diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..2c48305 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/azure-ipam-assets.yml b/.github/workflows/azure-ipam-assets.yml index 19d2272..0e87c54 100644 --- a/.github/workflows/azure-ipam-assets.yml +++ b/.github/workflows/azure-ipam-assets.yml @@ -19,19 +19,19 @@ jobs: - name: "Setup NodeJS v22" id: setupNode - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 22 - name: "Setup Python v3.11" id: setupPython - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: '3.11' - name: Checkout Azure IPAM Code id: checkoutRepo - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 - name: Install NPM Packages id: installNpmPackages diff --git a/.github/workflows/azure-ipam-build.yml b/.github/workflows/azure-ipam-build.yml index e006ec6..ade7922 100644 --- a/.github/workflows/azure-ipam-build.yml +++ b/.github/workflows/azure-ipam-build.yml @@ -40,7 +40,7 @@ jobs: steps: - name: Azure Login id: azureLogin - uses: azure/login@v2 + uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} @@ -49,7 +49,7 @@ jobs: - name: Checkout Azure IPAM Code id: checkoutRepo - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: sparse-checkout: | engine @@ -71,7 +71,7 @@ jobs: steps: - name: Azure Login id: azureLogin - uses: azure/login@v2 + uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: client-id: ${{ secrets.AZURE_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TENANT_ID }} @@ -80,7 +80,7 @@ jobs: - name: Checkout Azure IPAM Code id: checkoutRepo - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: sparse-checkout: | engine diff --git a/.github/workflows/azure-ipam-testing.yml b/.github/workflows/azure-ipam-testing.yml index 396283a..f51b7a1 100644 --- a/.github/workflows/azure-ipam-testing.yml +++ b/.github/workflows/azure-ipam-testing.yml @@ -32,14 +32,14 @@ jobs: - name: Azure Login id: azureLogin - uses: azure/login@v2 + uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: creds: ${{ secrets.AZURE_CREDENTIALS }} enable-AzPSSession: true - name: Checkout Azure IPAM Code id: checkoutRepo - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: sparse-checkout: | deploy @@ -141,14 +141,14 @@ jobs: - name: Azure Login id: azureLogin - uses: azure/login@v2 + uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: creds: ${{ secrets.AZURE_CREDENTIALS }} enable-AzPSSession: true - name: Checkout Azure IPAM Code id: checkoutRepo - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: sparse-checkout: | tests @@ -193,7 +193,7 @@ jobs: - name: Azure Login id: azureLogin - uses: azure/login@v2 + uses: azure/login@7184910d9eb2b1c5e48f7073824a90609bb9b6d6 # v2.3.1 with: creds: ${{ secrets.AZURE_CREDENTIALS }} enable-AzPSSession: true diff --git a/.github/workflows/azure-ipam-version.yml b/.github/workflows/azure-ipam-version.yml index 1da6850..a004dbd 100644 --- a/.github/workflows/azure-ipam-version.yml +++ b/.github/workflows/azure-ipam-version.yml @@ -25,19 +25,19 @@ jobs: - name: "Setup NodeJS v22" id: setupNode - uses: actions/setup-node@v4 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 22 - name: "Setup Python v3.11" id: setupPython - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: '3.11' - name: "Extract Pull Request Details" id: getPullRequestData - uses: actions/github-script@v7 + uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 with: script: | return ( @@ -50,14 +50,14 @@ jobs: - name: "Create GitHub App Token" id: appToken - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2 with: app-id: ${{ vars.IPAM_GITHUB_APP_ID }} private-key: ${{ secrets.IPAM_GITHUB_APP_KEY }} - name: Checkout Azure IPAM Code id: checkoutRepo - uses: actions/checkout@v4 + uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: token: ${{ steps.appToken.outputs.token }} @@ -126,7 +126,7 @@ jobs: steps: - name: "Create GitHub App Token" id: appToken - uses: actions/create-github-app-token@v2 + uses: actions/create-github-app-token@fee1f7d63c2ff003460e3d139729b119787bc349 # v2.2.2 with: app-id: ${{ vars.IPAM_GITHUB_APP_ID }} private-key: ${{ secrets.IPAM_GITHUB_APP_KEY }}