From 8e9299209386724d47a7820be4d1610be0eb969d Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 8 Oct 2026 10:17:56 +0000 Subject: [PATCH] Update GitHub Actions Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/assertion.yml | 2 +- .github/workflows/ci.yml | 14 +++++++------- .github/workflows/label-pr.yml | 2 +- .github/workflows/release-branch.yml | 4 ++-- .github/workflows/sbom.yml | 2 +- .github/workflows/scorecards.yml | 2 +- 6 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/assertion.yml b/.github/workflows/assertion.yml index 032808598..2439fbe4b 100644 --- a/.github/workflows/assertion.yml +++ b/.github/workflows/assertion.yml @@ -46,7 +46,7 @@ jobs: - name: Download nginx-agent binary artifacts if: ${{ inputs.runId != '' }} - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # 8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-binaries-${{ inputs.packageVersion }}-${{ matrix.osarch }} path: binaries diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4f88c46ec..d90e4b3d9 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -222,7 +222,7 @@ jobs: run: | make clean local-deb-package local-rpm-package local-apk-package - name: Upload Artifacts - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: nginx-agent-unsigned-snapshots path: build @@ -267,7 +267,7 @@ jobs: ~/go/pkg/mod key: ${{ runner.os }}-go- - name: Download Packages - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-unsigned-snapshots path: build @@ -326,7 +326,7 @@ jobs: ~/go/pkg/mod key: ${{ runner.os }}-go- - name: Download Packages - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-unsigned-snapshots path: build @@ -390,7 +390,7 @@ jobs: ~/go/pkg/mod key: ${{ runner.os }}-go- - name: Download Packages - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-unsigned-snapshots path: build @@ -476,7 +476,7 @@ jobs: secrets-filter: 'docker,nginx-private-registry,nginx-pkg' - name: Download Packages - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-unsigned-snapshots path: build @@ -550,7 +550,7 @@ jobs: ~/go/pkg/mod key: ${{ runner.os }}-go- - name: Download Packages - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-unsigned-snapshots path: build @@ -624,7 +624,7 @@ jobs: ~/go/pkg/mod key: ${{ runner.os }}-go- - name: Download Packages - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-unsigned-snapshots path: build diff --git a/.github/workflows/label-pr.yml b/.github/workflows/label-pr.yml index 4f154eba3..3f7e4f909 100644 --- a/.github/workflows/label-pr.yml +++ b/.github/workflows/label-pr.yml @@ -14,6 +14,6 @@ jobs: pull-requests: write runs-on: ubuntu-26.04 steps: - - uses: release-drafter/release-drafter/autolabeler@72967cdc98ddd3160f1fc3dff619de365e137dd0 # v7.9.0 + - uses: release-drafter/release-drafter/autolabeler@978bb0b30c5ee8cdd332ced253758157150d43f0 # v7.10.0 env: GITHUB_TOKEN: ${{ github.token }} diff --git a/.github/workflows/release-branch.yml b/.github/workflows/release-branch.yml index c4a1edddd..b5ced8796 100644 --- a/.github/workflows/release-branch.yml +++ b/.github/workflows/release-branch.yml @@ -250,7 +250,7 @@ jobs: find build/ -type f -name "nginx-agent*" - name: Archive AMD64 Binaries - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: nginx-agent-binaries-${{ inputs.packageVersion }}-amd64 path: | @@ -260,7 +260,7 @@ jobs: build/amd64/nginx-agent.buildend - name: Archive ARM64 Binaries - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: nginx-agent-binaries-${{ inputs.packageVersion }}-arm64 path: | diff --git a/.github/workflows/sbom.yml b/.github/workflows/sbom.yml index 12f6a2010..11bce45e0 100644 --- a/.github/workflows/sbom.yml +++ b/.github/workflows/sbom.yml @@ -32,7 +32,7 @@ jobs: - name: Download nginx-agent binary artifacts if: ${{ inputs.runId != '' }} - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # 8.0.1 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: nginx-agent-binaries-${{ inputs.packageVersion }}-${{ matrix.osarch }} path: binaries diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index 216468bb4..bb545ef5d 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -52,7 +52,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: SARIF file path: results.sarif