upgrade all actions to the latest

Signed-off-by: Young Bu Park <[email protected]>
radius-project · Apr 1, 2024 · cf0196f · cf0196f
1 parent a51faef
commit cf0196f
Show file tree

Hide file tree

Showing 13 changed files with 38 additions and 38 deletions.
diff --git a/.github/actions/download-pr-data-artifact/action.yaml b/.github/actions/download-pr-data-artifact/action.yaml
@@ -10,7 +10,7 @@ runs:
   using: "composite"
   steps:
     - name: Download artifact
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       with:
         script: |
           let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({
@@ -34,7 +34,7 @@ runs:
       run: unzip pr_number.zip
     - name: Set PR number
       id: set-pr-number
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       with:
         script: |
           let fs = require('fs');

diff --git a/.github/actions/setup-rad-cli/action.yaml b/.github/actions/setup-rad-cli/action.yaml
@@ -4,7 +4,7 @@ runs:
   using: "composite"
   steps:
     - name: Set up Go ${{ env.GOVER }}
-      uses: actions/setup-go@v3
+      uses: actions/setup-go@v5
       with:
         go-version: ${{ env.GOVER }}
     - name: Get Go Cache path
@@ -13,7 +13,7 @@ runs:
       run: |
         echo "go-build=$(go env GOCACHE)" >> $GITHUB_OUTPUT
         echo "go-mod=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT
-    - uses: actions/cache@v3
+    - uses: actions/cache@v4
       with:
         path: |
           ${{ steps.go-cache-paths.outputs.go-build }}
@@ -22,12 +22,12 @@ runs:
         restore-keys: |
           ${{ runner.os }}-go-
     - name: Setup kubectl
-      uses: azure/setup-kubectl@v2.0
+      uses: azure/setup-kubectl@v4
     - name: Parse release version and set environment variables
       shell: bash
       run: python ./.github/scripts/get_release_version.py
     - name: Download release artifacts
-      uses: actions/download-artifact@v3
+      uses: actions/download-artifact@v4
       with:
         name: rad_cli_linux_amd64
         path: dist

diff --git a/.github/workflows/close-stale-prs.yml b/.github/workflows/close-stale-prs.yml
@@ -16,7 +16,7 @@ jobs:
       pull-requests: write
 
     steps:
-    - uses: actions/stale@v5
+    - uses: actions/stale@v9
       with:
         repo-token: ${{ secrets.GITHUB_TOKEN }}
         stale-pr-message: 'This pull request has been automatically marked as stale because it has been inactive for 90 days. Remove stale label or comment or this PR will be closed in 7 days.'

diff --git a/.github/workflows/devops-boards.yaml b/.github/workflows/devops-boards.yaml
@@ -13,7 +13,7 @@ jobs:
   alert:
     runs-on: ubuntu-latest
     steps:
-      - uses: danhellem/github-actions-issue-to-work-item@v2.1
+      - uses: danhellem/github-actions-issue-to-work-item@v2.2
         env:
           ado_token: "${{ secrets.ADO_AOCTO_BOT_TOKEN }}"
           github_token: "${{ secrets.GH_RAD_CI_BOT_PAT }}"

diff --git a/.github/workflows/functional-test.yaml b/.github/workflows/functional-test.yaml
@@ -103,7 +103,7 @@ jobs:
       DE_TAG: ${{ steps.gen-id.outputs.DE_TAG }}
     steps:
       - name: Get GitHub app token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         id: get_installation_token
         with: 
           app_id: ${{ env.FUNCTIONAL_TEST_APP_ID }}
@@ -127,7 +127,7 @@ jobs:
         id: get-pr-number
       - name: 'Set PR context (workflow_run)'
         if: github.event_name == 'workflow_run'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           script: |
@@ -140,7 +140,7 @@ jobs:
               `PR_NUMBER=${{ steps.get-pr-number.outputs.pr_number }}\n`);
       - name: Set DE image and tag (repository_dispatch from de-functional-test)
         if: github.event_name == 'repository_dispatch'
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{ secrets.GH_RAD_CI_BOT_PAT }}
           script: |
@@ -225,7 +225,7 @@ jobs:
             
