From 6746dab2760a6679eaa923cf9be967a5133aea4a Mon Sep 17 00:00:00 2001 From: Automated Date: Wed, 4 Nov 2026 07:42:11 +0000 Subject: [PATCH] Update GitHub Actions to latest vetted versions MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit | Action | SHA | Version | Vetted in | |--------|-----|---------|-----------| | `actions/setup-python` | `6d4fd22b` | v7.1.0 | [exoscale/gha-pins#35](https://github.com/exoscale/gha-pins/pull/35) | | `actions/upload-artifact` | `cf430e03` | v7.0.2 | [exoscale/gha-pins#30](https://github.com/exoscale/gha-pins/pull/30) | | `astral-sh/setup-uv` | `07a047e6` | v10.3.2 | [exoscale/gha-pins#30](https://github.com/exoscale/gha-pins/pull/30) | | `docker/build-push-action` | `c3c9e263` | v7.4.0 | [exoscale/gha-pins#30](https://github.com/exoscale/gha-pins/pull/30) | | `docker/login-action` | `81c6f93d` | v4.7.0 | [exoscale/gha-pins#35](https://github.com/exoscale/gha-pins/pull/35) | | `docker/setup-buildx-action` | `f87e5991` | v4.4.1 | [exoscale/gha-pins#30](https://github.com/exoscale/gha-pins/pull/30) | | `helm/chart-releaser-action` | `df287104` | v1.8.0 | [exoscale/gha-pins#35](https://github.com/exoscale/gha-pins/pull/35) | | `losisin/helm-values-schema-json-action` | `9ed68d9d` | v3.2.0 | [exoscale/gha-pins#30](https://github.com/exoscale/gha-pins/pull/30) | Out of step with the vetted state: - `actions/setup-python`: `v7.0.0` `5fda3b95` -> `v7.1.0` `6d4fd22b` - `actions/upload-artifact`: `v7.0.1` `043fb46d` -> `v7.0.2` `cf430e03` - `astral-sh/setup-uv`: `v10.0.1` `20cfd1bf` -> `v10.3.2` `07a047e6` - `docker/build-push-action`: `v7.3.0` `53b7df96` -> `v7.4.0` `c3c9e263` - `docker/login-action`: `v4.6.0` `dbcb8138` -> `v4.7.0` `81c6f93d` - `docker/setup-buildx-action`: `v4.3.0` `37fe6310` -> `v4.4.1` `f87e5991` - `helm/chart-releaser-action`: `v1.7.0` `cae68fef` -> `v1.8.0` `df287104` - `losisin/helm-values-schema-json-action`: `v3.1.0` `9f555986` -> `v3.2.0` `9ed68d9d` Filled in inputs the action would otherwise pick at run time: - `astral-sh/setup-uv.version`: `latest-known` — [exoscale/gha-pins#31](https://github.com/exoscale/gha-pins/pull/31) - `azure/setup-helm.version`: `v4.3.1` — [exoscale/gha-pins#35](https://github.com/exoscale/gha-pins/pull/35) - `docker/setup-buildx-action.version`: `v0.38.1` — [exoscale/gha-pins#35](https://github.com/exoscale/gha-pins/pull/35) --- .github/workflows/ci.yml | 3 ++- .github/workflows/functionality-helm-chart.yml | 8 ++++---- .github/workflows/helm-release.yml | 14 ++++++++------ .github/workflows/operator-docker-release.yml | 10 ++++++---- .github/workflows/operator-test.yml | 2 +- .github/workflows/pre-commit.yml | 6 ++++-- .github/workflows/router-docker-release.yml | 10 ++++++---- .github/workflows/router-e2e-test.yml | 14 ++++++++------ .github/workflows/scheduled-release.yml | 12 +++++++----- 9 files changed, 46 insertions(+), 33 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 562049da4..ce8186713 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -28,10 +28,11 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install uv - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: enable-cache: true ignore-nothing-to-cache: true + version: latest-known - name: Install Dependencies run: uv sync --all-extras --all-groups diff --git a/.github/workflows/functionality-helm-chart.yml b/.github/workflows/functionality-helm-chart.yml index c15f743e6..d351363b8 100644 --- a/.github/workflows/functionality-helm-chart.yml +++ b/.github/workflows/functionality-helm-chart.yml @@ -70,7 +70,7 @@ jobs: bash .github/port-forward.sh curl-05-secure-vllm timeout-minutes: 3 - name: Archive functionality results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: output-05-secure-vllm @@ -119,7 +119,7 @@ jobs: bash .github/port-forward.sh curl-02-two-pods timeout-minutes: 3 - name: Archive functionality results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: output-02-two-pods @@ -166,7 +166,7 @@ jobs: bash .github/port-forward.sh curl-04-multiple-models timeout-minutes: 5 - name: Archive functionality results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: output-04-multiple-models @@ -227,7 +227,7 @@ jobs: bash .github/port-forward.sh curl-06-monitoring timeout-minutes: 3 - name: Archive functionality results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: curl-06-monitoring diff --git a/.github/workflows/helm-release.yml b/.github/workflows/helm-release.yml index 4888c59c3..c7c752e5e 100644 --- a/.github/workflows/helm-release.yml +++ b/.github/workflows/helm-release.yml @@ -45,7 +45,7 @@ jobs: - name: Run chart-releaser if: ${{ github.event_name == 'push' || github.event.inputs.release_type == 'helm_only' || github.event.inputs.release_type == 'all' }} - uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0 + uses: helm/chart-releaser-action@df287104677278f869ca5480bd260358397cc3f9 # v1.8.0 with: skip_existing: false packages_with_index: true @@ -75,18 +75,20 @@ jobs: echo "Chart version: ${CHART_VERSION}" - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 + with: + version: v0.38.1 # Login only on main (since PRs must NOT push) - name: Login to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Login to Docker Hub - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: docker.io username: lmcache @@ -94,7 +96,7 @@ jobs: - name: Build and push router Docker image if: ${{ github.event_name == 'push' || github.event.inputs.release_type == 'router_only' || github.event.inputs.release_type == 'all' }} - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: . file: docker/Dockerfile @@ -110,7 +112,7 @@ jobs: - name: Build and push CRD controller Docker image if: ${{ github.event_name == 'push' || github.event.inputs.release_type == 