From 1c296ae883a85ad75f5a105b0559d1946a6c5538 Mon Sep 17 00:00:00 2001 From: Ludy87 Date: Fri, 26 Sep 2025 17:01:35 +0200 Subject: [PATCH] Update GitHub Actions versions and Node.js to 22 Bump versions of step-security/harden-runner, actions/checkout, actions/setup-node, and actions/github-script to their latest releases. Also update Node.js version from 18 to 22 in the workflow configuration. --- .github/workflows/frontend-licenses-update.yml | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/.github/workflows/frontend-licenses-update.yml b/.github/workflows/frontend-licenses-update.yml index 22ede3b78..6d319ccd6 100644 --- a/.github/workflows/frontend-licenses-update.yml +++ b/.github/workflows/frontend-licenses-update.yml @@ -28,12 +28,12 @@ jobs: repository-projects: write # Required for enabling automerge steps: - name: Harden Runner - uses: step-security/harden-runner@6c439dc8bdf85cadbbce9ed30d1c7b959517bc49 # v2.12.2 + uses: step-security/harden-runner@f4a75cfd619ee5ce8d5b864b0d183aff3c69b55a # v2.13.1 with: egress-policy: audit - name: Checkout PR head (default) - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: fetch-depth: 0 persist-credentials: false @@ -48,7 +48,7 @@ jobs: - name: Checkout BASE branch (safe script) if: github.event_name == 'pull_request' - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 with: ref: ${{ github.event.pull_request.base.sha }} path: base @@ -56,9 +56,9 @@ jobs: persist-credentials: false - name: Set up Node.js - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: - node-version: '18' + node-version: '22' cache: 'npm' cache-dependency-path: frontend/package-lock.json @@ -114,7 +114,7 @@ jobs: # PR Event: Check licenses and comment on PR - name: Delete previous license check comments if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: github-token: ${{ steps.setup-bot.outputs.token }} script: | @@ -167,7 +167,7 @@ jobs: - name: Comment on PR - License Check Results if: github.event_name == 'pull_request' && github.event.pull_request.head.repo.fork == false - uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: github-token: ${{ steps.setup-bot.outputs.token }} script: |