From 28cf297750459d56e146581d727eb8663205efbe Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 18 Sep 2026 13:24:34 +0000 Subject: [PATCH] Update github actions --- .../actions/run-integration-and-e2e/action.yml | 2 +- .github/workflows/PullRequestClosed.yml | 4 ++-- .github/workflows/PullRequestCreated.yml | 4 ++-- .github/workflows/RequestReview.yml | 4 ++-- .github/workflows/SubmitReview.yml | 4 ++-- .github/workflows/build.yml | 18 +++++++++--------- .github/workflows/full-release.yml | 6 +++--- .github/workflows/notify-failure.yml | 2 +- .github/workflows/prepare-release-notes.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- .github/workflows/update-release-channel.yml | 2 +- 11 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/actions/run-integration-and-e2e/action.yml b/.github/actions/run-integration-and-e2e/action.yml index 5a0ea32fc..0e7d2ee35 100644 --- a/.github/actions/run-integration-and-e2e/action.yml +++ b/.github/actions/run-integration-and-e2e/action.yml @@ -17,7 +17,7 @@ runs: steps: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/devex-claude-code API_KEY | CLAUDE_CODE_API_KEY; diff --git a/.github/workflows/PullRequestClosed.yml b/.github/workflows/PullRequestClosed.yml index f1482e590..ab4c952fb 100644 --- a/.github/workflows/PullRequestClosed.yml +++ b/.github/workflows/PullRequestClosed.yml @@ -16,12 +16,12 @@ jobs: github.event.pull_request.head.repo.full_name == github.repository steps: - id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/jira user | JIRA_USER; development/kv/data/jira token | JIRA_TOKEN; - - uses: sonarsource/gh-action-lt-backlog/PullRequestClosed@v2 + - uses: sonarsource/gh-action-lt-backlog/PullRequestClosed@63ab0d7f819ffa1387c931e8afca5c200c481317 # v2 with: github-token: ${{secrets.GITHUB_TOKEN}} jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }} diff --git a/.github/workflows/PullRequestCreated.yml b/.github/workflows/PullRequestCreated.yml index 94610d84f..2f1024e20 100644 --- a/.github/workflows/PullRequestCreated.yml +++ b/.github/workflows/PullRequestCreated.yml @@ -15,13 +15,13 @@ jobs: github.event.pull_request.head.repo.full_name == github.repository steps: - id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN; development/kv/data/jira user | JIRA_USER; development/kv/data/jira token | JIRA_TOKEN; - - uses: sonarsource/gh-action-lt-backlog/PullRequestCreated@v2 + - uses: sonarsource/gh-action-lt-backlog/PullRequestCreated@63ab0d7f819ffa1387c931e8afca5c200c481317 # v2 with: github-token: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }} jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }} diff --git a/.github/workflows/RequestReview.yml b/.github/workflows/RequestReview.yml index 719a3635e..a2ff9b766 100644 --- a/.github/workflows/RequestReview.yml +++ b/.github/workflows/RequestReview.yml @@ -15,13 +15,13 @@ jobs: github.event.pull_request.head.repo.full_name == github.repository steps: - id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN; development/kv/data/jira user | JIRA_USER; development/kv/data/jira token | JIRA_TOKEN; - - uses: sonarsource/gh-action-lt-backlog/RequestReview@v2 + - uses: sonarsource/gh-action-lt-backlog/RequestReview@63ab0d7f819ffa1387c931e8afca5c200c481317 # v2 with: github-token: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }} jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }} diff --git a/.github/workflows/SubmitReview.yml b/.github/workflows/SubmitReview.yml index 9cb936ede..3542107ce 100644 --- a/.github/workflows/SubmitReview.yml +++ b/.github/workflows/SubmitReview.yml @@ -17,13 +17,13 @@ jobs: || github.event.review.state == 'approved') steps: - id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/github/token/{REPO_OWNER_NAME_DASH}-jira token | GITHUB_TOKEN; development/kv/data/jira user | JIRA_USER; development/kv/data/jira token | JIRA_TOKEN; - - uses: sonarsource/gh-action-lt-backlog/SubmitReview@v2 + - uses: sonarsource/gh-action-lt-backlog/SubmitReview@63ab0d7f819ffa1387c931e8afca5c200c481317 # v2 with: github-token: ${{ fromJSON(steps.secrets.outputs.vault).GITHUB_TOKEN }} jira-user: ${{ fromJSON(steps.secrets.outputs.vault).JIRA_USER }} diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index ff6ddfd5d..1b807ec24 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -58,7 +58,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -165,7 +165,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -267,7 +267,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -343,7 +343,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -372,7 +372,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -404,7 +404,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -428,7 +428,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -455,7 +455,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/repox url | ARTIFACTORY_URL; @@ -485,7 +485,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/sonarcloud token | SONAR_TOKEN; diff --git a/.github/workflows/full-release.yml b/.github/workflows/full-release.yml index ea1202c83..2495c67ce 100644 --- a/.github/workflows/full-release.yml +++ b/.github/workflows/full-release.yml @@ -25,7 +25,7 @@ jobs: steps: - name: Get release version id: version - uses: SonarSource/release-github-actions/get-release-version@c0da64503d0438488fda702c33c797678143be4e # 1.9.13 + uses: SonarSource/release-github-actions/get-release-version@279e14e6c7636163516a5ccb93b0e29005bbd776 # 1.9.15 with: branch: ${{ inputs.branch }} @@ -51,7 +51,7 @@ jobs: name: Release needs: - check-draft-exists - uses: SonarSource/release-github-actions/.github/workflows/ide-automated-release.yml@c0da64503d0438488fda702c33c797678143be4e # 1.9.13 + uses: SonarSource/release-github-actions/.github/workflows/ide-automated-release.yml@279e14e6c7636163516a5ccb93b0e29005bbd776 # 1.9.15 permissions: statuses: read id-token: write @@ -80,7 +80,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader username | ARTIFACTORY_USER; diff --git a/.github/workflows/notify-failure.yml b/.github/workflows/notify-failure.yml index f77d72847..4dae2c6ee 100644 --- a/.github/workflows/notify-failure.yml +++ b/.github/workflows/notify-failure.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/kv/data/slack token | SLACK_BOT_TOKEN; diff --git a/.github/workflows/prepare-release-notes.yml b/.github/workflows/prepare-release-notes.yml index 928f85b23..1a5dfc364 100644 --- a/.github/workflows/prepare-release-notes.yml +++ b/.github/workflows/prepare-release-notes.yml @@ -25,7 +25,7 @@ jobs: - name: Vault Secrets id: secrets - uses: SonarSource/vault-action-wrapper@881045d830534a70ec3c7c275fa3714412c8ff6e # 3.6.1 + uses: SonarSource/vault-action-wrapper@a7fa5fd4a4e4e0f2593f6137c0812cac196cf4ce # 3.7.0 with: secrets: | development/artifactory/token/{REPO_OWNER_NAME_DASH}-private-reader username | ARTIFACTORY_USER; @@ -41,7 +41,7 @@ jobs: - name: Get release version id: version - uses: SonarSource/release-github-actions/get-release-version@c0da64503d0438488fda702c33c797678143be4e # 1.9.13 + uses: SonarSource/release-github-actions/get-release-version@279e14e6c7636163516a5ccb93b0e29005bbd776 # 1.9.15 with: branch: ${{ inputs.branch }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 44ba66415..9d3f0bd2f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -18,7 +18,7 @@ jobs: permissions: id-token: write contents: write - uses: SonarSource/gh-action_release/.github/workflows/main.yaml@529f38f4023781f25105e03941ca1a4806bfb27b # 7.5.0 + uses: SonarSource/gh-action_release/.github/workflows/main.yaml@68cce06d8dd558c28b4497af7c155dae91673fe1 # 7.7.0 with: version: ${{ inputs.version }} dryRun: ${{ inputs.dryRun }} @@ -35,7 +35,7 @@ jobs: id-token: write # OIDC → Vault contents: read steps: - - uses: SonarSource/ci-github-actions/update-release-channel@d41706a4180f70b6c0d0479795309a6c99726022 # master + - uses: SonarSource/ci-github-actions/update-release-channel@21206070b4306949454171904b8d2b4ec349b0c5 # master with: version: ${{ inputs.version }} channel: stable diff --git a/.github/workflows/update-release-channel.yml b/.github/workflows/update-release-channel.yml index 2cd7201c9..84090500d 100644 --- a/.github/workflows/update-release-channel.yml +++ b/.github/workflows/update-release-channel.yml @@ -25,7 +25,7 @@ jobs: id-token: write # OIDC → Vault contents: read steps: - - uses: SonarSource/ci-github-actions/update-release-channel@d41706a4180f70b6c0d0479795309a6c99726022 # master + - uses: SonarSource/ci-github-actions/update-release-channel@21206070b4306949454171904b8d2b4ec349b0c5 # master with: version: ${{ inputs.version }} channel: ${{ inputs.channel }}