From 959888ba202e08a13f6b75eeb3ef82e3b1c1048b Mon Sep 17 00:00:00 2001 From: kinyoklion Date: Thu, 24 Sep 2026 15:31:36 +0000 Subject: [PATCH 1/4] ci: use dependabot-updatable version comments for action pins Co-Authored-By: rlamb@launchdarkly.com <4955475+kinyoklion@users.noreply.github.com> --- .github/workflows/client.yml | 30 ++++++---------- .github/workflows/cmake.yml | 24 +++++-------- .github/workflows/common.yml | 3 +- .github/workflows/cpp-linter.yml | 6 ++-- .github/workflows/hello-apps.yml | 6 ++-- .github/workflows/internal.yml | 3 +- .github/workflows/manual-publish-doc.yml | 3 +- .../manual-sdk-release-artifacts.yml | 8 ++--- .github/workflows/networking.yml | 3 +- .github/workflows/release-please.yml | 33 +++++------------- .github/workflows/server-dynamodb.yml | 15 +++----- .github/workflows/server-otel.yml | 12 +++---- .github/workflows/server-redis.yml | 15 +++----- .github/workflows/server.yml | 34 +++++++------------ .github/workflows/sse.yml | 12 +++---- 15 files changed, 66 insertions(+), 141 deletions(-) diff --git a/.github/workflows/client.yml b/.github/workflows/client.yml index c024f6a91..4bd63802a 100644 --- a/.github/workflows/client.yml +++ b/.github/workflows/client.yml @@ -21,8 +21,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/client-contract-tests/client-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: client-tests @@ -42,8 +41,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/client-contract-tests/client-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: client-tests @@ -59,8 +57,7 @@ jobs: build-test: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -69,8 +66,7 @@ jobs: build-test-curl: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -80,8 +76,7 @@ jobs: build-test-client-mac: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -91,8 +86,7 @@ jobs: build-test-client-mac-curl: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -103,10 +97,8 @@ jobs: build-test-client-windows: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: BOOST_LIBRARY_DIR: 'C:\local\boost_1_87_0\lib64-msvc-14.3' @@ -121,10 +113,8 @@ jobs: build-test-client-windows-curl: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: BOOST_LIBRARY_DIR: 'C:\local\boost_1_87_0\lib64-msvc-14.3' diff --git a/.github/workflows/cmake.yml b/.github/workflows/cmake.yml index d568faba9..7186601aa 100644 --- a/.github/workflows/cmake.yml +++ b/.github/workflows/cmake.yml @@ -17,8 +17,7 @@ jobs: test-ubuntu: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/cmake-test with: platform_version: '22.04' @@ -26,8 +25,7 @@ jobs: test-ubuntu-curl: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/install-curl id: install-curl - uses: ./.github/actions/cmake-test @@ -41,8 +39,7 @@ jobs: test-macos: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/cmake-test with: platform_version: '12' @@ -50,8 +47,7 @@ jobs: test-macos-curl: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/install-curl id: install-curl - uses: ./.github/actions/cmake-test @@ -65,10 +61,8 @@ jobs: test-windows: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/cmake-test env: Boost_DIR: 'C:\local\boost_1_87_0\lib64-msvc-14.3\cmake\Boost-1.87.0' @@ -79,10 +73,8 @@ jobs: test-windows-curl: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/install-curl id: install-curl - uses: ./.github/actions/cmake-test diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml index 0e8e611c2..97bfc5af3 100644 --- a/.github/workflows/common.yml +++ b/.github/workflows/common.yml @@ -14,8 +14,7 @@ jobs: build-test-common: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-common diff --git a/.github/workflows/cpp-linter.yml b/.github/workflows/cpp-linter.yml index 3e8a02748..b6d0a90e1 100644 --- a/.github/workflows/cpp-linter.yml +++ b/.github/workflows/cpp-linter.yml @@ -13,11 +13,9 @@ jobs: cpp-linter: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install boost - # https://github.com/MarkusJx/install-boost/releases/tag/v2.6.0 - uses: MarkusJx/install-boost@f9d34f6fe427b8f2ae424d7bf2a3ebccb0dae5a3 + uses: MarkusJx/install-boost@f9d34f6fe427b8f2ae424d7bf2a3ebccb0dae5a3 # v2.6.0 id: install-boost with: boost_version: 1.81.0 diff --git a/.github/workflows/hello-apps.yml b/.github/workflows/hello-apps.yml index 9f42f3423..5bd876be4 100644 --- a/.github/workflows/hello-apps.yml +++ b/.github/workflows/hello-apps.yml @@ -19,10 +19,8 @@ jobs: fail-fast: false runs-on: ${{ matrix.os }} steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - name: Install Ninja uses: ./.github/actions/install-ninja - name: Install boost diff --git a/.github/workflows/internal.yml b/.github/workflows/internal.yml index 8fa44d8e2..707bae86e 100644 --- a/.github/workflows/internal.yml +++ b/.github/workflows/internal.yml @@ -14,8 +14,7 @@ jobs: build-test-internal: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-internal diff --git a/.github/workflows/manual-publish-doc.yml b/.github/workflows/manual-publish-doc.yml index f1be3e6bd..06ba88051 100644 --- a/.github/workflows/manual-publish-doc.yml +++ b/.github/workflows/manual-publish-doc.yml @@ -16,8 +16,7 @@ jobs: build-publish: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - run: sudo apt-get install doxygen graphviz - id: build # Build using the same steps from CI. diff --git a/.github/workflows/manual-sdk-release-artifacts.yml b/.github/workflows/manual-sdk-release-artifacts.yml index dafc8d9b9..d57de3a3f 100644 --- a/.github/workflows/manual-sdk-release-artifacts.yml +++ b/.github/workflows/manual-sdk-release-artifacts.yml @@ -53,8 +53,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.tag }} - id: release-sdk @@ -82,7 +81,6 @@ jobs: echo "${HASHES_MACOS}" | $B64_DECODE > checksums.txt fi shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -95,8 +93,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.tag }} - id: release-sdk @@ -115,7 +112,6 @@ jobs: # This job always runs on macOS, so use -D (BSD base64 decode). echo "${HASHES}" | base64 -D > checksums.txt shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: diff --git a/.github/workflows/networking.yml b/.github/workflows/networking.yml index 99256575a..62611a438 100644 --- a/.github/workflows/networking.yml +++ b/.github/workflows/networking.yml @@ -14,8 +14,7 @@ jobs: build-test-networking: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-networking diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index b059d907e..38d9a5b01 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -25,7 +25,6 @@ jobs: # release-please-action v5+ (release-please >= 17) honors `force-tag-creation` # for draft releases by creating the tag ref via the GitHub API before the # release object, so a single invocation handles both releases and PRs. - # https://github.com/googleapis/release-please-action/releases/tag/v5.0.0 - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0 id: release with: @@ -44,8 +43,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-client name: Full release of libs/client-sdk uses: ./.github/actions/sdk-release @@ -71,7 +69,6 @@ jobs: echo "${HASHES_MACOS}" | $B64_DECODE > checksums.txt fi shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -86,8 +83,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-client name: Full release of libs/client-sdk (macOS arm64) uses: ./.github/actions/sdk-release @@ -104,7 +100,6 @@ jobs: # This job always runs on macOS, so use -D (BSD base64 decode). echo "${HASHES}" | base64 -D > checksums.txt shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -123,8 +118,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server name: Full release of libs/server-sdk uses: ./.github/actions/sdk-release @@ -150,7 +144,6 @@ jobs: echo "${HASHES_MACOS}" | $B64_DECODE > checksums.txt fi shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -165,8 +158,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server name: Full release of libs/server-sdk (macOS arm64) uses: ./.github/actions/sdk-release @@ -183,7 +175,6 @@ jobs: # This job always runs on macOS, so use -D (BSD base64 decode). echo "${HASHES}" | base64 -D > checksums.txt shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -202,8 +193,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-redis name: Full release of libs/server-sdk-redis-source uses: ./.github/actions/sdk-release @@ -229,7 +219,6 @@ jobs: echo "${HASHES_MACOS}" | $B64_DECODE > checksums.txt fi shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -244,8 +233,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-redis name: Full release of libs/server-sdk-redis-source (macOS arm64) uses: ./.github/actions/sdk-release @@ -262,7 +250,6 @@ jobs: # This job always runs on macOS, so use -D (BSD base64 decode). echo "${HASHES}" | base64 -D > checksums.txt shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -281,8 +268,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-dynamodb name: Full release of libs/server-sdk-dynamodb-source uses: ./.github/actions/sdk-release @@ -308,7 +294,6 @@ jobs: echo "${HASHES_MACOS}" | $B64_DECODE > checksums.txt fi shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: @@ -323,8 +308,7 @@ jobs: attestations: write id-token: write steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-dynamodb name: Full release of libs/server-sdk-dynamodb-source (macOS arm64) uses: ./.github/actions/sdk-release @@ -341,7 +325,6 @@ jobs: # This job always runs on macOS, so use -D (BSD base64 decode). echo "${HASHES}" | base64 -D > checksums.txt shell: bash - # https://github.com/actions/attest/releases/tag/v4.2.1 - name: Attest build provenance uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: diff --git a/.github/workflows/server-dynamodb.yml b/.github/workflows/server-dynamodb.yml index 64d0c179b..fee31d927 100644 --- a/.github/workflows/server-dynamodb.yml +++ b/.github/workflows/server-dynamodb.yml @@ -33,8 +33,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -62,8 +61,7 @@ jobs: ports: - 8000:8000 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-dynamodb-source @@ -73,8 +71,7 @@ jobs: build-dynamodb-mac: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-dynamodb-source @@ -85,10 +82,8 @@ jobs: build-dynamodb-windows: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: BOOST_LIBRARY_DIR: 'C:\local\boost_1_87_0\lib64-msvc-14.3' diff --git a/.github/workflows/server-otel.yml b/.github/workflows/server-otel.yml index dabb10d43..cccb26319 100644 --- a/.github/workflows/server-otel.yml +++ b/.github/workflows/server-otel.yml @@ -17,8 +17,7 @@ jobs: build-test-otel: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-otel @@ -28,8 +27,7 @@ jobs: build-otel-mac: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-otel @@ -40,10 +38,8 @@ jobs: build-test-otel-windows: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: BOOST_LIBRARY_DIR: 'C:\local\boost_1_87_0\lib64-msvc-14.3' diff --git a/.github/workflows/server-redis.yml b/.github/workflows/server-redis.yml index 0a80bdb26..41cbcf744 100644 --- a/.github/workflows/server-redis.yml +++ b/.github/workflows/server-redis.yml @@ -33,8 +33,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -60,8 +59,7 @@ jobs: ports: - 6379:6379 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-redis-source @@ -70,8 +68,7 @@ jobs: build-redis-mac: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-redis-source @@ -82,10 +79,8 @@ jobs: build-test-redis-windows: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: BOOST_LIBRARY_DIR: 'C:\local\boost_1_87_0\lib64-msvc-14.3' diff --git a/.github/workflows/server.yml b/.github/workflows/server.yml index 2817eb737..4538dfc80 100644 --- a/.github/workflows/server.yml +++ b/.github/workflows/server.yml @@ -21,8 +21,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -42,7 +41,7 @@ jobs: TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests SUPPRESSION_FILE: contract-tests/server-contract-tests/test-suppressions-fdv2.txt steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -65,8 +64,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -87,7 +85,7 @@ jobs: TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests SUPPRESSION_FILE: contract-tests/server-contract-tests/test-suppressions-fdv2.txt steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -107,8 +105,7 @@ jobs: build-test-server: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -117,8 +114,7 @@ jobs: build-test-server-curl: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -128,8 +124,7 @@ jobs: build-test-server-mac: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -139,8 +134,7 @@ jobs: build-test-server-mac-curl: runs-on: macos-15 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -151,10 +145,8 @@ jobs: build-test-server-windows: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -165,10 +157,8 @@ jobs: build-test-server-windows-curl: runs-on: windows-2022 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 - # https://github.com/ilammy/msvc-dev-cmd/releases/tag/v1.13.0 - - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server diff --git a/.github/workflows/sse.yml b/.github/workflows/sse.yml index a53171df8..8a96a1c97 100644 --- a/.github/workflows/sse.yml +++ b/.github/workflows/sse.yml @@ -14,8 +14,7 @@ jobs: build-test-sse: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-sse-client @@ -23,8 +22,7 @@ jobs: build-test-sse-curl: runs-on: ubuntu-22.04 steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-sse-client @@ -37,8 +35,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/sse-contract-tests/sse-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: sse-tests @@ -61,8 +58,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/sse-contract-tests/sse-tests steps: - # https://github.com/actions/checkout/releases/tag/v7.0.1 - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: sse-tests From d05c36f331fb3359d6721aca91d8c4ef5dd6288b Mon Sep 17 00:00:00 2001 From: kinyoklion Date: Thu, 24 Sep 2026 15:37:26 +0000 Subject: [PATCH 2/4] ci: use major version tags for first-party GitHub actions Co-Authored-By: rlamb@launchdarkly.com <4955475+kinyoklion@users.noreply.github.com> --- .github/workflows/client.yml | 16 +++++----- .github/workflows/cmake.yml | 12 +++---- .github/workflows/common.yml | 2 +- .github/workflows/cpp-linter.yml | 2 +- .github/workflows/hello-apps.yml | 2 +- .github/workflows/internal.yml | 2 +- .github/workflows/manual-publish-doc.yml | 2 +- .../manual-sdk-release-artifacts.yml | 8 ++--- .github/workflows/networking.yml | 2 +- .github/workflows/release-please.yml | 32 +++++++++---------- .github/workflows/server-dynamodb.yml | 8 ++--- .github/workflows/server-otel.yml | 6 ++-- .github/workflows/server-redis.yml | 8 ++--- .github/workflows/server.yml | 20 ++++++------ .github/workflows/sse.yml | 8 ++--- 15 files changed, 65 insertions(+), 65 deletions(-) diff --git a/.github/workflows/client.yml b/.github/workflows/client.yml index 4bd63802a..2a3713c58 100644 --- a/.github/workflows/client.yml +++ b/.github/workflows/client.yml @@ -21,7 +21,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/client-contract-tests/client-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: client-tests @@ -41,7 +41,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/client-contract-tests/client-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: client-tests @@ -57,7 +57,7 @@ jobs: build-test: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -66,7 +66,7 @@ jobs: build-test-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -76,7 +76,7 @@ jobs: build-test-client-mac: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -86,7 +86,7 @@ jobs: build-test-client-mac-curl: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -97,7 +97,7 @@ jobs: build-test-client-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: @@ -113,7 +113,7 @@ jobs: build-test-client-windows-curl: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/cmake.yml b/.github/workflows/cmake.yml index 7186601aa..19a0079fb 100644 --- a/.github/workflows/cmake.yml +++ b/.github/workflows/cmake.yml @@ -17,7 +17,7 @@ jobs: test-ubuntu: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/cmake-test with: platform_version: '22.04' @@ -25,7 +25,7 @@ jobs: test-ubuntu-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/install-curl id: install-curl - uses: ./.github/actions/cmake-test @@ -39,7 +39,7 @@ jobs: test-macos: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/cmake-test with: platform_version: '12' @@ -47,7 +47,7 @@ jobs: test-macos-curl: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/install-curl id: install-curl - uses: ./.github/actions/cmake-test @@ -61,7 +61,7 @@ jobs: test-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/cmake-test env: @@ -73,7 +73,7 @@ jobs: test-windows-curl: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/install-curl id: install-curl diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml index 97bfc5af3..212ff3b63 100644 --- a/.github/workflows/common.yml +++ b/.github/workflows/common.yml @@ -14,7 +14,7 @@ jobs: build-test-common: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-common diff --git a/.github/workflows/cpp-linter.yml b/.github/workflows/cpp-linter.yml index b6d0a90e1..f6050184c 100644 --- a/.github/workflows/cpp-linter.yml +++ b/.github/workflows/cpp-linter.yml @@ -13,7 +13,7 @@ jobs: cpp-linter: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - name: Install boost uses: MarkusJx/install-boost@f9d34f6fe427b8f2ae424d7bf2a3ebccb0dae5a3 # v2.6.0 id: install-boost diff --git a/.github/workflows/hello-apps.yml b/.github/workflows/hello-apps.yml index 5bd876be4..97530013c 100644 --- a/.github/workflows/hello-apps.yml +++ b/.github/workflows/hello-apps.yml @@ -19,7 +19,7 @@ jobs: fail-fast: false runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - name: Install Ninja uses: ./.github/actions/install-ninja diff --git a/.github/workflows/internal.yml b/.github/workflows/internal.yml index 707bae86e..33d235e1f 100644 --- a/.github/workflows/internal.yml +++ b/.github/workflows/internal.yml @@ -14,7 +14,7 @@ jobs: build-test-internal: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-internal diff --git a/.github/workflows/manual-publish-doc.yml b/.github/workflows/manual-publish-doc.yml index 06ba88051..f2910bd19 100644 --- a/.github/workflows/manual-publish-doc.yml +++ b/.github/workflows/manual-publish-doc.yml @@ -16,7 +16,7 @@ jobs: build-publish: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - run: sudo apt-get install doxygen graphviz - id: build # Build using the same steps from CI. diff --git a/.github/workflows/manual-sdk-release-artifacts.yml b/.github/workflows/manual-sdk-release-artifacts.yml index d57de3a3f..4875225cf 100644 --- a/.github/workflows/manual-sdk-release-artifacts.yml +++ b/.github/workflows/manual-sdk-release-artifacts.yml @@ -53,7 +53,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 with: ref: ${{ inputs.tag }} - id: release-sdk @@ -82,7 +82,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt release-sdk-mac-arm64: @@ -93,7 +93,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 with: ref: ${{ inputs.tag }} - id: release-sdk @@ -113,7 +113,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt diff --git a/.github/workflows/networking.yml b/.github/workflows/networking.yml index 62611a438..c3a26f310 100644 --- a/.github/workflows/networking.yml +++ b/.github/workflows/networking.yml @@ -14,7 +14,7 @@ jobs: build-test-networking: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-networking diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 38d9a5b01..c49162aef 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -43,7 +43,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-client name: Full release of libs/client-sdk uses: ./.github/actions/sdk-release @@ -70,7 +70,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt @@ -83,7 +83,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-client name: Full release of libs/client-sdk (macOS arm64) uses: ./.github/actions/sdk-release @@ -101,7 +101,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt @@ -118,7 +118,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-server name: Full release of libs/server-sdk uses: ./.github/actions/sdk-release @@ -145,7 +145,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt @@ -158,7 +158,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-server name: Full release of libs/server-sdk (macOS arm64) uses: ./.github/actions/sdk-release @@ -176,7 +176,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt @@ -193,7 +193,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-server-redis name: Full release of libs/server-sdk-redis-source uses: ./.github/actions/sdk-release @@ -220,7 +220,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt @@ -233,7 +233,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-server-redis name: Full release of libs/server-sdk-redis-source (macOS arm64) uses: ./.github/actions/sdk-release @@ -251,7 +251,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt @@ -268,7 +268,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-server-dynamodb name: Full release of libs/server-sdk-dynamodb-source uses: ./.github/actions/sdk-release @@ -295,7 +295,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt @@ -308,7 +308,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - id: release-server-dynamodb name: Full release of libs/server-sdk-dynamodb-source (macOS arm64) uses: ./.github/actions/sdk-release @@ -326,7 +326,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 + uses: actions/attest@v4 with: subject-checksums: checksums.txt diff --git a/.github/workflows/server-dynamodb.yml b/.github/workflows/server-dynamodb.yml index fee31d927..f132cfb42 100644 --- a/.github/workflows/server-dynamodb.yml +++ b/.github/workflows/server-dynamodb.yml @@ -33,7 +33,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -61,7 +61,7 @@ jobs: ports: - 8000:8000 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-dynamodb-source @@ -71,7 +71,7 @@ jobs: build-dynamodb-mac: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-dynamodb-source @@ -82,7 +82,7 @@ jobs: build-dynamodb-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/server-otel.yml b/.github/workflows/server-otel.yml index cccb26319..1f09f7730 100644 --- a/.github/workflows/server-otel.yml +++ b/.github/workflows/server-otel.yml @@ -17,7 +17,7 @@ jobs: build-test-otel: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-otel @@ -27,7 +27,7 @@ jobs: build-otel-mac: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-otel @@ -38,7 +38,7 @@ jobs: build-test-otel-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/server-redis.yml b/.github/workflows/server-redis.yml index 41cbcf744..99464ca50 100644 --- a/.github/workflows/server-redis.yml +++ b/.github/workflows/server-redis.yml @@ -33,7 +33,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -59,7 +59,7 @@ jobs: ports: - 6379:6379 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-redis-source @@ -68,7 +68,7 @@ jobs: build-redis-mac: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-redis-source @@ -79,7 +79,7 @@ jobs: build-test-redis-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/server.yml b/.github/workflows/server.yml index 4538dfc80..0ae3f6bc9 100644 --- a/.github/workflows/server.yml +++ b/.github/workflows/server.yml @@ -21,7 +21,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -41,7 +41,7 @@ jobs: TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests SUPPRESSION_FILE: contract-tests/server-contract-tests/test-suppressions-fdv2.txt steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -64,7 +64,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -85,7 +85,7 @@ jobs: TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests SUPPRESSION_FILE: contract-tests/server-contract-tests/test-suppressions-fdv2.txt steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -105,7 +105,7 @@ jobs: build-test-server: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -114,7 +114,7 @@ jobs: build-test-server-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -124,7 +124,7 @@ jobs: build-test-server-mac: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -134,7 +134,7 @@ jobs: build-test-server-mac-curl: runs-on: macos-15 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -145,7 +145,7 @@ jobs: build-test-server-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci with: @@ -157,7 +157,7 @@ jobs: build-test-server-windows-curl: runs-on: windows-2022 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci with: diff --git a/.github/workflows/sse.yml b/.github/workflows/sse.yml index 8a96a1c97..3f718fe1a 100644 --- a/.github/workflows/sse.yml +++ b/.github/workflows/sse.yml @@ -14,7 +14,7 @@ jobs: build-test-sse: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-sse-client @@ -22,7 +22,7 @@ jobs: build-test-sse-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-sse-client @@ -35,7 +35,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/sse-contract-tests/sse-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: sse-tests @@ -58,7 +58,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/sse-contract-tests/sse-tests steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions/checkout@v7 - uses: ./.github/actions/ci with: cmake_target: sse-tests From 419b4cacca2b61c30948ba18c3f75368e8ae2ea3 Mon Sep 17 00:00:00 2001 From: kinyoklion Date: Thu, 24 Sep 2026 15:49:17 +0000 Subject: [PATCH 3/4] ci: re-pin actions/attest to a SHA Co-Authored-By: rlamb@launchdarkly.com <4955475+kinyoklion@users.noreply.github.com> --- .../workflows/manual-sdk-release-artifacts.yml | 4 ++-- .github/workflows/release-please.yml | 16 ++++++++-------- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/manual-sdk-release-artifacts.yml b/.github/workflows/manual-sdk-release-artifacts.yml index 4875225cf..22be82a3c 100644 --- a/.github/workflows/manual-sdk-release-artifacts.yml +++ b/.github/workflows/manual-sdk-release-artifacts.yml @@ -82,7 +82,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt release-sdk-mac-arm64: @@ -113,7 +113,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index c49162aef..07745801e 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -70,7 +70,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt @@ -101,7 +101,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt @@ -145,7 +145,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt @@ -176,7 +176,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt @@ -220,7 +220,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt @@ -251,7 +251,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt @@ -295,7 +295,7 @@ jobs: fi shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt @@ -326,7 +326,7 @@ jobs: echo "${HASHES}" | base64 -D > checksums.txt shell: bash - name: Attest build provenance - uses: actions/attest@v4 + uses: actions/attest@1e69f48acb82d1966a394da916b4c1698aa569d6 # v4.2.2 with: subject-checksums: checksums.txt From bf27b3bd4655ff8b41d886c5119306990eba51fb Mon Sep 17 00:00:00 2001 From: kinyoklion Date: Thu, 24 Sep 2026 15:50:07 +0000 Subject: [PATCH 4/4] ci: re-pin actions/checkout to a SHA Co-Authored-By: rlamb@launchdarkly.com <4955475+kinyoklion@users.noreply.github.com> --- .github/workflows/client.yml | 16 +++++++-------- .github/workflows/cmake.yml | 12 +++++------ .github/workflows/common.yml | 2 +- .github/workflows/cpp-linter.yml | 2 +- .github/workflows/hello-apps.yml | 2 +- .github/workflows/internal.yml | 2 +- .github/workflows/manual-publish-doc.yml | 2 +- .../manual-sdk-release-artifacts.yml | 4 ++-- .github/workflows/networking.yml | 2 +- .github/workflows/release-please.yml | 16 +++++++-------- .github/workflows/server-dynamodb.yml | 8 ++++---- .github/workflows/server-otel.yml | 6 +++--- .github/workflows/server-redis.yml | 8 ++++---- .github/workflows/server.yml | 20 +++++++++---------- .github/workflows/sse.yml | 8 ++++---- 15 files changed, 55 insertions(+), 55 deletions(-) diff --git a/.github/workflows/client.yml b/.github/workflows/client.yml index 2a3713c58..4bd63802a 100644 --- a/.github/workflows/client.yml +++ b/.github/workflows/client.yml @@ -21,7 +21,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/client-contract-tests/client-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: client-tests @@ -41,7 +41,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/client-contract-tests/client-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: client-tests @@ -57,7 +57,7 @@ jobs: build-test: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -66,7 +66,7 @@ jobs: build-test-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -76,7 +76,7 @@ jobs: build-test-client-mac: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -86,7 +86,7 @@ jobs: build-test-client-mac-curl: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-client @@ -97,7 +97,7 @@ jobs: build-test-client-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: @@ -113,7 +113,7 @@ jobs: build-test-client-windows-curl: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/cmake.yml b/.github/workflows/cmake.yml index 19a0079fb..7186601aa 100644 --- a/.github/workflows/cmake.yml +++ b/.github/workflows/cmake.yml @@ -17,7 +17,7 @@ jobs: test-ubuntu: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/cmake-test with: platform_version: '22.04' @@ -25,7 +25,7 @@ jobs: test-ubuntu-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/install-curl id: install-curl - uses: ./.github/actions/cmake-test @@ -39,7 +39,7 @@ jobs: test-macos: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/cmake-test with: platform_version: '12' @@ -47,7 +47,7 @@ jobs: test-macos-curl: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/install-curl id: install-curl - uses: ./.github/actions/cmake-test @@ -61,7 +61,7 @@ jobs: test-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/cmake-test env: @@ -73,7 +73,7 @@ jobs: test-windows-curl: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/install-curl id: install-curl diff --git a/.github/workflows/common.yml b/.github/workflows/common.yml index 212ff3b63..97bfc5af3 100644 --- a/.github/workflows/common.yml +++ b/.github/workflows/common.yml @@ -14,7 +14,7 @@ jobs: build-test-common: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-common diff --git a/.github/workflows/cpp-linter.yml b/.github/workflows/cpp-linter.yml index f6050184c..b6d0a90e1 100644 --- a/.github/workflows/cpp-linter.yml +++ b/.github/workflows/cpp-linter.yml @@ -13,7 +13,7 @@ jobs: cpp-linter: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install boost uses: MarkusJx/install-boost@f9d34f6fe427b8f2ae424d7bf2a3ebccb0dae5a3 # v2.6.0 id: install-boost diff --git a/.github/workflows/hello-apps.yml b/.github/workflows/hello-apps.yml index 97530013c..5bd876be4 100644 --- a/.github/workflows/hello-apps.yml +++ b/.github/workflows/hello-apps.yml @@ -19,7 +19,7 @@ jobs: fail-fast: false runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - name: Install Ninja uses: ./.github/actions/install-ninja diff --git a/.github/workflows/internal.yml b/.github/workflows/internal.yml index 33d235e1f..707bae86e 100644 --- a/.github/workflows/internal.yml +++ b/.github/workflows/internal.yml @@ -14,7 +14,7 @@ jobs: build-test-internal: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-internal diff --git a/.github/workflows/manual-publish-doc.yml b/.github/workflows/manual-publish-doc.yml index f2910bd19..06ba88051 100644 --- a/.github/workflows/manual-publish-doc.yml +++ b/.github/workflows/manual-publish-doc.yml @@ -16,7 +16,7 @@ jobs: build-publish: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - run: sudo apt-get install doxygen graphviz - id: build # Build using the same steps from CI. diff --git a/.github/workflows/manual-sdk-release-artifacts.yml b/.github/workflows/manual-sdk-release-artifacts.yml index 22be82a3c..d57de3a3f 100644 --- a/.github/workflows/manual-sdk-release-artifacts.yml +++ b/.github/workflows/manual-sdk-release-artifacts.yml @@ -53,7 +53,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.tag }} - id: release-sdk @@ -93,7 +93,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ inputs.tag }} - id: release-sdk diff --git a/.github/workflows/networking.yml b/.github/workflows/networking.yml index c3a26f310..62611a438 100644 --- a/.github/workflows/networking.yml +++ b/.github/workflows/networking.yml @@ -14,7 +14,7 @@ jobs: build-test-networking: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-networking diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index 07745801e..38d9a5b01 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -43,7 +43,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-client name: Full release of libs/client-sdk uses: ./.github/actions/sdk-release @@ -83,7 +83,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-client name: Full release of libs/client-sdk (macOS arm64) uses: ./.github/actions/sdk-release @@ -118,7 +118,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server name: Full release of libs/server-sdk uses: ./.github/actions/sdk-release @@ -158,7 +158,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server name: Full release of libs/server-sdk (macOS