             ## Test Status
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -342,7 +342,7 @@ jobs:
       DE_TAG: ${{ needs.build.outputs.DE_TAG }}
     steps:
       - name: Get GitHub app token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         id: get_installation_token
         with: 
           app_id: ${{ env.FUNCTIONAL_TEST_APP_ID }}
@@ -369,7 +369,7 @@ jobs:
           ref: refs/heads/edge
           path: samples
       - name: Set up Go ${{ env.GOVER }}
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GOVER }}
       - name: Get Go Cache path
@@ -386,7 +386,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
       - name: Download rad CLI
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: ${{ env.RAD_CLI_ARTIFACT_NAME }}
           path: bin
@@ -416,7 +416,7 @@ jobs:
           while [ $(az group exists --name $RESOURCE_GROUP) = false ]; do sleep 2; done
         env:
           RESOURCE_GROUP: ${{ env.AZURE_TEST_RESOURCE_GROUP }}
-      - uses: azure/setup-helm@v3
+      - uses: azure/setup-helm@v4
         with:
           version: ${{ env.HELM_VER }}
       - name: Create KinD cluster
@@ -473,7 +473,7 @@ jobs:
           helm repo add azure-workload-identity https://azure.github.io/azure-workload-identity/charts
           helm install workload-identity-webhook azure-workload-identity/workload-identity-webhook --namespace radius-default --create-namespace --version ${{ env.AZURE_WORKLOAD_IDENTITY_WEBHOOK_VER }} --set azureTenantID=${{ secrets.AZURE_SP_TESTS_TENANTID }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -574,7 +574,7 @@ jobs:
           BICEP_RECIPE_REGISTRY: ${{ env.BICEP_RECIPE_REGISTRY }}
           BICEP_RECIPE_TAG_VERSION: ${{ env.BICEP_RECIPE_TAG_VERSION }}
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: azure/setup-kubectl@v3
+      - uses: azure/setup-kubectl@v4
         if: always()
         with:
           version: ${{ env.KUBECTL_VER }}
@@ -654,7 +654,7 @@ jobs:
       CHECKOUT_REF: ${{ needs.build.outputs.CHECKOUT_REF }}
     steps:
       - name: Get GitHub app token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         id: get_installation_token
         with: 
           app_id: ${{ env.FUNCTIONAL_TEST_APP_ID }}
@@ -698,7 +698,7 @@ jobs:
     if: failure() && github.event_name == 'schedule' && github.repository == 'radius-project/radius'
     steps:
       - name: Create failure issue for failing scheduled run
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{ secrets.GH_RAD_CI_BOT_PAT }}
           script: |

diff --git a/.github/workflows/long-running-azure.yaml b/.github/workflows/long-running-azure.yaml
@@ -214,7 +214,7 @@ jobs:
           tenant-id: ${{ secrets.AZURE_SP_TESTS_TENANTID }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTIONID_TESTS }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -322,7 +322,7 @@ jobs:
           go-version: ${{ env.GOVER }}
       - name: Download rad CLI
         if: env.SKIP_BUILD != 'true'
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: ${{ env.RAD_CLI_ARTIFACT_NAME }}
           path: bin
@@ -345,7 +345,7 @@ jobs:
           tenant-id: ${{ secrets.AZURE_SP_TESTS_TENANTID }}
           subscription-id: ${{ secrets.AZURE_SUBSCRIPTIONID_TESTS }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -503,7 +503,7 @@ jobs:
     if: failure() && github.repository == 'radius-project/radius' && github.event_name == 'schedule'
     steps:
       - name: Create failure issue for failing long running test run
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         with:
           github-token: ${{ secrets.GH_RAD_CI_BOT_PAT }}
           script: |

diff --git a/.github/workflows/publish-bicep.yaml b/.github/workflows/publish-bicep.yaml
@@ -57,7 +57,7 @@ jobs:
           cp -R hack/bicep-types-radius/generated/* workflow-temp/bicep/src/Bicep.Types.Radius/generated
 
       - name: Create Pull Request in radius-project/bicep repo
-        uses: peter-evans/create-pull-request@v4
+        uses: peter-evans/create-pull-request@v6
         with:
           path: workflow-temp/bicep
           token: ${{ secrets.GH_RAD_CI_BOT_PAT }}

diff --git a/.github/workflows/publish-docs.yaml b/.github/workflows/publish-docs.yaml
@@ -104,7 +104,7 @@ jobs:
           git status --porcelain -unormal -- *.md
       - name: Create pull request
         if: github.event_name == 'push' || (github.event_name == 'workflow_dispatch' && github.event.inputs.open_pull_request == 'true')
-        uses: peter-evans/create-pull-request@v5
+        uses: peter-evans/create-pull-request@v6
         with:
           token: ${{ secrets.GH_RAD_CI_BOT_PAT }}
           path: docs

