From 5f21caa7c0e4ac8819e16541257a1b1d3cd893fa Mon Sep 17 00:00:00 2001 From: Jonathan Hutchison Date: Mon, 17 Aug 2026 15:51:00 -0400 Subject: [PATCH 1/4] Update npm packages --- package-lock.json | 97 ++++++++++++++++++++++++++++++----------------- package.json | 6 +-- 2 files changed, 65 insertions(+), 38 deletions(-) diff --git a/package-lock.json b/package-lock.json index 779e31f..162c31c 100644 --- a/package-lock.json +++ b/package-lock.json @@ -7,22 +7,22 @@ "dependencies": { "@uswds/compile": "^1.3.2", "@uswds/uswds": "^3.13.0", - "concurrently": "^10.0.3", + "concurrently": "^10.0.5", "gulp": "^5.0.1", "pa11y-ci": "^4.1.1", - "taze": "^19.14.1" + "taze": "^21.1.0" } }, "node_modules/@antfu/ni": { - "version": "30.1.0", - "resolved": "https://registry.npmjs.org/@antfu/ni/-/ni-30.1.0.tgz", - "integrity": "sha512-3VuAbPjgY52rQNn4wABaXMhBU2Oq91uy6L8nX49eJ35OLI68CyckGU+HZxcaHix4ymuGM2nFL1D6sLpgODK5xw==", + "version": "30.5.0", + "resolved": "https://registry.npmjs.org/@antfu/ni/-/ni-30.5.0.tgz", + "integrity": "sha512-VwQoM9qF1dzDrye55b1qIBeLr4zQ1a5wZQMPCe496HTiquViBZqxtNBaq98WX3ze5kC9Yl7gKSU4W2vtLztxYw==", "license": "MIT", "dependencies": { "fzf": "^0.5.2", - "package-manager-detector": "^1.6.0", - "tinyexec": "^1.0.4", - "tinyglobby": "^0.2.15" + "package-manager-detector": "^1.8.0", + "tinyexec": "^1.3.0", + "tinyglobby": "^0.2.17" }, "bin": { "na": "bin/na.mjs", @@ -1371,14 +1371,14 @@ "license": "MIT" }, "node_modules/concurrently": { - "version": "10.0.3", - "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-10.0.3.tgz", - "integrity": "sha512-hc3LH4UaKWd/bbyDK/IGVa4RB6PtQ3CUYwtrkzqHn+wIG3Hr5fhpRlk0L/gCa8ZE1L/Ufj50Zho69cI5w8SQBA==", + "version": "10.0.5", + "resolved": "https://registry.npmjs.org/concurrently/-/concurrently-10.0.5.tgz", + "integrity": "sha512-JaP/CoftUrCcAFW/g//RbgEGwlelnEae6cfBLgH6ZdO6s8jPkn6p9SB9u6pdVxYXoiSnFqseOlHfrEfF82TVOg==", "license": "MIT", "dependencies": { "chalk": "5.6.2", "rxjs": "7.8.2", - "shell-quote": "1.8.4", + "shell-quote": "1.9.0", "supports-color": "10.2.2", "tree-kill": "1.2.2", "yargs": "18.0.0" @@ -3370,6 +3370,19 @@ "node": ">=0.10.0" } }, + "node_modules/obug": { + "version": "2.1.4", + "resolved": "https://registry.npmjs.org/obug/-/obug-2.1.4.tgz", + "integrity": "sha512-4a+OsYv9UktOJKE+l1A4OufDgdRF9PifWj+tJnHURo/P+WOxpG4GzUFL9qCalmWauao6ogiG+QvnCovwPoyAWA==", + "funding": [ + "https://github.com/sponsors/sxzz", + "https://opencollective.com/debug" + ], + "license": "MIT", + "engines": { + "node": ">=12.20.0" + } + }, "node_modules/ofetch": { "version": "1.5.1", "resolved": "https://registry.npmjs.org/ofetch/-/ofetch-1.5.1.tgz", @@ -3540,9 +3553,9 @@ } }, "node_modules/package-manager-detector": { - "version": "1.6.0", - "resolved": "https://registry.npmjs.org/package-manager-detector/-/package-manager-detector-1.6.0.tgz", - "integrity": "sha512-61A5ThoTiDG/C8s8UMZwSorAGwMJ0ERVGj2OjoW5pAalsNOg15+iQiPzrLJ4jhZ1HJzmC2PIHT2oEiH3R5fzNA==", + "version": "1.8.0", + "resolved": "https://registry.npmjs.org/package-manager-detector/-/package-manager-detector-1.8.0.tgz", + "integrity": "sha512-yQA4H19AmPEoMUeavPMDIe1higySl/gH/yaQrkT/s07Qp+7pp2hYz30N3z2l5BkjVkF9Ow6o0wjJamm2y7Sn0A==", "license": "MIT" }, "node_modules/parent-module": { @@ -3768,9 +3781,9 @@ } }, "node_modules/pnpm-workspace-yaml": { - "version": "1.6.1", - "resolved": "https://registry.npmjs.org/pnpm-workspace-yaml/-/pnpm-workspace-yaml-1.6.1.tgz", - "integrity": "sha512-yTeZntGWi8m9WNuhoVsP0DpFc4sC1U0+rr/qR6Zi9n2g3sxXY+JfccjXjjruNz96tM8I09yaJUA86doRnNLkbg==", + "version": "1.8.0", + "resolved": "https://registry.npmjs.org/pnpm-workspace-yaml/-/pnpm-workspace-yaml-1.8.0.tgz", + "integrity": "sha512-rqGldoFOzjalWzlPtzAi/RcjAyep+Pjl4QUKJ6/oEZXzhVAX79GS/i8gjhQT715g75kTkyfHjL9eBPGZ9Co++Q==", "funding": [ { "type": "individual", @@ -4616,9 +4629,9 @@ } }, "node_modules/shell-quote": { - "version": "1.8.4", - "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.8.4.tgz", - "integrity": "sha512-VsC6n6vz1ihYYyZZwX7YZSF5l5x36ca17OC+a69h94YqB7X6XLwf+5MOgynYir2SLFUbl8gIYvBo8K8RoNQ6bQ==", + "version": "1.9.0", + "resolved": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.9.0.tgz", + "integrity": "sha512-Iov+JwFv/2HcTpcwNMKd8+IWNb8tboQJNQTkAY/LLVK7gGH9jy+LGkVqPxfekHl+yMmiqXszdGWXgkfml7hjqA==", "license": "MIT", "engines": { "node": ">= 0.4" @@ -4860,22 +4873,24 @@ } }, "node_modules/taze": { - "version": "19.14.1", - "resolved": "https://registry.npmjs.org/taze/-/taze-19.14.1.tgz", - "integrity": "sha512-+wf/IqGReU68vBE/iJ7JCuV5QeD6zQBp9MI6YphN7bT2vf/YIHd0oVA4AJiX3uANI1hQY58MrVmDwLv0x/q3BA==", + "version": "21.1.0", + "resolved": "https://registry.npmjs.org/taze/-/taze-21.1.0.tgz", + "integrity": "sha512-NkFkadmqqpaVZ9x3bV4cul1xQnUknhs1HzE3Q/VXHKS7np2Kg7ZNL7nNsEsBXKsafmgepa+aZNtzoegDgsymPw==", "license": "MIT", "dependencies": { - "@antfu/ni": "^30.1.0", + "@antfu/ni": "^30.5.0", "@henrygd/queue": "^1.2.0", "cac": "^7.0.0", + "obug": "^2.1.4", "ofetch": "^1.5.1", - "package-manager-detector": "^1.6.0", + "package-manager-detector": "^1.8.0", "pathe": "^2.0.3", - "pnpm-workspace-yaml": "^1.6.1", + "pnpm-workspace-yaml": "^1.8.0", "restore-cursor": "^5.1.0", - "tinyexec": "^1.2.2", - "tinyglobby": "^0.2.16", + "tinyexec": "^1.3.0", + "tinyglobby": "^0.2.17", "unconfig": "^7.5.0", + "verkit": "^0.3.2", "yaml": "^2.9.0" }, "bin": { @@ -4940,9 +4955,9 @@ } }, "node_modules/tinyexec": { - "version": "1.2.4", - "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.2.4.tgz", - "integrity": "sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==", + "version": "1.3.0", + "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.3.0.tgz", + "integrity": "sha512-QKAl9m8gWWGHV8jZcPeym6j+XULi6tOf1mT83WYJ4Lk2ytW/uwAWkrP0uFsdoYMdueVJ0qs26wZ+23xeB4ibNQ==", "license": "MIT", "engines": { "node": ">=18" @@ -4965,9 +4980,9 @@ } }, "node_modules/tinyglobby/node_modules/picomatch": { - "version": "4.0.4", - "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz", - "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==", + "version": "4.0.5", + "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.5.tgz", + "integrity": "sha512-RvwwcruNjI1ncT5xRakeyS9Lf8lcItv34KD+aif+VH9kduAyfYBipGh12274xtenIPZ119/R9BdTBa8gAwSh0A==", "license": "MIT", "engines": { "node": ">=12" @@ -5176,6 +5191,18 @@ "integrity": "sha512-cXEIW6cfr15lFv563k4GuVuW/fiwjknytD37jIOLSdSWuOI6WnO/oKwmP2FQTU2l01LP8/M5TSAJpzUaGe3uWg==", "license": "MIT" }, + "node_modules/verkit": { + "version": "0.3.2", + "resolved": "https://registry.npmjs.org/verkit/-/verkit-0.3.2.tgz", + "integrity": "sha512-zj/ob3UsvJGN0whEAKFp53REA5X66hvffVqoCtVQAakJKnKlH+/PcOfMoFwIG/o4rElqLv/ycAFlx8ZlXUorCg==", + "license": "MIT", + "engines": { + "node": ">=18.12.0" + }, + "funding": { + "url": "https://github.com/sponsors/sxzz" + } + }, "node_modules/vinyl": { "version": "2.2.1", "resolved": "https://registry.npmjs.org/vinyl/-/vinyl-2.2.1.tgz", diff --git a/package.json b/package.json index f9e77ef..ede471e 100644 --- a/package.json +++ b/package.json @@ -10,14 +10,14 @@ "unlighthouse": "npx unlighthouse --site http://localhost:4000", "gulp": "gulp", "update:npm": "npx taze", - "update:gems": "bundle update" + "update:gems": "bundle