From 6c3d584b724f028353e161928e18f8b9677733d2 Mon Sep 17 00:00:00 2001 From: Pulumi Bot Date: Wed, 27 Nov 2024 05:04:19 +0000 Subject: [PATCH] [internal] Update GitHub Actions workflow files --- .github/workflows/build.yml | 149 ++++++++++--------- .github/workflows/command-dispatch.yml | 4 +- .github/workflows/prerelease.yml | 164 ++++++++++----------- .github/workflows/pull-request.yml | 4 +- .github/workflows/release.yml | 164 ++++++++++----------- .github/workflows/run-acceptance-tests.yml | 87 ++++++----- .github/workflows/weekly-pulumi-update.yml | 12 +- .goreleaser.prerelease.yml | 2 + .goreleaser.yml | 2 + 9 files changed, 295 insertions(+), 293 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index d6474bca34..09b0a7f062 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -52,16 +52,16 @@ jobs: name: prerequisites steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -70,7 +70,7 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - if: github.event_name == 'pull_request' @@ -98,7 +98,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }} - if: github.event_name == 'pull_request' name: Comment on PR with Details of Schema Check - uses: thollander/actions-comment-pull-request@v2 + uses: thollander/actions-comment-pull-request@v2.5.0 with: message: | ${{ env.SCHEMA_CHANGES }} @@ -113,7 +113,7 @@ jobs: number: ${{ github.event.issue.number }} github_token: ${{ secrets.GITHUB_TOKEN }} - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -127,19 +127,19 @@ jobs: github.workspace}}/bin/ pulumi-resource-${{ env.PROVIDER }} pulumi-gen-${{ env.PROVIDER}} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin/provider.tar.gz - name: Test Provider Library run: make test_provider - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v4.6.0 env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in building provider prerequisites fields: repo,commit,author,action @@ -159,16 +159,16 @@ jobs: name: build_sdks steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -177,34 +177,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -217,7 +217,7 @@ jobs: - name: Generate SDK run: make ${{ matrix.language }}_sdk - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -229,14 +229,14 @@ jobs: - name: Tar SDK folder run: tar -zcf sdk/${{ matrix.language }}.tar.gz -C sdk/${{ matrix.language }} . - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/${{ matrix.language }}.tar.gz retention-days: 30 - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure while building SDKs fields: repo,commit,author,action @@ -261,16 +261,16 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -279,34 +279,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -317,7 +317,7 @@ jobs: run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print -exec chmod +x {} \; - name: Download SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -338,12 +338,12 @@ jobs: - name: Make Kube Directory run: mkdir -p "~/.kube/" - name: Download Kubeconfig - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: config path: ~/.kube/ - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v4.0.2 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-region: ${{ env.AWS_REGION }} @@ -352,7 +352,7 @@ jobs: role-session-name: ${{ env.PROVIDER }}@githubActions role-to-assume: ${{ secrets.AWS_CI_ROLE_ARN }} - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -360,7 +360,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -389,7 +389,7 @@ jobs: 2h -parallel 4 ./... - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in SDK tests fields: repo,commit,author,action @@ -400,16 +400,16 @@ jobs: name: publish steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -427,11 +427,11 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v4.0.2 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-region: us-east-2 @@ -441,7 +441,7 @@ jobs: role-external-id: upload-pulumi-release role-to-assume: ${{ secrets.AWS_UPLOAD_ROLE_ARN }} - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v5 + uses: goreleaser/goreleaser-action@v5.1.0 env: GORELEASER_CURRENT_TAG: v${{ steps.version.outputs.version }} with: @@ -449,7 +449,7 @@ jobs: version: latest - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in publishing binaries fields: repo,commit,author,action @@ -460,22 +460,22 @@ jobs: name: publish_sdk steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Checkout Scripts Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: path: ci-scripts repository: pulumi/scripts - run: echo "ci-scripts" >> .git/info/exclude - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -484,22 +484,22 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Download python SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: python-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -507,7 +507,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/python.tar.gz -C ${{github.workspace}}/sdk/python - name: Download dotnet SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: dotnet-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -515,7 +515,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/dotnet.tar.gz -C ${{github.workspace}}/sdk/dotnet - name: Download nodejs SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: nodejs-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -531,7 +531,7 @@ jobs: PYPI_PUBLISH_ARTIFACTS: all - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in publishing SDK fields: repo,commit,author,action @@ -540,18 +540,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true ref: ${{ env.PR_COMMIT_SHA }} - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - - run: touch provider/cmd/pulumi-resource-kubernetes/{terraform-mapping,schema}-embed.json - name: golangci-lint provider pkg - uses: golangci/golangci-lint-action@v4 + uses: golangci/golangci-lint-action@v4.0.1 with: version: ${{ env.GOLANGCI_LINT_VERSION }} args: -c ../.golangci.yml @@ -569,25 +568,25 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -595,7 +594,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -616,7 +615,7 @@ jobs: - name: Create test infrastructure run: ./scripts/ci-cluster-create.sh ${{ steps.stackname.outputs.stack-name }} - name: Upload Kubernetes Artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: config path: ~/.kube/config @@ -633,25 +632,25 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -659,7 +658,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -676,6 +675,6 @@ jobs: - name: Destroy test infra run: ./scripts/ci-cluster-destroy.sh ${{ needs.build-test-cluster.outputs.stack-name }} - - uses: geekyeggo/delete-artifact@v5 + - uses: geekyeggo/delete-artifact@v5.1.0 with: name: config diff --git a/.github/workflows/command-dispatch.yml b/.github/workflows/command-dispatch.yml index 893fa494d2..bd105c2d8c 100644 --- a/.github/workflows/command-dispatch.yml +++ b/.github/workflows/command-dispatch.yml @@ -44,10 +44,10 @@ jobs: name: command-dispatch-for-testing steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - - uses: peter-evans/slash-command-dispatch@v2 + - uses: peter-evans/slash-command-dispatch@v2.3.0 with: token: ${{ secrets.PULUMI_BOT_TOKEN }} reaction-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml index 6bf53cf123..5619a9d79a 100644 --- a/.github/workflows/prerelease.yml +++ b/.github/workflows/prerelease.yml @@ -44,16 +44,16 @@ jobs: name: prerequisites steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -62,7 +62,7 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - if: github.event_name == 'pull_request' @@ -90,7 +90,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }} - if: github.event_name == 'pull_request' name: Comment on PR with Details of Schema Check - uses: thollander/actions-comment-pull-request@v2 + uses: thollander/actions-comment-pull-request@v2.5.0 with: message: | ${{ env.SCHEMA_CHANGES }} @@ -105,7 +105,7 @@ jobs: number: ${{ github.event.issue.number }} github_token: ${{ secrets.GITHUB_TOKEN }} - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -119,19 +119,19 @@ jobs: github.workspace}}/bin/ pulumi-resource-${{ env.PROVIDER }} pulumi-gen-${{ env.PROVIDER}} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin/provider.tar.gz - name: Test Provider Library run: make test_provider - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v4.6.0 env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in building provider prerequisites fields: repo,commit,author,action @@ -151,16 +151,16 @@ jobs: name: build_sdks steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -169,34 +169,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -209,7 +209,7 @@ jobs: - name: Generate SDK run: make ${{ matrix.language }}_sdk - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -221,13 +221,13 @@ jobs: - name: Tar SDK folder run: tar -zcf sdk/${{ matrix.language }}.tar.gz -C sdk/${{ matrix.language }} . - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/${{ matrix.language }}.tar.gz - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure while building SDKs fields: repo,commit,author,action @@ -252,16 +252,16 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -270,34 +270,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -308,7 +308,7 @@ jobs: run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print -exec chmod +x {} \; - name: Download SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -329,12 +329,12 @@ jobs: - name: Make Kube Directory run: mkdir -p "~/.kube/" - name: Download Kubeconfig - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: config path: ~/.kube/ - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v4.0.2 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-region: ${{ env.AWS_REGION }} @@ -343,7 +343,7 @@ jobs: role-session-name: ${{ env.PROVIDER }}@githubActions role-to-assume: ${{ secrets.AWS_CI_ROLE_ARN }} - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -351,7 +351,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -380,7 +380,7 @@ jobs: 2h -parallel 4 ./... - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in SDK tests fields: repo,commit,author,action @@ -391,16 +391,16 @@ jobs: name: publish steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -418,11 +418,11 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v4.0.2 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-region: us-east-2 @@ -432,7 +432,7 @@ jobs: role-external-id: upload-pulumi-release role-to-assume: ${{ secrets.AWS_UPLOAD_ROLE_ARN }} - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v5 + uses: goreleaser/goreleaser-action@v5.1.0 env: GORELEASER_CURRENT_TAG: v${{ steps.version.outputs.version }} with: @@ -440,7 +440,7 @@ jobs: version: latest - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in publishing binaries fields: repo,commit,author,action @@ -451,22 +451,22 @@ jobs: name: publish_sdk steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Checkout Scripts Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: path: ci-scripts repository: pulumi/scripts - run: echo "ci-scripts" >> .git/info/exclude - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -475,22 +475,22 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Download python SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: python-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -498,7 +498,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/python.tar.gz -C ${{github.workspace}}/sdk/python - name: Download dotnet SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: dotnet-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -506,7 +506,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/dotnet.tar.gz -C ${{github.workspace}}/sdk/dotnet - name: Download nodejs SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: nodejs-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -522,7 +522,7 @@ jobs: PYPI_PUBLISH_ARTIFACTS: all - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in publishing SDK fields: repo,commit,author,action @@ -534,16 +534,16 @@ jobs: name: publish_java_sdk steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -552,19 +552,19 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download java SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: java-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -572,7 +572,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/java.tar.gz -C ${{github.workspace}}/sdk/java - name: Publish Java SDK - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 env: PACKAGE_VERSION: ${{ env.PROVIDER_VERSION }} with: @@ -585,16 +585,16 @@ jobs: needs: publish_sdk steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Download go SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: go-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -624,25 +624,25 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -650,7 +650,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -671,7 +671,7 @@ jobs: - name: Create test infrastructure run: ./scripts/ci-cluster-create.sh ${{ steps.stackname.outputs.stack-name }} - name: Upload Kubernetes Artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: config path: ~/.kube/config @@ -688,25 +688,25 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -714,7 +714,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -731,6 +731,6 @@ jobs: - name: Destroy test infra run: ./scripts/ci-cluster-destroy.sh ${{ needs.build-test-cluster.outputs.stack-name }} - - uses: geekyeggo/delete-artifact@v5 + - uses: geekyeggo/delete-artifact@v5.1.0 with: name: config diff --git a/.github/workflows/pull-request.yml b/.github/workflows/pull-request.yml index de2757acfb..150b1b5b00 100644 --- a/.github/workflows/pull-request.yml +++ b/.github/workflows/pull-request.yml @@ -41,11 +41,11 @@ jobs: name: comment-on-pr steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Comment PR - uses: thollander/actions-comment-pull-request@v2 + uses: thollander/actions-comment-pull-request@v2.5.0 with: message: > PR is now waiting for a maintainer to run the acceptance tests. diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d519cfbc26..daa733705b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -44,16 +44,16 @@ jobs: name: prerequisites steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -62,7 +62,7 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - if: github.event_name == 'pull_request' @@ -90,7 +90,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }} - if: github.event_name == 'pull_request' name: Comment on PR with Details of Schema Check - uses: thollander/actions-comment-pull-request@v2 + uses: thollander/actions-comment-pull-request@v2.5.0 with: message: | ${{ env.SCHEMA_CHANGES }} @@ -105,7 +105,7 @@ jobs: number: ${{ github.event.issue.number }} github_token: ${{ secrets.GITHUB_TOKEN }} - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -119,19 +119,19 @@ jobs: github.workspace}}/bin/ pulumi-resource-${{ env.PROVIDER }} pulumi-gen-${{ env.PROVIDER}} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin/provider.tar.gz - name: Test Provider Library run: make test_provider - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v4.6.0 env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in building provider prerequisites fields: repo,commit,author,action @@ -151,16 +151,16 @@ jobs: name: build_sdks steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -169,34 +169,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -209,7 +209,7 @@ jobs: - name: Generate SDK run: make ${{ matrix.language }}_sdk - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -221,13 +221,13 @@ jobs: - name: Tar SDK folder run: tar -zcf sdk/${{ matrix.language }}.tar.gz -C sdk/${{ matrix.language }} . - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/${{ matrix.language }}.tar.gz - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure while building SDKs fields: repo,commit,author,action @@ -252,16 +252,16 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -270,34 +270,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -308,7 +308,7 @@ jobs: run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print -exec chmod +x {} \; - name: Download SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -329,12 +329,12 @@ jobs: - name: Make Kube Directory run: mkdir -p "~/.kube/" - name: Download Kubeconfig - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: config path: ~/.kube/ - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v4.0.2 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-region: ${{ env.AWS_REGION }} @@ -343,7 +343,7 @@ jobs: role-session-name: ${{ env.PROVIDER }}@githubActions role-to-assume: ${{ secrets.AWS_CI_ROLE_ARN }} - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -351,7 +351,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -380,7 +380,7 @@ jobs: 2h -parallel 4 ./... - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in SDK tests fields: repo,commit,author,action @@ -391,16 +391,16 @@ jobs: name: publish steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -418,11 +418,11 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v4.0.2 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-region: us-east-2 @@ -432,7 +432,7 @@ jobs: role-external-id: upload-pulumi-release role-to-assume: ${{ secrets.AWS_UPLOAD_ROLE_ARN }} - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v5 + uses: goreleaser/goreleaser-action@v5.1.0 env: GORELEASER_CURRENT_TAG: v${{ steps.version.outputs.version }} with: @@ -440,7 +440,7 @@ jobs: version: latest - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in publishing binaries fields: repo,commit,author,action @@ -451,22 +451,22 @@ jobs: name: publish_sdks steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Checkout Scripts Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: path: ci-scripts repository: pulumi/scripts - run: echo "ci-scripts" >> .git/info/exclude - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -475,22 +475,22 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Download python SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: python-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -498,7 +498,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/python.tar.gz -C ${{github.workspace}}/sdk/python - name: Download dotnet SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: dotnet-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -506,7 +506,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/dotnet.tar.gz -C ${{github.workspace}}/sdk/dotnet - name: Download nodejs SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: nodejs-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -522,7 +522,7 @@ jobs: PYPI_PUBLISH_ARTIFACTS: all - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in publishing SDK fields: repo,commit,author,action @@ -534,16 +534,16 @@ jobs: name: publish_java_sdk steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -552,19 +552,19 