diff --git a/.github/workflows/api-validation.yml b/.github/workflows/api-validation.yml index 0dc3e650..b7b23f7b 100644 --- a/.github/workflows/api-validation.yml +++ b/.github/workflows/api-validation.yml @@ -7,8 +7,8 @@ jobs: name: Validate public API has not changed runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v6 + - uses: actions/setup-node@v6 with: node-version: '20' cache: 'npm' diff --git a/.github/workflows/auto-update-native-sdks.yml b/.github/workflows/auto-update-native-sdks.yml index bdecaf2e..5f57e97e 100644 --- a/.github/workflows/auto-update-native-sdks.yml +++ b/.github/workflows/auto-update-native-sdks.yml @@ -30,13 +30,13 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} - name: Setup Node.js for API calls - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' @@ -152,13 +152,13 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '20' cache: 'npm' diff --git a/.github/workflows/build-sample-app.yml b/.github/workflows/build-sample-app.yml index c268478d..af3b72bc 100644 --- a/.github/workflows/build-sample-app.yml +++ b/.github/workflows/build-sample-app.yml @@ -63,7 +63,7 @@ jobs: steps: - name: Check out code with conditional fetch-depth - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 # Workaround for bug https://github.com/actions/checkout/issues/1471 @@ -117,7 +117,7 @@ jobs: brew install xcbeautify # used by fastlane for output - name: Install Ruby - uses: ruby/setup-ruby@354a1ad156761f5ee2b7b13fa8e09943a5e8d252 # v1.229.0 + uses: ruby/setup-ruby@ac793fdd38cc468a4dd57246fa9d0e868aba9085 # v1.270.0 with: ruby-version: ${{ env.RUBY_VERSION }} bundler-cache: true # cache tools to make builds faster in future @@ -201,7 +201,7 @@ jobs: # Make sure to fetch dependencies only after updating version numbers and workspace credentials - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version: ${{ env.NODE_VERSION }} cache: 'npm' @@ -209,7 +209,7 @@ jobs: **/package-lock.json - name: Cache CocoaPods downloaded dependencies for faster builds in the future - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: example/Pods key: ${{ runner.os }}-${{ inputs.app_name }}-Pods-${{ github.ref }} diff --git a/.github/workflows/build-test-sample-apps.yml b/.github/workflows/build-test-sample-apps.yml index 4359b1ee..77a4ae22 100644 --- a/.github/workflows/build-test-sample-apps.yml +++ b/.github/workflows/build-test-sample-apps.yml @@ -20,7 +20,7 @@ jobs: comment-id: ${{ steps.create-comment.outputs.comment-id }} steps: - name: Find Comment - uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0 + uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0 id: existing-comment with: issue-number: ${{ github.event.pull_request.number }} @@ -28,7 +28,7 @@ jobs: body-includes: - name: Create or update comment - uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0 id: create-comment with: comment-id: ${{ steps.existing-comment.outputs.comment-id }} @@ -98,7 +98,7 @@ jobs: steps: - name: Update sample builds PR comment with build information if: ${{ github.event_name == 'pull_request' }} - uses: peter-evans/create-or-update-comment@23ff15729ef2fc348714a3bb66d2f655ca9066f2 # v3.1.0 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0 with: comment-id: ${{ needs.update-pr-comment.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} @@ -108,7 +108,7 @@ jobs: - name: Update sample builds PR comment with build failure message if: ${{ github.event_name == 'pull_request' && failure() }} - uses: peter-evans/create-or-update-comment@23ff15729ef2fc348714a3bb66d2f655ca9066f2 # v3.1.0 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0 with: comment-id: ${{ needs.update-pr-comment.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} diff --git a/.github/workflows/deploy-npm.yml b/.github/workflows/deploy-npm.yml index 21ba5c47..8f615189 100644 --- a/.github/workflows/deploy-npm.yml +++ b/.github/workflows/deploy-npm.yml @@ -20,15 +20,15 @@ jobs: name: Deploy SDK to Cocoapods runs-on: macos-12 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - name: Checkout existing tag if manually running CI task - uses: actions/checkout@v4 + uses: actions/checkout@v6 # If input is not given, that probably means this CI task was run automatically by a new # git tag being pushed. Skip this step and try to deploy pods for new tag. if: ${{ github.event.inputs.tagToDeploy != '' }} with: ref: ${{ github.event.inputs.tagToDeploy }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version: '20' cache: 'npm' @@ -41,7 +41,7 @@ jobs: IS_PRERELEASE: false # at this time, all deployments are made to `main` production branch - name: Notify team of successful deployment - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 if: ${{ success() }} with: # Use block kit to format the Slack message: https://app.slack.com/block-kit-builder @@ -76,7 +76,7 @@ jobs: SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK - name: Notify team of failure - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 if: ${{ failure() }} # only run this if any previous step failed with: # Use block kit to format the Slack message: https://app.slack.com/block-kit-builder diff --git a/.github/workflows/deploy-sdk.yml b/.github/workflows/deploy-sdk.yml index 04bbdaa0..490fd95c 100644 --- a/.github/workflows/deploy-sdk.yml +++ b/.github/workflows/deploy-sdk.yml @@ -29,7 +29,7 @@ jobs: app_id: ${{ secrets.CIO_APP_ID }} private_key: ${{ secrets.CIO_APP_SECRET }} - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 # If using sd on macos, "brew install" works great. for Linux, this is the recommended way. - name: Install sd CLI to use later in the workflow @@ -37,7 +37,7 @@ jobs: uses: levibostian/setup-sd@cbdeed93d4fe03f9e36b73bb6d9e7c3c4805e1f9 # add-file-extension # Using fork until upstream Action has bug fixed in it. - name: Deploy git tag via semantic release - uses: cycjimmy/semantic-release-action@0a51e81a6baff2acad3ee88f4121c589c73d0f0e # v4.2.0 + uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0 id: semantic-release with: semantic_version: latest @@ -50,7 +50,7 @@ jobs: GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }} - name: Notify team of git tag being created - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 if: steps.semantic-release.outputs.new_release_published == 'true' with: # Use block kit to format the Slack message: https://app.slack.com/block-kit-builder @@ -85,7 +85,7 @@ jobs: SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK - name: Notify team of failure - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 if: ${{ failure() }} # only run this if any previous step failed with: # Use block kit to format the Slack message: https://app.slack.com/block-kit-builder @@ -126,11 +126,11 @@ jobs: environment: release runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: ref: ${{ needs.deploy-git-tag.outputs.new_release_git_head }} - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version: '20' cache: 'npm' @@ -149,7 +149,7 @@ jobs: run: npm publish --tag latest - name: Notify team of successful deployment - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 if: ${{ success() }} with: # Use block kit to format the Slack message: https://app.slack.com/block-kit-builder @@ -184,7 +184,7 @@ jobs: SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK - name: Notify team of failure - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@91efab103c0de0a537f72a35f6b8cda0ee76bf0a # v2.1.1 if: ${{ failure() }} # only run this if any previous step failed with: # Use block kit to format the Slack message: https://app.slack.com/block-kit-builder diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index ec022498..02a5e253 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -7,8 +7,8 @@ jobs: name: Test able to deploy to npm runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v6 + - uses: actions/setup-node@v6 with: node-version: '20' - run: npm ci @@ -25,8 +25,8 @@ jobs: checks: write # for eslint annotation action to create check for the PR runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@v6 + - uses: actions/setup-node@v6 with: node-version: '20' cache: 'npm'