Michael Li
fbf16b26b6
chore: Update actions to use Node24 ( #6523 )
...
# Conflicts:
# .github/workflows/enos-run.yml
2026-05-08 11:21:05 -04:00
dependabot[bot]
4464507b31
chore(deps): bump the actions group with 5 updates ( #6034 )
...
Bumps the actions group with 5 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go ) | `5.5.0` | `6.0.0` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `4.3.1` | `5.0.0` |
| [actions/labeler](https://github.com/actions/labeler ) | `5.0.0` | `6.0.1` |
| [actions/setup-python](https://github.com/actions/setup-python ) | `5.6.0` | `6.0.0` |
| [actions/setup-node](https://github.com/actions/setup-node ) | `4.4.0` | `5.0.0` |
Updates `actions/setup-go` from 5.5.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/d35c59abb061a4a6fb18e82ac0862c26744d6ab5...44694675825211faa026b3c33043df3e48a5fa00 )
Updates `aws-actions/configure-aws-credentials` from 4.3.1 to 5.0.0
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/7474bc4690e29a8392af63c5b98e7449536d5c3a...a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 )
Updates `actions/labeler` from 5.0.0 to 6.0.1
- [Release notes](https://github.com/actions/labeler/releases )
- [Commits](https://github.com/actions/labeler/compare/8558fd74291d67161a8a78ce36a881fa63b766a9...634933edcd8ababfe52f92936142cc22ac488b1b )
Updates `actions/setup-python` from 5.6.0 to 6.0.0
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/a26af69be951a213d495a4c3e4e4022e16d87065...e797f83bcb11b83ae66e0230d6156d7c80228e7c )
Updates `actions/setup-node` from 4.4.0 to 5.0.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/49933ea5288caeca8642d1e84afbd3f7d6820020...a0853c24544627f65ddf259abe73b1d18a591444 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/labeler
dependency-version: 6.0.1
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/setup-python
dependency-version: 6.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
- dependency-name: actions/setup-node
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-09-08 13:18:18 -04:00
dependabot[bot]
f585b92e2a
chore(deps): bump actions/checkout in the actions group ( #5984 )
...
Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout ).
Updates `actions/checkout` from 4.2.2 to 5.0.0
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...08c6903cd8c0fde910a37f88322edcfb5dd907a8 )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 5.0.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-08-18 18:05:35 -04:00
dependabot[bot]
1c604cf7ff
chore(deps): bump the actions group with 8 updates ( #5779 )
...
Bumps the actions group with 8 updates:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go ) | `5.4.0` | `5.5.0` |
| [hashicorp/setup-terraform](https://github.com/hashicorp/setup-terraform ) | `3.0.0` | `3.1.2` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `4.1.0` | `4.2.1` |
| [google-github-actions/auth](https://github.com/google-github-actions/auth ) | `2.1.8` | `2.1.10` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `4.2.1` | `4.3.0` |
| [actions/setup-node](https://github.com/actions/setup-node ) | `4.3.0` | `4.4.0` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action ) | `2.0.0` | `2.1.0` |
| [actions/setup-python](https://github.com/actions/setup-python ) | `5.5.0` | `5.6.0` |
Updates `actions/setup-go` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/actions/setup-go/releases )
- [Commits](https://github.com/actions/setup-go/compare/0aaccfd150d50ccaeb58ebd88d36e91967a5f35b...d35c59abb061a4a6fb18e82ac0862c26744d6ab5 )
Updates `hashicorp/setup-terraform` from 3.0.0 to 3.1.2
- [Release notes](https://github.com/hashicorp/setup-terraform/releases )
- [Changelog](https://github.com/hashicorp/setup-terraform/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/setup-terraform/compare/a1502cd9e758c50496cc9ac5308c4843bcd56d36...b9cd54a3c349d3f38e8881555d616ced269862dd )
Updates `aws-actions/configure-aws-credentials` from 4.1.0 to 4.2.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/ececac1a45f3b08a01d2dd070d28d111c5fe6722...b47578312673ae6fa5b5096b330d9fbac3d116df )
Updates `google-github-actions/auth` from 2.1.8 to 2.1.10
- [Release notes](https://github.com/google-github-actions/auth/releases )
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md )
- [Commits](https://github.com/google-github-actions/auth/compare/71f986410dfbc7added4569d411d040a91dc6935...ba79af03959ebeac9769e648f473a284504d9193 )
Updates `actions/download-artifact` from 4.2.1 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/95815c38cf2ff2164869cbab79da8d1f422bc89e...d3f86a106a0bac45b974a628896c90dbdf5c8093 )
Updates `actions/setup-node` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/actions/setup-node/releases )
- [Commits](https://github.com/actions/setup-node/compare/cdca7365b2dadb8aad0a33bc7601856ffabcc48e...49933ea5288caeca8642d1e84afbd3f7d6820020 )
