Skip to content

Commit ed1d3b4

Browse files
renovate[bot]renovate[bot]
authored
chore(deps): update github-actions deps
1 parent bd8de14 commit ed1d3b4

File tree

7 files changed

+19
-19
lines changed

7 files changed

+19
-19
lines changed

‎.github/workflows/base-binary-release.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -85,7 +85,7 @@ jobs:
8585
- name: Copy Dockerfile to Collector dependency directory
8686
run: cp cmd/${{ inputs.binary }}/Dockerfile ${{ inputs.dependency-target-folder }}/cmd/${{ inputs.binary }}/Dockerfile
8787

88-
- uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
88+
- uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
8989

9090
- uses: anchore/sbom-action/download-syft@aa0e114b2e19480f157109b9922bda359bd98b90 # v0.20.8
9191

‎.github/workflows/base-ci-binary.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
- name: Copy Dockerfile to Core Repo directory
5050
run: cp cmd/${{ inputs.binary }}/Dockerfile ${{ inputs.dependency-target-folder }}/cmd/${{ inputs.binary }}/Dockerfile
5151

52-
- uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
52+
- uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
5353

5454
- uses: anchore/sbom-action/download-syft@aa0e114b2e19480f157109b9922bda359bd98b90 # v0.20.8
5555

@@ -87,7 +87,7 @@ jobs:
8787

8888
- name: Upload linux service packages
8989
if: ${{ inputs.linux-packages == true }}
90-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
90+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
9191
with:
9292
name: linux-packages
9393
path: |

‎.github/workflows/base-ci-goreleaser.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,7 @@ jobs:
142142

143143
- name: "[Nightly] Download built otelcol-contrib artifact from contrib repo"
144144
if: inputs.distribution == 'otelcol-contrib' && inputs.nightly == true && matrix.GOARCH == 'amd64' && matrix.GOOS == 'linux'
145-
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
145+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
146146
with:
147147
name: collector-binaries-linux-amd64
148148
repository: open-telemetry/opentelemetry-collector-contrib
@@ -217,15 +217,15 @@ jobs:
217217

218218
- name: Upload linux service packages
219219
if: ${{ matrix.GOOS == 'linux' && matrix.GOARCH == 'amd64' && (inputs.distribution == 'otelcol-contrib' || inputs.distribution == 'otelcol') }}
220-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
220+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
221221
with:
222222
name: linux-packages
223223
path: distributions/${{ inputs.distribution }}/dist/linux_amd64_v1/*
224224
if-no-files-found: error
225225

226226
- name: Upload MSI packages
227227
if: matrix.GOOS == 'windows' && matrix.GOARCH == 'amd64' && (inputs.distribution == 'otelcol-contrib' || inputs.distribution == 'otelcol')
228-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
228+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
229229
with:
230230
name: msi-packages
231231
path: distributions/${{ inputs.distribution }}/dist/windows_amd64_v1/**/*.msi
@@ -275,7 +275,7 @@ jobs:
275275
276276
- name: Upload container image artifact
277277
if: matrix.GOOS == 'linux' && contains(steps.prep.outputs.types, 'Docker Image')
278-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
278+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
279279
with:
280280
name: ${{ inputs.distribution }}-image-${{ steps.prep.outputs.version }}-${{ steps.prep.outputs.arch }}
281281
path: /tmp/${{ inputs.distribution }}.tar
@@ -302,7 +302,7 @@ jobs:
302302
platforms: arm64,ppc64le,linux/arm/v7,s390x,riscv64
303303

304304
- name: Download container image artifact
305-
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
305+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
306306
with:
307307
name: ${{ inputs.distribution }}-image-${{ needs.check-goreleaser.outputs.version }}-${{ matrix.GOOS }}-${{ matrix.GOARCH }}
308308

‎.github/workflows/base-package-tests.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ permissions:
2121
jobs:
2222
package-tests:
2323
name: Package Tests
24-
runs-on: ubuntu-22.04
24+
runs-on: ubuntu-24.04
2525
strategy:
2626
matrix:
2727
type: ${{ fromJSON(inputs.type) }}
@@ -30,7 +30,7 @@ jobs:
3030
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
3131

3232
- name: Download built artifacts
33-
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
33+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
3434
with:
3535
name: linux-packages
3636

‎.github/workflows/base-release.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,7 @@ jobs:
7171
with:
7272
fetch-depth: 0
7373

74-
- uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
74+
- uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
7575

7676
- uses: anchore/sbom-action/download-syft@aa0e114b2e19480f157109b9922bda359bd98b90 # v0.20.8
7777

@@ -172,7 +172,7 @@ jobs:
172172
GORELEASER_KEY: ${{ secrets.GORELEASER_KEY }}
173173
GORELEASER_CURRENT_TAG: ${{ github.ref_name }}
174174

175-
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
175+
- uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
176176
with:
177177
name: artifacts-${{ inputs.distribution }}-${{ matrix.GOOS }}-${{ matrix.GOARCH }}
178178
path: distributions/${{ inputs.distribution }}/dist/**/*
@@ -195,7 +195,7 @@ jobs:
195195
with:
196196
fetch-depth: 0
197197

198-
- uses: sigstore/cosign-installer@7e8b541eb2e61bf99390e1afd4be13a184e9ebc5 # v3.10.1
198+
- uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
199199

200200
- uses: anchore/sbom-action/download-syft@aa0e114b2e19480f157109b9922bda359bd98b90 # v0.20.8
201201

@@ -222,21 +222,21 @@ jobs:
222222
go-version: "~1.25.0"
223223
check-latest: true
224224

225-
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
225+
- uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
226226
if: runner.os == 'Windows'
227227
with:
228228
pattern: artifacts-${{ inputs.distribution }}-windows-*
229229
path: distributions/${{ inputs.distribution }}/dist
230230
merge-multiple: true
231231

232-
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
232+
- uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
233233
if: runner.os != 'Windows'
234234
with:
235235
pattern: artifacts-${{ inputs.distribution }}-darwin-*
236236
path: distributions/${{ inputs.distribution }}/dist
237237
merge-multiple: true
238238

239-
- uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
239+
- uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
240240
if: runner.os != 'Windows'
241241
with:
242242
pattern: artifacts-${{ inputs.distribution }}-linux-*

‎.github/workflows/msi-tests.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
2626

2727
- name: Download built artifacts
28-
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
28+
uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0
2929
with:
3030
name: msi-packages
3131

‎.github/workflows/ossf-scorecard.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ jobs:
3333
# uploads of run results in SARIF format to the repository Actions tab.
3434
# https://docs.github.com/en/actions/advanced-guides/storing-workflow-data-as-artifacts
3535
- name: "Upload artifact"
36-
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
36+
uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
3737
with:
3838
name: SARIF file
3939
path: results.sarif
@@ -42,6 +42,6 @@ jobs:
4242
# Upload the results to GitHub's code scanning dashboard (optional).
4343
# Commenting out will disable upload of results to your repo's Code Scanning dashboard
4444
- name: "Upload to code-scanning"
45-
uses: github/codeql-action/upload-sarif@42213152a85ae7569bdb6bec7bcd74cd691bfe41 # v3.30.9
45+
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
4646
with:
4747
sarif_file: results.sarif

0 commit comments

Comments
 (0)