diff --git a/.github/workflows/dispatch-workflow-repo.yml b/.github/workflows/dispatch-workflow-repo.yml index 9884202..a234b34 100644 --- a/.github/workflows/dispatch-workflow-repo.yml +++ b/.github/workflows/dispatch-workflow-repo.yml @@ -44,6 +44,19 @@ jobs: repository: ${{ github.repository_owner }}/${{ github.event.inputs.repository }} ref: ${{ github.event.inputs.branch }} + - name: Check sync-workflow-templates.yml file existence + id: check_sync_workflow_templates_existence + uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3.0.0 + with: + files: target/.github/workflows/sync-workflow-templates.yml + + - name: Fail when synced # zizmor: ignore[template-injection] + if: ${{ steps.check_sync_workflow_templates_existence.outputs.files_exists == 'true' }} + run: | + echo 'Repository is syncing workflows. Please dispatch the workflow on the repository instead:' + echo 'https://github.com/${{ github.repository_owner }}/${{ matrix.repositories }}/actions/workflows/sync-workflow-templates.yml' + exit 1 + - name: Checkout source repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: diff --git a/.github/workflows/dispatch-workflow.yml b/.github/workflows/dispatch-workflow.yml index 2bc7328..0523604 100644 --- a/.github/workflows/dispatch-workflow.yml +++ b/.github/workflows/dispatch-workflow.yml @@ -65,6 +65,19 @@ jobs: path: target repository: ${{ github.repository_owner }}/${{ matrix.repositories }} + - name: Check sync-workflow-templates.yml file existence + id: check_sync_workflow_templates_existence + uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3.0.0 + with: + files: target/.github/workflows/sync-workflow-templates.yml + + - name: Fail when synced # zizmor: ignore[template-injection] + if: ${{ steps.check_sync_workflow_templates_existence.outputs.files_exists == 'true' }} + run: | + echo 'Repository is syncing workflows. Please dispatch the workflow on the repository instead:' + echo 'https://github.com/${{ github.repository_owner }}/${{ matrix.repositories }}/actions/workflows/sync-workflow-templates.yml' + exit 1 + - name: Check ${{ github.event.inputs.name }} file existence id: check_file_existence uses: andstor/file-existence-action@076e0072799f4942c8bc574a82233e1e4d13e9d6 # v3.0.0 diff --git a/.github/workflows/lint-yaml.yml b/.github/workflows/lint-yaml.yml index 53c5000..064932f 100644 --- a/.github/workflows/lint-yaml.yml +++ b/.github/workflows/lint-yaml.yml @@ -33,7 +33,7 @@ jobs: line-length: warning - name: Install the latest version of uv - uses: astral-sh/setup-uv@5a095e7a2014a4212f075830d4f7277575a9d098 # v7.3.1 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 - name: Check GitHub actions run: uvx zizmor --min-severity medium .github/workflows/*.yml diff --git a/workflow-templates/node-test.yml b/workflow-templates/node-test.yml index 0c62487..e090aa4 100644 --- a/workflow-templates/node-test.yml +++ b/workflow-templates/node-test.yml @@ -60,7 +60,7 @@ jobs: run: npm run test:coverage --if-present - name: Collect coverage - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2 + uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0 with: files: ./coverage/lcov.info env: diff --git a/workflow-templates/phpstan.yml b/workflow-templates/phpstan.yml index 26bd16e..6244932 100644 --- a/workflow-templates/phpstan.yml +++ b/workflow-templates/phpstan.yml @@ -36,7 +36,7 @@ jobs: run: "grep 'min: ${{ steps.versions.outputs.php-min-id }}' phpstan.neon" - name: Set up php${{ steps.versions.outputs.php-available }} - uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2.36.0 + uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0 with: php-version: ${{ steps.versions.outputs.php-available }} extensions: bz2, ctype, curl, dom, fileinfo, gd, iconv, intl, json, libxml, mbstring, openssl, pcntl, posix, session, simplexml, xmlreader, xmlwriter, zip, zlib, sqlite, pdo_sqlite diff --git a/workflow-templates/rector-apply.yml b/workflow-templates/rector-apply.yml index c119383..8003bf3 100644 --- a/workflow-templates/rector-apply.yml +++ b/workflow-templates/rector-apply.yml @@ -36,7 +36,7 @@ jobs: uses: icewind1991/nextcloud-version-matrix@8a7bac6300b2f0f3100088b297995a229558ddba # v1.3.2.3.1.3.2 - name: Set up php${{ steps.versions.outputs.php-min }} - uses: shivammathur/setup-php@44454db4f0199b8b9685a5d763dc37cbf79108e1 # v2.36.0 + uses: shivammathur/setup-php@accd6127cb78bee3e8082180cb391013d204ef9f # v2.37.0 with: php-version: ${{ steps.versions.outputs.php-min }} extensions: bz2, ctype, curl, dom, fileinfo, gd, iconv, intl, json, libxml, mbstring, openssl, pcntl, posix, session, simplexml, xmlreader, xmlwriter, zip, zlib, sqlite, pdo_sqlite