Updates `slackapi/slack-github-action` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/slackapi/slack-github-action/releases )
- [Commits](https://github.com/slackapi/slack-github-action/compare/485a9d42d3a73031f12ec201c457e2162c45d02d...b0fa283ad8fea605de13dc3f449259339835fc52 )
Updates `actions/setup-python` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/8d9ed9ac5c53483de85588cdf95a591a75ab9f55...a26af69be951a213d495a4c3e4e4022e16d87065 )
---
updated-dependencies:
- dependency-name: actions/setup-go
dependency-version: 5.5.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: hashicorp/setup-terraform
dependency-version: 3.1.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 4.2.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: google-github-actions/auth
dependency-version: 2.1.10
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/download-artifact
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: actions/setup-node
dependency-version: 4.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: slackapi/slack-github-action
dependency-version: 2.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: actions/setup-python
dependency-version: 5.6.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-05-22 15:11:33 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
f1f5848c00
Result of tsccr-helper -log-level=info gha update -latest .github/ ( #5711 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2025-05-01 12:43:02 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
ca0deb91c1
Result of tsccr-helper -log-level=info gha update -latest .github/ ( #5505 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2025-02-11 08:37:00 -08:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
47538bddcc
Result of tsccr-helper -log-level=info gha update -latest .github/ ( #5398 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2025-01-02 11:42:50 -05:00
b84f62fae1
SEC-090: Automated trusted workflow pinning (2024-12-01) ( #5293 )
...
* Result of tsccr-helper -log-level=info gha update -latest .github/
* chore: Fix usage of slack-github-action
---------
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com >
2024-12-03 09:56:01 -05:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
69b60c82df
Result of tsccr-helper -log-level=info gha update -latest .github/ ( #5226 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-11-25 15:09:24 -05:00
Deniz Onur Duzgun and mickael e
91128ba37a
ci: update the security-scanner gha token ( #5112 )
...
* ci: update the security-scanner gha token
* security-scan : fix codeql download
---------
Co-authored-by: mickael e <mickael@hashicorp.com >
2024-11-18 09:47:24 -05:00
Irena Rindos
70079bac7b
chore: update security scanner ( #5197 )
2024-10-23 15:09:19 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
152d2e83a1
Result of tsccr-helper -log-level=info gha update -latest . ( #5141 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-10-11 11:58:14 -04:00
Mark Collao
0b4e17162d
update scan workflow conditions ( #5089 )
2024-09-09 09:27:22 -07:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
4e8e069c9c
Result of tsccr-helper -log-level=info gha update -latest . ( #5063 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-09-03 15:19:21 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
b24f6dcee8
Result of tsccr-helper -log-level=info gha update -latest . ( #4989 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-08-01 10:58:46 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
e390afe45d
Result of tsccr-helper -log-level=info gha update -latest . ( #4922 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-07-09 10:15:49 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
1a2127a0e4
Result of tsccr-helper -log-level=info gha update -latest . ( #4858 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-06-03 10:47:37 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
1c6065d811
Result of tsccr-helper -log-level=info gha update -latest . ( #4757 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-05-01 11:41:07 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
ad430b29e0
Result of tsccr-helper -log-level=info gha update -latest . ( #4580 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-04-01 11:22:40 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
299dee0932
Result of tsccr-helper -log-level=info gha update -latest . ( #4472 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-03-01 14:18:30 -05:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
5d6c42a0c2
Result of tsccr-helper -log-level=info gha update -latest . ( #4346 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2024-02-01 15:00:58 -05:00
Michael Li
11d4211f30
Revert "chore(deps): bump actions/setup-python from 4.7.1 to 4.8.0 ( #4098 )" ( #4101 )
...
