diff --git a/.github/workflows/checkmarx-one.yml b/.github/workflows/checkmarx-one.yml index 16b78a35..aedde44f 100644 --- a/.github/workflows/checkmarx-one.yml +++ b/.github/workflows/checkmarx-one.yml @@ -38,10 +38,10 @@ jobs: steps: # This step checks out a copy of your repository. - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v7 # This step creates the Checkmarx One scan - name: Checkmarx One scan - uses: checkmarx/ast-github-action@8e887bb93dacc44e0f5b64ee2b06d5815f89d4fc + uses: checkmarx/ast-github-action@b1de09ccbcda7802f13153481936a1c4e876837f with: base_uri: https://ast.checkmarx.net # This should be replaced by your base uri for Checkmarx One cx_client_id: ${{ secrets.CX_CLIENT_ID }} # This should be created within your Checkmarx One account : https://checkmarx.com/resource/documents/en/34965-118315-authentication-for-checkmarx-one-cli.html#UUID-a4e31a96-1f36-6293-e95a-97b4b9189060_UUID-4123a2ff-32d0-2287-8dd2-3c36947f675e @@ -49,7 +49,7 @@ jobs: cx_tenant: ${{ secrets.CX_TENANT }} # This should be replaced by your tenant for Checkmarx One additional_params: --report-format sarif --output-path . - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: # Path to SARIF file relative to the root of the repository sarif_file: cx_result.sarif diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 586791cd..11bad42e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,16 +18,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup .NET 10 - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v6 with: dotnet-version: 10.x # NuGet package cache (speeds up restore) - name: Cache NuGet packages - uses: actions/cache@v4 + uses: actions/cache@v6 with: path: ~/.nuget/packages key: ${{ runner.os }}-nuget-${{ hashFiles('**/*.csproj') }} @@ -71,14 +71,14 @@ jobs: - name: Upload coverage artifact if: matrix.os == 'ubuntu-latest' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v7 with: name: code-coverage-report path: ./coverage/report - name: Upload coverage to Codecov if: matrix.os == 'ubuntu-latest' - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@v7 with: files: ./coverage/*/coverage.cobertura.xml fail_ci_if_error: true @@ -107,8 +107,8 @@ jobs: runs-on: ubuntu-latest needs: build-and-test steps: - - uses: actions/checkout@v4 - - uses: actions/setup-dotnet@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-dotnet@v6 with: dotnet-version: 10.x - name: Install Native AOT prerequisites (clang + zlib) @@ -162,8 +162,8 @@ jobs: runs-on: ubuntu-latest needs: build-and-test steps: - - uses: actions/checkout@v4 - - uses: actions/setup-dotnet@v4 + - uses: actions/checkout@v7 + - uses: actions/setup-dotnet@v6 with: dotnet-version: 10.x - name: Tripwire — a deliberate violation must fail the build with OVERFIT008 diff --git a/.github/workflows/devskim.yml b/.github/workflows/devskim.yml index 3fbf5ff5..b92c1500 100644 --- a/.github/workflows/devskim.yml +++ b/.github/workflows/devskim.yml @@ -23,12 +23,12 @@ jobs: security-events: write steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Run DevSkim scanner uses: microsoft/DevSkim-Action@v1 - name: Upload DevSkim scan results to GitHub Security tab - uses: github/codeql-action/upload-sarif@v3 + uses: github/codeql-action/upload-sarif@v4 with: sarif_file: devskim-results.sarif diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml index 71b5376c..47add56a 100644 --- a/.github/workflows/docker-publish.yml +++ b/.github/workflows/docker-publish.yml @@ -29,13 +29,13 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Log in to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -52,7 +52,7 @@ jobs: - name: Derive image tags id: meta - uses: docker/metadata-action@v5 + uses: docker/metadata-action@v6 with: images: ${{ secrets.DOCKERHUB_USERNAME }}/overfit tags: | @@ -61,7 +61,7 @@ jobs: type=sha,format=short - name: Build and push (linux/amd64) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: . file: Sources/Cli/Dockerfile @@ -79,7 +79,7 @@ jobs: # Shares every layer with the serve image via the gha cache, so this is tag-only cost. - name: Derive MCP image tags id: meta-mcp - uses: docker/metadata-action@v5 + uses: docker/metadata-action@v6 with: images: ${{ secrets.DOCKERHUB_USERNAME }}/overfit tags: | @@ -88,7 +88,7 @@ jobs: type=sha,format=short,suffix=-mcp - name: Build and push MCP target (linux/amd64) - uses: docker/build-push-action@v6 + uses: docker/build-push-action@v7 with: context: . file: Sources/Cli/Dockerfile diff --git a/.github/workflows/overthink-playstore.yml b/.github/workflows/overthink-playstore.yml index 5bf9ad62..bbbc40f9 100644 --- a/.github/workflows/overthink-playstore.yml +++ b/.github/workflows/overthink-playstore.yml @@ -34,15 +34,15 @@ jobs: PROJECT: Demo/OverfitChatApp/OverfitChatApp.csproj PACKAGE: com.devonbike.overthink steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup .NET 10 - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v6 with: dotnet-version: 10.x - name: Setup JDK 17 - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: temurin java-version: '17' diff --git a/.github/workflows/publish-nuget.yml b/.github/workflows/publish-nuget.yml index b998c6bd..b8f3f8a2 100644 --- a/.github/workflows/publish-nuget.yml +++ b/.github/workflows/publish-nuget.yml @@ -12,10 +12,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup .NET - uses: actions/setup-dotnet@v4 + uses: actions/setup-dotnet@v6 with: dotnet-version: 10.x