diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml index 7ffdcda72ff..caccf6cc90c 100644 --- a/.github/actions/setup/action.yml +++ b/.github/actions/setup/action.yml @@ -11,10 +11,10 @@ runs: steps: - name: Install pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Set node version to ${{ inputs.node-version }} - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: ${{ inputs.node-version }} cache: pnpm diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 1e718f8a844..343af3c6080 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -135,3 +135,12 @@ updates: cooldown: default-days: 7 version: 2 + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/check-agentic-workflows.yml b/.github/workflows/check-agentic-workflows.yml index 1285d13b6c2..1d43287f2c2 100644 --- a/.github/workflows/check-agentic-workflows.yml +++ b/.github/workflows/check-agentic-workflows.yml @@ -14,7 +14,7 @@ jobs: check-lock-files: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install gh-aw run: curl -sL https://raw.githubusercontent.com/github/gh-aw/main/install-gh-aw.sh | bash -s -- v0.80.9 diff --git a/.github/workflows/ci-emitter-diff-python.yml b/.github/workflows/ci-emitter-diff-python.yml index e3a433ee54c..cfc2d343ee2 100644 --- a/.github/workflows/ci-emitter-diff-python.yml +++ b/.github/workflows/ci-emitter-diff-python.yml @@ -37,11 +37,11 @@ jobs: # Fork PRs are intentionally skipped if: github.event.pull_request.head.repo.fork != true steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 - uses: ./.github/actions/setup - - uses: actions/setup-python@v7 + - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f6c252662fd..1cb32cd5aad 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -24,9 +24,9 @@ jobs: outputs: core: ${{ steps.filter.outputs.core }} steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # cspell:ignore dorny - - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4 + - uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2 id: filter with: predicate-quantifier: "every" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 80814d1b043..5a959cdc562 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -37,11 +37,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.3 + uses: github/codeql-action/init@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -54,7 +54,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, Java, or Swift). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v4.37.3 + uses: github/codeql-action/autobuild@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -67,6 +67,6 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4.37.3 + uses: github/codeql-action/analyze@e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81 # v4.37.3 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/commenter.yml b/.github/workflows/commenter.yml index cde7c9195aa..9ab0211a48c 100644 --- a/.github/workflows/commenter.yml +++ b/.github/workflows/commenter.yml @@ -18,10 +18,10 @@ jobs: !startsWith(github.head_ref, 'publish/') runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Prepare artifact directory run: mkdir -p "${{ runner.temp }}/comment-artifact" - - uses: actions/download-artifact@v8 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: comment run-id: ${{github.event.workflow_run.id }} diff --git a/.github/workflows/consistency.yml b/.github/workflows/consistency.yml index 80cc88e26dd..26def934527 100644 --- a/.github/workflows/consistency.yml +++ b/.github/workflows/consistency.yml @@ -26,7 +26,7 @@ jobs: !startsWith(github.head_ref, 'backmerge/') && !startsWith(github.head_ref, 'revert-') steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 ## Needed for Changesets to find `main` branch @@ -43,7 +43,7 @@ jobs: env: GITHUB_TOKEN: ${{secrets.GITHUB_TOKEN}} - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: comment path: comment-out/ @@ -57,7 +57,7 @@ jobs: name: Spell check runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive - uses: ./.github/actions/setup @@ -73,7 +73,7 @@ jobs: name: Format runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive - uses: ./.github/actions/setup @@ -92,7 +92,7 @@ jobs: name: Lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive @@ -126,7 +126,7 @@ jobs: name: Versions consistency runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive diff --git a/.github/workflows/copilot-setup-steps.yml b/.github/workflows/copilot-setup-steps.yml index 3046362efc3..62ab441b731 100644 --- a/.github/workflows/copilot-setup-steps.yml +++ b/.github/workflows/copilot-setup-steps.yml @@ -19,8 +19,8 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install gh-aw extension - uses: github/gh-aw/actions/setup-cli@v0.83.4 + uses: github/gh-aw/actions/setup-cli@bbb8042878459948333b15b66f27113f4b5c1b9a # v0.83.4 with: version: v0.50.1 diff --git a/.github/workflows/core-ci.yml b/.github/workflows/core-ci.yml index c7cff6f9f12..c02c5b7a1dd 100644 --- a/.github/workflows/core-ci.yml +++ b/.github/workflows/core-ci.yml @@ -26,13 +26,13 @@ jobs: if: runner.os == 'Windows' run: git config --global core.longpaths true - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/setup with: node-version: ${{ matrix.node-version }} - - uses: actions/setup-dotnet@v6 + - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 with: dotnet-version: 8.0.x @@ -50,7 +50,7 @@ jobs: run: pnpm vitest run --coverage --reporter=default --reporter=github-actions - name: Upload coverage artifacts - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: coverage-${{ matrix.os }}-node${{ matrix.node-version }} @@ -65,7 +65,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/setup @@ -91,7 +91,7 @@ jobs: DISPLAY: ":99" steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/setup with: @@ -117,7 +117,7 @@ jobs: run: pnpm run test:e2e - name: Upload UI test results - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: uitestresults-e2e @@ -125,7 +125,7 @@ jobs: retention-days: 5 - name: Upload screenshots - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: screenshots @@ -133,7 +133,7 @@ jobs: retention-days: 5 - name: Upload trace results - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: trace-results @@ -148,7 +148,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Build Docker image run: docker build -f ./docker/Dockerfile . diff --git a/.github/workflows/dependabot-pnpm-install.yml b/.github/workflows/dependabot-pnpm-install.yml index dab19772c67..c86168e8e5e 100644 --- a/.github/workflows/dependabot-pnpm-install.yml +++ b/.github/workflows/dependabot-pnpm-install.yml @@ -18,7 +18,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.head_ref }} submodules: recursive diff --git a/.github/workflows/external-integration.yml b/.github/workflows/external-integration.yml index 415dba49a60..7ed9a1f08d0 100644 --- a/.github/workflows/external-integration.yml +++ b/.github/workflows/external-integration.yml @@ -33,18 +33,18 @@ jobs: steps: - name: Setup Node.js - uses: actions/setup-node@v7 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: lts/* - name: Checkout Azure/typespec-azure repo - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: Azure/typespec-azure submodules: true - name: Install pnpm - uses: pnpm/action-setup@v6 + uses: pnpm/action-setup@0977fd99725f1db4007ccb2928dbb4e90d06cc86 # v6.0.10 - name: Update core submodule to PR commit run: | @@ -77,7 +77,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: true fetch-depth: 0 diff --git a/.github/workflows/merge-release-in-main.yml b/.github/workflows/merge-release-in-main.yml index ce59249c8e5..28fcc1830ae 100644 --- a/.github/workflows/merge-release-in-main.yml +++ b/.github/workflows/merge-release-in-main.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Generate branch name id: branchname diff --git a/.github/workflows/preview.yml b/.github/workflows/preview.yml index 33cf79b52b1..f9584334641 100644 --- a/.github/workflows/preview.yml +++ b/.github/workflows/preview.yml @@ -20,11 +20,11 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 ## Needed for Changesets to find `main` branch - - uses: actions/setup-dotnet@v6 + - uses: actions/setup-dotnet@a98b56852c35b8e3190ac28c8c2271da59106c68 # v6.0.0 name: Setup .NET with: # Automatically read .NET SDK version from global.json to stay in sync diff --git a/.github/workflows/python-integration.yml b/.github/workflows/python-integration.yml index a5b548fc142..488eddf690c 100644 --- a/.github/workflows/python-integration.yml +++ b/.github/workflows/python-integration.yml @@ -27,7 +27,7 @@ jobs: !startsWith(github.head_ref, 'revert-') steps: - name: Checkout Azure/typespec-azure repo - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: Azure/typespec-azure submodules: recursive @@ -92,7 +92,7 @@ jobs: venv/bin/python tests/install_packages.py build unbranded tests - name: Upload generated artifacts - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: python-generated path: | @@ -111,7 +111,7 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: Azure/typespec-azure submodules: recursive @@ -129,7 +129,7 @@ jobs: - uses: ./.github/actions/setup-python - name: Download generated artifacts - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: python-generated path: . @@ -153,7 +153,7 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: Azure/typespec-azure submodules: recursive @@ -171,7 +171,7 @@ jobs: - uses: ./.github/actions/setup-python - name: Download generated artifacts - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: python-generated path: . @@ -192,7 +192,7 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: Azure/typespec-azure submodules: recursive @@ -210,7 +210,7 @@ jobs: - uses: ./.github/actions/setup-python - name: Download generated artifacts - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: python-generated path: . @@ -239,7 +239,7 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: repository: Azure/typespec-azure submodules: recursive @@ -257,7 +257,7 @@ jobs: - uses: ./.github/actions/setup-python - name: Download generated artifacts - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: python-generated path: . diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml index e2727587b55..6e793a163af 100644 --- a/.github/workflows/sync-labels.yml +++ b/.github/workflows/sync-labels.yml @@ -21,7 +21,7 @@ jobs: sync: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/setup - run: pnpm install diff --git a/.github/workflows/verify-labels.yml b/.github/workflows/verify-labels.yml index 318994b2b4a..e9f15bb0ceb 100644 --- a/.github/workflows/verify-labels.yml +++ b/.github/workflows/verify-labels.yml @@ -17,7 +17,7 @@ jobs: verify: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/setup - run: pnpm install diff --git a/.github/workflows/website-gh-pages.yml b/.github/workflows/website-gh-pages.yml index 835c8c02a5d..8f47030db61 100644 --- a/.github/workflows/website-gh-pages.yml +++ b/.github/workflows/website-gh-pages.yml @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/setup @@ -38,7 +38,7 @@ jobs: run: pnpm --filter "@typespec/website..." run build - name: Upload artifact - uses: actions/upload-pages-artifact@v5 + uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0 with: path: ./website/dist @@ -52,4 +52,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5 + uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0