diff --git a/.github/actions/prepare-gradle-build/action.yml b/.github/actions/prepare-gradle-build/action.yml index 99f5f23cff1..43834e9f6f2 100644 --- a/.github/actions/prepare-gradle-build/action.yml +++ b/.github/actions/prepare-gradle-build/action.yml @@ -24,7 +24,7 @@ runs: using: composite steps: - name: Set Up Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: ${{ inputs.java-early-access == 'true' && 'temurin' || (inputs.java-distribution || 'liberica') }} java-version: | @@ -32,7 +32,7 @@ runs: ${{ inputs.java-toolchain == 'true' && '17' || '' }} 25 - name: Set Up Gradle - uses: gradle/actions/setup-gradle@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1 + uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0 with: cache-read-only: false develocity-access-key: ${{ inputs.develocity-access-key }} diff --git a/.github/actions/sync-to-maven-central/action.yml b/.github/actions/sync-to-maven-central/action.yml index 668d0b1417d..1edbe8cc16a 100644 --- a/.github/actions/sync-to-maven-central/action.yml +++ b/.github/actions/sync-to-maven-central/action.yml @@ -17,14 +17,14 @@ runs: using: composite steps: - name: Set Up JFrog CLI - uses: jfrog/setup-jfrog-cli@f748a0599171a192a2668afee8d0497f7c1069df # v4.5.6 + uses: jfrog/setup-jfrog-cli@5b06f730cc5a6f55d78b30753f8583454b08c0aa # v4.8.1 env: JF_ENV_SPRING: ${{ inputs.jfrog-cli-config-token }} - name: Download Release Artifacts shell: bash run: jf rt download --spec ${{ format('{0}/artifacts.spec', github.action_path) }} --spec-vars 'buildName=${{ format('spring-framework-{0}', inputs.spring-framework-version) }};buildNumber=${{ github.run_number }}' - name: Sync - uses: spring-io/central-publish-action@0cdd90d12e6876341e82860d951e1bcddc1e51b6 # v0.2.0 + uses: spring-io/central-publish-action@0c03960e9b16fdfe70e2443e1d5393cbc3a35622 # v0.3.0 with: token: ${{ inputs.central-token-password }} token-name: ${{ inputs.central-token-username }} diff --git a/.github/workflows/backport-bot.yml b/.github/workflows/backport-bot.yml index db40e9f94ea..0a3baf11e47 100644 --- a/.github/workflows/backport-bot.yml +++ b/.github/workflows/backport-bot.yml @@ -18,9 +18,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Set up Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'liberica' java-version: 17 diff --git a/.github/workflows/build-and-deploy-snapshot.yml b/.github/workflows/build-and-deploy-snapshot.yml index 93cf0f12c16..467beedc650 100644 --- a/.github/workflows/build-and-deploy-snapshot.yml +++ b/.github/workflows/build-and-deploy-snapshot.yml @@ -13,7 +13,7 @@ jobs: timeout-minutes: 60 steps: - name: Check Out Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Build and Publish id: build-and-publish uses: ./.github/actions/build @@ -21,7 +21,7 @@ jobs: develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }} publish: true - name: Deploy - uses: spring-io/artifactory-deploy-action@dc1913008c0599f0c4b1fdafb6ff3c502b3565ea # v0.0.2 + uses: spring-io/artifactory-deploy-action@926d7f7cc810569395346bf3a4d91b380b3e355b # v0.0.4 with: artifact-properties: | /**/framework-api-*.zip::zip.name=spring-framework,zip.deployed=false diff --git a/.github/workflows/build-pull-request.yml b/.github/workflows/build-pull-request.yml index 325268f1dd1..48b3ddbc393 100644 --- a/.github/workflows/build-pull-request.yml +++ b/.github/workflows/build-pull-request.yml @@ -10,7 +10,7 @@ jobs: timeout-minutes: 60 steps: - name: Check Out Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Build id: build uses: ./.github/actions/build @@ -19,7 +19,7 @@ jobs: uses: ./.github/actions/print-jvm-thread-dumps - name: Upload Build Reports if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: build-reports path: '**/build/reports/' diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f1fa7b82622..3297b2a9190 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,7 +35,7 @@ jobs: git config --global core.longPaths true Stop-Service -name Docker - name: Check Out Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Build id: build uses: ./.github/actions/build diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml index ea6006f52fc..452b627751b 100644 --- a/.github/workflows/deploy-docs.yml +++ b/.github/workflows/deploy-docs.