From 6bdfea158a53550f81ca9768a226b9197ed671ef Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 24 Aug 2025 22:12:15 +0000 Subject: [PATCH 1/7] build(deps): bump the github-actions group across 2 directories with 2 updates Bumps the github-actions group with 1 update in the / directory: [actions/checkout](https://github.com/actions/checkout). Bumps the github-actions group with 1 update in the /.github/actions/bootstrap directory: [anchore/sbom-action](https://github.com/anchore/sbom-action). Updates `actions/checkout` from 4.2.2 to 5.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08c6903cd8c0fde910a37f88322edcfb5dd907a8) Updates `anchore/sbom-action` from 0.20.4 to 0.20.5 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/7b36ad622f042cab6f59a75c2ac24ccb256e9b45...da167eac915b4e86f08b264dbdbc867b61be6f0c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-version: 0.20.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/actions/bootstrap/action.yml | 2 +- .github/workflows/dependabot-pr.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/smoke-tests.yml | 2 +- .github/workflows/test.yml | 8 ++++---- 5 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/actions/bootstrap/action.yml b/.github/actions/bootstrap/action.yml index 89acba5a..5fcf51e8 100644 --- a/.github/actions/bootstrap/action.yml +++ b/.github/actions/bootstrap/action.yml @@ -28,4 +28,4 @@ runs: # See https://goreleaser.com/blog/supply-chain-security/ - name: installs syft for generating the SBOM with goreleaser if: "${{ inputs.goreleaser == 'true' }}" - uses: anchore/sbom-action/download-syft@7b36ad622f042cab6f59a75c2ac24ccb256e9b45 # v0.20.4 + uses: anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c # v0.20.5 diff --git a/.github/workflows/dependabot-pr.yml b/.github/workflows/dependabot-pr.yml index 4c46d86b..f02b31d6 100644 --- a/.github/workflows/dependabot-pr.yml +++ b/.github/workflows/dependabot-pr.yml @@ -19,7 +19,7 @@ jobs: contents: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 074375ce..3aff35e9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: fetch-depth: 0 diff --git a/.github/workflows/smoke-tests.yml b/.github/workflows/smoke-tests.yml index 6ecefaff..8f870a0e 100644 --- a/.github/workflows/smoke-tests.yml +++ b/.github/workflows/smoke-tests.yml @@ -34,7 +34,7 @@ jobs: contents: read id-token: write steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 32180c01..ba7bb3be 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -33,7 +33,7 @@ jobs: - "macos-latest" runs-on: ${{ matrix.platform }} steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - name: Test @@ -41,7 +41,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap @@ -61,7 +61,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - run: make lint-prep @@ -70,7 +70,7 @@ jobs: notice: runs-on: ubuntu-latest steps: - - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - name: notice From 51eab14b901e32dd4a10f10a7b24002c2b198acd Mon Sep 17 00:00:00 2001 From: "fr4nc1sc0.r4m0n" Date: Wed, 27 Aug 2025 19:38:08 +0200 Subject: [PATCH 2/7] Fix checkout version comment --- .github/workflows/dependabot-pr.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/smoke-tests.yml | 2 +- .github/workflows/test.yml | 8 ++++---- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/dependabot-pr.yml b/.github/workflows/dependabot-pr.yml index f02b31d6..a0156692 100644 --- a/.github/workflows/dependabot-pr.yml +++ b/.github/workflows/dependabot-pr.yml @@ -19,7 +19,7 @@ jobs: contents: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3aff35e9..6ffb7c04 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 with: fetch-depth: 0 diff --git a/.github/workflows/smoke-tests.yml b/.github/workflows/smoke-tests.yml index 8f870a0e..a2058fd6 100644 --- a/.github/workflows/smoke-tests.yml +++ b/.github/workflows/smoke-tests.yml @@ -34,7 +34,7 @@ jobs: contents: read id-token: write steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap with: diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index ba7bb3be..4708b88a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -33,7 +33,7 @@ jobs: - "macos-latest" runs-on: ${{ matrix.platform }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - name: Test @@ -41,7 +41,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap @@ -61,7 +61,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - run: make lint-prep @@ -70,7 +70,7 @@ jobs: notice: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - name: notice From 9f8df275ac31e26812e1f9804aafd4d1e1498f8c Mon Sep 17 00:00:00 2001 From: kruskall <99559985+kruskall@users.noreply.github.com> Date: Wed, 27 Aug 2025 20:19:38 +0200 Subject: [PATCH 3/7] Update dependabot-pr.yml --- .github/workflows/dependabot-pr.