From 56b794f4f03faa1fcfb031f3ead90837c8a08514 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Jul 2026 17:08:21 +0000 Subject: [PATCH] build(deps): bump the github-actions group across 1 directory with 11 updates Bumps the github-actions group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `7` | | [actions/setup-dotnet](https://github.com/actions/setup-dotnet) | `4` | `5` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `7` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/build-push-action](https://github.com/docker/build-push-action) | `6` | `7` | | [actions/dependency-review-action](https://github.com/actions/dependency-review-action) | `4` | `5` | | [azure/login](https://github.com/azure/login) | `2` | `3` | | [azure/cli](https://github.com/azure/cli) | `2` | `3` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `2` | `4` | Updates `actions/checkout` from 4 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) Updates `actions/setup-dotnet` from 4 to 5 - [Release notes](https://github.com/actions/setup-dotnet/releases) - [Commits](https://github.com/actions/setup-dotnet/compare/v4...v5) Updates `actions/upload-artifact` from 4 to 7 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) Updates `actions/setup-node` from 4 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v6) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/v3...v4) Updates `docker/build-push-action` from 6 to 7 - [Release notes](https://github.com/docker/build-push-action/releases) - [Commits](https://github.com/docker/build-push-action/compare/v6...v7) Updates `actions/dependency-review-action` from 4 to 5 - [Release notes](https://github.com/actions/dependency-review-action/releases) - [Commits](https://github.com/actions/dependency-review-action/compare/v4...v5) Updates `azure/login` from 2 to 3 - [Release notes](https://github.com/azure/login/releases) - [Commits](https://github.com/azure/login/compare/v2...v3) Updates `azure/cli` from 2 to 3 - [Release notes](https://github.com/azure/cli/releases) - [Changelog](https://github.com/Azure/cli/blob/master/ReleaseProcess.md) - [Commits](https://github.com/azure/cli/compare/v2...v3) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) Updates `actions/attest-build-provenance` from 2 to 4 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v2...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-dotnet dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/build-push-action dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/dependency-review-action dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: azure/login dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: azure/cli dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 30 ++++++++++++------------- .github/workflows/dependency-review.yml | 4 ++-- .github/workflows/deploy-azure.yml | 28 +++++++++++------------ 3 files changed, 31 insertions(+), 31 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index bad5f72..d037d43 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,10 +28,10 @@ jobs: # No extra permissions needed — build and test only read the repo. steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: global-json-file: backend/global.json @@ -49,7 +49,7 @@ jobs: - name: Upload test results if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: backend-test-results path: backend/TestResults @@ -64,10 +64,10 @@ jobs: working-directory: frontend steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: npm @@ -105,15 +105,15 @@ jobs: security-events: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v5 with: global-json-file: backend/global.json - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: npm @@ -201,7 +201,7 @@ jobs: language: [csharp, javascript-typescript] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Initialize CodeQL uses: github/codeql-action/init@v4 @@ -224,7 +224,7 @@ jobs: working-directory: frontend steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Start backend stack working-directory: . @@ -245,7 +245,7 @@ jobs: exit 1 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: 24 cache: npm @@ -262,7 +262,7 @@ jobs: - name: Upload Playwright report if: ${{ !cancelled() }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: playwright-report path: frontend/playwright-report/ @@ -300,13 +300,13 @@ jobs: dockerfile: frontend/Dockerfile steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Build image - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: ${{ matrix.context }} file: ${{ matrix.dockerfile }} diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml index ac28b37..7603797 100644 --- a/.github/workflows/dependency-review.yml +++ b/.github/workflows/dependency-review.yml @@ -13,10 +13,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Review dependencies - uses: actions/dependency-review-action@v4 + uses: actions/dependency-review-action@v5 with: fail-on-severity: high comment-summary-in-pr: always diff --git a/.github/workflows/deploy-azure.yml b/.github/workflows/deploy-azure.yml index f106cde..528c554 100644 --- a/.github/workflows/deploy-azure.yml +++ b/.github/workflows/deploy-azure.yml @@ -48,10 +48,10 @@ jobs: container_env_resource_group: ${{ steps.environment.outputs.container_env_resource_group }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Azure login - uses: azure/login@v2 + uses: azure/login@v3 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} @@ -59,7 +59,7 @@ jobs: - name: Validate existing Container Apps environment id: environment - uses: azure/cli@v2 + uses: azure/cli@v3 with: inlineScript: | container_env_name="${{ vars.AZURE_CONTAINER_ENV_NAME }}" @@ -98,7 +98,7 @@ jobs: dockerfile: backend/StayFlow.MigrationHost/Dockerfile steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: ref: ${{ env.IMAGE_TAG }} @@ -111,7 +111,7 @@ jobs: [[ "$WEB_URL" =~ ^https://[^/]+$ ]] - name: Setup Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Resolve GHCR image reference id: image @@ -121,7 +121,7 @@ jobs: echo "name=${IMAGE_REGISTRY}/${owner}/${{ matrix.image }}" >> "$GITHUB_OUTPUT" - name: Build image (local, pre-scan) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: ${{ matrix.context }} file: ${{ matrix.dockerfile }} @@ -152,14 +152,14 @@ jobs: exit-code: '0' - name: Upload SBOM artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: sbom-${{ matrix.name }} path: sbom-${{ matrix.name }}.cdx.json retention-days: 90 - name: Docker login to GHCR - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: registry: ${{ env.IMAGE_REGISTRY }} username: ${{ github.actor }} @@ -174,7 +174,7 @@ jobs: - name: Attest build provenance if: github.event.repository.private == false - uses: actions/attest-build-provenance@v2 + uses: actions/attest-build-provenance@v4 with: subject-name: ${{ steps.image.outputs.name }} subject-digest: ${{ steps.push.outputs.digest }} @@ -200,12 +200,12 @@ jobs: METRICS_BEARER_TOKEN: ${{ secrets.METRICS_BEARER_TOKEN }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: ref: ${{ env.IMAGE_TAG }} - name: Azure login - uses: azure/login@v2 + uses: azure/login@v3 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} @@ -219,7 +219,7 @@ jobs: fi - name: Update migration job image - uses: azure/cli@v2 + uses: azure/cli@v3 with: inlineScript: | owner="${GITHUB_REPOSITORY_OWNER,,}" @@ -255,7 +255,7 @@ jobs: --output none - name: Run migrations and seed before application rollout - uses: azure/cli@v2 + uses: azure/cli@v3 with: inlineScript: | execution_name=$(az containerapp job start \ @@ -284,7 +284,7 @@ jobs: exit 1 - name: Deploy immutable images - uses: azure/cli@v2 + uses: azure/cli@v3 env: NEON_CONNECTION_STRING: ${{ secrets.NEON_CONNECTION_STRING }} STAYFLOW_ADMIN_EMAIL: ${{ secrets.STAYFLOW_ADMIN_EMAIL }}