diff --git a/.github/actions/config/action.yml b/.github/actions/config/action.yml index ec780835..a55efa65 100644 --- a/.github/actions/config/action.yml +++ b/.github/actions/config/action.yml @@ -8,7 +8,7 @@ runs: using: composite steps: - name: Load available example apps Angular CLI version aliases - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 id: ng-cli-version-aliases with: script: | diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml index 4db167e7..0e95f935 100644 --- a/.github/actions/setup/action.yml +++ b/.github/actions/setup/action.yml @@ -6,7 +6,7 @@ runs: - name: Setup pnpm uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: cache: pnpm node-version-file: .node-version diff --git a/.github/workflows/cicd-completed.yml b/.github/workflows/cicd-completed.yml index 130b2df3..9349a69a 100644 --- a/.github/workflows/cicd-completed.yml +++ b/.github/workflows/cicd-completed.yml @@ -30,7 +30,7 @@ jobs: ng-cli-version-aliases: ${{ steps.config.outputs.ng-cli-version-aliases }} steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Load CI/CD configuration id: config uses: ./.github/actions/config @@ -49,7 +49,7 @@ jobs: pull-requests: write steps: - name: Download bundle size analysis results - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ngx-meta${{ env.BUNDLE_SIZE_ARTIFACT_NAME_SUFFIX }}-${{ matrix.ng-cli-version-alias }} #👇 Need to specify it. Otherwise, the ` run-id ` argument won't be taken into account @@ -60,7 +60,7 @@ jobs: # https://github.com/orgs/community/discussions/25220 - name: Find associated pull request id: pr - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 with: retries: 3 #👇 Default except 403, which is the rate limit sometimes raised @@ -81,7 +81,7 @@ jobs: console.info("Pull request number is", pullRequestNumber) return pullRequestNumber - name: Find bundle size PR comment - uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3 + uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4 if: steps.pr.outputs.result != '' id: fc with: @@ -89,7 +89,7 @@ jobs: comment-author: github-actions[bot] body-includes: ${{ env.BUNDLE_SIZE_COMMENT_ID_PREFIX }}${{ matrix.ng-cli-version-alias }} - name: Update bundle size PR comment - uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5 if: steps.pr.outputs.result != '' with: comment-id: ${{ steps.fc.outputs.comment-id }} diff --git a/.github/workflows/cicd.yml b/.github/workflows/cicd.yml index 9f19e870..c88095dd 100644 --- a/.github/workflows/cicd.yml +++ b/.github/workflows/cicd.yml @@ -20,7 +20,7 @@ jobs: ng-cli-version-aliases: ${{ steps.config.outputs.ng-cli-version-aliases }} steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: CI/CD configuration id: config uses: ./.github/actions/config diff --git a/.github/workflows/reusable-api-extractor.yml b/.github/workflows/reusable-api-extractor.yml index b5058fc4..c6271229 100644 --- a/.github/workflows/reusable-api-extractor.yml +++ b/.github/workflows/reusable-api-extractor.yml @@ -18,9 +18,9 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Download tsc output files - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ngx-meta${{ env.TSC_ARTIFACT_NAME_SUFFIX }} path: projects/ngx-meta/out diff --git a/.github/workflows/reusable-build.yml b/.github/workflows/reusable-build.yml index 757e6246..f11ba903 100644 --- a/.github/workflows/reusable-build.yml +++ b/.github/workflows/reusable-build.yml @@ -20,7 +20,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Cache Angular build @@ -52,7 +52,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Run tsc diff --git a/.github/workflows/reusable-bundle-size.yml b/.github/workflows/reusable-bundle-size.yml index 551f0b40..d3cdee0f 100644 --- a/.github/workflows/reusable-bundle-size.yml +++ b/.github/workflows/reusable-bundle-size.yml @@ -35,16 +35,16 @@ jobs: working-directory: ${{ env.BUNDLE_SIZE_DIR }} steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Download example app distribution files - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ngx-meta${{ env.EXAMPLE_APP_ARTIFACT_NAME_SUFFIX }}-${{ matrix.ng-cli-version-alias }} path: ${{ env.EXAMPLE_APP_DIR }} - name: Setup pnpm uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: cache: pnpm cache-dependency-path: ${{ env.BUNDLE_SIZE_DIR }}/pnpm-lock.yaml @@ -54,7 +54,7 @@ jobs: - name: Analyze main bundle size run: pnpm run analyze ${{ matrix.ng-cli-version-alias }} --json - name: Fetch bundle size analysis results from target branch - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 if: github.event_name == 'pull_request' with: script: | @@ -107,11 +107,11 @@ jobs: checks: write steps: - name: Download main bundle analysis results - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ngx-meta${{ env.BUNDLE_SIZE_ARTIFACT_NAME_SUFFIX }}-${{ matrix.ng-cli-version-alias }} - name: Create check run - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 with: script: | const smeJson = require('./source-map-explorer.json'); diff --git a/.github/workflows/reusable-coverage.yml b/.github/workflows/reusable-coverage.yml index b0842a28..6270176d 100644 --- a/.github/workflows/reusable-coverage.yml +++ b/.github/workflows/reusable-coverage.yml @@ -21,11 +21,11 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Download coverage reports - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: pattern: '*${{ env.COVERAGE_REPORT_ARTIFACT_NAME_SUFFIX }}' path: ${{ env.COVERAGE_DIR }} diff --git a/.github/workflows/reusable-docs.yml b/.github/workflows/reusable-docs.yml index 71a52d1c..6859d831 100644 --- a/.github/workflows/reusable-docs.yml +++ b/.github/workflows/reusable-docs.yml @@ -29,14 +29,14 @@ jobs: deployments: write steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Download API reference docs - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ngx-meta${{ env.API_DOCS_ARTIFACT_NAME_SUFFIX }} path: projects/ngx-meta/docs/content/api - name: Download bundle size info - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: pattern: ngx-meta${{ env.BUNDLE_SIZE_ARTIFACT_NAME_SUFFIX }}* - name: Copy reports into directories @@ -52,7 +52,7 @@ jobs: - name: Install poetry # pipx comes built-in in GitHub runner run: pipx install poetry - name: Setup Python - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5 + uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6 with: python-version-file: ${{ env.DOCS_DIR }}/pyproject.toml cache: poetry @@ -60,7 +60,7 @@ jobs: - name: Setup pnpm uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: cache: pnpm cache-dependency-path: ${{ env.DOCS_DIR }}/pnpm-lock.yaml diff --git a/.github/workflows/reusable-e2e.yml b/.github/workflows/reusable-e2e.yml index ed680010..19ca9c34 100644 --- a/.github/workflows/reusable-e2e.yml +++ b/.github/workflows/reusable-e2e.yml @@ -34,16 +34,16 @@ jobs: working-directory: ${{ env.E2E_DIR }} steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Download example app with coverage instrumentation - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ngx-meta${{ env.EXAMPLE_APP_ARTIFACT_NAME_SUFFIX }}-${{ matrix.ng-cli-version-alias }}${{ env.COVERAGE_ARTIFACT_NAME_SUFFIX }} path: ${{ env.EXAMPLE_APP_DIR }} - name: Setup pnpm uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: cache: pnpm cache-dependency-path: ${{ env.E2E_DIR }}/pnpm-lock.yaml diff --git a/.github/workflows/reusable-example-apps.yml b/.github/workflows/reusable-example-apps.yml index 107e7ec5..3989cc4d 100644 --- a/.github/workflows/reusable-example-apps.yml +++ b/.github/workflows/reusable-example-apps.yml @@ -34,7 +34,7 @@ jobs: working-directory: ${{ env.EXAMPLE_APPS_DIR }} steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Generate artifact names run: | dist_artifact_name="ngx-meta${{ env.DIST_ARTIFACT_NAME_SUFFIX }}" @@ -49,14 +49,14 @@ jobs: fi echo "example_app_artifact_name=$example_app_artifact_name" | tee -a "$GITHUB_ENV" - name: Download distribution files - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ${{ env.dist_artifact_name }} path: projects/ngx-meta/dist - name: Setup pnpm uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5 with: # Can't cache here, given some cache-dependency-paths do not exist yet # Hence can't be used to create a proper cache key diff --git a/.github/workflows/reusable-lint.yml b/.github/workflows/reusable-lint.yml index bdaec01f..0a7ba327 100644 --- a/.github/workflows/reusable-lint.yml +++ b/.github/workflows/reusable-lint.yml @@ -12,7 +12,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Run linter @@ -24,7 +24,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Run GitHub Actions linter uses: docker://rhysd/actionlint:latest@sha256:887a259a5a534f3c4f36cb02dca341673c6089431057242cdc931e9f133147e9 with: @@ -39,7 +39,7 @@ jobs: # https://github.com/actions/checkout/issues/520#issuecomment-1167205721 run: echo "pr_commits_plus_one=$(( ${{ github.event.pull_request.commits }} + 1 ))" >> "${GITHUB_ENV}" - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 with: fetch-depth: ${{ env.pr_commits_plus_one }} - name: Setup @@ -61,7 +61,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Run diff --git a/.github/workflows/reusable-release.yml b/.github/workflows/reusable-release.yml index 71fbfb0d..fff7bb2d 100644 --- a/.github/workflows/reusable-release.yml +++ b/.github/workflows/reusable-release.yml @@ -47,13 +47,13 @@ jobs: id-token: write steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Installed dependencies integrity check run: npm audit signatures - name: Download distribution files - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5 with: name: ngx-meta${{ env.DIST_ARTIFACT_NAME_SUFFIX }} path: projects/ngx-meta/dist diff --git a/.github/workflows/reusable-style.yml b/.github/workflows/reusable-style.yml index b8308fb6..77c88dca 100644 --- a/.github/workflows/reusable-style.yml +++ b/.github/workflows/reusable-style.yml @@ -12,7 +12,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Format check diff --git a/.github/workflows/reusable-test.yml b/.github/workflows/reusable-test.yml index 21b61f19..a125ec54 100644 --- a/.github/workflows/reusable-test.yml +++ b/.github/workflows/reusable-test.yml @@ -17,7 +17,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Run unit tests @@ -36,7 +36,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Setup uses: ./.github/actions/setup - name: Run unit tests