This reverts commit 17e9edc07f
2023-12-05 09:58:12 -05:00
dependabot[bot]
17e9edc07f
chore(deps): bump actions/setup-python from 4.7.1 to 4.8.0 ( #4098 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.7.1 to 4.8.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236...b64ffcaf5b410884ad320a9cfac8866006a109aa )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-05 09:53:10 -05:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
b159080593
Result of tsccr-helper -log-level=info -pin-all-workflows . ( #4080 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-12-04 09:48:09 -05:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
b5ae6f0ceb
Result of tsccr-helper -log-level=info -pin-all-workflows . ( #3968 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-11-01 10:08:02 -04:00
mickael-hc
fe948942c2
security-scan: temporarily pin semgrep to 1.45.0 ( #3931 )
2023-10-26 10:34:21 -04:00
dependabot[bot]
1f598988e6
chore(deps): bump actions/setup-python from 4.7.0 to 4.7.1 ( #3837 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 4.7.0 to 4.7.1.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/61a6322f88396a6271a6ee3565807d608ecaddd1...65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-12 06:21:39 -04:00
Mark Collao
d42369551a
Update security-scan.yml
2023-10-11 12:55:04 -05:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
ae85c5d7ff
Result of tsccr-helper -log-level=info -pin-all-workflows . ( #3786 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-10-11 09:17:52 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
c55df52d44
Result of tsccr-helper -log-level=info -pin-all-workflows . ( #3658 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-09-01 12:21:34 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
e8207d4bb2
Result of tsccr-helper -log-level=info -pin-all-workflows . ( #3527 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-08-01 08:42:39 -04:00
hashicorp-tsccr[bot] and hashicorp-tsccr[bot]
7a069cb54e
Result of tsccr-helper -log-level=info -pin-all-workflows . ( #3466 )
...
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
2023-07-18 09:25:10 -04:00
Mark Collao
81016ef984
fix paths-ignore on security-scan workflow ( #3435 )
2023-07-13 13:08:29 -05:00
Mark Collao
75b4234668
chore: prefer gosec for semgrep rule and turn on codeql ( #3418 )
2023-07-13 13:03:53 -05:00
Mark Collao
23bc0782ea
chore: update security-scanner workflow runner ( #3309 )
2023-06-12 16:07:55 -05:00
Michael Li
253d191440
chore: Bump version of security scanner ( #3234 )
...
This mitigates the GitHub deprecation of set-output and node 12.
2023-05-19 12:06:10 -04:00
cc94accc4f
SEC-090: Automated trusted workflow pinning (2023-04-27) ( #3187 )
...
* Result of tsccr-helper -pin-all-workflows .
* chore: Disable cache from setup-go
---------
Co-authored-by: hashicorp-tsccr[bot] <hashicorp-tsccr[bot]@users.noreply.github.com>
Co-authored-by: Michael Li <michael.li@hashicorp.com >
2023-05-02 16:37:11 -04:00
Timothy Messier
e4fbc0281a
chore(ci): Update and pin actions steps
2023-03-29 18:39:01 +00:00
dependabot[bot]
2b7accac84
chore(deps): bump actions/setup-python from 3.1.2 to 4.5.0 ( #3038 )
...
Bumps [actions/setup-python](https://github.com/actions/setup-python ) from 3.1.2 to 4.5.0.
- [Release notes](https://github.com/actions/setup-python/releases )
- [Commits](https://github.com/actions/setup-python/compare/98f2ad02fd48d057ee3b4d4f66525b231c3e52b6...d27e3f3d7c64b4bbf8e4abfb9b63b83e846e0435 )
---
updated-dependencies:
- dependency-name: actions/setup-python
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-08 15:36:33 -05:00
Timothy Messier
236d7ca872
ci: Additional githubaction configuration ( #3034 )
...
- Pin action versions
- Dependabot to notify about action updates
- Update codeowners
2023-03-01 08:00:46 -05:00
Timothy Messier
18b0bcb395
chore(ci): Revert some permission settings
...
These workflows seemed to break with these permission changes.
2023-02-23 21:14:53 +00:00
Timothy Messier
2a47e9ddf8
ci: Set permissions in workflows ( #3011 )
2023-02-23 15:50:26 -05:00
Mark Collao
115b8fd5cb
fix: update sec-scanner sha
2023-02-10 21:16:41 -06:00
Mark Collao
5e3244a2e5
add security-scan workflow ( #2945 )
...
* add security-scan workflow
* remove uneeded branch; adopt .go-version
* fix bad yaml
* fix random newlines
* add copy
2023-02-10 11:12:56 -06:00
