Skip to content

Commit b440c26

Browse files
mmorel-35mmorel-35
committed
Configure Dependabot and update GitHub Actions to SHA-pinned latest versions
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
1 parent 55ac50f commit b440c26

File tree

4 files changed

+57
-24
lines changed

4 files changed

+57
-24
lines changed

‎.github/dependabot.yml‎

Lines changed: 33 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,33 @@
1+
# Copyright 2025 Google LLC
2+
#
3+
# Licensed under the Apache License, Version 2.0 (the "License");
4+
# you may not use this file except in compliance with the License.
5+
# You may obtain a copy of the License at
6+
#
7+
# http://www.apache.org/licenses/LICENSE-2.0
8+
#
9+
# Unless required by applicable law or agreed to in writing, software
10+
# distributed under the License is distributed on an "AS IS" BASIS,
11+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12+
# See the License for the specific language governing permissions and
13+
# limitations under the License.
14+
15+
version: 2
16+
updates:
17+
# GitHub Actions
18+
- package-ecosystem: "github-actions"
19+
directory: "/"
20+
schedule:
21+
interval: "weekly"
22+
day: "monday"
23+
time: "09:00"
24+
open-pull-requests-limit: 10
25+
26+
# Bazel dependencies
27+
- package-ecosystem: "bazel"
28+
directory: "/"
29+
schedule:
30+
interval: "weekly"
31+
day: "monday"
32+
time: "09:00"
33+
open-pull-requests-limit: 10

‎.github/workflows/format.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -46,9 +46,9 @@ jobs:
4646
runs-on: ubuntu-24.04-16core
4747

4848
steps:
49-
- uses: actions/checkout@v2
49+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5050

51-
- uses: actions/setup-go@v2
51+
- uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
5252
with:
5353
go-version: '^1.16'
5454

@@ -66,9 +66,9 @@ jobs:
6666
runs-on: ubuntu-24.04-16core
6767

6868
steps:
69-
- uses: actions/checkout@v2
69+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7070

71-
- uses: actions/setup-go@v2
71+
- uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 # v6.2.0
7272
with:
7373
go-version: '^1.16'
7474

@@ -86,9 +86,9 @@ jobs:
8686
runs-on: ubuntu-24.04-16core
8787

8888
steps:
89-
- uses: actions/checkout@v2
89+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9090

91-
- uses: bazel-contrib/setup-bazel@0.16.0
91+
- uses: bazel-contrib/setup-bazel@77a1d3d18379c7cb0a7e3b9fcaaa4d94f1029763 # 0.18.0
9292
with:
9393
bazelisk-cache: true
9494
disk-cache: ${{ github.job }}
@@ -111,7 +111,7 @@ jobs:
111111
runs-on: ubuntu-24.04-16core
112112

113113
steps:
114-
- uses: actions/checkout@v2
114+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
115115

116116
- name: Install dependencies (Linux)
117117
run: sudo apt update -y && sudo apt install -y clang-format-18
@@ -127,9 +127,9 @@ jobs:
127127
runs-on: ubuntu-24.04-16core
128128

129129
steps:
130-
- uses: actions/checkout@v2
130+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
131131

132-
- uses: bazel-contrib/setup-bazel@0.16.0
132+
- uses: bazel-contrib/setup-bazel@77a1d3d18379c7cb0a7e3b9fcaaa4d94f1029763 # 0.18.0
133133
with:
134134
bazelisk-cache: true
135135
disk-cache: ${{ github.job }}

‎.github/workflows/publish-build-tools.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
packages: write
4242

4343
steps:
44-
- uses: actions/checkout@v2
44+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4545

4646
- name: Generate tag
4747
id: tag
@@ -51,20 +51,20 @@ jobs:
5151
5252
- name: Login to GitHub Container Registry
5353
if: ${{ !github.event.inputs.draft }}
54-
uses: docker/login-action@v3
54+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
5555
with:
5656
registry: ghcr.io
5757
username: ${{ github.actor }}
5858
password: ${{ secrets.GITHUB_TOKEN }}
5959

6060
- name: Set up QEMU
61-
uses: docker/setup-qemu-action@v3
61+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
6262

6363
- name: Set up Docker Buildx
64-
uses: docker/setup-buildx-action@v3
64+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
6565

6666
- name: Build and Push Docker Image
67-
uses: docker/build-push-action@v6
67+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
6868
with:
6969
context: .
7070
file: bazel/external/Dockerfile.bazel

‎.github/workflows/test.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -46,9 +46,9 @@ jobs:
4646
runs-on: ubuntu-24.04-16core
4747

4848
steps:
49-
- uses: actions/checkout@v2
49+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5050

51-
- uses: bazel-contrib/setup-bazel@0.16.0
51+
- uses: bazel-contrib/setup-bazel@77a1d3d18379c7cb0a7e3b9fcaaa4d94f1029763 # 0.18.0
5252
with:
5353
bazelisk-cache: true
5454
disk-cache: ${{ github.job }}
@@ -78,7 +78,7 @@ jobs:
7878
done
7979
8080
- name: Upload test data
81-
uses: actions/upload-artifact@v4
81+
uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
8282
with:
8383
name: test_data
8484
path: bazel-bin/test/test_data/*.wasm
@@ -255,7 +255,7 @@ jobs:
255255
flags: --config=hermetic-llvm
256256

257257
steps:
258-
- uses: actions/checkout@v2
258+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
259259

260260
- name: Compute job hash
261261
id: job-hash
@@ -269,29 +269,29 @@ jobs:
269269
# Needed for s390x test which runs on a GHCR Docker Ubuntu image.
270270
- name: Login to GitHub Container Registry
271271
if: startsWith(matrix.run_under, 'docker')
272-
uses: docker/login-action@v3
272+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0
273273
with:
274274
registry: ghcr.io
275275
username: ${{ github.actor }}
276276
password: ${{ secrets.GITHUB_TOKEN }}
277277

278278
- name: Activate Docker/QEMU
279279
if: startsWith(matrix.run_under, 'docker')
280-
uses: docker/setup-qemu-action@v3
280+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
281281

282282
- name: Set up Docker Buildx
283283
if: startsWith(matrix.run_under, 'docker')
284-
uses: docker/setup-buildx-action@v3
284+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0
285285

286-
- uses: bazel-contrib/setup-bazel@0.16.0
286+
- uses: bazel-contrib/setup-bazel@77a1d3d18379c7cb0a7e3b9fcaaa4d94f1029763 # 0.18.0
287287
with:
288288
bazelisk-cache: true
289289
disk-cache: ${{ github.job }}-${{ steps.job-hash.outputs.hash }}
290290
external-cache: true
291291
repository-cache: true
292292

293293
- name: Download test data
294-
uses: actions/download-artifact@v4
294+
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
295295
with:
296296
name: test_data
297297
path: test/test_data/
@@ -307,7 +307,7 @@ jobs:
307307
308308
- name: Build local Docker image
309309
if: ${{ startsWith(matrix.run_under, 'docker') }}
310-
uses: docker/build-push-action@v6
310+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
311311
with:
312312
context: .
313313
file: bazel/external/Dockerfile.bazel

0 commit comments

Comments
 (0)