Compare commits

...
Author SHA1 Message Date
jonah 7cf2aa107a ci: GitHub actions dependency updates (#3310) 2026-11-06 23:44:45 -06:00
13 changed files with 70 additions and 72 deletions

No files matched your search

+1 -1
View File
@@ -26,7 +26,7 @@ runs:
using: composite
steps:
# The main reason this action exists is just to keep the version number in one place instead of in each workflow :)
- uses: hkdobrev/minio-deploy-action@c758675f5667336646cbaddbf07ea5edfc7b4854
- uses: hkdobrev/minio-deploy-action@c758675f5667336646cbaddbf07ea5edfc7b4854 # 1.1.1
with:
endpoint: ${{ inputs.endpoint }}
bucket: ${{ inputs.bucket }}
+2 -2
View File
@@ -6,8 +6,8 @@ description: Build and load the container image.
runs:
using: composite
steps:
- uses: docker/setup-buildx-action@v3
- uses: docker/build-push-action@v6.9.0
- uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
- uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
with:
context: .
load: true
+3 -3
View File
@@ -18,14 +18,14 @@ permissions:
jobs:
build:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
continue-on-error: ${{ inputs.continue-on-error }}
permissions:
contents: read
steps:
- name: Download Repository
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.repo.full_name || github.repository }}
ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.sha }}
@@ -48,7 +48,7 @@ jobs:
tar -czf site-build-blog.tar.gz site
- name: Upload Site
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: site-build-blog.tar.gz
path: site-build-blog.tar.gz
+7 -9
View File
@@ -25,17 +25,17 @@ env:
# There is a single job in this workflow. It's configured to run on the latest available version of Ubuntu.
jobs:
build-and-push-image:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
steps:
- name: Checkout repository
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
fetch-depth: 0
submodules: true
# Uses the `docker/login-action` action to log in to the Container registry registry using the account and password that will publish the packages. Once published, the packages are scoped to the account defined here.
- name: Log in to the Container registry
uses: docker/login-action@v3.3.0
uses: docker/login-action@8aa5831fb8d48d8f76594c7ddde61ae58019f550 # v4.8.0
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
@@ -44,7 +44,7 @@ jobs:
# This step uses [docker/metadata-action](https://github.com/docker/metadata-action#about) to extract tags and labels that will be applied to the specified image. The `id` "meta" allows the output of this step to be referenced in a subsequent step. The `images` value provides the base name for the tags and labels.
- name: Extract metadata (tags, labels) for Docker
id: meta
uses: docker/metadata-action@v5.5.1
uses: docker/metadata-action@dc802804100637a589fabce1cb79ff13a1411302 # v6.2.0
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
tags: |
@@ -56,16 +56,14 @@ jobs:
latest=${{ github.event_name == 'release' }}
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
# This step uses the `docker/build-push-action` action to build the image, based on your repository's `Dockerfile`. If the build succeeds, it pushes the image to GitHub Packages.
uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1
# It uses the `context` parameter to define the build's context as the set of files located in the specified path. For more information, see "[Usage](https://github.com/docker/build-push-action#usage)" in the README of the `docker/build-push-action` repository.
# It uses the `tags` and `labels` parameters to tag and label the image with the output from the "meta" step.
- name: Build and push Docker image
uses: docker/build-push-action@v6.9.0
uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0
with:
context: .
push: true
+4 -4
View File
@@ -58,9 +58,9 @@ jobs:
(needs.build_i18n.result == 'success' || needs.build_i18n.result == 'skipped') &&
(needs.build_blog.result == 'success' || needs.build_blog.result == 'skipped')
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
steps:
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: site-build-*
merge-multiple: true
@@ -70,7 +70,7 @@ jobs:
ls -la site/
- name: Upload Site
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: site-build-combined
path: site
@@ -83,7 +83,7 @@ jobs:
echo ${{ github.event.pull_request.head.sha }} > ./metadata/SHA
- name: Upload metadata as artifact
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: metadata
path: metadata
+15 -15
View File
@@ -30,7 +30,7 @@ env:
jobs:
package_eng:
name: Package English (${{ matrix.edition }})
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
permissions:
contents: read
strategy:
@@ -69,7 +69,7 @@ jobs:
run: printf '%s\n' "$EDITION_NAVIGATION" >> "$GITHUB_ENV"
- name: Download Repository
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: ${{ inputs.repo }}
ref: ${{ inputs.ref }}
@@ -128,7 +128,7 @@ jobs:
