From 753630068a34a5d23d0ef462b51c61b024d36d11 Mon Sep 17 00:00:00 2001 From: NishkarshRaj Date: Thu, 21 Sep 2023 22:43:12 +0530 Subject: [PATCH] bump Signed-off-by: NishkarshRaj --- .github/dependabot.yml | 1291 ----------------- .github/workflows/automate_area-labels.yml | 6 +- .../workflows/automate_changeset_feedback.yml | 4 +- .github/workflows/automate_merge_message.yml | 4 +- .github/workflows/automate_stale.yml | 6 +- .github/workflows/ci.yml | 18 +- .github/workflows/cron.yml | 2 +- .github/workflows/dependency-review.yml | 27 - .github/workflows/deploy_docker-image.yml | 12 +- .github/workflows/deploy_microsite.yml | 6 +- .github/workflows/deploy_packages.yml | 12 +- .github/workflows/issue.yaml | 2 +- .../workflows/pr-review-comment-trigger.yaml | 2 +- .github/workflows/pr-review-comment.yaml | 4 +- .github/workflows/pr.yaml | 2 +- .github/workflows/scorecard.yml | 4 +- .github/workflows/sync_code-formatting.yml | 4 +- .../workflows/sync_dependabot-changesets.yml | 4 +- .github/workflows/sync_release-manifest.yml | 8 +- .../workflows/sync_renovate-changesets.yml | 4 +- .github/workflows/sync_snyk-github-issues.yml | 6 +- .github/workflows/sync_snyk-monitor.yml | 8 +- .github/workflows/sync_version-packages.yml | 4 +- .github/workflows/uffizzi-build.yml | 14 +- .github/workflows/uffizzi-preview.yaml | 4 +- .github/workflows/verify_accessibility.yml | 6 +- .github/workflows/verify_codeql.yml | 14 +- .github/workflows/verify_docs-quality.yml | 2 +- .github/workflows/verify_e2e-kubernetes.yml | 6 +- .github/workflows/verify_e2e-linux.yml | 6 +- .github/workflows/verify_e2e-techdocs.yml | 4 +- .github/workflows/verify_e2e-windows.yml | 8 +- .github/workflows/verify_fossa.yml | 2 +- .github/workflows/verify_microsite.yml | 4 +- .github/workflows/verify_storybook.yml | 6 +- .github/workflows/verify_windows.yml | 4 +- .pre-commit-config.yaml | 18 - 37 files changed, 101 insertions(+), 1437 deletions(-) delete mode 100644 .github/dependabot.yml delete mode 100644 .github/workflows/dependency-review.yml delete mode 100644 .pre-commit-config.yaml diff --git a/.github/dependabot.yml b/.github/dependabot.yml deleted file mode 100644 index 253e5b3230..0000000000 --- a/.github/dependabot.yml +++ /dev/null @@ -1,1291 +0,0 @@ -version: 2 -updates: - - package-ecosystem: github-actions - directory: / - schedule: - interval: daily - - - package-ecosystem: docker - directory: /contrib/.devcontainer - schedule: - interval: daily - - - package-ecosystem: docker - directory: /contrib/docker/devops - schedule: - interval: daily - - - package-ecosystem: npm - directory: /cypress - schedule: - interval: daily - - - package-ecosystem: npm - directory: /microsite - schedule: - interval: daily - - - package-ecosystem: npm - directory: / - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/app-defaults - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/app-next-example-plugin - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/app-next - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/app - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-app-api - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-defaults - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-dev-utils - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-next - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-openapi-utils - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-plugin-api - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-plugin-manager - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-tasks - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend-test-utils - schedule: - interval: daily - - - package-ecosystem: docker - directory: /packages/backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/catalog-client - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/catalog-model - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/cli-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/cli-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/cli/asset-types - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/cli - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/codemods - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/config-loader - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/config - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/core-app-api - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/core-components - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/core-plugin-api - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/create-app - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/create-app/templates/default-app/examples/template/content - schedule: - interval: daily - - - package-ecosystem: docker - directory: /packages/create-app/templates/default-app/packages/backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/create-app/templates/default-app - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/dev-utils - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/e2e-test - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/errors - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/eslint-plugin - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/eslint-plugin/src/__fixtures__/monorepo - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/eslint-plugin/src/__fixtures__/monorepo/packages/bar - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/eslint-plugin/src/__fixtures__/monorepo/packages/foo - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/frontend-app-api - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/frontend-plugin-api - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/integration-aws-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/integration-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/integration - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/release-manifests - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/repo-tools - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/techdocs-cli-embedded-app - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/techdocs-cli - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/test-utils - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/theme - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/types - schedule: - interval: daily - - - package-ecosystem: npm - directory: /packages/version-bridge - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/adr-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/adr-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/adr - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/airbrake-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/airbrake - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/allure - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/analytics-module-ga - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/analytics-module-ga4 - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/analytics-module-newrelic-browser - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/apache-airflow - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/api-docs-module-protoc-gen-doc - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/api-docs - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/apollo-explorer - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/app-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/app-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/auth-backend-module-gcp-iap-provider - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/auth-backend-module-github-provider - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/auth-backend-module-gitlab-provider - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/auth-backend-module-google-provider - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/auth-backend-module-oauth2-provider - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/auth-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/auth-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/azure-devops-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/azure-devops-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/azure-devops - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/azure-sites-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/azure-sites-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/azure-sites - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/badges-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/badges - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/bazaar-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/bazaar - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/bitbucket-cloud-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/bitrise - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-aws - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-azure - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-bitbucket-cloud - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-bitbucket-server - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-bitbucket - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-gcp - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-gerrit - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-github - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-gitlab - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-incremental-ingestion - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-ldap - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-msgraph - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-openapi - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-puppetdb - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-scaffolder-entity-model - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend-module-unprocessed - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-customized - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-graph - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-graphql - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-import - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog-unprocessed-entities - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/catalog - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/cicd-statistics-module-gitlab - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/cicd-statistics - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/circleci - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/cloudbuild - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/code-climate - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/code-coverage-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/code-coverage - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/codescene - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/config-schema - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/cost-insights-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/cost-insights - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/devtools-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/devtools-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/devtools - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/dynatrace - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/entity-feedback-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/entity-feedback-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/entity-feedback - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/entity-validation - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend-module-aws-sqs - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend-module-azure - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend-module-bitbucket-cloud - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend-module-gerrit - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend-module-github - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend-module-gitlab - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend-test-utils - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/events-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/example-todo-list-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/example-todo-list-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/example-todo-list - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/explore-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/explore-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/explore-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/explore - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/firehydrant - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/fossa - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/gcalendar - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/gcp-projects - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/git-release-manager - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/github-actions - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/github-deployments - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/github-issues - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/github-pull-requests-board - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/gitops-profiles - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/gocd - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/graphiql - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/graphql-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/graphql-voyager - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/home-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/home - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/ilert - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/jenkins-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/jenkins-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/jenkins - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/kafka-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/kafka - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/kubernetes-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/kubernetes-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/kubernetes - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/lighthouse-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/lighthouse-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/lighthouse - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/linguist-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/linguist-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/linguist - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/microsoft-calendar - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/newrelic-dashboard - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/newrelic - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/nomad-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/nomad - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/octopus-deploy - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/opencost - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/org-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/org - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/pagerduty - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/periskop-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/periskop - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/permission-backend-module-policy-allow-all - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/permission-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/permission-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/permission-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/permission-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/playlist-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/playlist-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/playlist - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/proxy-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/puppetdb - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/rollbar-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/rollbar - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-backend-module-confluence-to-markdown - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-backend-module-cookiecutter - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-backend-module-gitlab - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-backend-module-rails - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-backend-module-sentry - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-backend-module-yeoman - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/scaffolder - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-backend-module-catalog - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-backend-module-elasticsearch - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-backend-module-explore - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-backend-module-pg - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-backend-module-techdocs - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-backend-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/search - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/sentry - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/shortcuts - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/sonarqube-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/sonarqube-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/sonarqube - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/splunk-on-call - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/stack-overflow-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/stack-overflow - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/stackstorm - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/tech-insights-backend-module-jsonfc - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/tech-insights-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/tech-insights-common - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/tech-insights-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/tech-insights - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/tech-radar - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/techdocs-addons-test-utils - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/techdocs-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/techdocs-module-addons-contrib - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/techdocs-node - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/techdocs-react - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/techdocs - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/todo-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/todo - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/user-settings-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/user-settings - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/vault-backend - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/vault - schedule: - interval: daily - - - package-ecosystem: npm - directory: /plugins/xcmetrics - schedule: - interval: daily - - - package-ecosystem: npm - directory: /storybook - schedule: - interval: daily diff --git a/.github/workflows/automate_area-labels.yml b/.github/workflows/automate_area-labels.yml index c7a147470c..dfb60c9243 100644 --- a/.github/workflows/automate_area-labels.yml +++ b/.github/workflows/automate_area-labels.yml @@ -8,8 +8,8 @@ permissions: jobs: triage: permissions: - contents: read # for actions/labeler to determine modified files - pull-requests: write # for actions/labeler to add labels to PRs + contents: read # for actions/labeler to determine modified files + pull-requests: write # for actions/labeler to add labels to PRs runs-on: ubuntu-latest steps: - name: Harden Runner @@ -17,7 +17,7 @@ jobs: with: egress-policy: audit - - uses: actions/labeler@ac9175f8a1f3625fd0d4fb234536d26811351594 # v4.3.0 + - uses: actions/labeler@v4.3.0 with: repo-token: '${{ secrets.GITHUB_TOKEN }}' sync-labels: true diff --git a/.github/workflows/automate_changeset_feedback.yml b/.github/workflows/automate_changeset_feedback.yml index 9d67c9ef12..483d59dc8c 100644 --- a/.github/workflows/automate_changeset_feedback.yml +++ b/.github/workflows/automate_changeset_feedback.yml @@ -27,14 +27,14 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 with: # Fetch the commit that's merged into the base rather than the target ref # This will let us diff only the contents of the PR, without fetching more history ref: 'refs/pull/${{ github.event.pull_request.number }}/merge' - name: fetch base run: git fetch --depth 1 origin ${{ github.base_ref }} - - uses: backstage/actions/changeset-feedback@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + - uses: backstage/actions/changeset-feedback@v0.6.4 name: Generate feedback with: diff-ref: 'origin/master' diff --git a/.github/workflows/automate_merge_message.yml b/.github/workflows/automate_merge_message.yml index 1ae172e8e4..4cbf6c69a2 100644 --- a/.github/workflows/automate_merge_message.yml +++ b/.github/workflows/automate_merge_message.yml @@ -28,7 +28,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 with: ref: '${{ github.event.pull_request.merge_commit_sha }}' @@ -44,7 +44,7 @@ jobs: node generate.js ${{ github.event.pull_request.base.sha }} ${{ github.event.pull_request.head.sha }} > message.txt - name: Post Message - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1 + uses: actions/github-script@v6.4.1 env: ISSUE_NUMBER: ${{ github.event.pull_request.number }} with: diff --git a/.github/workflows/automate_stale.yml b/.github/workflows/automate_stale.yml index a7a0041a9a..40ebdf8a3e 100644 --- a/.github/workflows/automate_stale.yml +++ b/.github/workflows/automate_stale.yml @@ -10,8 +10,8 @@ permissions: jobs: stale: permissions: - issues: write # for actions/stale to close stale issues - pull-requests: write # for actions/stale to close stale PRs + issues: write # for actions/stale to close stale issues + pull-requests: write # for actions/stale to close stale PRs runs-on: ubuntu-latest steps: - name: Harden Runner @@ -19,7 +19,7 @@ jobs: with: egress-policy: audit - - uses: actions/stale@6f05e4244c9a0b2ed3401882b05d701dd0a7289b # v7.0.0 + - uses: actions/stale@v7.0.0 id: stale with: stale-issue-message: > diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3234242223..b08a28d786 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -31,16 +31,16 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} @@ -67,16 +67,16 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} @@ -201,18 +201,18 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: fetch branch master run: git fetch origin master - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/cron.yml b/.github/workflows/cron.yml index 50395b9f5c..2874be512c 100644 --- a/.github/workflows/cron.yml +++ b/.github/workflows/cron.yml @@ -13,7 +13,7 @@ jobs: with: egress-policy: audit - - uses: backstage/actions/cron@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + - uses: backstage/actions/cron@v0.6.4 with: app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }} private-key: ${{ secrets.BACKSTAGE_GOALIE_PRIVATE_KEY }} diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml deleted file mode 100644 index 9bfe6712e5..0000000000 --- a/.github/workflows/dependency-review.yml +++ /dev/null @@ -1,27 +0,0 @@ -# Dependency Review Action -# -# This Action will scan dependency manifest files that change as part of a Pull Request, -# surfacing known-vulnerable versions of the packages declared or updated in the PR. -# Once installed, if the workflow run is marked as required, -# PRs introducing known-vulnerable packages will be blocked from merging. -# -# Source repository: https://github.com/actions/dependency-review-action -name: 'Dependency Review' -on: [pull_request] - -permissions: - contents: read - -jobs: - dependency-review: - runs-on: ubuntu-latest - steps: - - name: Harden Runner - uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1 - with: - egress-policy: audit - - - name: 'Checkout Repository' - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - - name: 'Dependency Review' - uses: actions/dependency-review-action@0efb1d1d84fc9633afcdaad14c485cbbc90ef46c # v2.5.1 diff --git a/.github/workflows/deploy_docker-image.yml b/.github/workflows/deploy_docker-image.yml index 1e602bce60..30e7badcd0 100644 --- a/.github/workflows/deploy_docker-image.yml +++ b/.github/workflows/deploy_docker-image.yml @@ -19,19 +19,19 @@ jobs: egress-policy: audit - name: checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 with: path: backstage ref: v${{ github.event.client_payload.version }} - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} @@ -45,17 +45,17 @@ jobs: working-directory: ./example-app - name: Login to GitHub Container Registry - uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc # v2.2.0 + uses: docker/login-action@v2.2.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@885d1462b80bc1c1c7f0b00334ad271f09369c55 # v2.10.0 + uses: docker/setup-buildx-action@v2.10.0 - name: Build and push - uses: docker/build-push-action@0a97817b6ade9f46837855d676c4cca3a2471fc9 # v4.2.1 + uses: docker/build-push-action@v4.2.1 with: context: './example-app' file: ./example-app/packages/backend/Dockerfile diff --git a/.github/workflows/deploy_microsite.yml b/.github/workflows/deploy_microsite.yml index 75976456c0..f614db31ca 100644 --- a/.github/workflows/deploy_microsite.yml +++ b/.github/workflows/deploy_microsite.yml @@ -10,7 +10,7 @@ permissions: jobs: deploy-microsite-and-storybook: permissions: - contents: write # for JamesIves/github-pages-deploy-action to push changes in repo + contents: write # for JamesIves/github-pages-deploy-action to push changes in repo runs-on: ubuntu-latest env: @@ -28,10 +28,10 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js 18.x - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: 18.x registry-url: https://registry.npmjs.org/ # Needed for auth diff --git a/.github/workflows/deploy_packages.yml b/.github/workflows/deploy_packages.yml index b420ebf690..a8a4315191 100644 --- a/.github/workflows/deploy_packages.yml +++ b/.github/workflows/deploy_packages.yml @@ -65,15 +65,15 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} @@ -147,15 +147,15 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/issue.yaml b/.github/workflows/issue.yaml index b456c1dae4..1c1c028f20 100644 --- a/.github/workflows/issue.yaml +++ b/.github/workflows/issue.yaml @@ -15,4 +15,4 @@ jobs: egress-policy: audit - name: Issue sync - uses: backstage/actions/issue-sync@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/issue-sync@v0.6.4 diff --git a/.github/workflows/pr-review-comment-trigger.yaml b/.github/workflows/pr-review-comment-trigger.yaml index 7ae7122154..784dc6cf79 100644 --- a/.github/workflows/pr-review-comment-trigger.yaml +++ b/.github/workflows/pr-review-comment-trigger.yaml @@ -30,7 +30,7 @@ jobs: run: | mkdir -p ./pr echo $PR_NUMBER > ./pr/pr_number - - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + - uses: actions/upload-artifact@v3.1.3 with: name: pr_number-${{ github.event.pull_request.number }} path: pr/ diff --git