diff --git a/.github/workflows/auto-update-native-sdks.yml b/.github/workflows/auto-update-native-sdks.yml index e153132..6811daa 100644 --- a/.github/workflows/auto-update-native-sdks.yml +++ b/.github/workflows/auto-update-native-sdks.yml @@ -30,13 +30,13 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} - name: Setup Node.js for API calls - uses: actions/setup-node@v4 + uses: actions/setup-node@v6 with: node-version: '18' @@ -152,7 +152,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/build-sample-apps.yml b/.github/workflows/build-sample-apps.yml index 5adb9d4..40dc710 100644 --- a/.github/workflows/build-sample-apps.yml +++ b/.github/workflows/build-sample-apps.yml @@ -22,7 +22,7 @@ jobs: comment-id: ${{ steps.create-comment.outputs.comment-id }} steps: - name: Find Comment - uses: peter-evans/find-comment@3eae4d37986fb5a8592848f6a574fdf654e61f9e # v3.1.0 + uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0 id: existing-comment with: issue-number: ${{ github.event.pull_request.number }} @@ -30,7 +30,7 @@ jobs: body-includes: - name: Create or update comment - uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0 id: create-comment with: comment-id: ${{ steps.existing-comment.outputs.comment-id }} @@ -79,7 +79,7 @@ jobs: steps: - name: Update sample builds PR comment with build information if: ${{ needs.build-primary-app.result == 'success' }} - uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0 with: comment-id: ${{ needs.update-pr-comment.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} @@ -89,7 +89,7 @@ jobs: - name: Update sample builds PR comment with build failure message if: ${{ needs.build-primary-app.result == 'failure' }} - uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0 with: comment-id: ${{ needs.update-pr-comment.outputs.comment-id }} issue-number: ${{ github.event.pull_request.number }} diff --git a/.github/workflows/check-api-changes.yml b/.github/workflows/check-api-changes.yml index 32f7d7d..0605e87 100644 --- a/.github/workflows/check-api-changes.yml +++ b/.github/workflows/check-api-changes.yml @@ -11,7 +11,7 @@ jobs: check_api_changes: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-flutter - name: Check for API changes diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 2f905d4..09b08d5 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -11,7 +11,7 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-flutter - name: Run flutter analyze run: flutter analyze diff --git a/.github/workflows/reusable-build-sample-apps.yml b/.github/workflows/reusable-build-sample-apps.yml index 457b589..96dbd17 100644 --- a/.github/workflows/reusable-build-sample-apps.yml +++ b/.github/workflows/reusable-build-sample-apps.yml @@ -47,7 +47,7 @@ jobs: name: Building Android sample app ${{ inputs.sample_app_name }} steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 # Workaround for bug https://github.com/actions/checkout/issues/1471 @@ -91,10 +91,10 @@ jobs: # CLI to replace strings in files. The CLI recommends using `cargo install` which is slow. This Action is fast because it downloads pre-built binaries. # If using sd on macos, "brew install" works great. for Linux, this is the recommended way. - name: Install sd CLI to use later in the workflow - uses: kenji-miyake/setup-sd@08c14e27d65a1c215342ef00c81583ae67f4c5ef # v2.0.0 + uses: kenji-miyake/setup-sd@f4181660873fa5814708e1c0a640d8e9975a4ae5 # v2.0.0 - name: Install Ruby - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0 + uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0 with: ruby-version: '3.1' bundler-cache: true # cache tools to make builds faster in future @@ -103,14 +103,14 @@ jobs: # Update version numbers and workspace credentials before building the app - name: Generate New Version - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: "generate_new_version" options: '{"branch_name":"${{ github.ref_name }}", "pull_request_number":"${{ github.event.pull_request.number }}"}' - name: Update Flutter SDK Version - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: "update_flutter_sdk_version" @@ -120,7 +120,7 @@ jobs: APP_VERSION_CODE: ${{ env.APP_VERSION_CODE }} - name: Update Sample App Version - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: "update_flutter_android_app_version" @@ -176,7 +176,7 @@ jobs: - name: Build and upload Android app via Fastlane if: ${{ inputs.should_distribute }} id: android_build - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: 'android build' @@ -234,7 +234,7 @@ jobs: name: Building iOS sample app ${{ inputs.sample_app_name }} steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 # Workaround for bug https://github.com/actions/checkout/issues/1471 @@ -282,7 +282,7 @@ jobs: brew install xcbeautify # used by fastlane for output - name: Install Ruby - uses: ruby/setup-ruby@922ebc4c5262cd14e07bb0e1db020984b6c064fe # v1.226.0 + uses: ruby/setup-ruby@9eb537ca036ebaed86729dcb9309076e4c5c3b74 # v1.314.0 with: ruby-version: '3.1' bundler-cache: true # cache tools to make builds faster in future @@ -291,14 +291,14 @@ jobs: # Update version numbers and workspace credentials before building the app - name: Generate New Version - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: "generate_new_version" options: '{"branch_name":"${{ github.ref_name }}", "pull_request_number":"${{ github.event.pull_request.number }}"}' - name: Update Flutter SDK Version - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: "update_flutter_sdk_version" @@ -308,7 +308,7 @@ jobs: APP_VERSION_CODE: ${{ env.APP_VERSION_CODE }} - name: Update Sample App Version - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: "update_flutter_ios_app_version" @@ -367,7 +367,7 @@ jobs: - name: Cache CocoaPods downloaded dependencies for faster builds in the future if: ${{ inputs.sample_app_name != 'flutter_sample_spm' }} - uses: actions/cache@v4 + uses: actions/cache@v5 with: path: Pods key: ${{ runner.os }}-${{ inputs.sample_app_name }}-Pods-${{ github.ref }} @@ -381,7 +381,7 @@ jobs: - name: Build and upload iOS app via Fastlane if: ${{ inputs.should_distribute }} id: ios_build - uses: maierj/fastlane-action@5a3b971aaa26776459bb26894d6c1a1a84a311a7 # v3.1.0 + uses: maierj/fastlane-action@182983d8f94bad9884001c03c1c2786f4c7165ed # v3.2.0 with: subdirectory: apps/${{ inputs.sample_app_name }} lane: "ios build" diff --git a/.github/workflows/tag-and-deploy.yml b/.github/workflows/tag-and-deploy.yml index 4b9934f..365cd16 100644 --- a/.github/workflows/tag-and-deploy.yml +++ b/.github/workflows/tag-and-deploy.yml @@ -19,12 +19,12 @@ jobs: steps: - name: 'Generate token' id: generate_token - uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: client-id: ${{ secrets.CIO_APP_CLIENT_ID }} private-key: ${{ secrets.CIO_APP_SECRET }} - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: token: ${{ steps.generate_token.outputs.token }} @@ -32,7 +32,7 @@ jobs: uses: levibostian/setup-sd@cbdeed93d4fe03f9e36b73bb6d9e7c3c4805e1f9 # add-file-extension - name: Deploy git tag via semantic-release - uses: cycjimmy/semantic-release-action@0a51e81a6baff2acad3ee88f4121c589c73d0f0e # v4.2.0 + uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0 id: semantic-release with: semantic_version: latest @@ -44,7 +44,7 @@ jobs: GITHUB_TOKEN: ${{ steps.generate_token.outputs.token }} - name: Notify team of git tag creation - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 if: steps.semantic-release.outputs.new_release_published == 'true' with: payload: | @@ -78,7 +78,7 @@ jobs: SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK - name: Notify team of failure - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 if: ${{ failure() }} with: payload: | @@ -117,20 +117,20 @@ jobs: if: needs.deploy-git-tag.outputs.new_release_published == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: ref: ${{ needs.deploy-git-tag.outputs.new_release_version }} - uses: ./.github/actions/setup-flutter - name: Publish to pub.dev - uses: k-paxian/dart-package-publisher@e555d5c07a728bca4c6706ff8907a76ab53a5bf0 # master + uses: k-paxian/dart-package-publisher@8fdba1dbf624c712706281a6f91cb50b6bfc2eaf # master with: credentialJson: ${{ secrets.CREDENTIAL_JSON }} flutter: true - name: Notify team of successful deployment - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 if: ${{ success() }} with: payload: | @@ -164,7 +164,7 @@ jobs: SLACK_WEBHOOK_TYPE: INCOMING_WEBHOOK - name: Notify team of failure - uses: slackapi/slack-github-action@70cd7be8e40a46e8b0eced40b0de447bdb42f68e # v1.26.0 + uses: slackapi/slack-github-action@45a88b9581bfab2566dc881e2cd66d334e621e2c # v3.0.3 if: ${{ failure() }} with: payload: | diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 6e3d077..10338ed 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -11,7 +11,7 @@ jobs: unit_test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-flutter - name: Run Flutter tests run: flutter test @@ -19,11 +19,11 @@ jobs: test_publish: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: ./.github/actions/setup-flutter - name: dry-run publishing to feel confident deployment will work after merging PR - uses: k-paxian/dart-package-publisher@e555d5c07a728bca4c6706ff8907a76ab53a5bf0 # master + uses: k-paxian/dart-package-publisher@8fdba1dbf624c712706281a6f91cb50b6bfc2eaf # master with: credentialJson: ${{ secrets.CREDENTIAL_JSON }} dryRunOnly: true