8697041f7 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -35,12 +35,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@v4 # was v4.1.1 - b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@v5 # was v4.1.1 - b4ffde65f46336ab88eb53be808477a3936bae11 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@v2.4.0 # was v2.3.1 - 0864cf19026789058feabb7e87baa5f140aac736 + uses: ossf/scorecard-action@v2.4.3 # was v2.3.1 - 0864cf19026789058feabb7e87baa5f140aac736 with: results_file: results.sarif results_format: sarif @@ -62,7 +62,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@v4 # was v3.pre.node20 97a0fba1372883ab732affbe8f94b823f91727db + uses: actions/upload-artifact@v5 # was v3.pre.node20 97a0fba1372883ab732affbe8f94b823f91727db with: name: SARIF file path: results.sarif @@ -71,6 +71,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@v3 # was v3.24.9 - 1b1aada464948af03b950897e5eb522f92603cc2 + uses: github/codeql-action/upload-sarif@v4 # was v3.24.9 - 1b1aada464948af03b950897e5eb522f92603cc2 with: sarif_file: results.sarif diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml index 8b352d51b..0f280a409 100644 --- a/.github/workflows/tag.yaml +++ b/.github/workflows/tag.yaml @@ -16,17 +16,17 @@ jobs: BASE: ${{ steps.get-branch.outputs.branch }} steps: - name: checkout source code - uses: actions/checkout@v4 + uses: actions/checkout@v5 with: fetch-depth: 0 - name: extract branch id: get-branch - uses: hyperledger/indy-shared-gha/.github/actions/branch-from-tag@v1 + uses: hyperledger/indy-shared-gha/.github/actions/branch-from-tag@v2 with: tag: ${{ github.ref }} - name: get-release-info id: get-release-info - uses: hyperledger/indy-shared-gha/.github/actions/get-release-info@v1 + uses: hyperledger/indy-shared-gha/.github/actions/get-release-info@v2 with: versionString: "${{ github.ref }}" @@ -36,9 +36,9 @@ jobs: runs-on: ubuntu-20.04 steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@v5 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v6 with: python-version: '3.8' - name: Install deps for version change @@ -53,7 +53,7 @@ jobs: ./bump_version.sh ${{ needs.taginfos.outputs.VERSION }} - name: Create Pull Request - uses: peter-evans/create-pull-request@v6 + uses: peter-evans/create-pull-request@v7 with: author: ${{ github.actor }} <${{ github.event.pusher.email }}> committer: ${{ github.actor }} <${{ github.event.pusher.email }}>