From 4090284069c2e5138166615714d9ab97a3385f8d Mon Sep 17 00:00:00 2001 From: "John C. Bland II" Date: Thu, 13 Aug 2026 12:02:42 -0500 Subject: [PATCH] chore: upgrade actions to Node 24 runtime (SHA-pinned) --- .github/actions/build-website/action.yml | 6 +-- .github/workflows/draft-release.yml | 2 +- .github/workflows/generate-library.yml | 48 +++++++++---------- .github/workflows/website-algolia-reindex.yml | 2 +- .github/workflows/website-deploy-preview.yml | 2 +- .github/workflows/website-deploy-release.yml | 4 +- .../website-deploy-staging-preview.yml | 2 +- .../website-deploy-staging-release.yml | 2 +- 8 files changed, 34 insertions(+), 34 deletions(-) diff --git a/.github/actions/build-website/action.yml b/.github/actions/build-website/action.yml index 928d0e657..c6da49e69 100644 --- a/.github/actions/build-website/action.yml +++ b/.github/actions/build-website/action.yml @@ -27,14 +27,14 @@ runs: steps: # https://github.com/marketplace/actions/configure-aws-credentials-action-for-github-actions - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ inputs.aws_region }} role-to-assume: ${{ inputs.iam_role_arn }} role-session-name: ${{ inputs.iam_role_session_name }} - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version-file: ".nvmrc" cache: 'npm' @@ -51,7 +51,7 @@ runs: - name: Cache rendered content if: ${{ !contains(github.event.*.labels.*.name, 'no-cache') }} - uses: actions/cache@v4 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: | .build-harness diff --git a/.github/workflows/draft-release.yml b/.github/workflows/draft-release.yml index a75ad147d..0b041754d 100644 --- a/.github/workflows/draft-release.yml +++ b/.github/workflows/draft-release.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: # Drafts your next Release notes as Pull Requests are merged into "master" - - uses: release-drafter/release-drafter@v5 + - uses: release-drafter/release-drafter@34d80673e067bdc0c24568d3af899c216adcfaa9 # v7.7.0 with: publish: false prerelease: false diff --git a/.github/workflows/generate-library.yml b/.github/workflows/generate-library.yml index e63d1c3c2..1217863d0 100644 --- a/.github/workflows/generate-library.yml +++ b/.github/workflows/generate-library.yml @@ -32,19 +32,19 @@ jobs: environment: generate steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ env.AWS_REGION }} role-to-assume: ${{ env.IAM_ROLE_ARN }} role-session-name: ${{ env.IAM_ROLE_SESSION_NAME }} - name: "Checkout 'terraform-aws-components' Repository" - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 repository: cloudposse/terraform-aws-components @@ -52,13 +52,13 @@ jobs: path: tmp/components/terraform-aws-components - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.10' cache: 'pip' - name: Install Atmos - uses: cloudposse/github-action-setup-atmos@v2 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: install-wrapper: false @@ -74,7 +74,7 @@ jobs: - name: Generate a token id: generate-token - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ vars.APP_ID }} private-key: ${{ secrets.APP_PRIVATE_KEY }} @@ -86,7 +86,7 @@ jobs: run: ./scripts/render-docs-for-components.sh - name: Upload Components Docs - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: library-docs-components path: docs/components/library/ @@ -98,25 +98,25 @@ jobs: environment: generate steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ env.AWS_REGION }} role-to-assume: ${{ env.IAM_ROLE_ARN }} role-session-name: ${{ env.IAM_ROLE_SESSION_NAME }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.10' cache: 'pip' - name: Install Atmos - uses: cloudposse/github-action-setup-atmos@v2 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: install-wrapper: false @@ -132,7 +132,7 @@ jobs: - name: Generate a token id: generate-token - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ vars.APP_ID }} private-key: ${{ secrets.APP_PRIVATE_KEY }} @@ -144,7 +144,7 @@ jobs: run: ./scripts/render-docs-for-modules.sh - name: Upload Modules Docs - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: library-docs-modules path: docs/modules/library/ @@ -156,25 +156,25 @@ jobs: environment: generate steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ env.AWS_REGION }} role-to-assume: ${{ env.IAM_ROLE_ARN }} role-session-name: ${{ env.IAM_ROLE_SESSION_NAME }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: '3.10' cache: 'pip' - name: Install Atmos - uses: cloudposse/github-action-setup-atmos@v2 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: install-wrapper: false @@ -190,7 +190,7 @@ jobs: - name: Generate a token id: generate-token - uses: actions/create-github-app-token@v1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ vars.APP_ID }} private-key: ${{ secrets.APP_PRIVATE_KEY }} @@ -202,7 +202,7 @@ jobs: run: ./scripts/render-docs-for-github-actions.sh - name: Upload GitHub Actions Docs - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: library-docs-github-actions path: docs/github-actions/library/ @@ -214,24 +214,24 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 - name: Download Components Docs - uses: actions/download-artifact@v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: library-docs-components path: docs/components/library/ - name: Download Modules Docs - uses: actions/download-artifact@v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: library-docs-modules path: docs/modules/library/ - name: Download GitHub Actions Docs - uses: actions/download-artifact@v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: library-docs-github-actions path: docs/github-actions/library/ @@ -245,7 +245,7 @@ jobs: # Upload as workflow artifact for use by calling workflows (e.g., website-deploy-release) - name: Upload Library Docs Artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: library-docs path: library-docs.tar.gz diff --git a/.github/workflows/website-algolia-reindex.yml b/.github/workflows/website-algolia-reindex.yml index aeac01f9d..58760d608 100644 --- a/.github/workflows/website-algolia-reindex.yml +++ b/.github/workflows/website-algolia-reindex.yml @@ -26,7 +26,7 @@ jobs: steps: - name: "Checkout 'cloudposse/docs' Repository" - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 1 diff --git a/.github/workflows/website-deploy-preview.yml b/.github/workflows/website-deploy-preview.yml index a0f3ea2eb..f8da48edb 100644 --- a/.github/workflows/website-deploy-preview.yml +++ b/.github/workflows/website-deploy-preview.yml @@ -51,7 +51,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/website-deploy-release.yml b/.github/workflows/website-deploy-release.yml index 2654d033e..0ad33ab20 100644 --- a/.github/workflows/website-deploy-release.yml +++ b/.github/workflows/website-deploy-release.yml @@ -41,13 +41,13 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 # Download library docs generated by the generate-library-docs job - name: Download Library Docs Artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: library-docs diff --git a/.github/workflows/website-deploy-staging-preview.yml b/.github/workflows/website-deploy-staging-preview.yml index 4fbe9b507..6d2554035 100644 --- a/.github/workflows/website-deploy-staging-preview.yml +++ b/.github/workflows/website-deploy-staging-preview.yml @@ -34,7 +34,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/website-deploy-staging-release.yml b/.github/workflows/website-deploy-staging-release.yml index 5497e1c8b..f7d499761 100644 --- a/.github/workflows/website-deploy-staging-release.yml +++ b/.github/workflows/website-deploy-staging-release.yml @@ -33,7 +33,7 @@ jobs: steps: - name: Checkout Repository - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: fetch-depth: 0