diff --git a/.github/workflows/build-test-release.yaml b/.github/workflows/build-test-release.yaml index c0760142e..f83bddcf6 100644 --- a/.github/workflows/build-test-release.yaml +++ b/.github/workflows/build-test-release.yaml @@ -20,15 +20,15 @@ jobs: compliance-copyrights: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: apache/skywalking-eyes@v0.4.0 + - uses: actions/checkout@v4 + - uses: apache/skywalking-eyes@v0.5.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} pre-commit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: "3.7" @@ -42,7 +42,7 @@ jobs: - pre-commit runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: false persist-credentials: false @@ -63,5 +63,5 @@ jobs: contents: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: haya14busa/action-update-semver@v1 diff --git a/.github/workflows/reusable-build-test-release.yml b/.github/workflows/reusable-build-test-release.yml index 71aa30728..99322e0f4 100644 --- a/.github/workflows/reusable-build-test-release.yml +++ b/.github/workflows/reusable-build-test-release.yml @@ -205,7 +205,7 @@ jobs: pull-requests: read statuses: write steps: - - uses: amannn/action-semantic-pull-request@v5.2.0 + - uses: amannn/action-semantic-pull-request@v5.4.0 with: wip: true validateSingleCommit: true @@ -237,7 +237,7 @@ jobs: packages: read steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: submodules: false persist-credentials: false @@ -254,7 +254,7 @@ jobs: GITHUB_TOKEN: ${{ github.token }} - name: Docker meta id: docker_action_meta - uses: docker/metadata-action@v4.6.0 + uses: docker/metadata-action@v5.0.0 with: images: ghcr.io/${{ github.repository }}/container tags: | @@ -267,7 +267,7 @@ jobs: type=ref,event=pr - name: matrix id: matrix - uses: splunk/addonfactory-test-matrix-action@v1.10 + uses: splunk/addonfactory-test-matrix-action@v1.12 - name: python39_Splunk id: python39_splunk run: | @@ -280,7 +280,7 @@ jobs: - setup-workflow if: ${{ needs.setup-workflow.outputs.skip-workflow != 'Yes' }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: run fossa anlyze and create report run: | curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash @@ -301,7 +301,7 @@ jobs: - fossa-scan if: ${{ needs.setup-workflow.outputs.skip-workflow != 'Yes' }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: run fossa test run: | curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install-latest.sh | bash @@ -317,7 +317,7 @@ jobs: if: ${{ needs.setup-workflow.outputs.skip-workflow != 'Yes' }} steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v4 - name: REUSE Compliance Check uses: fsfe/reuse-action@v1.1 @@ -327,7 +327,7 @@ jobs: - setup-workflow if: ${{ needs.setup-workflow.outputs.skip-workflow != 'Yes' }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: "3.7" @@ -342,13 +342,13 @@ jobs: steps: - name: Checkout if: github.event_name != 'pull_request' - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: submodules: false fetch-depth: "0" - name: Checkout for PR if: github.event_name == 'pull_request' - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: submodules: false fetch-depth: "0" @@ -365,7 +365,7 @@ jobs: - setup-workflow if: ${{ needs.setup-workflow.outputs.skip-workflow != 'Yes' && github.actor != 'dependabot[bot]' }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: Semgrep id: semgrep uses: semgrep/semgrep-action@v1 @@ -387,7 +387,7 @@ jobs: escu: ${{ steps.testset.outputs.escu }} ucc_modinput_functional: ${{ steps.modinput-version.outputs.ucc_modinput_tests }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - id: testset name: Check available test types run: | @@ -421,7 +421,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} @@ -469,7 +469,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: ${{ matrix.python-version }} @@ -517,7 +517,7 @@ jobs: contents: write packages: read steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: # Very Important semantic-release won't trigger a tagged # build if this is not set false @@ -655,7 +655,7 @@ jobs: contents: write packages: read steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: # Very Important semantic-release won't trigger a tagged # build if this is not set false @@ -727,7 +727,7 @@ jobs: name: package-splunkbase path: build/package/ - name: VirusTotal Scan - uses: crazy-max/ghaction-virustotal@v3 + uses: crazy-max/ghaction-virustotal@v4 with: vt_api_key: ${{ secrets.VT_API_KEY }} files: | @@ -747,7 +747,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - name: Install Python 3 uses: actions/setup-python@v4 with: @@ -782,13 +782,13 @@ jobs: - "splunk_appinspect" - "manual" steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: actions/download-artifact@v3 with: name: package-splunkbase path: build/package/ - name: Scan - uses: splunk/appinspect-cli-action@v1.9 + uses: splunk/appinspect-cli-action@v2.0 with: app_path: build/package/ included_tags: ${{ matrix.tags }} @@ -823,7 +823,7 @@ jobs: - "self-service" - "" steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: actions/download-artifact@v3 with: name: package-splunkbase @@ -853,7 +853,7 @@ jobs: contents: read packages: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 - uses: actions/download-artifact@v3 with: name: package-splunkbase @@ -870,16 +870,16 @@ jobs: mv oras-install/oras /usr/local/bin/ rm -rf oras_0.12.0_*.tar.gz oras-install/ - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v2 + uses: docker/setup-buildx-action@v3 - name: Login to GitHub Packages Docker Registry - uses: docker/login-action@v2.2.0 + uses: docker/login-action@v3.0.