a/.github/workflows/pr-review-comment.yaml b/.github/workflows/pr-review-comment.yaml index 1f26643bab..e557c85d51 100644 --- a/.github/workflows/pr-review-comment.yaml +++ b/.github/workflows/pr-review-comment.yaml @@ -23,7 +23,7 @@ jobs: - name: Read PR Number id: pr-number - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1 + uses: actions/github-script@v6.4.1 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | @@ -40,7 +40,7 @@ jobs: const prNumber = artifact.name.slice('pr_number-'.length) core.setOutput('pr-number', prNumber); - - uses: backstage/actions/re-review@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + - uses: backstage/actions/re-review@v0.6.4 with: app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }} private-key: ${{ secrets.BACKSTAGE_GOALIE_PRIVATE_KEY }} diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 4993e93dbb..8c99f105a9 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -23,7 +23,7 @@ jobs: egress-policy: audit - name: PR sync - uses: backstage/actions/pr-sync@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/pr-sync@v0.6.4 with: github-token: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }} app-id: ${{ secrets.BACKSTAGE_GOALIE_APPLICATION_ID }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index f245240c99..3a1e2b1501 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -34,7 +34,7 @@ jobs: egress-policy: audit - name: 'Checkout code' - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 with: persist-credentials: false @@ -58,7 +58,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: 'Upload artifact' - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@v3.1.3 with: name: SARIF file path: results.sarif diff --git a/.github/workflows/sync_code-formatting.yml b/.github/workflows/sync_code-formatting.yml index f3afec592d..fa8d91f25a 100644 --- a/.github/workflows/sync_code-formatting.yml +++ b/.github/workflows/sync_code-formatting.yml @@ -20,12 +20,12 @@ jobs: fetch-depth: 0 - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/sync_dependabot-changesets.yml b/.github/workflows/sync_dependabot-changesets.yml index 0c732f28d1..2ac6d7f0d0 100644 --- a/.github/workflows/sync_dependabot-changesets.yml +++ b/.github/workflows/sync_dependabot-changesets.yml @@ -16,7 +16,7 @@ jobs: egress-policy: audit - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 with: fetch-depth: 2 ref: ${{ github.head_ref }} @@ -26,7 +26,7 @@ jobs: git config --global user.email noreply@backstage.io git config --global user.name 'Github changeset workflow' - name: Generate changeset - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1 + uses: actions/github-script@v6.4.1 with: script: | const { promises: fs } = require('fs'); diff --git a/.github/workflows/sync_release-manifest.yml b/.github/workflows/sync_release-manifest.yml index dcb13d58c5..a3f6bc232f 100644 --- a/.github/workflows/sync_release-manifest.yml +++ b/.github/workflows/sync_release-manifest.yml @@ -13,7 +13,7 @@ jobs: with: egress-policy: audit - - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + - uses: actions/setup-node@v3.8.1 with: node-version: 18.x - name: Install dependencies @@ -21,7 +21,7 @@ jobs: run: npm install semver@7.3.5 fs-extra@10.0.0 @manypkg/get-packages@1.1.1 - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 with: path: backstage # 'v' prefix is added here for the tag, we keep it out of the manifest logic @@ -29,7 +29,7 @@ jobs: # Checkout backstage/versions into /backstage/versions, which is where store the output - name: Checkout versions - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 with: repository: backstage/versions path: backstage/versions @@ -53,7 +53,7 @@ jobs: git push - name: Dispatch update-helper update - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1 + uses: actions/github-script@v6.4.1 with: github-token: ${{ secrets.GH_SERVICE_ACCOUNT_TOKEN }} # TODO(Rugvip): Remove the create-app dispatch once we've been on the release version for a while diff --git a/.github/workflows/sync_renovate-changesets.yml b/.github/workflows/sync_renovate-changesets.yml index f29fdaa6b7..738abcf773 100644 --- a/.github/workflows/sync_renovate-changesets.yml +++ b/.github/workflows/sync_renovate-changesets.yml @@ -16,7 +16,7 @@ jobs: egress-policy: audit - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 with: fetch-depth: 2 ref: ${{ github.head_ref }} @@ -26,7 +26,7 @@ jobs: git config --global user.email noreply@backstage.io git config --global user.name 'Github changeset workflow' - name: Generate changeset - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1 + uses: actions/github-script@v6.4.1 with: script: | const { promises: fs } = require("fs"); diff --git a/.github/workflows/sync_snyk-github-issues.yml b/.github/workflows/sync_snyk-github-issues.yml index 5b8c56da43..690e2fb76e 100644 --- a/.github/workflows/sync_snyk-github-issues.yml +++ b/.github/workflows/sync_snyk-github-issues.yml @@ -16,15 +16,15 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js 18.x - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: 18.x registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v18.x diff --git a/.github/workflows/sync_snyk-monitor.yml b/.github/workflows/sync_snyk-monitor.yml index dbeccb52fc..c74c303076 100644 --- a/.github/workflows/sync_snyk-monitor.yml +++ b/.github/workflows/sync_snyk-monitor.yml @@ -20,8 +20,8 @@ permissions: jobs: sync: permissions: - contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/upload-sarif