Pin dependencies (#1163)

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [8398a7/action-slack](https://redirect.github.com/8398a7/action-slack) | action | pinDigest | -> `28ba43a` | | [actions-ecosystem/action-add-labels](https://redirect.github.com/actions-ecosystem/action-add-labels) | action | pinDigest | -> `bd52874` | | [actions/cache](https://redirect.github.com/actions/cache) | action | pinDigest | -> `6849a64` | | [actions/checkout](https://redirect.github.com/actions/checkout) | action | pinDigest | -> `11bd719` | | [actions/download-artifact](https://redirect.github.com/actions/download-artifact) | action | pinDigest | -> `fa0a91b` | | [actions/github-script](https://redirect.github.com/actions/github-script) | action | pinDigest | -> `60a0d83` | | [actions/setup-dotnet](https://redirect.github.com/actions/setup-dotnet) | action | pinDigest | -> `3e891b0` | | [actions/setup-go](https://redirect.github.com/actions/setup-go) | action | pinDigest | -> `41dfa10` | | [actions/setup-java](https://redirect.github.com/actions/setup-java) | action | pinDigest | -> `8df1039` | | [actions/setup-node](https://redirect.github.com/actions/setup-node) | action | pinDigest | -> `39370e3` | | [actions/setup-python](https://redirect.github.com/actions/setup-python) | action | pinDigest | -> `0b93645` | | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | pinDigest | -> `b4b15b8` | | [aws-actions/configure-aws-credentials](https://redirect.github.com/aws-actions/configure-aws-credentials) | action | pinDigest | -> `e3dd6a4` | | [benc-uk/workflow-dispatch](https://redirect.github.com/benc-uk/workflow-dispatch) | action | pinDigest | -> `798e70c` | | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | pinDigest | -> `b9fd7d1` | | [dorny/paths-filter](https://redirect.github.com/dorny/paths-filter) | action | pinDigest | -> `7267a85` | | [geekyeggo/delete-artifact](https://redirect.github.com/geekyeggo/delete-artifact) | action | pinDigest | -> `f275313` | | [golangci/golangci-lint-action](https://redirect.github.com/golangci/golangci-lint-action) | action | pinDigest | -> `971e284` | | [golangci/golangci-lint-action](https://redirect.github.com/golangci/golangci-lint-action) | action | pinDigest | -> `d6238b0` | | [google-github-actions/auth](https://redirect.github.com/google-github-actions/auth) | action | pinDigest | -> `6fc4af4` | | [google-github-actions/setup-gcloud](https://redirect.github.com/google-github-actions/setup-gcloud) | action | pinDigest | -> `6189d56` | | [goreleaser/goreleaser-action](https://redirect.github.com/goreleaser/goreleaser-action) | action | pinDigest | -> `5742e2a` | | [gradle/gradle-build-action](https://redirect.github.com/gradle/gradle-build-action) | action | pinDigest | -> `ac2d340` | | [helm/kind-action](https://redirect.github.com/helm/kind-action) | action | pinDigest | -> `0025e74` | | [jaxxstorm/action-install-gh-release](https://redirect.github.com/jaxxstorm/action-install-gh-release) | action | pinDigest | -> `71d17cb` | | [jlumbroso/free-disk-space](https://redirect.github.com/jlumbroso/free-disk-space) | action | pinDigest | -> `54081f1` | | [peter-evans/create-or-update-comment](https://redirect.github.com/peter-evans/create-or-update-comment) | action | pinDigest | -> `a35cf36` | | [peter-evans/create-or-update-comment](https://redirect.github.com/peter-evans/create-or-update-comment) | action | pinDigest | -> `67dcc54` | | [peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request) | action | pinDigest | -> `dcd5fd7` | | [peter-evans/create-pull-request](https://redirect.github.com/peter-evans/create-pull-request) | action | pinDigest | -> `c5a7806` | | [peter-evans/repository-dispatch](https://redirect.github.com/peter-evans/repository-dispatch) | action | pinDigest | -> `ff45666` | | [peter-evans/slash-command-dispatch](https://redirect.github.com/peter-evans/slash-command-dispatch) | action | pinDigest | -> `13bc097` | | [peter-evans/slash-command-dispatch](https://redirect.github.com/peter-evans/slash-command-dispatch) | action | pinDigest | -> `40877f7` | | [repo-sync/pull-request](https://redirect.github.com/repo-sync/pull-request) | action | pinDigest | -> `65785d9` | | [softprops/action-gh-release](https://redirect.github.com/softprops/action-gh-release) | action | pinDigest | -> `e7a8f85` | | [thollander/actions-comment-pull-request](https://redirect.github.com/thollander/actions-comment-pull-request) | action | pinDigest | -> `fabd468` | | [webfactory/ssh-agent](https://redirect.github.com/webfactory/ssh-agent) | action | pinDigest | -> `836c84e` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - "before 4am on Monday" (UTC). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  --------- Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com> Co-authored-by: Bryce Lampe <[email protected]>
pulumi · Nov 27, 2024 · 5a6fcb7 · 5a6fcb7
1 parent a43cd0d
commit 5a6fcb7
Show file tree

