diff --git a/.github/actions/generate-container-image-sboms/action.yml b/.github/actions/generate-container-image-sboms/action.yml index dc12949d..9766b2d8 100644 --- a/.github/actions/generate-container-image-sboms/action.yml +++ b/.github/actions/generate-container-image-sboms/action.yml @@ -31,7 +31,7 @@ runs: - name: Upload container image SBOM artifact if: inputs.artifact-name != '' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: ${{ inputs.artifact-name }} path: dist/sboms/container-*.cdx.json diff --git a/.github/actions/setup-env/action.yml b/.github/actions/setup-env/action.yml index 79784aa2..ee9fcf0c 100644 --- a/.github/actions/setup-env/action.yml +++ b/.github/actions/setup-env/action.yml @@ -5,7 +5,7 @@ runs: using: 'composite' steps: - name: Setup Node from .nvmrc - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version-file: .nvmrc @@ -43,7 +43,7 @@ runs: echo "CYPRESS_CACHE_FOLDER=$CYPRESS_CACHE" >> $GITHUB_ENV - name: Restore Cypress cache - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: | ${{ steps.cypress-cache.outputs.folder }} diff --git a/.github/actions/trivy-scan-local-images/action.yml b/.github/actions/trivy-scan-local-images/action.yml index e418c55d..def4513c 100644 --- a/.github/actions/trivy-scan-local-images/action.yml +++ b/.github/actions/trivy-scan-local-images/action.yml @@ -44,7 +44,7 @@ runs: - name: Upload SARIF artifact (fallback) if: inputs.upload-github-security == 'true' && steps.scan.outputs.sarif_exists == 'true' && steps.upload-sarif.outcome == 'failure' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: trivy-sarif-${{ inputs.sarif-category }} path: trivy-results-${{ inputs.sarif-category }}.sarif diff --git a/.github/actions/trivy-scan/action.yml b/.github/actions/trivy-scan/action.yml index e7c3c788..08bcb03b 100644 --- a/.github/actions/trivy-scan/action.yml +++ b/.github/actions/trivy-scan/action.yml @@ -63,7 +63,7 @@ runs: - name: Upload SARIF artifact (fallback) if: inputs.upload-github-security == 'true' && steps.upload-sarif.outcome == 'failure' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: trivy-sarif-${{ inputs.sarif-category }} path: ${{ steps.sarif-path.outputs.file }} diff --git a/.github/workflows/pull-request-checks.yml b/.github/workflows/pull-request-checks.yml index 547c57d3..94433c7a 100644 --- a/.github/workflows/pull-request-checks.yml +++ b/.github/workflows/pull-request-checks.yml @@ -38,7 +38,7 @@ jobs: fetch-depth: 0 - name: Set Nx SHA - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -59,7 +59,7 @@ jobs: fetch-depth: 0 - name: Set Nx SHA - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -86,7 +86,7 @@ jobs: fetch-depth: 0 - name: Set Nx SHA - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -187,7 +187,7 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -201,7 +201,7 @@ jobs: run: npx nx affected --target=sbom --parallel=1 || echo "No affected projects for sbom generation" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: build-artifacts @@ -227,10 +227,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -269,10 +269,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -311,10 +311,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -353,10 +353,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -395,10 +395,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -437,10 +437,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -477,14 +477,14 @@ jobs: if: always() steps: - name: Download service SBOMs from build - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: name: build-artifacts path: . - name: Download container image SBOM artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: pattern: sbom-container-images-* @@ -500,7 +500,7 @@ jobs: ls -la dist/sboms/ 2>/dev/null || true - name: Upload SBOM artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: sbom-artifacts path: dist/sboms/ @@ -519,10 +519,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -544,10 +544,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -575,10 +575,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -593,7 +593,7 @@ jobs: xvfb-run -a npx nx affected --target=package --configuration=development-linux --parallel=3 || echo "No projects for native applications build" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-linux path: | @@ -614,10 +614,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -635,7 +635,7 @@ jobs: xvfb-run -a npx nx affected --target=package --configuration=development-windows --parallel=3 || echo "No projects for native applications build" - name: Upload Windows Electron bundle - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: windows-electron-bundle path: dist/apps/native-agent-console/out/native-agent-console-win32-x64 @@ -643,7 +643,7 @@ jobs: retention-days: 1 - name: Upload Windows zip artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows path: dist/**/out/make/**/win32/**/*.zip @@ -666,7 +666,7 @@ jobs: uses: ./.github/actions/setup-env - name: Download Windows Electron bundle - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: name: windows-electron-bundle @@ -677,7 +677,7 @@ jobs: run: ./tools/ci/build-windows-installer.ps1 - name: Upload Windows installer artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows-installer path: apps/native-agent-console/installer-out/*.exe @@ -699,13 +699,13 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env - name: Download binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: path: artifacts @@ -736,7 +736,7 @@ jobs: node tools/release-integrity/dist/src/cli.js verify --input release - name: Upload binaries to GitHub Actions artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-bundle path: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2e67c20e..a1cb152f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,7 +22,7 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -61,7 +61,7 @@ jobs: run: npx nx run-many --target=sbom --parallel=1 || echo "No projects for sbom generation" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: steps.semantic-release.outputs.new_release_published == 'true' with: name: build-artifacts @@ -88,10 +88,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -135,10 +135,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -182,10 +182,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -229,10 +229,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -276,10 +276,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -323,10 +323,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -370,10 +370,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -414,10 +414,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -433,7 +433,7 @@ jobs: xvfb-run -a npx nx run-many --target=package --configuration=production-linux --parallel=3 || echo "No projects for native applications build" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-linux path: | @@ -460,10 +460,10 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -482,7 +482,7 @@ jobs: xvfb-run -a npx nx run-many --target=package --configuration=production-windows --parallel=3 || echo "No projects for native applications build" - name: Upload Windows Electron bundle - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: windows-electron-bundle path: dist/apps/native-agent-console/out/native-agent-console-win32-x64 @@ -490,7 +490,7 @@ jobs: retention-days: 1 - name: Upload Windows zip artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows path: dist/**/out/make/**/win32/**/*.zip @@ -516,7 +516,7 @@ jobs: uses: ./.github/actions/setup-env - name: Download Windows Electron bundle - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: name: windows-electron-bundle @@ -529,7 +529,7 @@ jobs: run: ./tools/ci/build-windows-installer.ps1 - name: Upload Windows installer artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows-installer path: apps/native-agent-console/installer-out/*.exe @@ -555,13 +555,13 @@ jobs: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env - name: Download binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: path: artifacts @@ -609,7 +609,7 @@ jobs: environment: production steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -643,13 +643,13 @@ jobs: uses: actions/checkout@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . - name: Download container image SBOM artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: pattern: sbom-container-images-* @@ -815,7 +815,7 @@ jobs: uses: actions/checkout@v5 - name: Download container image SBOM artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: pattern: sbom-container-images-* @@ -850,7 +850,7 @@ jobs: - name: Upload container image SBOM artifact if: steps.set-matrix.outputs.has_entries == 'true' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: container-image-sboms-for-dt path: dist/sboms/container-*.cdx.json @@ -872,7 +872,7 @@ jobs: matrix: ${{ fromJson(needs.prepare-container-image-sbom-uploads.outputs.matrix) }} steps: - name: Download container image SBOMs - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: container-image-sboms-for-dt path: .