Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: bump actions versions #143

Merged
merged 6 commits into from
Jan 10, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/generic_docker_pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -57,7 +57,7 @@ jobs:
with:
lfs: true
persist-credentials: false
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
image_name: ghcr.io/${{ env.IMAGE_NAME }}
image_tag: test
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/generic_docker_release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -65,7 +65,7 @@ jobs:
is_latest: ${{ steps.semantic_versioning.outputs.is_latest }}
latest_tag: ${{ steps.semantic_versioning.outputs.latest_tag }}
steps:
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.10.4
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.11.0
id: semantic_versioning

release:
Expand All @@ -78,14 +78,14 @@ jobs:
- calculate_version
- test
steps:
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.10.4
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.11.0
with:
latest_tag: ${{ needs.calculate_version.outputs.latest_tag }}
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
token: ${{ secrets.ACTIONS_BOT_TOKEN }}
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
ghcr_username: ${{ github.actor }}
ghcr_password: ${{ secrets.ACTIONS_BOT_TOKEN }}
Expand All @@ -102,7 +102,7 @@ jobs:
${{ github.ref == 'refs/heads/development' && format('{0}/{1}:{2}', 'ghcr.io', env.IMAGE_NAME, 'development') || ''}}
${{ startsWith(github.ref, 'refs/heads/release-') && needs.calculate_version.outputs.is_latest == 'true' && format('{0}:{1}', env.IMAGE_NAME, 'latest') || ''}}
${{ startsWith(github.ref, 'refs/heads/release-') && needs.calculate_version.outputs.is_latest == 'true' && format('{0}/{1}:{2}', 'ghcr.io', env.IMAGE_NAME, 'latest') || ''}}
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.10.4
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.11.0
with:
tag_version: ${{ needs.calculate_version.outputs.next_version }}
changelog_file: "/tmp/my_changelog" # comes from generate_release_notes step; TODO: beautify
4 changes: 2 additions & 2 deletions .github/workflows/java_dependency_review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -46,11 +46,11 @@ jobs:
lfs: true
persist-credentials: false
ref: ${{ github.event.pull_request.head.sha }}
- uses: epam/ai-dial-ci/actions/java_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/java_prepare@1.11.0
with:
java_version: ${{ inputs.java_version }}
java_distribution: ${{ inputs.java_distribution }}
- uses: gradle/actions/dependency-submission@cc4fc85e6b35bafd578d5ffbc76a5518407e1af0 # v4.2.1
- uses: gradle/actions/dependency-submission@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
env:
GITHUB_DEPENDENCY_GRAPH_REF: "refs/heads/${{ github.event.pull_request.head.ref }}"
GITHUB_DEPENDENCY_GRAPH_SHA: ${{ github.event.pull_request.head.sha }}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/java_pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/java_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/java_prepare@1.11.0
with:
java_version: ${{ inputs.java_version }}
java_distribution: ${{ inputs.java_distribution }}
Expand All @@ -89,7 +89,7 @@ jobs:
with:
lfs: true
persist-credentials: false
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
image_name: ghcr.io/${{ env.IMAGE_NAME }}
image_tag: test
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/java_release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@ jobs:
is_latest: ${{ steps.semantic_versioning.outputs.is_latest }}
latest_tag: ${{ steps.semantic_versioning.outputs.latest_tag }}
steps:
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.10.4
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.11.0
id: semantic_versioning

release:
Expand All @@ -90,22 +90,22 @@ jobs:
- calculate_version
- test
steps:
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.10.4
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.11.0
with:
latest_tag: ${{ needs.calculate_version.outputs.latest_tag }}
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
token: ${{ secrets.ACTIONS_BOT_TOKEN }}
- uses: epam/ai-dial-ci/actions/java_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/java_prepare@1.11.0
with:
java_version: ${{ inputs.java_version }}
java_distribution: ${{ inputs.java_distribution }}
- name: Set version
shell: bash
run: |
sed -i -E "s/^([ \t]*version[ \t]*=[ \t]*)[\"'].*[\"']/\1\"${{ needs.calculate_version.outputs.next_version }}\"/g" build.gradle
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
ghcr_username: ${{ github.actor }}
ghcr_password: ${{ secrets.ACTIONS_BOT_TOKEN }}
Expand All @@ -122,8 +122,8 @@ jobs:
${{ github.ref == 'refs/heads/development' && format('{0}/{1}:{2}', 'ghcr.io', env.IMAGE_NAME, 'development') || ''}}
${{ startsWith(github.ref, 'refs/heads/release-') && needs.calculate_version.outputs.is_latest == 'true' && format('{0}:{1}', env.IMAGE_NAME, 'latest') || ''}}
${{ startsWith(github.ref, 'refs/heads/release-') && needs.calculate_version.outputs.is_latest == 'true' && format('{0}/{1}:{2}', 'ghcr.io', env.IMAGE_NAME, 'latest') || ''}}
- uses: gradle/actions/dependency-submission@cc4fc85e6b35bafd578d5ffbc76a5518407e1af0 # v4.2.1
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.10.4
- uses: gradle/actions/dependency-submission@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.11.0
with:
tag_version: ${{ needs.calculate_version.outputs.next_version }}
changelog_file: "/tmp/my_changelog" # comes from generate_release_notes step; TODO: beautify
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/java_test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/java_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/java_prepare@1.11.0
with:
java_version: ${{ inputs.java_version }}
java_distribution: ${{ inputs.java_distribution }}
Expand All @@ -69,7 +69,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/java_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/java_prepare@1.11.0
with:
java_version: ${{ inputs.java_version }}
java_distribution: ${{ inputs.java_distribution }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/node_pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ jobs:
with:
lfs: true
persist-credentials: false
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
image_name: ghcr.io/${{ env.IMAGE_NAME }}
image_tag: test
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/node_release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,7 @@ jobs:
is_latest: ${{ steps.semantic_versioning.outputs.is_latest }}
latest_tag: ${{ steps.semantic_versioning.outputs.latest_tag }}
steps:
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.10.4
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.11.0
id: semantic_versioning

