diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index beb22c2..61e41f4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -24,7 +24,7 @@ jobs: run: corepack enable - name: Setup Node - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6.3.0 with: cache: "yarn" node-version-file: ".nvmrc" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ce978a0..4460453 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -33,15 +33,15 @@ jobs: run: ./configure.sh - name: Initialize CodeQL - uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/init@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: languages: ${{ matrix.language }} queries: +security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/autobuild@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/analyze@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: category: "/language:${{ matrix.language }}" diff --git a/.github/workflows/dependency_review.yml b/.github/workflows/dependency_review.yml index 1f7c7b5..8aba310 100644 --- a/.github/workflows/dependency_review.yml +++ b/.github/workflows/dependency_review.yml @@ -15,7 +15,7 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v6.0.2 - name: "Dependency Review" - uses: actions/dependency-review-action@3c4e3dcb1aa7874d2c16be7d79418e9b7efd6261 # v4.8.2 + uses: actions/dependency-review-action@2031cfc080254a8a887f58cffee85186f0e49e48 # v4.9.0 with: fail-on-severity: high comment-summary-in-pr: true diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index 966ed00..e9d5fff 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -49,7 +49,7 @@ jobs: - name: Login to Amazon ECR id: login-ecr - uses: aws-actions/amazon-ecr-login@062b18b96a7aff071d4dc91bc00c4c1a7945b076 #v2.0.1 + uses: aws-actions/amazon-ecr-login@f2e9fc6c2b355c1890b65e6f6f0e2ac3e6e22f78 #v2.1.2 - name: Generate image name id: generate-img-name @@ -70,14 +70,14 @@ jobs: - name: Fill in the new image ID in the Amazon ECS task definition id: task-def - uses: aws-actions/amazon-ecs-render-task-definition@6b89923a897d41e9ad789181d8865b532ecf973c #v1.8.3 + uses: aws-actions/amazon-ecs-render-task-definition@77954e213ba1f9f9cb016b86a1d4f6fcdea0d57e #v1.8.4 with: task-definition-arn: ${{ secrets.AWS_ECS_TASK_DEFINITION_ARN }} container-name: ${{ secrets.AWS_ECS_CONTAINER_NAME }} image: ${{ steps.generate-img-name.outputs.image-name }} - name: Deploy Amazon ECS task definition - uses: aws-actions/amazon-ecs-deploy-task-definition@cbf54ec46642b86ff78c2f5793da6746954cf8ff #v2.6.0 + uses: aws-actions/amazon-ecs-deploy-task-definition@fc8fc60f3a60ffd500fcb13b209c59d221ac8c8c #v2.6.1 with: task-definition: ${{ steps.task-def.outputs.task-definition }} service: ${{ secrets.AWS_ECS_SERVICE }} diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 72ebd8c..6c8abaa 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -24,7 +24,7 @@ jobs: run: corepack enable - name: Setup Node - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6.3.0 with: cache: "yarn" node-version-file: ".nvmrc" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8997aff..6b2984a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: run: corepack enable - name: Setup Node - uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 #v6.2.0 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f #v6.3.0 with: cache: "yarn" node-version-file: ".nvmrc" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 53abb74..28e81fa 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -64,6 +64,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 + uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 # v4.35.1 with: sarif_file: results.sarif