diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index bad5f72..d037d43 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,10 +28,10 @@ jobs: # No extra permissions needed — build and test only read the repo. steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: global-json-file: backend/global.json @@ -49,7 +49,7 @@ jobs: - name: Upload test results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: backend-test-results path: backend/TestResults @@ -64,10 +64,10 @@ jobs: working-directory: frontend steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: npm @@ -105,15 +105,15 @@ jobs: security-events: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: global-json-file: backend/global.json - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: npm @@ -201,7 +201,7 @@ jobs: language: [csharp, javascript-typescript] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v4 @@ -224,7 +224,7 @@ jobs: working-directory: frontend steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Start backend stack working-directory: . @@ -245,7 +245,7 @@ jobs: exit 1 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: npm @@ -262,7 +262,7 @@ jobs: - name: Upload Playwright report if: ${{ !cancelled() }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: playwright-report path: frontend/playwright-report/ @@ -300,13 +300,13 @@ jobs: dockerfile: frontend/Dockerfile steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Build image - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: ${{ matrix.context }} file: ${{ matrix.dockerfile }} diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index ac28b37..7603797 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -13,10 +13,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Review dependencies - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5 with: fail-on-severity: high comment-summary-in-pr: always diff --git a/.github/workflows/deploy-azure.yml b/.github/workflows/deploy-azure.yml index f106cde..528c554 100644 --- a/.github/workflows/deploy-azure.yml +++ b/.github/workflows/deploy-azure.yml @@ -48,10 +48,10 @@ jobs: container_env_resource_group: ${{ steps.environment.outputs.container_env_resource_group }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Azure login - uses: azure/login@v2 + uses: azure/login@v3 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} @@ -59,7 +59,7 @@ jobs: - name: Validate existing Container Apps environment id: environment - uses: azure/cli@v2 + uses: azure/cli@v3 with: inlineScript: | container_env_name="${{ vars.AZURE_CONTAINER_ENV_NAME }}" @@ -98,7 +98,7 @@ jobs: dockerfile: backend/StayFlow.MigrationHost/Dockerfile steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: ref: ${{ env.IMAGE_TAG }} @@ -111,7 +111,7 @@ jobs: [[ "$WEB_URL" =~ ^https://[^/]+$ ]] - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Resolve GHCR image reference id: image @@ -121,7 +121,7 @@ jobs: echo "name=${IMAGE_REGISTRY}/${owner}/${{ matrix.image }}" >> "$GITHUB_OUTPUT" - name: Build image (local, pre-scan) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: ${{ matrix.context }} file: ${{ matrix.dockerfile }} @@ -152,14 +152,14 @@ jobs: exit-code: '0' - name: Upload SBOM artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: sbom-${{ matrix.name }} path: sbom-${{ matrix.name }}.cdx.json retention-days: 90 - name: Docker login to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ${{ env.IMAGE_REGISTRY }} username: ${{ github.actor }} @@ -174,7 +174,7 @@ jobs: - name: Attest build provenance if: github.event.repository.private == false - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-name: ${{ steps.image.outputs.name }} subject-digest: ${{ steps.push.outputs.digest }} @@ -200,12 +200,12 @@ jobs: METRICS_BEARER_TOKEN: ${{ secrets.METRICS_BEARER_TOKEN }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: ref: ${{ env.IMAGE_TAG }} - name: Azure login - uses: azure/login@v2 + uses: azure/login@v3 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} @@ -219,7 +219,7 @@ jobs: fi - name: Update migration job image - uses: azure/cli@v2 + uses: azure/cli@v3 with: inlineScript: | owner="${GITHUB_REPOSITORY_OWNER,,}" @@ -255,7 +255,7 @@ jobs: --output none - name: Run migrations and seed before application rollout - uses: azure/cli@v2 + uses: azure/cli@v3 with: inlineScript: | execution_name=$(az containerapp job start \ @@ -284,7 +284,7 @@ jobs: exit 1 - name: Deploy immutable images - uses: azure/cli@v2 + uses: azure/cli@v3 env: NEON_CONNECTION_STRING: ${{ secrets.NEON_CONNECTION_STRING }} STAYFLOW_ADMIN_EMAIL: ${{ secrets.STAYFLOW_ADMIN_EMAIL }}