to upload SARIF results + contents: read # for actions/checkout to fetch code + security-events: write # for github/codeql-action/upload-sarif to upload SARIF results runs-on: ubuntu-latest steps: - name: Harden Runner @@ -29,7 +29,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@ v3.6.0 - name: Monitor and Synchronize Snyk Policies uses: snyk/actions/node@299cde98a08ff8b1c2bfde1e5a067bce67a6d2b8 # master with: @@ -58,6 +58,6 @@ jobs: SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }} NODE_OPTIONS: --max-old-space-size=7168 - name: Upload Snyk report - uses: github/codeql-action/upload-sarif@6a28655e3dcb49cb0840ea372fd6d17733edd8a4 # v2.21.8 + uses: github/codeql-action/upload-sarif@v2.21.8 with: sarif_file: snyk.sarif diff --git a/.github/workflows/sync_version-packages.yml b/.github/workflows/sync_version-packages.yml index a77050318b..929fb9cc89 100644 --- a/.github/workflows/sync_version-packages.yml +++ b/.github/workflows/sync_version-packages.yml @@ -18,7 +18,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 with: fetch-depth: 20000 fetch-tags: true @@ -26,7 +26,7 @@ jobs: - name: Install Dependencies run: yarn --immutable - name: Create Release Pull Request - uses: backstage/changesets-action@99063c276a7f12e024cb310e7a05a3a5b89449f8 # v2.1.0 + uses: backstage/changesets-action@v2.1.0 with: # Calls out to `changeset version`, but also runs prettier version: yarn release diff --git a/.github/workflows/uffizzi-build.yml b/.github/workflows/uffizzi-build.yml index b2d3667f4d..a58eba7055 100644 --- a/.github/workflows/uffizzi-build.yml +++ b/.github/workflows/uffizzi-build.yml @@ -25,16 +25,16 @@ jobs: egress-policy: audit - name: checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 - name: setup-node - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: 18.x registry-url: https://registry.npmjs.org/ - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: linux-v18 @@ -87,7 +87,7 @@ jobs: egress-policy: audit - name: Checkout git repo - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 - name: Render Compose File run: | BACKSTAGE_IMAGE=$(echo ${{ needs.build-backstage.outputs.tags }}) @@ -96,13 +96,13 @@ jobs: envsubst '$BACKSTAGE_IMAGE $GITHUB_SHA' < .github/uffizzi/docker-compose.uffizzi.yml > docker-compose.rendered.yml cat docker-compose.rendered.yml - name: Upload Rendered Compose File as Artifact - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@v3.1.3 with: name: preview-spec path: docker-compose.rendered.yml retention-days: 2 - name: Upload PR Event as Artifact - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@v3.1.3 with: name: preview-spec path: ${{ github.event_path }} @@ -120,7 +120,7 @@ jobs: egress-policy: audit - name: Upload PR Event as Artifact - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@v3.1.3 with: name: preview-spec path: ${{ github.event_path }} diff --git a/.github/workflows/uffizzi-preview.yaml b/.github/workflows/uffizzi-preview.yaml index bf43bbdb4c..deebf356bf 100644 --- a/.github/workflows/uffizzi-preview.yaml +++ b/.github/workflows/uffizzi-preview.yaml @@ -24,7 +24,7 @@ jobs: - name: 'Download artifacts' # Fetch output (zip archive) from the workflow run that triggered this workflow. - uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1 + uses: actions/github-script@v6.4.1 with: script: | let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({ @@ -64,7 +64,7 @@ jobs: - name: Cache Rendered Compose File if: ${{ fromJSON(env.EVENT_JSON).action != 'closed' }} - uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2 + uses: actions/cache@v3.3.2 with: path: docker-compose.rendered.yml key: ${{ env.COMPOSE_FILE_HASH }} diff --git a/.github/workflows/verify_accessibility.yml b/.github/workflows/verify_accessibility.yml index 7d8753b3bd..d53f3834d2 100644 --- a/.github/workflows/verify_accessibility.yml +++ b/.github/workflows/verify_accessibility.yml @@ -24,13 +24,13 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: Use Node.js 18.x - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: 18.x - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v18.x - name: run Lighthouse CI diff --git a/.github/workflows/verify_codeql.yml b/.github/workflows/verify_codeql.yml index 8ea2e8fcd8..666bd5f0f4 100644 --- a/.github/workflows/verify_codeql.yml +++ b/.github/workflows/verify_codeql.yml @@ -25,9 +25,9 @@ permissions: jobs: analyze: permissions: - actions: read # for github/codeql-action/init to get workflow details - contents: read # for actions/checkout to fetch code - security-events: write # for github/codeql-action/autobuild to send a status report + actions: read # for github/codeql-action/init to get workflow details + contents: read # for actions/checkout to fetch code + security-events: write # for github/codeql-action/autobuild to send a status report name: Analyze runs-on: ubuntu-latest @@ -47,7 +47,7 @@ jobs: egress-policy: audit - name: Checkout repository - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 with: # We must fetch at least the immediate parents so that if this is # a pull request then we can checkout the head. @@ -55,7 +55,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@6a28655e3dcb49cb0840ea372fd6d17733edd8a4 # v2.21.8 + uses: github/codeql-action/init@v2.21.8 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -66,7 +66,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@6a28655e3dcb49cb0840ea372fd6d17733edd8a4 # v2.21.8 + uses: