From 504faa4a825169ab0f3a4f339b5d59d4de11ecf4 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 4 Sep 2024 15:52:53 +0000 Subject: [PATCH] chore(workflows): update github actions (#1404) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | OpenSSF | |---|---|---|---|---| | [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact) | action | digest | `834a144` -> `5076954` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/actions/upload-artifact/badge)](https://securityscorecards.dev/viewer/?uri=github.com/actions/upload-artifact) | | [mheap/github-action-required-labels](https://redirect.github.com/mheap/github-action-required-labels) | action | digest | `5847eef` -> `d25134c` | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/mheap/github-action-required-labels/badge)](https://securityscorecards.dev/viewer/?uri=github.com/mheap/github-action-required-labels) | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/weareinreach/InReach). Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/nextjs_bundle_analysis.yml | 2 +- .github/workflows/pr-labels.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/nextjs_bundle_analysis.yml b/.github/workflows/nextjs_bundle_analysis.yml index b19defb8ea..9410fec465 100644 --- a/.github/workflows/nextjs_bundle_analysis.yml +++ b/.github/workflows/nextjs_bundle_analysis.yml @@ -75,7 +75,7 @@ jobs: run: npx -p nextjs-bundle-analysis report - name: Upload bundle - uses: actions/upload-artifact@834a144ee995460fba8ed112a2fc961b36a5ec5a # v4 + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4 with: name: bundle path: /home/runner/work/InReach/InReach/apps/app/.next/analyze/__bundle_analysis.json diff --git a/.github/workflows/pr-labels.yml b/.github/workflows/pr-labels.yml index 49dafa8d8f..51b7a59fbd 100644 --- a/.github/workflows/pr-labels.yml +++ b/.github/workflows/pr-labels.yml @@ -13,7 +13,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GH_ACT_PAT }} steps: - name: 🏷 Verify PR has a valid label - uses: mheap/github-action-required-labels@5847eef68201219cf0a4643ea7be61e77837bbce # v5 + uses: mheap/github-action-required-labels@d25134c992b943fb6ad00c25ea00eb5988c0a9dd # v5 with: labels: 'breaking-change, bugfix, documentation, enhancement, refactor, performance, new-feature, maintenance, ci, dependencies, translations, changelog-ignore, release' mode: minimum