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ github.token }} - name: Docker meta id: meta - uses: docker/metadata-action@v4.6.0 + uses: docker/metadata-action@v5.0.0 with: images: ghcr.io/${{ github.repository }} tags: | @@ -943,7 +943,7 @@ jobs: env: BUILD_NAME: ${{ needs.build.outputs.buildname }} steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive token: ${{ secrets.GH_TOKEN_ADMIN }} @@ -1036,7 +1036,7 @@ jobs: sc4s: ${{ fromJson(needs.meta.outputs.python39_sc4s) }} python39: true container: - image: ghcr.io/splunk/workflow-engine-base:2.0.3 + image: ghcr.io/splunk/workflow-engine-base:2.0.12 env: ARGO_SERVER: ${{ needs.setup.outputs.argo-server }} ARGO_HTTP1: ${{ needs.setup.outputs.argo-http1 }} @@ -1054,7 +1054,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive - name: capture start time @@ -1062,7 +1062,7 @@ jobs: run: | echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v4 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -1278,7 +1278,7 @@ jobs: sc4s: ${{ fromJson(needs.meta.outputs.python39_sc4s) }} python39: true container: - image: ghcr.io/splunk/workflow-engine-base:2.0.3 + image: ghcr.io/splunk/workflow-engine-base:2.0.12 env: ARGO_SERVER: ${{ needs.setup.outputs.argo-server }} ARGO_HTTP1: ${{ needs.setup.outputs.argo-http1 }} @@ -1295,7 +1295,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive - name: capture start time @@ -1303,7 +1303,7 @@ jobs: run: | echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v4 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -1499,7 +1499,7 @@ jobs: browser: "chrome" python39: true container: - image: ghcr.io/splunk/workflow-engine-base:2.0.3 + image: ghcr.io/splunk/workflow-engine-base:2.0.12 env: ARGO_SERVER: ${{ needs.setup.outputs.argo-server }} ARGO_HTTP1: ${{ needs.setup.outputs.argo-http1 }} @@ -1517,7 +1517,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive - name: capture start time @@ -1525,7 +1525,7 @@ jobs: run: | echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v4 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -1728,7 +1728,7 @@ jobs: modinput-type: [ "modinput_functional" ] python39: true container: - image: ghcr.io/splunk/workflow-engine-base:2.0.3 + image: ghcr.io/splunk/workflow-engine-base:2.0.12 env: ARGO_SERVER: ${{ needs.setup.outputs.argo-server }} ARGO_HTTP1: ${{ needs.setup.outputs.argo-http1 }} @@ -1746,7 +1746,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive - name: capture start time @@ -1754,7 +1754,7 @@ jobs: run: | echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v4 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -1967,7 +1967,7 @@ jobs: os: "ubuntu:22.04" python39: true container: - image: ghcr.io/splunk/workflow-engine-base:2.0.3 + image: ghcr.io/splunk/workflow-engine-base:2.0.12 env: ARGO_SERVER: ${{ needs.setup.outputs.argo-server }} ARGO_HTTP1: ${{ needs.setup.outputs.argo-http1 }} @@ -1984,7 +1984,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive - name: capture start time @@ -1992,7 +1992,7 @@ jobs: run: | echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v4 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -2196,7 +2196,7 @@ jobs: splunk: ${{ fromJson(needs.meta.outputs.matrix_supportedSplunk) }} os: [ "ubuntu:22.04", "centos:7","redhat:8.5" ] container: - image: ghcr.io/splunk/workflow-engine-base:2.0.3 + image: ghcr.io/splunk/workflow-engine-base:2.0.12 env: ARGO_SERVER: ${{ needs.setup.outputs.argo-server }} ARGO_HTTP1: ${{ needs.setup.outputs.argo-http1 }} @@ -2213,7 +2213,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive - name: capture start time @@ -2221,7 +2221,7 @@ jobs: run: | echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v4 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -2432,7 +2432,7 @@ jobs: matrix: splunk: ${{ fromJson(needs.meta.outputs.matrix_latestSplunk) }} container: - image: ghcr.io/splunk/workflow-engine-base:2.0.3 + image: ghcr.io/splunk/workflow-engine-base:2.0.12 env: ARGO_SERVER: ${{ needs.setup.outputs.argo-server }} ARGO_HTTP1: ${{ needs.setup.outputs.argo-http1 }} @@ -2449,7 +2449,7 @@ jobs: statuses: read checks: write steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v4 with: submodules: recursive - name: capture start time @@ -2457,7 +2457,7 @@ jobs: run: | echo "start_time=$(date +%s)" >> "$GITHUB_OUTPUT" - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v2 + uses: aws-actions/configure-aws-credentials@v4 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -2717,7 +2717,7 @@ jobs: statuses: write steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v4 with: submodules: false persist-credentials: false