github/codeql-action/autobuild@v2.21.8 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -80,4 +80,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6a28655e3dcb49cb0840ea372fd6d17733edd8a4 # v2.21.8 + uses: github/codeql-action/analyze@v2.21.8 diff --git a/.github/workflows/verify_docs-quality.yml b/.github/workflows/verify_docs-quality.yml index 1760b2a186..ce457a234f 100644 --- a/.github/workflows/verify_docs-quality.yml +++ b/.github/workflows/verify_docs-quality.yml @@ -16,7 +16,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 # Vale does not support file excludes, so we use the script to generate a list of files instead # The action also does not allow args or a local config file to be passed in, so the files array diff --git a/.github/workflows/verify_e2e-kubernetes.yml b/.github/workflows/verify_e2e-kubernetes.yml index 237ce4977b..cddd6589d7 100644 --- a/.github/workflows/verify_e2e-kubernetes.yml +++ b/.github/workflows/verify_e2e-kubernetes.yml @@ -26,16 +26,16 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/verify_e2e-linux.yml b/.github/workflows/verify_e2e-linux.yml index 9c684b9ea3..744a5d7e74 100644 --- a/.github/workflows/verify_e2e-linux.yml +++ b/.github/workflows/verify_e2e-linux.yml @@ -44,7 +44,7 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: Configure Git run: | @@ -52,12 +52,12 @@ jobs: git config --global user.name 'GitHub e2e user' - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} diff --git a/.github/workflows/verify_e2e-techdocs.yml b/.github/workflows/verify_e2e-techdocs.yml index a7116d9bf8..94f08a491f 100644 --- a/.github/workflows/verify_e2e-techdocs.yml +++ b/.github/workflows/verify_e2e-techdocs.yml @@ -34,8 +34,8 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 - - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 + - uses: actions/checkout@v3.6.0 + - uses: actions/setup-python@v4.7.0 with: python-version: '3.9' diff --git a/.github/workflows/verify_e2e-windows.yml b/.github/workflows/verify_e2e-windows.yml index 016ea04b95..3ecb33a2da 100644 --- a/.github/workflows/verify_e2e-windows.yml +++ b/.github/workflows/verify_e2e-windows.yml @@ -42,7 +42,7 @@ jobs: git config --global core.autocrlf false git config --global core.eol lf - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: Configure Git run: | @@ -50,18 +50,18 @@ jobs: git config --global user.name 'GitHub e2e user' - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: setup python - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0 + uses: actions/setup-python@v4.7.0 with: python-version: '3.10' - name: Add msbuild to PATH - uses: microsoft/setup-msbuild@1ff57057b5cfdc39105cd07a01d78e9b0ea0c14c # v1.3.1 + uses: microsoft/setup-msbuild@v1.3.1 - name: Setup gyp env run: | diff --git a/.github/workflows/verify_fossa.yml b/.github/workflows/verify_fossa.yml index 5174845467..393bcf9631 100644 --- a/.github/workflows/verify_fossa.yml +++ b/.github/workflows/verify_fossa.yml @@ -19,7 +19,7 @@ jobs: egress-policy: audit - name: Checkout - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + uses: actions/checkout@v3.6.0 - name: Install Fossa run: "curl -H 'Cache-Control: no-cache' https://raw.githubusercontent.com/fossas/fossa-cli/master/install.sh | bash" diff --git a/.github/workflows/verify_microsite.yml b/.github/workflows/verify_microsite.yml index e14799f378..f0705bedc7 100644 --- a/.github/workflows/verify_microsite.yml +++ b/.github/workflows/verify_microsite.yml @@ -28,10 +28,10 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js 18.x - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: 18.x diff --git a/.github/workflows/verify_storybook.yml b/.github/workflows/verify_storybook.yml index 3d1bcbf34e..f0354df296 100644 --- a/.github/workflows/verify_storybook.yml +++ b/.github/workflows/verify_storybook.yml @@ -32,17 +32,17 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 with: fetch-depth: 0 # Required to retrieve git history - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth - name: yarn install - uses: backstage/actions/yarn-install@497722d45fb5a35c14c721f63ed74e6ad5f629dd # v0.6.4 + uses: backstage/actions/yarn-install@v0.6.4 with: cache-prefix: ${{ runner.os }}-v${{ matrix.node-version }} - name: storybook yarn install diff --git a/.github/workflows/verify_windows.yml b/.github/workflows/verify_windows.yml index 309c2be7ab..f2c61938d8 100644 --- a/.github/workflows/verify_windows.yml +++ b/.github/workflows/verify_windows.yml @@ -33,10 +33,10 @@ jobs: with: egress-policy: audit - - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3.6.0 + - uses: actions/checkout@v3.6.0 - name: use node.js ${{ matrix.node-version }} - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # v3.8.1 + uses: actions/setup-node@v3.8.1 with: node-version: ${{ matrix.node-version }} registry-url: https://registry.npmjs.org/ # Needed for auth diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml deleted file mode 100644 index 723e338d33..0000000000 --- a/.pre-commit-config.yaml +++ /dev/null @@ -1,18 +0,0 @@ -repos: -- repo: https://github.com/gitleaks/gitleaks - rev: v8.16.3 - hooks: - - id: gitleaks -- repo: https://github.com/jumanjihouse/pre-commit-hooks - rev: 3.0.0 - hooks: - - id: shellcheck -- repo: https://github.com/pre-commit/mirrors-eslint - rev: v8.38.0 - hooks: - - id: eslint -- repo: https://github.com/pre-commit/pre-commit-hooks - rev: v4.4.0 - hooks: - - id: end-of-file-fixer - - id: trailing-whitespace