Hide file tree

Showing 162 changed files with 1,757 additions and 1,687 deletions.
diff --git a/.github/workflows/close-pulumi-bot-prs.yml b/.github/workflows/close-pulumi-bot-prs.yml
@@ -13,5 +13,5 @@ jobs:
   close-outdated-prs:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: ./scripts/close_outdated_bridge_prs.py
diff --git a/.github/workflows/lint-actions.yml b/.github/workflows/lint-actions.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: lint workflows
         run: |
           bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash)

diff --git a/.github/workflows/merge-dependabot.yml b/.github/workflows/merge-dependabot.yml
@@ -13,7 +13,7 @@ jobs:
     name: "Generate Providers List"
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - id: get-providers
         run: echo "providers=$(jq . providers.json --compact-output)" >> "$GITHUB_OUTPUT"
         working-directory: provider-ci
@@ -26,7 +26,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Clone ci-mgmt
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - run: gh auth setup-git
       - run: git config --global user.email "[email protected]"
       - run: git config --global user.name "pulumi-bot"

diff --git a/.github/workflows/refresh-gh-branch-protection.yml b/.github/workflows/refresh-gh-branch-protection.yml
@@ -9,8 +9,8 @@ jobs:
     name: Pulumi Refresh
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4
         with:
           node-version: 18.x
       - run: npm install

diff --git a/.github/workflows/test-native-provider-ci.yml b/.github/workflows/test-native-provider-ci.yml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Validate native-providers
         run: cd native-provider-ci && make all
       - name: Check worktree clean

diff --git a/.github/workflows/test-provider-ci.yml b/.github/workflows/test-provider-ci.yml
@@ -19,9 +19,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Install golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@971e284b6050e8a5849b72094c50ab08da042db8 # v6
         with:
           working-directory: provider-ci
       - name: Configure git

diff --git a/.github/workflows/update-bridge-ecosystem-providers.yml b/.github/workflows/update-bridge-ecosystem-providers.yml
@@ -20,7 +20,7 @@ jobs:
   generate-providers-list:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - id: get-providers
         run: echo "providers=$(jq . providers.json --compact-output)" >> "$GITHUB_OUTPUT"
         working-directory: provider-ci
@@ -41,7 +41,7 @@ jobs:
     steps:
       - name: pulumi-${{ matrix.provider }} main
         id: upgrade-on-main
-        uses: benc-uk/[email protected]
+        uses: benc-uk/workflow-dispatch@798e70c97009500150087d30d9f11c5444830385 # v1.2.2
         continue-on-error: true
         with:
             workflow: upgrade-bridge.yml
@@ -52,7 +52,7 @@ jobs:
       - name: pulumi-${{ matrix.provider }} master
         id: upgrade-on-master
         if: steps.upgrade-on-main.outcome == 'failure'
-        uses: benc-uk/[email protected]
+        uses: benc-uk/workflow-dispatch@798e70c97009500150087d30d9f11c5444830385 # v1.2.2
         with:
             workflow: upgrade-bridge.yml
             token: ${{ secrets.PULUMI_BOT_TOKEN }} 