arm64) uses: ./.github/actions/sdk-release @@ -193,7 +193,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-redis name: Full release of libs/server-sdk-redis-source uses: ./.github/actions/sdk-release @@ -233,7 +233,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-redis name: Full release of libs/server-sdk-redis-source (macOS arm64) uses: ./.github/actions/sdk-release @@ -268,7 +268,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-dynamodb name: Full release of libs/server-sdk-dynamodb-source uses: ./.github/actions/sdk-release @@ -308,7 +308,7 @@ jobs: attestations: write id-token: write steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - id: release-server-dynamodb name: Full release of libs/server-sdk-dynamodb-source (macOS arm64) uses: ./.github/actions/sdk-release diff --git a/.github/workflows/server-dynamodb.yml b/.github/workflows/server-dynamodb.yml index f132cfb42..fee31d927 100644 --- a/.github/workflows/server-dynamodb.yml +++ b/.github/workflows/server-dynamodb.yml @@ -33,7 +33,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -61,7 +61,7 @@ jobs: ports: - 8000:8000 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-dynamodb-source @@ -71,7 +71,7 @@ jobs: build-dynamodb-mac: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-dynamodb-source @@ -82,7 +82,7 @@ jobs: build-dynamodb-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/server-otel.yml b/.github/workflows/server-otel.yml index 1f09f7730..cccb26319 100644 --- a/.github/workflows/server-otel.yml +++ b/.github/workflows/server-otel.yml @@ -17,7 +17,7 @@ jobs: build-test-otel: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-otel @@ -27,7 +27,7 @@ jobs: build-otel-mac: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-otel @@ -38,7 +38,7 @@ jobs: build-test-otel-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/server-redis.yml b/.github/workflows/server-redis.yml index 99464ca50..41cbcf744 100644 --- a/.github/workflows/server-redis.yml +++ b/.github/workflows/server-redis.yml @@ -33,7 +33,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -59,7 +59,7 @@ jobs: ports: - 6379:6379 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-redis-source @@ -68,7 +68,7 @@ jobs: build-redis-mac: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server-redis-source @@ -79,7 +79,7 @@ jobs: build-test-redis-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci env: diff --git a/.github/workflows/server.yml b/.github/workflows/server.yml index 0ae3f6bc9..4538dfc80 100644 --- a/.github/workflows/server.yml +++ b/.github/workflows/server.yml @@ -21,7 +21,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -41,7 +41,7 @@ jobs: TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests SUPPRESSION_FILE: contract-tests/server-contract-tests/test-suppressions-fdv2.txt steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -64,7 +64,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -85,7 +85,7 @@ jobs: TEST_SERVICE_BINARY: ./build/contract-tests/server-contract-tests/server-tests SUPPRESSION_FILE: contract-tests/server-contract-tests/test-suppressions-fdv2.txt steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: server-tests @@ -105,7 +105,7 @@ jobs: build-test-server: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -114,7 +114,7 @@ jobs: build-test-server-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -124,7 +124,7 @@ jobs: build-test-server-mac: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -134,7 +134,7 @@ jobs: build-test-server-mac-curl: runs-on: macos-15 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-cpp-server @@ -145,7 +145,7 @@ jobs: build-test-server-windows: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci with: @@ -157,7 +157,7 @@ jobs: build-test-server-windows-curl: runs-on: windows-2022 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ilammy/msvc-dev-cmd@0b201ec74fa43914dc39ae48a89fd1d8cb592756 # v1.13.0 - uses: ./.github/actions/ci with: diff --git a/.github/workflows/sse.yml b/.github/workflows/sse.yml index 3f718fe1a..8a96a1c97 100644 --- a/.github/workflows/sse.yml +++ b/.github/workflows/sse.yml @@ -14,7 +14,7 @@ jobs: build-test-sse: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-sse-client @@ -22,7 +22,7 @@ jobs: build-test-sse-curl: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: launchdarkly-sse-client @@ -35,7 +35,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/sse-contract-tests/sse-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: sse-tests @@ -58,7 +58,7 @@ jobs: TEST_SERVICE_PORT: 8123 TEST_SERVICE_BINARY: ./build/contract-tests/sse-contract-tests/sse-tests steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - uses: ./.github/actions/ci with: cmake_target: sse-tests