From d405ed6ae504f4aeb27ae1c6fc7d26ec4bbbda69 Mon Sep 17 00:00:00 2001 From: Vincent Demeester Date: Tue, 10 Sep 2024 12:17:12 +0200 Subject: [PATCH 1/2] =?UTF-8?q?.github:=20add=20github-actions=20to=20depe?= =?UTF-8?q?ndabot=E2=80=A6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit … so that we also get dependabot actions updates. Today, we seems to be using deprecated actions. Signed-off-by: Vincent Demeester --- .github/dependabot.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 6366d88723..152cc073d4 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -10,3 +10,17 @@ updates: all: patterns: - "*" + labels: + - "ok-to-test" + - "dependencies" + - "release-note-none" + - "kind/misc" + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + labels: + - "ok-to-test" + - "dependencies" + - "release-note-none" + - "kind/misc" From 554d5685fb77a458de350e91edab9dd18e4b1e9a Mon Sep 17 00:00:00 2001 From: Vincent Demeester Date: Tue, 10 Sep 2024 14:39:40 +0200 Subject: [PATCH 2/2] .github/workflows: update some action versions Signed-off-by: Vincent Demeester --- .github/workflows/goclean.yml | 4 ++-- .github/workflows/lint.yaml | 6 +++--- .github/workflows/reusable-e2e.yaml | 22 ++++------------------ 3 files changed, 9 insertions(+), 23 deletions(-) diff --git a/.github/workflows/goclean.yml b/.github/workflows/goclean.yml index 89af75b5b3..23feae022a 100644 --- a/.github/workflows/goclean.yml +++ b/.github/workflows/goclean.yml @@ -24,10 +24,10 @@ jobs: goclean: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 # check-out repository + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Setup Go - uses: actions/setup-go@v3 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 with: go-version: '1.22' diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index fd7a604c45..a449f23464 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -17,14 +17,14 @@ jobs: name: lint runs-on: ubuntu-latest steps: - - uses: actions/setup-go@v4 + - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 with: go-version: "1.22" - - uses: actions/checkout@v3 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: golangci-lint - uses: golangci/golangci-lint-action@v4 + uses: golangci/golangci-lint-action@v6.1.0 with: # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version version: latest diff --git a/.github/workflows/reusable-e2e.yaml b/.github/workflows/reusable-e2e.yaml index bf0da78ceb..7a18e297eb 100644 --- a/.github/workflows/reusable-e2e.yaml +++ b/.github/workflows/reusable-e2e.yaml @@ -34,26 +34,12 @@ jobs: TEKTON_CLI_RELEASE: "0.30.0" steps: - # https://github.com/mvdan/github-actions-golang#how-do-i-set-up-caching-between-builds - - uses: actions/cache@v2 - with: - # In order: - # * Module download cache - # * Build cache (Linux) - path: | - ~/go/pkg/mod - ~/.cache/go-build - ${{ env.KOCACHE }} - key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} - restore-keys: | - ${{ runner.os }}-go- - - name: Set up Go - uses: actions/setup-go@v2 + uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 with: go-version: 1.22.x - - uses: imjasonh/setup-ko@v0.6 + - uses: ko-build/setup-ko@v0.7 with: version: tip @@ -64,7 +50,7 @@ jobs: chmod u+x ./tkn - name: Check out our repo - uses: actions/checkout@v2 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: ./src/github.com/tektoncd/chains @@ -140,7 +126,7 @@ jobs: - name: Collect diagnostics if: ${{ failure() }} - uses: chainguard-dev/actions/kind-diag@84c993eaf02da1c325854fb272a4df9184bd80fc # main + uses: chainguard-dev/actions/kind-diag@9ba949ac63357c725a9438f3e05a1e33d313498e # main with: cluster-resources: nodes namespace-resources: pods,taskruns,jobs