diff --git a/.github/workflows/purge-aws-test-resources.yaml b/.github/workflows/purge-aws-test-resources.yaml
@@ -32,7 +32,7 @@ jobs:
     if: github.repository == 'radius-project/radius'
     steps:
       - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v1
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           aws-access-key-id: ${{ secrets.FUNCTEST_AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.FUNCTEST_AWS_SECRET_ACCESS_KEY }}

diff --git a/.github/workflows/radius-bot.yaml b/.github/workflows/radius-bot.yaml
@@ -16,7 +16,7 @@ jobs:
             .github/scripts/radius-bot.js
           sparse-checkout-cone-mode: false
       - name: Comment analyzer
-        uses: actions/github-script@v6
+        uses: actions/github-script@v7
         env:
           TEAM_SLUG: 'approvers-radius'
         with:

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -46,7 +46,7 @@ jobs:
         uses: actions/checkout@v4
       - name: Get supported versions from versions.yaml
         id: get-supported-versions
-        uses: mikefarah/yq@v4.34.2
+        uses: mikefarah/yq@v4.43.1
         with:
           # Get a comma-separated list of supported versions
           cmd: yq '.supported[].version' versions.yaml | tr '\n' ',' | sed 's/,$//'
@@ -165,7 +165,7 @@ jobs:
           git config --global user.email "[email protected]"
       - name: Get supported versions from versions.yaml
         id: get-supported-versions
-        uses: mikefarah/yq@v4.34.2
+        uses: mikefarah/yq@v4.43.1
         with:
           # Get a comma-separated list of supported versions
           cmd: yq '.supported[].version' ./radius/versions.yaml | tr '\n' ',' | sed 's/,$//'

diff --git a/.github/workflows/retry-functional-test.yaml b/.github/workflows/retry-functional-test.yaml
@@ -90,7 +90,7 @@ jobs:
       DE_TAG: ${{ steps.gen-id.outputs.DE_TAG }}
     steps:
       - name: Get GitHub app token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         id: get_installation_token
         with: 
           app_id: ${{ env.FUNCTIONAL_TEST_APP_ID }}
@@ -169,7 +169,7 @@ jobs:
             
             ## Test Status
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -285,7 +285,7 @@ jobs:
       DE_TAG: ${{ needs.build.outputs.DE_TAG }}
     steps:
       - name: Get GitHub app token
-        uses: tibdex/github-app-token@v1
+        uses: tibdex/github-app-token@v2
         id: get_installation_token
         with: 
           app_id: ${{ env.FUNCTIONAL_TEST_APP_ID }}
@@ -320,7 +320,7 @@ jobs:
           restore-keys: |
             ${{ runner.os }}-go-
       - name: Download rad CLI
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: ${{ env.RAD_CLI_ARTIFACT_NAME }}
           path: bin
@@ -407,7 +407,7 @@ jobs:
           helm repo add azure-workload-identity https://azure.github.io/azure-workload-identity/charts
           helm install workload-identity-webhook azure-workload-identity/workload-identity-webhook --namespace radius-default --create-namespace --version ${{ env.AZURE_WORKLOAD_IDENTITY_WEBHOOK_VER }} --set azureTenantID=${{ secrets.AZURE_SP_TESTS_TENANTID }}
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -508,7 +508,7 @@ jobs:
           BICEP_RECIPE_REGISTRY: ${{ env.BICEP_RECIPE_REGISTRY }}
           BICEP_RECIPE_TAG_VERSION: ${{ env.BICEP_RECIPE_TAG_VERSION }}
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-      - uses: azure/setup-kubectl@v3
+      - uses: azure/setup-kubectl@v4
         if: always()
         with:
           version: ${{ env.KUBECTL_VER }}

diff --git a/.github/workflows/triage-bot.yaml b/.github/workflows/triage-bot.yaml
@@ -29,12 +29,12 @@ jobs:
     env: 
       RADIUS_TRIAGE_BOT_APP_ID: 417813
     steps:
-    - uses: tibdex/github-app-token@v1
+    - uses: tibdex/github-app-token@v2
       id: get_installation_token
       with: 
         app_id: ${{ env.RADIUS_TRIAGE_BOT_APP_ID }}
         private_key: ${{ secrets.RADIUS_TRIAGE_BOT_PRIVATE_KEY }}
-    - uses: dessant/label-actions@v3
+    - uses: dessant/label-actions@v4
       with:
         github-token: ${{ steps.get_installation_token.outputs.token }}
         config-path: '.github/triage-bot/triage-bot-config.yaml'