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download java SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: java-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -572,7 +572,7 @@ jobs: run: tar -zxf ${{github.workspace}}/sdk/java.tar.gz -C ${{github.workspace}}/sdk/java - name: Publish Java SDK - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 env: PACKAGE_VERSION: ${{ env.PROVIDER_VERSION }} with: @@ -585,16 +585,16 @@ jobs: needs: publish_sdk steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Download go SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: go-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -638,25 +638,25 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -664,7 +664,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -685,7 +685,7 @@ jobs: - name: Create test infrastructure run: ./scripts/ci-cluster-create.sh ${{ steps.stackname.outputs.stack-name }} - name: Upload Kubernetes Artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: config path: ~/.kube/config @@ -702,25 +702,25 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -728,7 +728,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -745,6 +745,6 @@ jobs: - name: Destroy test infra run: ./scripts/ci-cluster-destroy.sh ${{ needs.build-test-cluster.outputs.stack-name }} - - uses: geekyeggo/delete-artifact@v5 + - uses: geekyeggo/delete-artifact@v5.1.0 with: name: config diff --git a/.github/workflows/run-acceptance-tests.yml b/.github/workflows/run-acceptance-tests.yml index ab78098559..752553b749 100644 --- a/.github/workflows/run-acceptance-tests.yml +++ b/.github/workflows/run-acceptance-tests.yml @@ -53,7 +53,7 @@ jobs: run-url=https://github.com/$GITHUB_REPOSITORY/actions/runs/$GITHUB_RUN_ID >> "$GITHUB_OUTPUT" - name: Update with Result - uses: peter-evans/create-or-update-comment@v1 + uses: peter-evans/create-or-update-comment@v1.4.5 with: token: ${{ secrets.PULUMI_BOT_TOKEN }} repository: ${{ github.event.client_payload.github.payload.repository.full_name }} @@ -65,17 +65,17 @@ jobs: name: prerequisites steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true ref: ${{ env.PR_COMMIT_SHA }} - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -84,7 +84,7 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - if: github.event_name == 'pull_request' @@ -112,7 +112,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.PULUMI_BOT_TOKEN }} - if: github.event_name == 'pull_request' name: Comment on PR with Details of Schema Check - uses: thollander/actions-comment-pull-request@v2 + uses: thollander/actions-comment-pull-request@v2.5.0 with: message: | ${{ env.SCHEMA_CHANGES }} @@ -127,7 +127,7 @@ jobs: number: ${{ github.event.issue.number }} github_token: ${{ secrets.GITHUB_TOKEN }} - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -141,19 +141,19 @@ jobs: github.workspace}}/bin/ pulumi-resource-${{ env.PROVIDER }} pulumi-gen-${{ env.PROVIDER}} - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin/provider.tar.gz - name: Test Provider Library run: make test_provider - name: Upload coverage reports to Codecov - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v4.6.0 env: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in building provider prerequisites fields: repo,commit,author,action @@ -175,17 +175,17 @@ jobs: name: build_sdks steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true ref: ${{ env.PR_COMMIT_SHA }} - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -194,34 +194,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -234,7 +234,7 @@ jobs: - name: Generate SDK run: make ${{ matrix.language }}_sdk - name: Check worktree clean - uses: pulumi/git-status-check-action@v1 + uses: pulumi/git-status-check-action@v1.1.1 with: allowed-changes: |- sdk/**/pulumi-plugin.json @@ -246,14 +246,14 @@ jobs: - name: Tar SDK folder run: tar -zcf sdk/${{ matrix.language }}.tar.gz -C sdk/${{ matrix.language }} . - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v4.4.3 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/${{ matrix.language }}.tar.gz retention-days: 30 - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure while building SDKs fields: repo,commit,author,action @@ -279,17 +279,17 @@ jobs: id-token: write steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true ref: ${{ env.PR_COMMIT_SHA }} - id: version name: Set Provider Version - uses: pulumi/provider-version-action@7c54f136703646f7d6eaa3d3b3c877e5a805d6ab # v1 + uses: pulumi/provider-version-action@v1.5.3 with: set-env: PROVIDER_VERSION - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -298,34 +298,34 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Setup Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v4.5.0 with: java-version: ${{ env.JAVAVERSION }} distribution: temurin cache: gradle - name: Setup Gradle - uses: gradle/gradle-build-action@v3 + uses: gradle/gradle-build-action@v3.5.0 with: gradle-version: "7.6" - name: Download provider + tfgen binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: pulumi-${{ env.PROVIDER }}-provider.tar.gz path: ${{ github.workspace }}/bin @@ -336,7 +336,7 @@ jobs: run: find ${{ github.workspace }} -name "pulumi-*-${{ env.PROVIDER }}" -print -exec chmod +x {} \; - name: Download SDK - uses: actions/download-artifact@v4 + uses: actions/download-artifact@v4.1.8 with: name: ${{ matrix.language }}-sdk.tar.gz path: ${{ github.workspace}}/sdk/ @@ -355,7 +355,7 @@ jobs: - name: Install dependencies run: make install_${{ matrix.language}}_sdk - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v4.0.2 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-region: ${{ env.AWS_REGION }} @@ -364,7 +364,7 @@ jobs: role-session-name: ${{ env.PROVIDER }}@githubActions role-to-assume: ${{ secrets.AWS_CI_ROLE_ARN }} - name: Authenticate to Google Cloud - uses: google-github-actions/auth@v0 + uses: google-github-actions/auth@v2.1.7 with: workload_identity_provider: projects/${{ env.GOOGLE_PROJECT_NUMBER }}/locations/global/workloadIdentityPools/${{ @@ -372,7 +372,7 @@ jobs: env.GOOGLE_CI_WORKLOAD_IDENTITY_PROVIDER }} service_account: ${{ env.GOOGLE_CI_SERVICE_ACCOUNT_EMAIL }} - name: Setup gcloud auth - uses: google-github-actions/setup-gcloud@v2 + uses: google-github-actions/setup-gcloud@v2.1.2 with: install_components: gke-gcloud-auth-plugin - name: Install Kubectl @@ -397,7 +397,7 @@ jobs: version: v2.5.0 token: ${{ secrets.GITHUB_TOKEN }} - name: Setup KinD cluster - uses: helm/kind-action@v1 + uses: helm/kind-action@v1.10.0 with: cluster_name: kind-integration-tests-${{ matrix.language }} node_image: kindest/node:v1.29.2 @@ -406,7 +406,7 @@ jobs: 2h -parallel 4 -short ./... - if: failure() && github.event_name == 'push' name: Notify Slack - uses: 8398a7/action-slack@v3 + uses: 8398a7/action-slack@v3.16.2 with: author_name: Failure in SDK tests fields: repo,commit,author,action @@ -418,7 +418,7 @@ jobs: name: sentinel steps: - name: Mark workflow as successful - uses: guibranco/github-status-action-v2@0849440ec82c5fa69b2377725b9b7852a3977e76 + uses: guibranco/github-status-action-v2@1.1.13 with: authToken: ${{ secrets.GITHUB_TOKEN }} context: Sentinel @@ -434,18 +434,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true ref: ${{ env.PR_COMMIT_SHA }} - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" - - run: touch provider/cmd/pulumi-resource-kubernetes/{terraform-mapping,schema}-embed.json - name: golangci-lint provider pkg - uses: golangci/golangci-lint-action@v4 + uses: golangci/golangci-lint-action@v4.0.1 with: version: ${{ env.GOLANGCI_LINT_VERSION }} args: -c ../.golangci.yml diff --git a/.github/workflows/weekly-pulumi-update.yml b/.github/workflows/weekly-pulumi-update.yml index a3173208c0..a1e7ad9dcf 100644 --- a/.github/workflows/weekly-pulumi-update.yml +++ b/.github/workflows/weekly-pulumi-update.yml @@ -42,11 +42,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@v4 + uses: actions/checkout@v4.2.2 with: lfs: true - name: Install Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v5.1.0 with: go-version: ${{ env.GOVERSION }} cache-dependency-path: "**/*.sum" @@ -55,20 +55,20 @@ jobs: with: repo: pulumi/pulumictl - name: Install Pulumi CLI - uses: pulumi/actions@c7fad9e2f0b79653172b36538b8b34b3c0291952 # v6 + uses: pulumi/actions@v5.5.1 with: pulumi-version-file: .pulumi.version - name: Setup DotNet - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v4.1.0 with: dotnet-version: ${{ env.DOTNETVERSION }} - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@v4.1.0 with: node-version: ${{ env.NODEVERSION }} registry-url: https://registry.npmjs.org - name: Setup Python - uses: actions/setup-python@v5 + uses: actions/setup-python@v5.3.0 with: python-version: ${{ env.PYTHONVERSION }} - name: Update Pulumi/Pulumi diff --git a/.goreleaser.prerelease.yml b/.goreleaser.prerelease.yml index 57c6c572e2..6d20f839fb 100644 --- a/.goreleaser.prerelease.yml +++ b/.goreleaser.prerelease.yml @@ -22,6 +22,8 @@ builds: ignore: [] main: ./cmd/pulumi-resource-kubernetes/ ldflags: + - -s + - -w - -X github.com/pulumi/pulumi-kubernetes/provider/v4/pkg/version.Version={{.Tag}} binary: pulumi-resource-kubernetes diff --git a/.goreleaser.yml b/.goreleaser.yml index 467b68796e..7b29befd25 100644 --- a/.goreleaser.yml +++ b/.goreleaser.yml @@ -22,6 +22,8 @@ builds: ignore: [] main: ./cmd/pulumi-resource-kubernetes/ ldflags: + - -s + - -w - -X github.com/pulumi/pulumi-kubernetes/provider/v4/pkg/version.Version={{.Tag}} binary: pulumi-resource-kubernetes