echo "ZIMFILE_NAME=privacyguides.org_en_${{ matrix.edition }}_$(date +%Y)-$(date +%m).zim" >> "$GITHUB_ENV"
- name: Create ZIM File
uses: kohlerdominik/docker-run-action@44bd2138ca4f85c36b2fdc3966ef03518879f7f3
uses: kohlerdominik/docker-run-action@1c78cb433a3a55b1940eb8c48a3e73eb752e5082 # v2.2.0
with:
image: ghcr.io/openzim/zim-tools:3.6.0
volumes: ${{ github.workspace }}:/data
@@ -146,14 +146,14 @@ jobs:
/data/site/ /data/${{ env.ZIMFILE_NAME }}
- name: Upload ZIM File
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
path: ${{ env.ZIMFILE_NAME }}
name: ${{ env.ZIMFILE_NAME }}
compression-level: 0
- name: Run zimcheck
uses: kohlerdominik/docker-run-action@44bd2138ca4f85c36b2fdc3966ef03518879f7f3
uses: kohlerdominik/docker-run-action@1c78cb433a3a55b1940eb8c48a3e73eb752e5082 # v2.2.0
continue-on-error: true
with:
image: ghcr.io/openzim/zim-tools:3.6.0
@@ -162,7 +162,7 @@ jobs:
zimcheck /data/${{ env.ZIMFILE_NAME }}
build_mul:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
continue-on-error: true
permissions:
contents: read
@@ -180,7 +180,7 @@ jobs:
steps:
- name: Download Repository
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: ${{ inputs.repo }}
ref: ${{ inputs.ref }}
@@ -190,7 +190,7 @@ jobs:
- name: Download Translations
if: matrix.lang != 'en'
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: privacyguides/i18n
ref: main
@@ -248,7 +248,7 @@ jobs:
tar -czf site-zimready-${{ matrix.lang }}.tar.gz site
- name: Upload Site
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: site-zimready-${{ matrix.lang }}.tar.gz
path: site-zimready-${{ matrix.lang }}.tar.gz
@@ -256,14 +256,14 @@ jobs:
compression-level: 0
package_mul:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
needs: [build_mul]
permissions:
contents: read
steps:
- name: Download Repository
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: ${{ inputs.repo }}
ref: ${{ inputs.ref }}
@@ -271,7 +271,7 @@ jobs:
fetch-depth: 0
- name: Download All Sites
uses: actions/download-artifact@v4
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: site-zimready-*
merge-multiple: true
@@ -296,7 +296,7 @@ jobs:
ls -la site/
- name: Create ZIM File
uses: kohlerdominik/docker-run-action@44bd2138ca4f85c36b2fdc3966ef03518879f7f3
uses: kohlerdominik/docker-run-action@1c78cb433a3a55b1940eb8c48a3e73eb752e5082 # v2.2.0
with:
image: ghcr.io/openzim/zim-tools:3.6.0
volumes: ${{ github.workspace }}:/data
@@ -314,14 +314,14 @@ jobs:
/data/site/ /data/${{ env.ZIMFILE_NAME }}
- name: Upload ZIM File
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
path: ${{ env.ZIMFILE_NAME }}
name: ${{ env.ZIMFILE_NAME }}
compression-level: 0
- name: Run zimcheck
uses: kohlerdominik/docker-run-action@44bd2138ca4f85c36b2fdc3966ef03518879f7f3
uses: kohlerdominik/docker-run-action@1c78cb433a3a55b1940eb8c48a3e73eb752e5082 # v2.2.0
continue-on-error: true
with:
image: ghcr.io/openzim/zim-tools:3.6.0
+6 -6
View File
@@ -39,14 +39,14 @@ permissions:
jobs:
build:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
continue-on-error: ${{ inputs.continue-on-error }}
permissions:
contents: read
steps:
- name: Download Repository
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: ${{ inputs.repo }}
ref: ${{ inputs.ref }}
@@ -56,7 +56,7 @@ jobs:
- name: Download Translations
if: inputs.lang != 'en'
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
repository: privacyguides/i18n
ref: main
@@ -74,7 +74,7 @@ jobs:
- name: Cache MkDocs assets
if: inputs.cache
uses: actions/cache@v4
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
with:
path: .cache
key: mkdocs-${{ inputs.lang }}-${{ hashFiles('requirements.txt') }}-${{ github.sha }}
@@ -109,14 +109,14 @@ jobs:
tar -czf site-${{ inputs.config }}-${{ inputs.lang }}.tar.gz site
- name: Upload Site
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
with:
name: site-${{ inputs.config }}-${{ inputs.lang }}.tar.gz
path: site-${{ inputs.config }}-${{ inputs.lang }}.tar.gz
retention-days: 1
- name: Upload members list
uses: actions/upload-artifact@v4
uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
if: inputs.config == 'build' && inputs.lang == 'en'
with:
name: members.md
+3 -3
View File
@@ -29,20 +29,20 @@ jobs:
deploy:
needs: [build_blog]
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
permissions:
contents: read
steps:
- name: Checkout deployment action
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ github.sha }}
persist-credentials: false
sparse-checkout: .github/actions/deploy-garage
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: site-build-*
merge-multiple: true
+4 -4
View File
@@ -14,10 +14,10 @@ concurrency:
jobs:
gitlab:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
steps:
- name: Mirror to GitLab
uses: wearerequired/git-mirror-action@v1
uses: wearerequired/git-mirror-action@6bbc55f2f0082bca533b72dc711f7d37154d40cc # v1.3.1
env:
SSH_PRIVATE_KEY: ${{ secrets.ACTIONS_SSH_KEY }}
with:
@@ -25,10 +25,10 @@ jobs:
destination-repo: "git@gitlab.com:privacyguides/privacyguides.org.git"
codeberg:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
steps:
- name: Mirror to Codeberg
uses: wearerequired/git-mirror-action@v1
uses: wearerequired/git-mirror-action@6bbc55f2f0082bca533b72dc711f7d37154d40cc # v1.3.1
env:
SSH_PRIVATE_KEY: ${{ secrets.ACTIONS_SSH_KEY }}
with:
+7 -7
View File
@@ -20,11 +20,11 @@ jobs:
github.event.workflow_run.event == 'pull_request' &&
github.event.workflow_run.conclusion == 'success'
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
steps:
- name: Checkout deployment action
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
# ref needs to be set so that the action is not run from untrusted PR code
ref: ${{ github.sha }}
@@ -32,7 +32,7 @@ jobs:
sparse-checkout: .github/actions/deploy-garage
- name: Download Website Build Artifact
uses: actions/download-artifact@v4
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: site-build-combined
path: site
@@ -40,7 +40,7 @@ jobs:
github-token: ${{ secrets.GITHUB_TOKEN }}
- name: Download Metadata Artifact
uses: actions/download-artifact@v4
uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
name: metadata
path: metadata
@@ -69,9 +69,9 @@ jobs:
target_dir: "/${{ env.SHORT_ALIAS }}/"
- name: Comment with preview link
uses: thollander/actions-comment-pull-request@v2.5.0
uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3.0.1
with:
pr_number: ${{ steps.metadata.outputs.pr_number }}
pr-number: ${{ steps.metadata.outputs.pr_number }}
message: |
### <span aria-hidden="true">✅</span> Your preview is ready!
@@ -79,4 +79,4 @@ jobs:
| :---: | ---- |
| <span aria-hidden="true">🔨</span> Latest commit | ${{ steps.metadata.outputs.sha }} |
| <span aria-hidden="true">😎</span> Preview | https://pr${{ env.SHORT_ALIAS }}.unreviewed.privacyguides.dev/en/ |
comment_tag: deployment
comment-tag: deployment
+11 -11
View File
@@ -52,18 +52,18 @@ jobs:
release:
name: Create release notes
needs: [build, build_zimfile]
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
permissions:
contents: write
steps:
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: "*.zim"
merge-multiple: true
- name: Create release notes
uses: ncipollo/release-action@v1
uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1.21.0
with:
generateReleaseNotes: true
artifacts: "*.zim"
@@ -71,20 +71,20 @@ jobs:
deploy_garage:
needs: [build, build_blog]
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
permissions:
contents: read
steps:
- name: Checkout deployment action
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
ref: ${{ github.sha }}
persist-credentials: false
sparse-checkout: .github/actions/deploy-garage
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: site-build-*
merge-multiple: true
@@ -103,7 +103,7 @@ jobs:
deploy_pages:
needs: [build, build_blog]
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
permissions:
contents: read
pages: write
@@ -114,9 +114,9 @@ jobs:
name: github-pages
url: ${{ steps.deployment.outputs.page_url }}
steps:
- uses: actions/configure-pages@v5
- uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
- uses: actions/download-artifact@v4
- uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
with:
pattern: site-build-*
merge-multiple: true
@@ -133,9 +133,9 @@ jobs:
</html>
HTML
- uses: actions/upload-pages-artifact@v3
- uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
with:
path: site
- id: deployment
uses: actions/deploy-pages@v4
uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5.0.1
+4 -4
View File
@@ -13,12 +13,12 @@ permissions:
jobs:
generate:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
permissions:
contents: read
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
with:
persist-credentials: "false"
fetch-depth: 1
@@ -27,7 +27,7 @@ jobs:
run: mkdir -p site/en
- name: Update Discussions
uses: yakubique/minio-download@v1.1.1
uses: yakubique/minio-download@f60b86f40ef8cf7af7473a7ad7cf15b9cadb56dc # v1.1.1
with:
endpoint: https://${{ vars.PROD_GARAGE_HOSTNAME }}
access_key: ${{ secrets.PROD_GARAGE_KEY_ID }}
@@ -40,7 +40,7 @@ jobs:
run: bash tools/generate-topics.sh --all
- name: Upload modified index
uses: yakubique/minio-upload@v1.1.3
uses: yakubique/minio-upload@44c9f09e70d59cf5d709403626ece00e88634ba6 # v1.1.3
with:
endpoint: https://${{ vars.PROD_GARAGE_HOSTNAME }}
access_key: ${{ secrets.PROD_GARAGE_KEY_ID }}
+3 -3
View File
@@ -17,14 +17,14 @@ concurrency:
jobs:
synchronize-with-crowdin:
runs-on: ubuntu-latest
runs-on: ubuntu-26.04
steps:
- name: Checkout
uses: actions/checkout@v4
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
- name: crowdin action
uses: crowdin/github-action@v2.2.0
uses: crowdin/github-action@d651c77756acbe11a31d77a6fb79d8a239e1e05a # v3.6.0
with:
upload_sources: true
upload_sources_args: "--auto-update --delete-obsolete"