diff --git a/.github/workflows/accessibility.yml b/.github/workflows/accessibility.yml index d27a3cdb..24a88d80 100644 --- a/.github/workflows/accessibility.yml +++ b/.github/workflows/accessibility.yml @@ -23,7 +23,7 @@ jobs: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -54,7 +54,7 @@ jobs: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -108,7 +108,7 @@ jobs: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -152,7 +152,7 @@ jobs: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -210,7 +210,7 @@ jobs: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -234,7 +234,7 @@ jobs: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 diff --git a/.github/workflows/contract-deployment.yml b/.github/workflows/contract-deployment.yml index 9ecac294..eb30d24a 100644 --- a/.github/workflows/contract-deployment.yml +++ b/.github/workflows/contract-deployment.yml @@ -30,7 +30,7 @@ jobs: wasm-path: ${{ steps.build.outputs.wasm-path }} contract-hash: ${{ steps.build.outputs.contract-hash }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -119,7 +119,7 @@ jobs: environment: name: testnet steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Download WASM artifact uses: actions/download-artifact@v4 @@ -188,7 +188,7 @@ jobs: name: mainnet # Require manual approval for mainnet deployments steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Download WASM artifact uses: actions/download-artifact@v4 @@ -257,7 +257,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Download WASM artifact uses: actions/download-artifact@v4 diff --git a/.github/workflows/dependency-scan.yml b/.github/workflows/dependency-scan.yml index f9a8cbae..b35c0343 100644 --- a/.github/workflows/dependency-scan.yml +++ b/.github/workflows/dependency-scan.yml @@ -16,7 +16,7 @@ jobs: # issues before; keep this shorter than the default 20. timeout-minutes: 15 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -63,7 +63,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -104,7 +104,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master @@ -129,7 +129,7 @@ jobs: needs: [scan-rust, scan-npm, scan-trivy] if: always() steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Comment on PR with scan results if: github.event_name == 'pull_request' diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index e9b7fbee..7e4370d8 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -57,7 +57,7 @@ jobs: timeout-minutes: 20 needs: validate-secrets steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Run Checkov uses: bridgecrewio/checkov-action@7b972723c44fb3d256283fac96fae5d7c1894bb7 # v12 @@ -91,7 +91,7 @@ jobs: TF_VAR_redis_auth_token: ${{ secrets[format('REDIS_AUTH_TOKEN_{0}', matrix.environment)] }} TF_VAR_sendgrid_key_rotated_at: ${{ secrets[format('SENDGRID_KEY_ROTATED_AT_{0}', matrix.environment)] }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Terraform uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4 @@ -164,7 +164,7 @@ jobs: TF_VAR_redis_auth_token: ${{ secrets[format('REDIS_AUTH_TOKEN_{0}', matrix.environment)] }} TF_VAR_sendgrid_key_rotated_at: ${{ secrets[format('SENDGRID_KEY_ROTATED_AT_{0}', matrix.environment)] }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Terraform uses: hashicorp/setup-terraform@dfe3c3f87815947d99a8997f908cb6525fc44e9e # v4 diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index 665a6424..fa5ee190 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -20,7 +20,7 @@ jobs: contents: read packages: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Docker Buildx uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 @@ -69,7 +69,7 @@ jobs: needs: build if: github.event_name != 'pull_request' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master @@ -92,7 +92,7 @@ jobs: needs: build if: github.event_name == 'pull_request' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Docker Buildx uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4 diff --git a/.github/workflows/e2e-staging.yml b/.github/workflows/e2e-staging.yml index d2cf39b3..a53d3609 100644 --- a/.github/workflows/e2e-staging.yml +++ b/.github/workflows/e2e-staging.yml @@ -20,7 +20,7 @@ jobs: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Set up Node.js uses: actions/setup-node@v4 diff --git a/.github/workflows/license-check.yml b/.github/workflows/license-check.yml index ae3339ee..bd282046 100644 --- a/.github/workflows/license-check.yml +++ b/.github/workflows/license-check.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -62,7 +62,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -94,7 +94,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 diff --git a/.github/workflows/msrv.yml b/.github/workflows/msrv.yml index 2c205a29..15a50739 100644 --- a/.github/workflows/msrv.yml +++ b/.github/workflows/msrv.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Read MSRV from Cargo.toml id: msrv diff --git a/.github/workflows/openapi-validation.yml b/.github/workflows/openapi-validation.yml index b5bf259f..c6391593 100644 --- a/.github/workflows/openapi-validation.yml +++ b/.github/workflows/openapi-validation.