2626 - name : Unshallow
2727 run : git fetch --prune --unshallow
2828 - name : Setup Go
29- uses : actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3 .0
29+ uses : actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4 .0
3030 with :
3131 go-version : 1.26.x
3232 cache : false
@@ -36,21 +36,21 @@ jobs:
3636 id : buildx
3737 uses : docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
3838 - name : Setup Syft
39- uses : anchore/sbom-action/download-syft@57aae528053a48a3f6235f2d9461b05fbcb7366d # v0.23.1
39+ uses : anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0.24.0
4040 - name : Setup Cosign
41- uses : sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
41+ uses : sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
4242 with :
4343 cosign-release : v2.6.1 # TODO: remove after Flux 2.8 with support for cosign v3
4444 - name : Setup Kustomize
45- uses : fluxcd/pkg/actions/kustomize@9a8c0edd5da84dc51a585738c67e3a3950d7fbf0 # main
45+ uses : fluxcd/pkg/actions/kustomize@1bfcca47168cb6d2d7dfdc5b35d8b379a773976d # main
4646 - name : Login to GitHub Container Registry
47- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
47+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
4848 with :
4949 registry : ghcr.io
5050 username : fluxcdbot
5151 password : ${{ secrets.GITHUB_TOKEN }}
5252 - name : Login to Docker Hub
53- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
53+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
5454 with :
5555 username : fluxcdbot
5656 password : ${{ secrets.DOCKER_FLUXCD_PASSWORD }}
6363 run : |
6464 kustomize build manifests/crds > all-crds.yaml
6565 - name : Generate OpenAPI JSON schemas from CRDs
66- uses : fluxcd/pkg/actions/crdjsonschema@9a8c0edd5da84dc51a585738c67e3a3950d7fbf0 # main
66+ uses : fluxcd/pkg/actions/crdjsonschema@1bfcca47168cb6d2d7dfdc5b35d8b379a773976d # main
6767 with :
6868 crd : all-crds.yaml
6969 output : schemas
7272 tar -czvf ./output/crd-schemas.tar.gz -C schemas .
7373 - name : Run GoReleaser
7474 id : run-goreleaser
75- uses : goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0
75+ uses : goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1
7676 with :
7777 version : latest
7878 args : release --skip=validate
@@ -105,7 +105,7 @@ jobs:
105105 steps :
106106 - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
107107 - name : Setup Kustomize
108- uses : fluxcd/pkg/actions/kustomize@9a8c0edd5da84dc51a585738c67e3a3950d7fbf0 # main
108+ uses : fluxcd/pkg/actions/kustomize@1bfcca47168cb6d2d7dfdc5b35d8b379a773976d # main
109109 - name : Setup Flux CLI
110110 uses : ./action/
111111 with :
@@ -116,13 +116,13 @@ jobs:
116116 VERSION=$(flux version --client | awk '{ print $NF }')
117117 echo "version=${VERSION}" >> $GITHUB_OUTPUT
118118 - name : Login to GHCR
119- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
119+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
120120 with :
121121 registry : ghcr.io
122122 username : fluxcdbot
123123 password : ${{ secrets.GITHUB_TOKEN }}
124124 - name : Login to DockerHub
125- uses : docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0 .0
125+ uses : docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1 .0
126126 with :
127127 username : fluxcdbot
128128 password : ${{ secrets.DOCKER_FLUXCD_PASSWORD }}
@@ -150,7 +150,7 @@ jobs:
150150 --path="./flux-system" \
151151 --source=${{ github.repositoryUrl }} \
152152 --revision="${{ github.ref_name }}@sha1:${{ github.sha }}"
153- - uses : sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0
153+ - uses : sigstore/cosign-installer@cad07c2e89fa2edd6e2d7bab4c1aa38e53f76003 # v4.1.1
154154 with :
155155 cosign-release : v2.6.1 # TODO: remove after Flux 2.8 with support for cosign v3
156156 - name : Sign manifests
0 commit comments