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/dependabot-pr.yml b/.github/workflows/dependabot-pr.yml index a0156692..b474d719 100644 --- a/.github/workflows/dependabot-pr.yml +++ b/.github/workflows/dependabot-pr.yml @@ -19,7 +19,7 @@ jobs: contents: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: actions/checkout@v5 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap From 3a64e40a23bf33998756776f34436bbabb3627e7 Mon Sep 17 00:00:00 2001 From: kruskall <99559985+kruskall@users.noreply.github.com> Date: Wed, 27 Aug 2025 20:19:58 +0200 Subject: [PATCH 4/7] Update release.yml --- .github/workflows/release.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6ffb7c04..85b9ee0f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,11 +20,11 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: actions/checkout@v5 # v5 with: fetch-depth: 0 - - uses: elastic/oblt-actions/aws/auth@476391c0e6815110ce488b8b09c80ed61848a28a # v1 + - uses: elastic/oblt-actions/aws/auth@v1 # v1 with: aws-account-id: "267093732750" From 4c5754db4d3ab40474a46afd17aeab38868985e3 Mon Sep 17 00:00:00 2001 From: kruskall <99559985+kruskall@users.noreply.github.com> Date: Wed, 27 Aug 2025 20:20:19 +0200 Subject: [PATCH 5/7] Update smoke-tests.yml --- .github/workflows/smoke-tests.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/smoke-tests.yml b/.github/workflows/smoke-tests.yml index a2058fd6..7cbfec25 100644 --- a/.github/workflows/smoke-tests.yml +++ b/.github/workflows/smoke-tests.yml @@ -34,7 +34,7 @@ jobs: contents: read id-token: write steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: actions/checkout@v5 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap with: @@ -42,8 +42,8 @@ jobs: - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3 with: terraform_version: 1.2.3 - - uses: elastic/oblt-actions/aws/auth@476391c0e6815110ce488b8b09c80ed61848a28a # v1 - - uses: elastic/oblt-actions/google/auth@476391c0e6815110ce488b8b09c80ed61848a28a # v1 + - uses: elastic/oblt-actions/aws/auth@v1 # v1 + - uses: elastic/oblt-actions/google/auth@v1 # v1 - uses: google-github-actions/get-secretmanager-secrets@50ec04d56ddf2740b0bde82926cc742f90e06d2b # v2.2.4 with: export_to_environment: true @@ -67,7 +67,7 @@ jobs: run: make smoketest/cleanup - if: always() - uses: elastic/oblt-actions/slack/notify-result@476391c0e6815110ce488b8b09c80ed61848a28a # v1 + uses: elastic/oblt-actions/slack/notify-result@v1 # v1 with: bot-token: ${{ secrets.SLACK_BOT_TOKEN }} channel-id: "#apm-aws-lambda" From 8c9e4ed1c1743e77f0f436569140f4125f923dfd Mon Sep 17 00:00:00 2001 From: kruskall <99559985+kruskall@users.noreply.github.com> Date: Wed, 27 Aug 2025 20:20:49 +0200 Subject: [PATCH 6/7] Update test.yml --- .github/workflows/test.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 4708b88a..67d247d3 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -33,7 +33,7 @@ jobs: - "macos-latest" runs-on: ${{ matrix.platform }} steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: actions/checkout@v5 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - name: Test @@ -41,7 +41,7 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: actions/checkout@v5 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap @@ -51,7 +51,7 @@ jobs: - name: Build run: make dist - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + - uses: actions/upload-artifact@v4 # v4 if: always() with: name: snapshots @@ -61,7 +61,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: actions/checkout@v5 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - run: make lint-prep @@ -70,7 +70,7 @@ jobs: notice: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5 + - uses: actions/checkout@v5 # v5 - name: Bootstrap Action Workspace uses: ./.github/actions/bootstrap - name: notice @@ -88,7 +88,7 @@ jobs: runs-on: ubuntu-latest steps: - id: check - uses: elastic/oblt-actions/check-dependent-jobs@476391c0e6815110ce488b8b09c80ed61848a28a # v1 + uses: elastic/oblt-actions/check-dependent-jobs@v1 # v1 with: jobs: ${{ toJSON(needs) }} - run: ${{ steps.check.outputs.is-success }} From d72783c6a912b05522558cdbe3b34151be972cbd Mon Sep 17 00:00:00 2001 From: kruskall <99559985+kruskall@users.noreply.github.com> Date: Wed, 27 Aug 2025 20:21:50 +0200 Subject: [PATCH 7/7] Update release.yml --- .github/workflows/release.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 85b9ee0f..254db50b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -53,7 +53,7 @@ jobs: run: make release # Store artifacts to help with troubleshooting - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 + - uses: actions/upload-artifact@v4 # v4 if: always() with: name: release @@ -89,7 +89,7 @@ jobs: VERSION: ${{ github.ref_name }} - if: ${{ success() }} - uses: elastic/oblt-actions/slack/send@476391c0e6815110ce488b8b09c80ed61848a28a # v1 + uses: elastic/oblt-actions/slack/send@v1 # v1 with: bot-token: ${{ secrets.SLACK_BOT_TOKEN }} channel-id: "#apm-aws-lambda" @@ -98,7 +98,7 @@ jobs: Build: (<${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}|here>) - if: ${{ failure() }} - uses: elastic/oblt-actions/slack/send@476391c0e6815110ce488b8b09c80ed61848a28a # v1 + uses: elastic/oblt-actions/slack/send@v1 # v1 with: bot-token: ${{ secrets.SLACK_BOT_TOKEN }} channel-id: "#apm-aws-lambda"