diff --git a/.github/workflows/update-bridge-single-ecosystem-provider.yml b/.github/workflows/update-bridge-single-ecosystem-provider.yml
@@ -24,7 +24,7 @@ jobs:
     steps:
       - name: pulumi-${{ github.event.inputs.provider }} main
         id: upgrade-on-main
-        uses: benc-uk/[email protected]
+        uses: benc-uk/workflow-dispatch@798e70c97009500150087d30d9f11c5444830385 # v1.2.2
         continue-on-error: true
         with:
           workflow: upgrade-bridge.yml
@@ -34,7 +34,7 @@ jobs:
       - name: pulumi-${{ github.event.inputs.provider }} master
         id: upgrade-on-master
         if: steps.upgrade-on-main.outcome == 'failure'
-        uses: benc-uk/[email protected]
+        uses: benc-uk/workflow-dispatch@798e70c97009500150087d30d9f11c5444830385 # v1.2.2
         with:
           workflow: upgrade-bridge.yml
           token: ${{ secrets.PULUMI_BOT_TOKEN }}

diff --git a/.github/workflows/update-native-provider-workflows.yml b/.github/workflows/update-native-provider-workflows.yml
@@ -12,7 +12,7 @@ jobs:
   generate-providers-list:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - id: get-providers
         run: echo "providers=$(python generate_native_providers_list.py --for-auto-pr)'" >> "$GITHUB_OUTPUT"
         working-directory: scripts

diff --git a/.github/workflows/update-workflows-ecosystem-providers.yml b/.github/workflows/update-workflows-ecosystem-providers.yml
@@ -22,7 +22,7 @@ jobs:
   generate-providers-list:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - id: get-providers
         run: echo "providers=$(jq . providers.json --compact-output)" >> "$GITHUB_OUTPUT"
         working-directory: provider-ci

diff --git a/.github/workflows/update-workflows.yml b/.github/workflows/update-workflows.yml
@@ -40,26 +40,26 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Install Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5
         with:
           go-version: stable
       - name: Setup Python
-        uses: actions/setup-python@v5
+        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5
         with:
           python-version: 3.9
       - name: Install pulumictl
-        uses: jaxxstorm/[email protected]
+        uses: jaxxstorm/action-install-gh-release@71d17cb091aa850acb2a1a4cf87258d183eb941b # v1.11.0
         with:
           repo: pulumi/pulumictl
           tag: v0.0.46
           token: ${{ secrets.PULUMI_BOT_TOKEN }}
           cache: enable
       - name: Clone ci-mgmt
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           path: ci-mgmt
       - name: Clone pulumi-${{ inputs.provider_name }}
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           repository: pulumi/pulumi-${{ inputs.provider_name }}
           path: pulumi-${{ inputs.provider_name }}
@@ -85,7 +85,7 @@ jobs:
         run: |
           cp -r ci-mgmt/native-provider-ci/providers/${{ inputs.provider_name }}/repo/. pulumi-${{ inputs.provider_name }}/.
       - name: Close obsolete PRs started by this workflow
-        uses: actions/github-script@v7
+        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7
         if: ${{ !inputs.skip_closing_prs }}
         with:
           github-token: ${{ secrets.PULUMI_BOT_TOKEN }}
@@ -112,7 +112,7 @@ jobs:
             }
       - name: Create PR
         id: create-pr
-        uses: peter-evans/create-pull-request@v6
+        uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c # v6
         with:
           author: Pulumi Bot <[email protected]>
           body: "This PR was automatically generated by the ${{ inputs.caller_workflow }} workflow in the pulumi/ci-mgmt repo, from commit ${{ github.sha }}."