Skip to content

Commit 31a3a3f

Browse files
yeikelyeikel
authored
Infra: use dependabot-friendly version references (#1568)
1 parent 4fd85d5 commit 31a3a3f

23 files changed

+85
-85
lines changed

‎.github/workflows/backend_tests.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,14 +19,14 @@ jobs:
1919
steps:
2020

2121
- name: Checkout
22-
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
22+
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # https://github.com/actions/checkout/releases/tag/v4.0.0
2323
with:
2424
token: ${{ github.token }}
2525
fetch-depth: 0
2626
ref: ${{ github.event.pull_request.head.sha }}
2727

2828
- name: Set up JDK
29-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
29+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # https://github.com/actions/setup-java/releases/tag/v4
3030
with:
3131
java-version-file: '.java-version'
3232
distribution: 'zulu'

‎.github/workflows/block_merge.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ jobs:
66
block_merge:
77
runs-on: ubuntu-latest
88
steps:
9-
- uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # infered from @v5
9+
- uses: mheap/github-action-required-labels@388fd6af37b34cdfe5a23b37060e763217e58b03 # https://github.com/mheap/github-action-required-labels/releases/tag/5.5.0
1010
with:
1111
mode: exactly
1212
count: 0

‎.github/workflows/branch-deploy.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
if: ${{ github.event.label.name == 'status/feature_testing' || github.event.label.name == 'status/feature_testing_public' }}
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
18+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # https://github.com/actions/checkout/releases/tag/v4.0.0
1919
with:
2020
ref: ${{ github.event.pull_request.head.sha }}
2121
token: ${{ github.token }}
@@ -27,7 +27,7 @@ jobs:
2727
env:
2828
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
2929
- name: Set up JDK
30-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
30+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # https://github.com/actions/setup-java/releases/tag/v4
3131
with:
3232
java-version-file: '.java-version'
3333
distribution: 'zulu'
@@ -40,29 +40,29 @@ jobs:
4040
export VERSION=$(./mvnw -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)
4141
echo "version=${VERSION}" >> $GITHUB_OUTPUT
4242
- name: Set up QEMU
43-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
43+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # https://github.com/docker/setup-qemu-action/releases/tag/v3.7.0
4444
- name: Set up Docker Buildx
4545
id: buildx
46-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
46+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # https://github.com/docker/setup-buildx-action/releases/tag/v3.11.1
4747
- name: Cache Docker layers
48-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
48+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # https://github.com/actions/cache/releases/tag/v4.3.0
4949
with:
5050
path: /tmp/.buildx-cache
5151
key: ${{ runner.os }}-buildx-${{ github.sha }}
5252
restore-keys: |
5353
${{ runner.os }}-buildx-
5454
- name: Configure AWS credentials for Kafka-UI account
55-
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
55+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # https://github.com/aws-actions/configure-aws-credentials/releases/tag/v4
5656
with:
5757
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
5858
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
5959
aws-region: eu-central-1
6060
- name: Login to Amazon ECR
6161
id: login-ecr
62-
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
62+
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # https://github.com/aws-actions/amazon-ecr-login/releases/tag/v2.0.1
6363
- name: Build and push
6464
id: docker_build_and_push
65-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
65+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # https://github.com/docker/build-push-action/releases/tag/v6.18.0
6666
with:
6767
builder: ${{ steps.buildx.outputs.name }}
6868
context: api
@@ -93,7 +93,7 @@ jobs:
9393
9494
- name: update status check for private deployment
9595
if: ${{ github.event.label.name == 'status/feature_testing' }}
96-
uses: Sibz/github-status-action@650dd1a882a76dbbbc4576fb5974b8d22f29847f # infered from @v1.1.6
96+
uses: Sibz/github-status-action@650dd1a882a76dbbbc4576fb5974b8d22f29847f # https://github.com/Sibz/github-status-action/releases/tag/v1.1.6
9797
with:
9898
authToken: ${{secrets.GITHUB_TOKEN}}
9999
context: "Click Details button to open custom deployment page"
@@ -103,7 +103,7 @@ jobs:
103103

104104
- name: update status check for public deployment
105105
if: ${{ github.event.label.name == 'status/feature_testing_public' }}
106-
uses: Sibz/github-status-action@650dd1a882a76dbbbc4576fb5974b8d22f29847f # infered from @v1.1.6
106+
uses: Sibz/github-status-action@650dd1a882a76dbbbc4576fb5974b8d22f29847f # https://github.com/Sibz/github-status-action/releases/tag/v1.1.6
107107
with:
108108
authToken: ${{secrets.GITHUB_TOKEN}}
109109
context: "Click Details button to open custom deployment page"