'crd_only' || github.event.inputs.release_type == 'all' }} - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: operator file: operator/Dockerfile diff --git a/.github/workflows/operator-docker-release.yml b/.github/workflows/operator-docker-release.yml index b4b741b38..75f04fd64 100644 --- a/.github/workflows/operator-docker-release.yml +++ b/.github/workflows/operator-docker-release.yml @@ -22,11 +22,13 @@ jobs: fetch-depth: 0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 + with: + version: v0.38.1 # Login to GitHub Container Registry (GHCR) - name: Login to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -34,14 +36,14 @@ jobs: # Login to Docker Hub - name: Login to Docker Hub - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: docker.io username: lmcache password: ${{ secrets.LMCACHE_DOCKER_SECRET }} - name: Build and push image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: operator file: operator/Dockerfile diff --git a/.github/workflows/operator-test.yml b/.github/workflows/operator-test.yml index 57c0d8ce0..898e423e8 100644 --- a/.github/workflows/operator-test.yml +++ b/.github/workflows/operator-test.yml @@ -65,7 +65,7 @@ jobs: kubectl delete crd vllmrouters.production-stack.vllm.ai || true - name: Archive test results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: operator-test-results diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 31f7c6a7a..e5098e091 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7.1.0 with: python-version: "3.12" - run: echo "::add-matcher::.github/workflows/matchers/actionlint.json" @@ -28,12 +28,14 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - if: ${{ matrix.hook == 'helmlint' }} uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1 + with: + version: v4.3.1 - run: echo "::add-matcher::.github/workflows/matchers/actionlint.json" - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1 with: extra_args: --all-files -v --hook-stage manual ${{ matrix.hook }} - name: Check if values schema is up-to-date - uses: losisin/helm-values-schema-json-action@9f555986124362af978a9861cf0f81e1956300ad # v3.1.0 + uses: losisin/helm-values-schema-json-action@9ed68d9d464a5e6f7f5fc1f3dc071828cf7d13a2 # v3.2.0 with: working-directory: helm fail-on-diff: true diff --git a/.github/workflows/router-docker-release.yml b/.github/workflows/router-docker-release.yml index af96ce11d..d251cf03f 100644 --- a/.github/workflows/router-docker-release.yml +++ b/.github/workflows/router-docker-release.yml @@ -24,11 +24,13 @@ jobs: fetch-depth: 0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 + with: + version: v0.38.1 # Login to GitHub Container Registry (GHCR) - name: Login to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -36,7 +38,7 @@ jobs: # Login to Docker Hub - name: Login to Docker Hub - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: docker.io username: lmcache @@ -52,7 +54,7 @@ jobs: echo "Sanitized version: $sanitized_version" - name: Build and push image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: . file: docker/Dockerfile diff --git a/.github/workflows/router-e2e-test.yml b/.github/workflows/router-e2e-test.yml index ba2b813d1..644d57ed4 100644 --- a/.github/workflows/router-e2e-test.yml +++ b/.github/workflows/router-e2e-test.yml @@ -31,9 +31,10 @@ jobs: fetch-depth: 0 - name: Setup uv - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: activate-environment: true + version: latest-known - name: Install dependencies run: | @@ -84,14 +85,14 @@ jobs: - name: Upload Coverage Report if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: coverage-report path: coverage.txt - name: Upload Test logs if: always() - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: test-logs-pr-${{ github.event.pull_request.number || 'manual' }} path: | @@ -141,7 +142,7 @@ jobs: timeout-minutes: 20 - name: Archive k8s discovery routing test results - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: k8s-discovery-routing-test-results-pr-${{ github.event.pull_request.number || 'main' }} @@ -162,9 +163,10 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Setup uv - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1 + uses: astral-sh/setup-uv@07a047e608db84b3d8c06cd9a7c7dcc9c355c18e # v10.3.2 with: activate-environment: true + version: latest-known - name: Install Python dependencies run: | @@ -197,7 +199,7 @@ jobs: timeout-minutes: 5 - name: Archive static discovery test results and logs - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: static-discovery-test-results-pr-${{ github.event.pull_request.number || 'main' }} diff --git a/.github/workflows/scheduled-release.yml b/.github/workflows/scheduled-release.yml index 03ff7bf01..d58515e7e 100644 --- a/.github/workflows/scheduled-release.yml +++ b/.github/workflows/scheduled-release.yml @@ -118,7 +118,7 @@ jobs: git config user.email "$GITHUB_ACTOR@users.noreply.github.com" - name: Run chart-releaser - uses: helm/chart-releaser-action@cae68fefc6b5f367a0275617c9f83181ba54714f # v1.7.0 + uses: helm/chart-releaser-action@df287104677278f869ca5480bd260358397cc3f9 # v1.8.0 with: skip_existing: false packages_with_index: true @@ -184,11 +184,13 @@ jobs: ref: main - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 + with: + version: v0.38.1 # Login to GitHub Container Registry (GHCR) - name: Login to GHCR - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -196,7 +198,7 @@ jobs: # Login to Docker Hub - name: Login to Docker Hub - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: docker.io username: lmcache @@ -212,7 +214,7 @@ jobs: echo "Sanitized version: $sanitized_version" - name: Build and push image - uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: context: . file: docker/Dockerfile