Merge pull request #102 from upbound/renovate/all-non-major-github-ac…

…tion Update all non-major github action
upbound · Oct 6, 2023 · acd7559 · acd7559
2 parents 895060e + 16025cd
commit acd7559
Show file tree

Hide file tree

Showing 7 changed files with 7 additions and 7 deletions.
diff --git a/.github/workflows/backport.yml b/.github/workflows/backport.yml
@@ -27,7 +27,7 @@ jobs:
           fetch-depth: 0
 
       - name: Open Backport PR
-        uses: zeebe-io/backport-action@fcd8f6a0e7a906f04e217a6ac8dfccbbada0cba7 # v0.0.8
+        uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58 # v0.0.9
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           github_workspace: ${{ github.workspace }}

diff --git a/.github/workflows/commands.yml b/.github/workflows/commands.yml
@@ -24,7 +24,7 @@ jobs:
         fetch-depth: 0
 
     - name: Open Backport PR
-      uses: zeebe-io/backport-action@6d30c3afa2146e1370dfaae83e99cdd1ee3bcba4 # v0.0.4
+      uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58 # v0.0.9
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
         github_workspace: ${{ github.workspace }}

diff --git a/.github/workflows/native-provider-bump.yml b/.github/workflows/native-provider-bump.yml
@@ -69,7 +69,7 @@ jobs:
 
       - name: New pull request
         if: steps.bump-mk.outputs.bumped != ''
-        uses: peter-evans/create-pull-request@284f54f989303d2699d373481a0cfa13ad5a6666 # v5.0.1
+        uses: peter-evans/create-pull-request@153407881ec5c347639a548ade7d8ad1d6740e38 # v5.0.2
         with:
           title: Bump native provider to version ${{ steps.bump-mk.outputs.version }}
           commit-message: Bump native provider to version ${{ steps.bump-mk.outputs.version }}

diff --git a/.github/workflows/pr-triage.yml b/.github/workflows/pr-triage.yml
@@ -35,7 +35,7 @@ jobs:
               labels: ["community"]
             })
       - name: Add PR to Extensions Community Support project
-        uses: actions/add-to-project@960fbad431afda394cfcf8743445e741acd19e85 # v0.4.0
+        uses: actions/add-to-project@31b3f3ccdc584546fc445612dec3f38ff5edb41c # v0.5.0
         with:
           project-url: https://github.com/orgs/upbound/projects/104/views/1
           github-token: ${{ secrets.UPBOUND_BOT_GITHUB_TOKEN }}
diff --git a/.github/workflows/provider-backport.yml b/.github/workflows/provider-backport.yml
@@ -20,7 +20,7 @@ jobs:
           fetch-depth: 0
 
       - name: Open Backport PR
-        uses: zeebe-io/backport-action@fcd8f6a0e7a906f04e217a6ac8dfccbbada0cba7 # v0.0.8
+        uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58 # v0.0.9
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           github_workspace: ${{ github.workspace }}

diff --git a/.github/workflows/provider-commands.yml b/.github/workflows/provider-commands.yml
@@ -25,7 +25,7 @@ jobs:
         fetch-depth: 0
 
     - name: Open Backport PR
-      uses: zeebe-io/backport-action@6d30c3afa2146e1370dfaae83e99cdd1ee3bcba4 # v0.0.4
+      uses: zeebe-io/backport-action@2ee900dc92632adf994f8e437b6d16840fd61f58 # v0.0.9
       with:
         github_token: ${{ secrets.GITHUB_TOKEN }}
         github_workspace: ${{ github.workspace }}

diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
@@ -131,7 +131,7 @@ jobs:
         run: docker pull ${{ matrix.image }}:${{ env.tag }}
 
       - name: Run Trivy Vulnerability Scanner
-        uses: aquasecurity/trivy-action@8bd2f9fbda2109502356ff8a6a89da55b1ead252 # 0.9.1
+        uses: aquasecurity/trivy-action@fbd16365eb88e12433951383f5e99bd901fc618f # 0.12.0
         with:
           image-ref: ${{ matrix.image }}:${{ env.tag }}
           format: 'sarif'