diff --git a/.github/workflows/auto-approve.yml b/.github/workflows/auto-approve.yml index 1636b6f..e57cd8d 100644 --- a/.github/workflows/auto-approve.yml +++ b/.github/workflows/auto-approve.yml @@ -19,7 +19,7 @@ jobs: if: contains(github.event.pull_request.labels.*.name, 'auto-approve') && github.event.pull_request.draft == false steps: - name: Checkout PR - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: ref: ${{ github.event.pull_request.head.ref }} repository: ${{ github.event.pull_request.head.repo.full_name }} diff --git a/.github/workflows/automerge.yml b/.github/workflows/automerge.yml index b027076..9749809 100644 --- a/.github/workflows/automerge.yml +++ b/.github/workflows/automerge.yml @@ -19,7 +19,7 @@ jobs: if: contains(github.event.pull_request.labels.*.name, 'automerge') && github.event.pull_request.draft == false steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Turn on automerge for this PR by a trusted user or bot if: github.event.pull_request.user.login == 'team-tf-cdk' || contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.pull_request.author_association) || github.actor == 'dependabot[bot]' env: diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 2a4428b..beb3751 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -15,7 +15,7 @@ jobs: CI: "true" steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: ref: ${{ github.event.pull_request.head.ref }} repository: ${{ github.event.pull_request.head.repo.full_name }} @@ -35,7 +35,7 @@ jobs: working-directory: ./ - name: Upload patch if: steps.self_mutation.outputs.self_mutation_happened - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b with: name: repo.patch path: repo.patch @@ -50,7 +50,7 @@ jobs: run: cd dist && getfacl -R . > permissions-backup.acl continue-on-error: true - name: Upload artifact - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b with: name: build-artifact path: dist @@ -63,7 +63,7 @@ jobs: if: always() && needs.build.outputs.self_mutation_happened && !(github.event.pull_request.head.repo.full_name != github.repository) steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: token: ${{ secrets.PROJEN_GITHUB_TOKEN }} ref: ${{ github.event.pull_request.head.ref }} @@ -93,7 +93,7 @@ jobs: contents: read if: ${{ !needs.build.outputs.self_mutation_happened }} steps: - - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b + - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af with: node-version: lts/* - name: Download build artifacts @@ -105,7 +105,7 @@ jobs: run: cd dist && setfacl --restore=permissions-backup.acl continue-on-error: true - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: ref: ${{ github.event.pull_request.head.ref }} repository: ${{ github.event.pull_request.head.repo.full_name }} @@ -127,10 +127,10 @@ jobs: contents: read if: ${{ !needs.build.outputs.self_mutation_happened }} steps: - - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b + - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af with: node-version: lts/* - - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f + - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b with: python-version: 3.x - name: Download build artifacts @@ -142,7 +142,7 @@ jobs: run: cd dist && setfacl --restore=permissions-backup.acl continue-on-error: true - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: ref: ${{ github.event.pull_request.head.ref }} repository: ${{ github.event.pull_request.head.repo.full_name }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index cc9af19..2808811 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -27,7 +27,7 @@ jobs: CI: "true" steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: fetch-depth: 0 - name: Set git identity @@ -55,7 +55,7 @@ jobs: continue-on-error: true - name: Upload artifact if: ${{ steps.git_remote.outputs.latest_commit == github.sha }} - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b with: name: build-artifact path: dist @@ -68,7 +68,7 @@ jobs: contents: write if: needs.release.outputs.tag_exists != 'true' && needs.release.outputs.latest_commit == github.sha steps: - - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b + - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af with: node-version: lts/* - name: Download build artifacts @@ -94,7 +94,7 @@ jobs: contents: read if: needs.release.outputs.tag_exists != 'true' && needs.release.outputs.latest_commit == github.sha steps: - - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b + - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af with: node-version: lts/* - name: Download build artifacts @@ -106,7 +106,7 @@ jobs: run: cd dist && setfacl --restore=permissions-backup.acl continue-on-error: true - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: path: .repo - name: Install Dependencies @@ -134,10 +134,10 @@ jobs: contents: read if: needs.release.outputs.tag_exists != 'true' && needs.release.outputs.latest_commit == github.sha steps: - - uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b + - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af with: node-version: lts/* - - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f + - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b with: python-version: 3.x - name: Download build artifacts @@ -149,7 +149,7 @@ jobs: run: cd dist && setfacl --restore=permissions-backup.acl continue-on-error: true - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: path: .repo - name: Install Dependencies diff --git a/.github/workflows/upgrade-cdktf.yml b/.github/workflows/upgrade-cdktf.yml index e041374..09f35d7 100644 --- a/.github/workflows/upgrade-cdktf.yml +++ b/.github/workflows/upgrade-cdktf.yml @@ -18,7 +18,7 @@ jobs: CHECKPOINT_DISABLE: "1" steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 - name: Install run: yarn install - name: Get current CDKTF version @@ -40,7 +40,7 @@ jobs: run: scripts/update-cdktf.sh ${{ steps.latest_version.outputs.value }} - name: Create draft pull request if: steps.current_version.outputs.short != steps.latest_version.outputs.short - uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c + uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f with: commit-message: "chore!: upgrade to cdktf ${{ steps.latest_version.outputs.value }}" branch: auto/upgrade-cdktf-${{ steps.latest_version.outputs.short }} diff --git a/.github/workflows/upgrade-main.yml b/.github/workflows/upgrade-main.yml index c6feeca..5715385 100644 --- a/.github/workflows/upgrade-main.yml +++ b/.github/workflows/upgrade-main.yml @@ -15,7 +15,7 @@ jobs: patch_created: ${{ steps.create_patch.outputs.patch_created }} steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: ref: main - name: Install dependencies @@ -30,7 +30,7 @@ jobs: working-directory: ./ - name: Upload patch if: steps.create_patch.outputs.patch_created - uses: actions/upload-artifact@89ef406dd8d7e03cfd12d9e0a4a378f454709029 + uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b with: name: repo.patch path: repo.patch @@ -44,7 +44,7 @@ jobs: if: ${{ needs.upgrade.outputs.patch_created }} steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 with: ref: main - name: Download patch @@ -60,7 +60,7 @@ jobs: git config user.email "github-team-tf-cdk@hashicorp.com" - name: Create Pull Request id: create-pr - uses: peter-evans/create-pull-request@c5a7806660adbe173f04e3e038b0ccdcd758773c + uses: peter-evans/create-pull-request@67ccf781d68cd99b580ae25a5c18a1cc84ffff1f with: token: ${{ secrets.PROJEN_GITHUB_TOKEN }} commit-message: |- diff --git a/.projenrc.ts b/.projenrc.ts index fde694d..070ca71 100644 --- a/.projenrc.ts +++ b/.projenrc.ts @@ -15,16 +15,16 @@ const constructVersion = "^10.3.0"; const name = "cdktf-multi-stack-tfe"; const githubActionPinnedVersions = { - "actions/checkout": "692973e3d937129bcbf40652eb9f2f61becf3332", // v4.1.7 + "actions/checkout": "11bd71901bbe5b1630ceea73d27597364c9af683", // v4.2.2 "actions/download-artifact": "fa0a91b85d4f404e444e00e005971372dc801d16", // v4.1.8 "actions/github-script": "60a0d83039c74a4aee543508d2ffcb1c3799cdea", // v7.0.1 - "actions/setup-node": "1e60f620b9541d16bece96c5465dc8ee9832be0b", // v4.0.3 - "actions/setup-python": "39cd14951b08e74b54015e9e001cdefcf80e669f", // v5.1.1 - "actions/upload-artifact": "89ef406dd8d7e03cfd12d9e0a4a378f454709029", // v4.3.5 + "actions/setup-node": "39370e3970a6d050c480ffad4ff0ed4d3fdee5af", // v4.1.0 + "actions/setup-python": "0b93645e9fea7318ecaed2b359559ac225c90a2b", // v5.3.0 + "actions/upload-artifact": "6f51ac03b9356f520e9adb1b1b7802705f340c2b", // v4.5.0 "amannn/action-semantic-pull-request": "0723387faaf9b38adef4775cd42cfd5155ed6017", // v5.5.3 "hashicorp/setup-copywrite": "32638da2d4e81d56a0764aa1547882fc4d209636", // v1.1.3 - "peter-evans/create-pull-request": "c5a7806660adbe173f04e3e038b0ccdcd758773c", // v6.1.0 + "peter-evans/create-pull-request": "67ccf781d68cd99b580ae25a5c18a1cc84ffff1f", // v7.0.6 }; const project = new ConstructLibraryCdktf({