update --all" }, "dependencies": { "@uswds/compile": "^1.3.2", "@uswds/uswds": "^3.13.0", - "concurrently": "^10.0.3", + "concurrently": "^10.0.5", "gulp": "^5.0.1", "pa11y-ci": "^4.1.1", - "taze": "^19.14.1" + "taze": "^21.1.0" } } From e306e6dca2994e6ff45825bbe20f327bc79c81a1 Mon Sep 17 00:00:00 2001 From: Jonathan Hutchison Date: Mon, 17 Aug 2026 15:51:06 -0400 Subject: [PATCH 2/4] Update node version --- .nvmrc | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.nvmrc b/.nvmrc index 54c6511..4aa0e0a 100644 --- a/.nvmrc +++ b/.nvmrc @@ -1 +1 @@ -v24 +v26 From 6eb44133ddb9767b8932647cc1cd8e461e0145d2 Mon Sep 17 00:00:00 2001 From: Jonathan Hutchison Date: Mon, 17 Aug 2026 15:51:12 -0400 Subject: [PATCH 3/4] Update gems --- Gemfile.lock | 56 ++++++++++++++++++++++++++-------------------------- 1 file changed, 28 insertions(+), 28 deletions(-) diff --git a/Gemfile.lock b/Gemfile.lock index 041606a..935e3b5 100644 --- a/Gemfile.lock +++ b/Gemfile.lock @@ -6,8 +6,8 @@ GEM base64 (0.3.0) bigdecimal (4.1.2) colorator (1.1.0) - concurrent-ruby (1.3.6) - csv (3.3.5) + concurrent-ruby (1.3.8) + csv (3.3.6) em-websocket (0.5.3) eventmachine (>= 0.12.9) http_parser.rb (~> 0) @@ -24,35 +24,35 @@ GEM ffi (1.17.4-x86_64-linux-gnu) ffi (1.17.4-x86_64-linux-musl) forwardable-extended (2.6.0) - google-protobuf (4.35.0) + google-protobuf (4.35.1) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-aarch64-linux-gnu) + google-protobuf (4.35.1-aarch64-linux-gnu) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-aarch64-linux-musl) + google-protobuf (4.35.1-aarch64-linux-musl) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-arm64-darwin) + google-protobuf (4.35.1-arm64-darwin) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-x86-linux-gnu) + google-protobuf (4.35.1-x86-linux-gnu) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-x86-linux-musl) + google-protobuf (4.35.1-x86-linux-musl) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-x86_64-darwin) + google-protobuf (4.35.1-x86_64-darwin) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-x86_64-linux-gnu) + google-protobuf (4.35.1-x86_64-linux-gnu) bigdecimal rake (~> 13.3) - google-protobuf (4.35.0-x86_64-linux-musl) + google-protobuf (4.35.1-x86_64-linux-musl) bigdecimal rake (~> 13.3) http_parser.rb (0.8.1) - i18n (1.14.8) + i18n (1.15.2) concurrent-ruby (~> 1.0) jekyll (4.4.1) addressable (~> 2.4) @@ -83,7 +83,7 @@ GEM jekyll (>= 3.7, < 5.0) jekyll-watch (2.2.1) listen (~> 3.0) - json (2.19.8) + json (2.21.2) kramdown (2.5.2) rexml (>= 3.4.4) kramdown-parser-gfm (1.1.0) @@ -105,36 +105,36 @@ GEM rexml (3.4.4) rouge (4.7.0) safe_yaml (1.0.5) - sass-embedded (1.100.0) + sass-embedded (1.102.0) google-protobuf (~> 4.31) rake (>= 13) - sass-embedded (1.100.0-aarch64-linux-android) + sass-embedded (1.102.0-aarch64-linux-android) google-protobuf (~> 4.31) - sass-embedded (1.100.0-aarch64-linux-gnu) + sass-embedded (1.102.0-aarch64-linux-gnu) google-protobuf (~> 4.31) - sass-embedded (1.100.0-aarch64-linux-musl) + sass-embedded (1.102.0-aarch64-linux-musl) google-protobuf (~> 4.31) - sass-embedded (1.100.0-arm-linux-androideabi) + sass-embedded (1.102.0-arm-linux-androideabi) google-protobuf (~> 4.31) - sass-embedded (1.100.0-arm-linux-gnueabihf) + sass-embedded (1.102.0-arm-linux-gnueabihf) google-protobuf (~> 4.31) - sass-embedded (1.100.0-arm-linux-musleabihf) + sass-embedded (1.102.0-arm-linux-musleabihf) google-protobuf (~> 4.31) - sass-embedded (1.100.0-arm64-darwin) + sass-embedded (1.102.0-arm64-darwin) google-protobuf (~> 4.31) - sass-embedded (1.100.0-riscv64-linux-android) + sass-embedded (1.102.0-riscv64-linux-android) google-protobuf (~> 4.31) - sass-embedded (1.100.0-riscv64-linux-gnu) + sass-embedded (1.102.0-riscv64-linux-gnu) google-protobuf (~> 4.31) - sass-embedded (1.100.0-riscv64-linux-musl) + sass-embedded (1.102.0-riscv64-linux-musl) google-protobuf (~> 4.31) - sass-embedded (1.100.0-x86_64-darwin) + sass-embedded (1.102.0-x86_64-darwin) google-protobuf (~> 4.31) - sass-embedded (1.100.0-x86_64-linux-android) + sass-embedded (1.102.0-x86_64-linux-android) google-protobuf (~> 4.31) - sass-embedded (1.100.0-x86_64-linux-gnu) + sass-embedded (1.102.0-x86_64-linux-gnu) google-protobuf (~> 4.31) - sass-embedded (1.100.0-x86_64-linux-musl) + sass-embedded (1.102.0-x86_64-linux-musl) google-protobuf (~> 4.31) terminal-table (3.0.2) unicode-display_width (>= 1.1.1, < 3) From b99ef6ecb1769c8cfe50a97759a2e5fc49a57477 Mon Sep 17 00:00:00 2001 From: Jonathan Hutchison Date: Mon, 17 Aug 2026 15:53:12 -0400 Subject: [PATCH 4/4] Update github actions --- .github/workflows/a11y-check.yml | 4 +- .github/workflows/broken-link-check.yml | 10 ++--- .github/workflows/codeql-analysis.yml | 58 ++++++++++++------------- .github/workflows/deploy.yml | 4 +- .github/workflows/promote.yml | 4 +- 5 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.github/workflows/a11y-check.yml b/.github/workflows/a11y-check.yml index 03dad6d..2e1922b 100644 --- a/.github/workflows/a11y-check.yml +++ b/.github/workflows/a11y-check.yml @@ -16,12 +16,12 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - name: Set up Node.js - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: cache: 'npm' node-version-file: '.nvmrc' diff --git a/.github/workflows/broken-link-check.yml b/.github/workflows/broken-link-check.yml index 49a53d4..d0bf5cb 100644 --- a/.github/workflows/broken-link-check.yml +++ b/.github/workflows/broken-link-check.yml @@ -2,7 +2,7 @@ name: "Broken Link Check" on: schedule: - - cron: 0 0 * * 0 # every Sunday at midnight + - cron: 0 0 * * 0 # every Sunday at midnight workflow_dispatch: inputs: env: @@ -39,7 +39,7 @@ jobs: steps: - name: Configure Prod AWS Credentials - uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ vars.AWS_REGION }} role-to-assume: arn:aws:iam::${{ secrets.PROD_ACCOUNT }}:role/delegatedadmin/developer/ab2d-prod-github-actions @@ -58,7 +58,7 @@ jobs: - name: Check for Broken Prod Links id: lychee-prod - uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0 + uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0 with: jobSummary: true fail: false @@ -74,7 +74,7 @@ jobs: steps: - name: Configure Dev AWS Credentials - uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ vars.AWS_REGION }} role-to-assume: arn:aws:iam::${{ secrets.NON_PROD_ACCOUNT }}:role/delegatedadmin/developer/ab2d-dev-github-actions @@ -93,7 +93,7 @@ jobs: - name: Check for Broken Dev Links id: lychee-dev - uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0 + uses: lycheeverse/lychee-action@e7477775783ea5526144ba13e8db5eec57747ce8 # v2.9.0 with: jobSummary: true fail: false diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 5e36ff9..4ce74d7 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -7,7 +7,7 @@ name: "CodeQL" on: push: - branches: [main] + branches: [ main ] pull_request: # The branches below must be a subset of the branches above # branches: [main] @@ -26,35 +26,35 @@ jobs: matrix: # Override automatic language detection by changing the below list # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python'] - language: ['javascript', 'ruby'] + language: [ 'javascript', 