release:
Expand All @@ -99,14 +99,14 @@ jobs:
- calculate_version
- test
steps:
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.10.4
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.11.0
with:
latest_tag: ${{ needs.calculate_version.outputs.latest_tag }}
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
token: ${{ secrets.ACTIONS_BOT_TOKEN }}
- uses: epam/ai-dial-ci/actions/node_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/node_prepare@1.11.0
with:
node_version: ${{ inputs.node_version }}
clean_install: true
Expand All @@ -115,7 +115,7 @@ jobs:
shell: bash
run: |
npm version ${{ needs.calculate_version.outputs.next_version }} --no-git-tag-version || true # upstream branch may already be updated
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
ghcr_username: ${{ github.actor }}
ghcr_password: ${{ secrets.ACTIONS_BOT_TOKEN }}
Expand Down Expand Up @@ -155,7 +155,7 @@ jobs:
IS_LATEST: ${{ needs.calculate_version.outputs.is_latest == 'true' }}
IS_DEVELOPMENT_BRANCH: ${{ github.ref == 'refs/heads/development' }}
IS_RELEASE_BRANCH: ${{ startsWith(github.ref, 'refs/heads/release-') }}
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.10.4
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.11.0
with:
tag_version: ${{ needs.calculate_version.outputs.next_version }}
changelog_file: "/tmp/my_changelog" # comes from generate_release_notes step; TODO: beautify
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/node_test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/node_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/node_prepare@1.11.0
with:
node_version: ${{ inputs.node_version }}
clean_install: "true"
Expand All @@ -73,7 +73,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/node_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/node_prepare@1.11.0
with:
node_version: ${{ inputs.node_version }}
clean_install: "true"
Expand All @@ -90,7 +90,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/node_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/node_prepare@1.11.0
with:
node_version: ${{ inputs.node_version }}
clean_install: "true"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/python_docker_pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -77,7 +77,7 @@ jobs:
with:
lfs: true
persist-credentials: false
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
image_name: ghcr.io/${{ env.IMAGE_NAME }}
image_tag: test
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/python_docker_release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -78,7 +78,7 @@ jobs:
is_latest: ${{ steps.semantic_versioning.outputs.is_latest }}
latest_tag: ${{ steps.semantic_versioning.outputs.latest_tag }}
steps:
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.10.4
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.11.0
id: semantic_versioning

release:
Expand All @@ -91,7 +91,7 @@ jobs:
- calculate_version
- test
steps:
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.10.4
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.11.0
with:
latest_tag: ${{ needs.calculate_version.outputs.latest_tag }}
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
Expand All @@ -102,7 +102,7 @@ jobs:
shell: bash
run: |
sed -i "s/^version = .*/version = \"${{ needs.calculate_version.outputs.non_semver_next_version }}\"/g" pyproject.toml
- uses: epam/ai-dial-ci/actions/build_docker@1.10.4
- uses: epam/ai-dial-ci/actions/build_docker@1.11.0
with:
ghcr_username: ${{ github.actor }}
ghcr_password: ${{ secrets.ACTIONS_BOT_TOKEN }}
Expand All @@ -119,7 +119,7 @@ jobs:
${{ github.ref == 'refs/heads/development' && format('{0}/{1}:{2}', 'ghcr.io', env.IMAGE_NAME, 'development') || ''}}
${{ startsWith(github.ref, 'refs/heads/release-') && needs.calculate_version.outputs.is_latest == 'true' && format('{0}:{1}', env.IMAGE_NAME, 'latest') || ''}}
${{ startsWith(github.ref, 'refs/heads/release-') && needs.calculate_version.outputs.is_latest == 'true' && format('{0}/{1}:{2}', 'ghcr.io', env.IMAGE_NAME, 'latest') || ''}}
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.10.4
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.11.0
with:
tag_version: ${{ needs.calculate_version.outputs.next_version }}
changelog_file: "/tmp/my_changelog" # comes from generate_release_notes step; TODO: beautify
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/python_docker_test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -52,7 +52,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/python_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/python_prepare@1.11.0
with:
python_version: ${{ inputs.python_version }}
poetry_version: ${{ inputs.poetry_version }}
Expand All @@ -69,7 +69,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/python_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/python_prepare@1.11.0
with:
python_version: ${{ inputs.python_version }}
poetry_version: ${{ inputs.poetry_version }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/python_package_pr.yml
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/python_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/python_prepare@1.11.0
with:
python_version: ${{ inputs.python_version }}
poetry_version: ${{ inputs.poetry_version }}
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/python_package_release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -79,7 +79,7 @@ jobs:
non_semver_next_version: ${{ steps.semantic_versioning.outputs.non_semver_next_version }}
latest_tag: ${{ steps.semantic_versioning.outputs.latest_tag }}
steps:
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.10.4
- uses: epam/ai-dial-ci/actions/semantic_versioning@1.11.0
id: semantic_versioning

