diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000000..aa78ff6d1f7 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file + +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + groups: + actions: + patterns: + - "*" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 57a52f14260..0a8b8c969d2 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -27,12 +27,12 @@ jobs: ] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" @@ -42,18 +42,18 @@ jobs: build-validation: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - run: pnpm install --frozen-lockfile - run: pnpm run --filter @linode/validation build - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v6 with: name: packages-validation-lib path: packages/validation/lib @@ -62,17 +62,17 @@ jobs: runs-on: ubuntu-latest needs: build-validation steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - run: pnpm install --frozen-lockfile - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib @@ -82,22 +82,22 @@ jobs: runs-on: ubuntu-latest needs: build-validation steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib - run: pnpm install --frozen-lockfile - run: pnpm run --filter @linode/api-v4 build - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v6 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -106,23 +106,23 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - run: pnpm install --frozen-lockfile # Download the validation and api-v4 artifacts (built packages) - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -147,20 +147,20 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -170,12 +170,12 @@ jobs: test-search: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" @@ -185,12 +185,12 @@ jobs: test-ui: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" @@ -201,16 +201,16 @@ jobs: needs: build-sdk runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -221,16 +221,16 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -241,20 +241,20 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib @@ -265,12 +265,12 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" @@ -281,16 +281,16 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -301,16 +301,16 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -321,20 +321,20 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib @@ -345,20 +345,20 @@ jobs: runs-on: ubuntu-latest needs: build-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib @@ -374,20 +374,20 @@ jobs: - test-sdk - validate-sdk steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib @@ -412,26 +412,26 @@ jobs: env: NODE_OPTIONS: --max-old-space-size=4096 steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-validation-lib path: packages/validation/lib - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v7 with: name: packages-api-v4-lib path: packages/api-v4/lib - run: pnpm install --frozen-lockfile - run: pnpm run --filter linode-manager build-storybook - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v6 with: name: storybook-build path: packages/manager/storybook-static @@ -441,8 +441,8 @@ jobs: if: github.ref == 'refs/heads/master' needs: build-storybook steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@v6 + - uses: actions/download-artifact@v7 with: name: storybook-build path: storybook/build diff --git a/.github/workflows/coverage_badge.yml b/.github/workflows/coverage_badge.yml index 44d5902256d..d377af573de 100644 --- a/.github/workflows/coverage_badge.yml +++ b/.github/workflows/coverage_badge.yml @@ -14,14 +14,14 @@ jobs: steps: - name: Checkout Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" @@ -39,7 +39,7 @@ jobs: run: pnpm coverage:summary - name: Generate Coverage Badge - uses: jaywcjlove/coverage-badges-cli@7f0781807ef3e7aba97a145beca881d36451b7b7 # v1.1.1 + uses: jaywcjlove/coverage-badges-cli@4e8975aa2628e3329126e7eee36724d07ed86fda # v2.2.0 with: label: "@linode/manager coverage" source: ./packages/manager/coverage/coverage-summary.json diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index a0466e3b1b6..4fbfd56edec 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -13,12 +13,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Setup Pages uses: actions/configure-pages@v5 - - uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2 + - uses: oven-sh/setup-bun@db6bcf6eb8d88a8aa03265b887ec7bd84d64cd68 # v2.1.1 with: bun-version: 1.0.21 @@ -26,7 +26,7 @@ jobs: run: bunx vitepress@1.0.0-rc.35 build docs - name: Upload artifact - uses: actions/upload-pages-artifact@v3 + uses: actions/upload-pages-artifact@v4 with: path: docs/.vitepress/dist diff --git a/.github/workflows/e2e_schedule_and_push.yml b/.github/workflows/e2e_schedule_and_push.yml index bf66d7cd3eb..d929897758a 100644 --- a/.github/workflows/e2e_schedule_and_push.yml +++ b/.github/workflows/e2e_schedule_and_push.yml @@ -36,12 +36,12 @@ jobs: - { index: 3, name: "USER_3" } - { index: 4, name: "USER_4" } steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" - run: | @@ -59,7 +59,7 @@ jobs: - run: pnpm run --filter @linode/validation build - run: pnpm run --filter @linode/api-v4 build - name: Run tests - uses: cypress-io/github-action@b8ba51a856ba5f4c15cf39007636d4ab04f23e3c # v6.10.2 + uses: cypress-io/github-action@2ad32e649e4db26c07674ebae31a297601dbcbaf # v6.10.8 with: working-directory: packages/manager wait-on: "http://localhost:3000" diff --git a/.github/workflows/eslint_review.yml b/.github/workflows/eslint_review.yml index cb1424cd786..2f8d9282b8a 100644 --- a/.github/workflows/eslint_review.yml +++ b/.github/workflows/eslint_review.yml @@ -11,12 +11,12 @@ jobs: matrix: package: [manager, api-v4, queries, shared, ui, utilities, validation] steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@eae0cfeb286e66ffb5155f1a79b90583a127a68b # v2.4.1 + - uses: actions/checkout@v6 + - uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # v4.2.0 with: run_install: false version: 10 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: "package.json" cache: "pnpm" diff --git a/.github/workflows/security_scan.yml b/.github/workflows/security_scan.yml index 2b835cd894e..00a2cd39c40 100644 --- a/.github/workflows/security_scan.yml +++ b/.github/workflows/security_scan.yml @@ -15,7 +15,7 @@ jobs: container: image: returntocorp/semgrep steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 # Perform scanning using Semgrep # Pass even when it identifies issues or encounters errors. diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index fc547c25c70..65f491d3de0 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -12,7 +12,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v9 + - uses: actions/stale@v10 id: stale with: stale-pr-message: 'This PR is stale because it has been open 15 days with