‎.github/workflows/branch-remove.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
if: ${{ (github.event.label.name == 'status/feature_testing' || github.event.label.name == 'status/feature_testing_public') || (github.event.action == 'closed' && (contains(github.event.pull_request.labels.*.name, 'status/feature_testing') || contains(github.event.pull_request.labels.*.name, 'status/feature_testing_public'))) }}
1515
steps:
16-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
16+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # https://github.com/actions/checkout/releases/tag/v4.0.0
1717
with:
1818
token: ${{ github.token }}
1919
- name: clone

‎.github/workflows/build-public-image.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515
if: ${{ github.event.label.name == 'status/image_testing' }}
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
18+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # https://github.com/actions/checkout/releases/tag/v4.0.0
1919
with:
2020
ref: ${{ github.event.pull_request.head.sha }}
2121
token: ${{ github.token }}
@@ -25,7 +25,7 @@ jobs:
2525
tag='${{ github.event.pull_request.number }}'
2626
echo "tag=${tag}" >> $GITHUB_OUTPUT
2727
- name: Set up JDK
28-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
28+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # https://github.com/actions/setup-java/releases/tag/v4
2929
with:
3030
java-version-file: '.java-version'
3131
distribution: 'zulu'
@@ -38,30 +38,30 @@ jobs:
3838
export VERSION=$(./mvnw -q -Dexec.executable=echo -Dexec.args='${project.version}' --non-recursive exec:exec)
3939
echo "version=${VERSION}" >> $GITHUB_OUTPUT
4040
- name: Set up QEMU
41-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
41+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # https://github.com/docker/setup-qemu-action/releases/tag/v3.7.0
4242
- name: Set up Docker Buildx
4343
id: buildx
44-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
44+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # https://github.com/docker/setup-buildx-action/releases/tag/v3.11.1
4545
- name: Cache Docker layers
46-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
46+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # https://github.com/actions/cache/releases/tag/v4.3.0
4747
with:
4848
path: /tmp/.buildx-cache
4949
key: ${{ runner.os }}-buildx-${{ github.sha }}
5050
restore-keys: |
5151
${{ runner.os }}-buildx-
5252
- name: Configure AWS Credentials
53-
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
53+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # https://github.com/aws-actions/configure-aws-credentials/releases/tag/v4
5454
with:
5555
aws-region: us-east-1
5656
role-to-assume: ${{ secrets.AWS_ROLE }}
5757
- name: Login to Amazon ECR
5858
id: login-ecr
59-
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
59+
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # https://github.com/aws-actions/amazon-ecr-login/releases/tag/v2.0.1
6060
with:
6161
registry-type: 'public'
6262
- name: Build and push
6363
id: docker_build_and_push
64-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
64+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # https://github.com/docker/build-push-action/releases/tag/v6.18.0
6565
with:
6666
builder: ${{ steps.buildx.outputs.name }}
6767
context: api

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838

3939
steps:
4040
- name: Checkout repository
41-
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
41+
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # https://github.com/actions/checkout/releases/tag/v4.0.0
4242
with:
4343
token: ${{ github.token }}
4444

@@ -48,14 +48,14 @@ jobs:
4848
languages: ${{ matrix.language }}
4949

5050
- name: Set up JDK
51-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
51+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # https://github.com/actions/setup-java/releases/tag/v4
5252
with:
5353
java-version-file: '.java-version'
5454
distribution: 'zulu'
5555
cache: 'gradle'
5656

5757
- name: Autobuild
58-
uses: github/codeql-action/autobuild@bed2a47f201e917459bc40343380c570a730ff06 # infered from @v3
58+
uses: github/codeql-action/autobuild@bed2a47f201e917459bc40343380c570a730ff06 # https://github.com/github/codeql-action/releases/tag/v4.31.7
5959

6060
- name: Perform CodeQL Analysis
61-
uses: github/codeql-action/analyze@86b04fb0e47484f7282357688f21d5d0e32175fe # infered from @v3
61+
uses: github/codeql-action/analyze@86b04fb0e47484f7282357688f21d5d0e32175fe # https://github.com/github/codeql-action/releases/tag/v4.31.7

‎.github/workflows/cve_checks.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ jobs:
1818
runs-on: ubuntu-latest
1919

2020
steps:
21-
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
21+
- uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # https://github.com/actions/checkout/releases/tag/v4.0.0
2222
with:
2323
token: ${{ github.token }}
2424

2525
- name: Set up JDK
26-
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # infered from @v4
26+
uses: actions/setup-java@3a4f6e1af504cf6a31855fa899c6aa5355ba6c12 # https://github.com/actions/setup-java/releases/tag/v4
2727
with:
2828
java-version-file: '.java-version'
2929
distribution: 'zulu'
@@ -39,21 +39,21 @@ jobs:
3939
-Pversion=latest
4040
4141
- name: Set up QEMU
42-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
42+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # https://github.com/docker/setup-qemu-action/releases/tag/v3.7.0
4343