'ruby' ] # Learn more... # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection steps: - - name: Checkout repository - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - with: - persist-credentials: false - # We must fetch at least the immediate parents so that if this is - # a pull request then we can checkout the head. - fetch-depth: 2 - - # Initializes the CodeQL tools for scanning. - - name: Initialize CodeQL - uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1 - with: - languages: ${{ matrix.language }} - # If you wish to specify custom queries, you can do so here or in a config file. - # By default, queries listed here will override any specified in a config file. - # Prefix the list here with "+" to use these queries and those in the config file. - # queries: ./path/to/local/query, your-org/your-repo/queries@main - - # ℹī¸ Command-line programs to run using the OS shell. - # 📚 https://git.io/JvXDl - - # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines - # and modify them (or add more) to build your code if your project - # uses a compiled language - - - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463 # v4.36.1 + - name: Checkout repository + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + with: + persist-credentials: false + # We must fetch at least the immediate parents so that if this is + # a pull request then we can checkout the head. + fetch-depth: 2 + + # Initializes the CodeQL tools for scanning. + - name: Initialize CodeQL + uses: github/codeql-action/init@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 + with: + languages: ${{ matrix.language }} + # If you wish to specify custom queries, you can do so here or in a config file. + # By default, queries listed here will override any specified in a config file. + # Prefix the list here with "+" to use these queries and those in the config file. + # queries: ./path/to/local/query, your-org/your-repo/queries@main + + # ℹī¸ Command-line programs to run using the OS shell. + # 📚 https://git.io/JvXDl + + # ✏ī¸ If the Autobuild fails above, remove it and uncomment the following three lines + # and modify them (or add more) to build your code if your project + # uses a compiled language + + - name: Perform CodeQL Analysis + uses: github/codeql-action/analyze@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index e2ff995..9ba4ac1 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -31,7 +31,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false @@ -39,7 +39,7 @@ jobs: run: docker build --build-arg "BASE_PATH=${BASE_PATH}" --target export -o _site . - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ vars.AWS_REGION }} role-to-assume: arn:aws:iam::${{ secrets.NON_PROD_ACCOUNT }}:role/delegatedadmin/developer/ab2d-dev-github-actions diff --git a/.github/workflows/promote.yml b/.github/workflows/promote.yml index 04e2949..87c33f9 100644 --- a/.github/workflows/promote.yml +++ b/.github/workflows/promote.yml @@ -18,7 +18,7 @@ jobs: steps: - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ vars.AWS_REGION }} role-to-assume: arn:aws:iam::${{ secrets.NON_PROD_ACCOUNT }}:role/delegatedadmin/developer/ab2d-dev-github-actions @@ -34,7 +34,7 @@ jobs: aws s3 sync "s3://${TARGET_BUCKET}/" ./temp-site/ --exclude 'feature/*' - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0 + uses: aws-actions/configure-aws-credentials@e6de054238d6b7531b4efff3b6587d9aade6a06c # v6.2.3 with: aws-region: ${{ vars.AWS_REGION }} role-to-assume: arn:aws:iam::${{ secrets.PROD_ACCOUNT }}:role/delegatedadmin/developer/ab2d-prod-github-actions