diff --git a/.github/workflows/pull-request-checks.yml b/.github/workflows/pull-request-checks.yml index 547c57d3..fc270381 100644 --- a/.github/workflows/pull-request-checks.yml +++ b/.github/workflows/pull-request-checks.yml @@ -33,12 +33,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set Nx SHA - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -54,12 +54,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set Nx SHA - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -81,12 +81,12 @@ jobs: pull-requests: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set Nx SHA - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -151,7 +151,7 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Run Trivy filesystem scan uses: ./.github/actions/trivy-scan @@ -168,7 +168,7 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Run Trivy config scan uses: ./.github/actions/trivy-scan @@ -182,12 +182,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -201,7 +201,7 @@ jobs: run: npx nx affected --target=sbom --parallel=1 || echo "No affected projects for sbom generation" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: always() with: name: build-artifacts @@ -222,15 +222,15 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -264,15 +264,15 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -306,15 +306,15 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -348,15 +348,15 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -390,15 +390,15 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -432,15 +432,15 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -477,14 +477,14 @@ jobs: if: always() steps: - name: Download service SBOMs from build - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: name: build-artifacts path: . - name: Download container image SBOM artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: pattern: sbom-container-images-* @@ -500,7 +500,7 @@ jobs: ls -la dist/sboms/ 2>/dev/null || true - name: Upload SBOM artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: sbom-artifacts path: dist/sboms/ @@ -514,15 +514,15 @@ jobs: needs: build steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -539,15 +539,15 @@ jobs: needs: build steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -570,15 +570,15 @@ jobs: needs: build steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -593,7 +593,7 @@ jobs: xvfb-run -a npx nx affected --target=package --configuration=development-linux --parallel=3 || echo "No projects for native applications build" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-linux path: | @@ -609,15 +609,15 @@ jobs: needs: build steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -635,7 +635,7 @@ jobs: xvfb-run -a npx nx affected --target=package --configuration=development-windows --parallel=3 || echo "No projects for native applications build" - name: Upload Windows Electron bundle - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: windows-electron-bundle path: dist/apps/native-agent-console/out/native-agent-console-win32-x64 @@ -643,7 +643,7 @@ jobs: retention-days: 1 - name: Upload Windows zip artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows path: dist/**/out/make/**/win32/**/*.zip @@ -658,7 +658,7 @@ jobs: if: ${{ needs.build-native-applications-windows.result == 'success' }} steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 @@ -666,7 +666,7 @@ jobs: uses: ./.github/actions/setup-env - name: Download Windows Electron bundle - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: name: windows-electron-bundle @@ -677,7 +677,7 @@ jobs: run: ./tools/ci/build-windows-installer.ps1 - name: Upload Windows installer artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows-installer path: apps/native-agent-console/installer-out/*.exe @@ -694,18 +694,18 @@ jobs: - build-native-applications-windows-installer steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env - name: Download binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: path: artifacts @@ -736,7 +736,7 @@ jobs: node tools/release-integrity/dist/src/cli.js verify --input release - name: Upload binaries to GitHub Actions artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-bundle path: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 2e67c20e..948071b5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,13 +16,13 @@ jobs: new_release_version: ${{ steps.semantic-release.outputs.new_release_version }} steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env @@ -35,7 +35,7 @@ jobs: private_key: ${{ secrets.SEMANTIC_RELEASE_KEY_PEM }} - name: Semantic release - uses: cycjimmy/semantic-release-action@v5 + uses: cycjimmy/semantic-release-action@v6 id: semantic-release with: semantic_version: 22.0.5 @@ -61,7 +61,7 @@ jobs: run: npx nx run-many --target=sbom --parallel=1 || echo "No projects for sbom generation" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 if: steps.semantic-release.outputs.new_release_published == 'true' with: name: build-artifacts @@ -82,16 +82,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -100,7 +100,7 @@ jobs: uses: ./.github/actions/setup-env - name: 'Login to container registry' - uses: docker/login-action@v3 + uses: docker/login-action@v4.1.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -129,16 +129,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -147,7 +147,7 @@ jobs: uses: ./.github/actions/setup-env - name: 'Login to container registry' - uses: docker/login-action@v3 + uses: docker/login-action@v4.1.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -176,16 +176,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -194,7 +194,7 @@ jobs: uses: ./.github/actions/setup-env - name: 'Login to container registry' - uses: docker/login-action@v3 + uses: docker/login-action@v4.1.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -223,16 +223,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -241,7 +241,7 @@ jobs: uses: ./.github/actions/setup-env - name: 'Login to container registry' - uses: docker/login-action@v3 + uses: docker/login-action@v4.1.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -270,16 +270,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -288,7 +288,7 @@ jobs: uses: ./.github/actions/setup-env - name: 'Login to container registry' - uses: docker/login-action@v3 + uses: docker/login-action@v4.1.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -317,16 +317,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -335,7 +335,7 @@ jobs: uses: ./.github/actions/setup-env - name: 'Login to container registry' - uses: docker/login-action@v3 + uses: docker/login-action@v4.1.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -364,16 +364,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -408,16 +408,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -433,7 +433,7 @@ jobs: xvfb-run -a npx nx run-many --target=package --configuration=production-linux --parallel=3 || echo "No projects for native applications build" - name: Upload build artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-linux path: | @@ -454,16 +454,16 @@ jobs: packages: write steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -482,7 +482,7 @@ jobs: xvfb-run -a npx nx run-many --target=package --configuration=production-windows --parallel=3 || echo "No projects for native applications build" - name: Upload Windows Electron bundle - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: windows-electron-bundle path: dist/apps/native-agent-console/out/native-agent-console-win32-x64 @@ -490,7 +490,7 @@ jobs: retention-days: 1 - name: Upload Windows zip artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows path: dist/**/out/make/**/win32/**/*.zip @@ -507,7 +507,7 @@ jobs: if: needs.publish.outputs.new_release_published == 'true' steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 @@ -516,7 +516,7 @@ jobs: uses: ./.github/actions/setup-env - name: Download Windows Electron bundle - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: name: windows-electron-bundle @@ -529,7 +529,7 @@ jobs: run: ./tools/ci/build-windows-installer.ps1 - name: Upload Windows installer artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: binary-artifacts-windows-installer path: apps/native-agent-console/installer-out/*.exe @@ -549,19 +549,19 @@ jobs: environment: production steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: persist-credentials: false fetch-depth: 0 - name: Set nx shas - uses: nrwl/nx-set-shas@v4 + uses: nrwl/nx-set-shas@v5 - name: Setup environment uses: ./.github/actions/setup-env - name: Download binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: path: artifacts @@ -609,7 +609,7 @@ jobs: environment: production steps: - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . @@ -640,16 +640,16 @@ jobs: environment: production steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Download build artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: build-artifacts path: . - name: Download container image SBOM artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: pattern: sbom-container-images-* @@ -812,10 +812,10 @@ jobs: has_entries: ${{ steps.set-matrix.outputs.has_entries }} steps: - name: Checkout code - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Download container image SBOM artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 continue-on-error: true with: pattern: sbom-container-images-* @@ -850,7 +850,7 @@ jobs: - name: Upload container image SBOM artifact if: steps.set-matrix.outputs.has_entries == 'true' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: container-image-sboms-for-dt path: dist/sboms/container-*.cdx.json @@ -872,7 +872,7 @@ jobs: matrix: ${{ fromJson(needs.prepare-container-image-sbom-uploads.outputs.matrix) }} steps: - name: Download container image SBOMs - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v8 with: name: container-image-sboms-for-dt path: .