4444
- name: Set up Docker Buildx
45-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
45+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # https://github.com/docker/setup-buildx-action/releases/tag/v3.11.1
4646

4747
- name: Cache Docker layers
48-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
48+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # https://github.com/actions/cache/releases/tag/v4.3.0
4949
with:
5050
path: /tmp/.buildx-cache
5151
key: ${{ runner.os }}-buildx-${{ github.sha }}
5252
restore-keys: |
5353
${{ runner.os }}-buildx-
5454
5555
- name: Build docker image
56-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
56+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # https://github.com/docker/build-push-action/releases/tag/v6.18.0
5757
with:
5858
builder: ${{ steps.buildx.outputs.name }}
5959
context: api
@@ -68,7 +68,7 @@ jobs:
6868
cache-to: type=local,dest=/tmp/.buildx-cache
6969

7070
- name: Run CVE checks
71-
uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # infered from @v0.32.0
71+
uses: aquasecurity/trivy-action@dc5a429b52fcf669ce959baa2c2dd26090d2a6c4 # https://github.com/aquasecurity/trivy-action/releases/tag/0.33.1
7272
with:
7373
image-ref: "ghcr.io/kafbat/kafka-ui:latest"
7474
format: "table"

‎.github/workflows/delete-public-image.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,14 +15,14 @@ jobs:
1515
tag='${{ github.event.pull_request.number }}'
1616
echo "tag=${tag}" >> $GITHUB_OUTPUT
1717
- name: Configure AWS credentials for Kafka-UI account
18-
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # infered from @v4
18+
uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # https://github.com/aws-actions/configure-aws-credentials/releases/tag/v4
1919
with:
2020
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
2121
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
2222
aws-region: us-east-1
2323
- name: Login to Amazon ECR
2424
id: login-ecr
25-
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # infered from @v4
25+
uses: aws-actions/amazon-ecr-login@9238dd443b7a5941caf19ffbe68be34d4dbd61df # https://github.com/aws-actions/amazon-ecr-login/releases/tag/v2.0.1
2626
with:
2727
registry-type: 'public'
2828
- name: Remove from ECR

‎.github/workflows/docker_build.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -18,26 +18,26 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Checkout
21-
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # infered from @v4
21+
uses: actions/checkout@1e31de5234b9f8995739874a8ce0492dc87873e2 # https://github.com/actions/checkout/releases/tag/v4.0.0
2222
with:
2323
ref: ${{ github.event.pull_request.head.sha }}
2424
token: ${{ github.token }}
2525

2626
- name: Download artifacts
27-
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # infered from @v4
27+
uses: actions/download-artifact@cc203385981b70ca67e1cc392babf9cc229d5806 # https://github.com/actions/download-artifact/releases/tag/v4
2828
with:
2929
name: kafbat-ui-${{ inputs.version }}
3030
path: api/build/libs
3131

3232
- name: Set up QEMU
33-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # infered from @v3
33+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # https://github.com/docker/setup-qemu-action/releases/tag/v3.7.0
3434

3535
- name: Set up Docker Buildx
3636
id: buildx
37-
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # infered from @v3
37+
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # https://github.com/docker/setup-buildx-action/releases/tag/v3.11.1
3838

3939
- name: Cache Docker layers
40-
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # infered from @v4
40+
uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # https://github.com/actions/cache/releases/tag/v4.3.0
4141
with:
4242
path: /tmp/.buildx-cache
4343
key: ${{ runner.os }}-buildx-${{ inputs.sha }}
@@ -49,7 +49,7 @@ jobs:
4949
# Also containerd is one of the option to allow preserving provenance attestations:
5050
# https://docs.docker.com/build/attestations/#creating-attestations
5151
- name: Setup docker with containerd
52-
uses: docker/setup-docker-action@efe9e3891a4f7307e689f2100b33a155b900a608 # infered from @v4.5.0
52+
uses: docker/setup-docker-action@efe9e3891a4f7307e689f2100b33a155b900a608 # https://github.com/docker/setup-docker-action/releases/tag/v4.6.0
5353
with:
5454
daemon-config: |
5555
{
@@ -60,7 +60,7 @@ jobs:
6060
6161
- name: Build docker image
6262
id: docker_build
63-
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # infered from @v6
63+
uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # https://github.com/docker/build-push-action/releases/tag/v6.18.0
6464
with:
6565
builder: ${{ steps.buildx.outputs.name }}
6666
context: api
@@ -81,7 +81,7 @@ jobs:
8181
docker image save kafka-ui:temp > /tmp/image.tar
8282
8383
- name: Upload docker image
84-
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # infered from @v4
84+
uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # https://github.com/actions/upload-artifact/releases/tag/v4
8585
with:
8686
name: image
8787
path: /tmp/image.tar

0 commit comments

Comments
 (0)