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -45,7 +45,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable diff --git a/.github/workflows/performance.yml b/.github/workflows/performance.yml index 4c2a6026..22a56167 100644 --- a/.github/workflows/performance.yml +++ b/.github/workflows/performance.yml @@ -45,7 +45,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -224,7 +224,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Setup Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -272,7 +272,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 with: fetch-depth: 0 @@ -342,7 +342,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@v7 - name: Download performance results uses: actions/download-artifact@v3 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index d3055c32..fe8ef280 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 @@ -42,7 +42,7 @@ jobs: timeout-minutes: 20 needs: validate-release steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 @@ -95,7 +95,7 @@ jobs: timeout-minutes: 20 needs: validate-release steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable diff --git a/.github/workflows/terraform.yml b/.github/workflows/terraform.yml index e240cb0c..8735e31b 100644 --- a/.github/workflows/terraform.yml +++ b/.github/workflows/terraform.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Terraform uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3 @@ -58,7 +58,7 @@ jobs: matrix: environment: [dev, staging, production] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Terraform uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3 @@ -85,7 +85,7 @@ jobs: env: TF_VAR_environment: ${{ matrix.environment }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Terraform uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 8a01e3df..77194e17 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Prometheus tools run: | @@ -45,7 +45,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -85,7 +85,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -111,7 +111,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -134,7 +134,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -205,7 +205,7 @@ jobs: needs: [gas-benchmarks] if: github.event_name == 'push' && github.ref == 'refs/heads/main' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -261,7 +261,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -329,7 +329,7 @@ jobs: # issues before; keep this shorter than the default 20. timeout-minutes: 15 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -353,7 +353,7 @@ jobs: security-events: write contents: read steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Run Semgrep SAST uses: returntocorp/semgrep-action@713efdd345f3035192eaa63f56867b88e63e4e5d # v1 @@ -387,7 +387,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 @@ -410,7 +410,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Run Trivy vulnerability scanner uses: aquasecurity/trivy-action@314ff8b43182423b84c50b1670b0e10f858f2d98 # master @@ -450,7 +450,7 @@ jobs: timeout-minutes: 20 if: github.event_name == 'pull_request' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Build API container image run: docker build -t predictiq-api:${{ github.sha }} -f Dockerfile . @@ -503,7 +503,7 @@ jobs: matrix: language: ["javascript", "typescript", "rust"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust (for Rust analysis) if: matrix.language == 'rust' @@ -528,7 +528,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -544,7 +544,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -576,7 +576,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -592,7 +592,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -634,7 +634,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install nightly Rust + cargo-fuzz run: | @@ -665,7 +665,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -691,7 +691,7 @@ jobs: run: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -734,7 +734,7 @@ jobs: run: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -778,7 +778,7 @@ jobs: run: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Build visual-regression Docker image run: | @@ -813,7 +813,7 @@ jobs: run: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v6 @@ -841,7 +841,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Check every migration has a rollback script run: | @@ -907,7 +907,7 @@ jobs: env: DATABASE_URL: postgres://postgres:postgres@localhost:5432/predictiq_test steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Apply all forward migrations run: | @@ -943,7 +943,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -1009,7 +1009,7 @@ jobs: permissions: contents: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 @@ -1068,7 +1068,7 @@ jobs: run: working-directory: frontend steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v3 @@ -1099,7 +1099,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -1134,7 +1134,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -1165,7 +1165,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -1190,7 +1190,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Install Rust uses: dtolnay/rust-toolchain@4cda84d5c5c54efe2404f9d843567869ab1699d4 # stable @@ -1284,7 +1284,7 @@ jobs: PGHOST: localhost PGDATABASE: predictiq_schema_check steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Apply all migrations run: | @@ -1383,7 +1383,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: Setup Node.js uses: actions/setup-node@v3