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 1 ref: docs-build diff --git a/.github/workflows/release-milestone.yml b/.github/workflows/release-milestone.yml index 9ff92e27cfc..bc6ab1a9a55 100644 --- a/.github/workflows/release-milestone.yml +++ b/.github/workflows/release-milestone.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Build and Publish id: build-and-publish uses: ./.github/actions/build @@ -21,7 +21,7 @@ jobs: develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }} publish: true - name: Stage Release - uses: spring-io/artifactory-deploy-action@26bbe925a75f4f863e1e529e85be2d0093cac116 # v0.0.1 + uses: spring-io/artifactory-deploy-action@926d7f7cc810569395346bf3a4d91b380b3e355b # v0.0.4 with: artifact-properties: | /**/framework-api-*.zip::zip.name=spring-framework,zip.deployed=false @@ -57,7 +57,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out Code - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@v6 - name: Sync to Maven Central uses: ./.github/actions/sync-to-maven-central with: @@ -73,7 +73,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Set up JFrog CLI - uses: jfrog/setup-jfrog-cli@dff217c085c17666e8849ebdbf29c8fe5e3995e6 # v4.5.2 + uses: jfrog/setup-jfrog-cli@5b06f730cc5a6f55d78b30753f8583454b08c0aa # v4.8.1 env: JF_ENV_SPRING: ${{ secrets.JF_ARTIFACTORY_SPRING }} - name: Promote build @@ -86,7 +86,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out Code - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@v6 - name: Create GitHub Release uses: ./.github/actions/create-github-release with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8c42d8ecb02..e1ee0bf5e7d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out Code - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Build and Publish id: build-and-publish uses: ./.github/actions/build @@ -20,7 +20,7 @@ jobs: develocity-access-key: ${{ secrets.DEVELOCITY_ACCESS_KEY }} publish: true - name: Stage Release - uses: spring-io/artifactory-deploy-action@dc1913008c0599f0c4b1fdafb6ff3c502b3565ea # v0.0.2 + uses: spring-io/artifactory-deploy-action@926d7f7cc810569395346bf3a4d91b380b3e355b # v0.0.4 with: artifact-properties: | /**/framework-api-*.zip::zip.name=spring-framework,zip.deployed=false @@ -56,7 +56,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out Code - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@v6 - name: Sync to Maven Central uses: ./.github/actions/sync-to-maven-central with: @@ -72,7 +72,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Set up JFrog CLI - uses: jfrog/setup-jfrog-cli@dff217c085c17666e8849ebdbf29c8fe5e3995e6 # v4.5.2 + uses: jfrog/setup-jfrog-cli@5b06f730cc5a6f55d78b30753f8583454b08c0aa # v4.8.1 env: JF_ENV_SPRING: ${{ secrets.JF_ARTIFACTORY_SPRING }} - name: Promote build @@ -85,7 +85,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out Code - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@v6 - name: Create GitHub Release uses: ./.github/actions/create-github-release with: diff --git a/.github/workflows/verify.yml b/.github/workflows/verify.yml index 112c6340c52..84232db1c22 100644 --- a/.github/workflows/verify.yml +++ b/.github/workflows/verify.yml @@ -30,23 +30,23 @@ jobs: runs-on: ubuntu-latest steps: - name: Check Out Release Verification Tests - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: ref: 'v0.0.2' repository: spring-projects/spring-framework-release-verification token: ${{ secrets.token }} - name: Check Out Send Notification Action - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: path: send-notification sparse-checkout: .github/actions/send-notification - name: Set Up Java - uses: actions/setup-java@v4 + uses: actions/setup-java@v5 with: distribution: 'liberica' java-version: 17 - name: Set Up Gradle - uses: gradle/actions/setup-gradle@ac638b010cf58a27ee6c972d7336334ccaf61c96 # v4.4.1 + uses: gradle/actions/setup-gradle@4d9f0ba0025fe599b4ebab900eb7f3a1d93ef4c2 # v5.0.0 with: cache-read-only: false - name: Configure Gradle Properties @@ -64,7 +64,7 @@ jobs: run: ./gradlew spring-framework-release-verification-tests:test - name: Upload Build Reports on Failure if: failure() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v5 with: name: build-reports path: '**/build/reports/'