release:
Expand All @@ -92,14 +92,14 @@ jobs:
- calculate_version
- test
steps:
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.10.4
- uses: epam/ai-dial-ci/actions/generate_release_notes@1.11.0
with:
latest_tag: ${{ needs.calculate_version.outputs.latest_tag }}
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
token: ${{ secrets.ACTIONS_BOT_TOKEN }}
- uses: epam/ai-dial-ci/actions/python_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/python_prepare@1.11.0
with:
python_version: ${{ inputs.python_version }}
poetry_version: ${{ inputs.poetry_version }}
Expand All @@ -114,7 +114,7 @@ jobs:
make publish
env:
PYPI_TOKEN: ${{ secrets.PYPI_TOKEN }}
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.10.4
- uses: epam/ai-dial-ci/actions/publish_tag_release@1.11.0
with:
tag_version: ${{ needs.calculate_version.outputs.non_semver_next_version }}
changelog_file: "/tmp/my_changelog" # comes from generate_release_notes step; TODO: beautify
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/python_package_test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/python_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/python_prepare@1.11.0
with:
python_version: ${{ inputs.python_version }}
poetry_version: ${{ inputs.poetry_version }}
Expand All @@ -97,7 +97,7 @@ jobs:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
with:
lfs: true
- uses: epam/ai-dial-ci/actions/python_prepare@1.10.4
- uses: epam/ai-dial-ci/actions/python_prepare@1.11.0
with:
python_version: ${{ matrix.python-version }}
poetry_version: ${{ inputs.poetry_version }}
Expand Down Expand Up @@ -163,7 +163,7 @@ jobs:
- name: Upload Trivy scan results to GitHub Security tab
# Do not upload SARIF reports on private repos - GitHub Advanced Security is not enabled
if: ${{ !cancelled() && inputs.enable_trivy && !github.event.repository.private }}
uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 #v3.27.6
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 #v3.28.0
with:
sarif_file: "trivy-results.sarif"
category: trivy
Expand Down
2 changes: 1 addition & 1 deletion actions/build_docker/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -123,7 +123,7 @@ runs:
- name: Upload Trivy scan results to GitHub Security tab
# Do not upload SARIF reports on private repos - GitHub Advanced Security is not enabled
if: ${{ !cancelled() && fromJSON(inputs.scan) && !github.event.repository.private }} # workaround for composite jobs not being able to pass boolean inputs
uses: github/codeql-action/upload-sarif@aa578102511db1f4524ed59b8cc2bae4f6e88195 #v3.27.6
uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 #v3.28.0
with:
sarif_file: "trivy-results.sarif"
category: trivy
Expand Down
4 changes: 2 additions & 2 deletions actions/java_prepare/action.yml
Original file line number Diff line number Diff line change
Expand Up @@ -13,13 +13,13 @@ runs:
using: "composite"
steps:
- name: Set up JDK
uses: actions/setup-java@8df1039502a15bceb9433410b1a100fbe190c53b # v4.5.0
uses: actions/setup-java@7a6d8a8234af8eb26422e24e3006232cccaa061b # v4.6.0
with:
java-version: ${{ inputs.java_version }}
distribution: ${{ inputs.java_distribution }}
# Not using `cache: gradle` because `setup-gradle` action takes care of it
# ref: https://github.com/gradle/actions/blob/main/docs/setup-gradle.md#incompatibility-with-other-caching-mechanisms
- name: Set up Gradle
uses: gradle/actions/setup-gradle@cc4fc85e6b35bafd578d5ffbc76a5518407e1af0 # v4.2.1
uses: gradle/actions/setup-gradle@0bdd871935719febd78681f197cd39af5b6e16a6 # v4.2.2
with:
add-job-summary: "on-failure"