Upgrade github actions dependencies

Signed-off-by: Viet Anh Duong <[email protected]>
KyberNetwork · Feb 14, 2025 · ac9cc79 · ac9cc79
1 parent 45ba0cf
commit ac9cc79
Show file tree

Hide file tree

Showing 4 changed files with 47 additions and 46 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -14,7 +14,7 @@ env:
 
 jobs:
   prepare:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     outputs:
       current_branch: ${{ steps.current_branch.outputs.value }}
       head_sha: ${{ steps.head_sha.outputs.value }}
@@ -24,7 +24,7 @@ jobs:
       branch_tag: ${{ steps.get_tag.outputs.branch_tag }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Extract branch
         shell: bash
@@ -64,15 +64,15 @@ jobs:
           echo "::set-output name=branch_tag::$branch_tag-$short_sha"
 
   build-dev:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     needs:
       - prepare
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: 21.0.0
           registry-url: 'https://npm.pkg.github.com'
@@ -82,24 +82,24 @@ jobs:
         uses: docker/setup-buildx-action@master
 
       - name: Gcloud Auth
-        uses: google-github-actions/auth@v0
+        uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935  #v2.1.8
         with:
           credentials_json: '${{ secrets.GCR_CREDENTIALS }}'
 
       - name: Setup Gcloud SDK
-        uses: google-github-actions/setup-gcloud@v0
+        uses: google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a #v2.1.4
 
       - name: Configure docker
         run: gcloud auth configure-docker
 
       - name: Cache Docker layers
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-${{ env.SERVICE }}-buildx
 
       - name: Restore node_modules
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }}
@@ -120,7 +120,7 @@ jobs:
         run: yarn build-dev
 
       - name: Docker build and push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 #v6.13.0
         with:
           context: .
           push: true
@@ -140,15 +140,15 @@ jobs:
           mv /tmp/.buildx-cache-new /tmp/.buildx-cache
 
   build-stg:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     needs:
       - prepare
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: 21.0.0
           registry-url: 'https://npm.pkg.github.com'
@@ -158,24 +158,24 @@ jobs:
         uses: docker/setup-buildx-action@master
 
       - name: Gcloud Auth
-        uses: google-github-actions/auth@v0
+        uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935  #v2.1.8
         with:
           credentials_json: '${{ secrets.GCR_CREDENTIALS }}'
 
       - name: Setup Gcloud SDK
-        uses: google-github-actions/setup-gcloud@v0
+        uses: google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a #v2.1.4
 
       - name: Configure docker
         run: gcloud auth configure-docker
 
       - name: Cache Docker layers
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-${{ env.SERVICE }}-buildx
 
       - name: Restore node_modules
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }}
@@ -196,7 +196,7 @@ jobs:
         run: yarn build-stg
 
       - name: Docker build and push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 #v6.13.0
         with:
           context: .
           push: true

diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
@@ -74,7 +74,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: 21.0.0
           registry-url: 'https://npm.pkg.github.com'
@@ -151,7 +151,7 @@ jobs:
         uses: actions/checkout@v4
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: 21.0.0
           registry-url: 'https://npm.pkg.github.com'

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -1,7 +1,5 @@
 name: 'KyberSwap Interface Release'
 
-permissions: write-all
-
 on:
   workflow_dispatch:
     inputs:
@@ -12,7 +10,7 @@ on:
 
 jobs:
   prepare:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     outputs:
       version_tag: ${{ steps.version_tag.outputs.value }}
       build_date: ${{ steps.build_date.outputs.value }}
@@ -33,20 +31,20 @@ jobs:
   build:
     needs:
       - prepare
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: 21.0.0
           registry-url: 'https://npm.pkg.github.com'
           scope: '@kybernetwork'
 
       - name: Restore node_modules
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }}
@@ -81,10 +79,10 @@ jobs:
       SERVICE: kyberswap-interface
       VERSION_TAG: ${{ needs.prepare.outputs.version_tag }}
       BUILD_DATE: ${{ needs.prepare.outputs.build_date }}
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Restore build
         uses: actions/download-artifact@v4
@@ -99,24 +97,24 @@ jobs:
         uses: docker/setup-buildx-action@master
 
       - name: Gcloud Auth
-        uses: google-github-actions/auth@v0
+        uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935  #v2.1.8
         with:
           credentials_json: '${{ secrets.GCR_CREDENTIALS }}'
 
       - name: Setup Gcloud SDK
-        uses: google-github-actions/setup-gcloud@v0
+        uses: google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a #v2.1.4
 
       - name: Configure docker
         run: gcloud auth configure-docker
 
       - name: Cache Docker layers
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-${{ env.SERVICE }}-buildx
 
       - name: Build and push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 #v6.13.0
         with:
           context: .
           push: true
@@ -140,12 +138,15 @@ jobs:
     needs:
       - prepare
       - docker
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     env:
       VERSION_TAG: ${{ needs.prepare.outputs.version_tag }}
+    permissions:
+      contents: write
+      packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Setup Git
         run: |
@@ -159,7 +160,7 @@ jobs:
           git push origin "refs/tags/$VERSION_TAG"
 
       - name: Create release
-        uses: softprops/action-gh-release@v1
+        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           tag_name: ${{ env.VERSION_TAG }}

diff --git a/.github/workflows/storybook.yaml b/.github/workflows/storybook.yaml
@@ -14,7 +14,7 @@ env:
 
 jobs:
   prepare:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     outputs:
       current_branch: ${{ steps.current_branch.outputs.value }}
       head_sha: ${{ steps.head_sha.outputs.value }}
@@ -24,7 +24,7 @@ jobs:
       branch_tag: ${{ steps.get_tag.outputs.branch_tag }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Extract branch
         shell: bash
@@ -64,15 +64,15 @@ jobs:
           echo "::set-output name=branch_tag::$branch_tag-$short_sha"
 
   build-storybook:
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-latest
     needs:
       - prepare
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683
 
       - name: Set up Node.js
-        uses: actions/setup-node@v1
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: 21.0.0
           registry-url: 'https://npm.pkg.github.com'
@@ -82,24 +82,24 @@ jobs:
         uses: docker/setup-buildx-action@master
 
       - name: Gcloud Auth
-        uses: google-github-actions/auth@v0
+        uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935  #v2.1.8
         with:
           credentials_json: '${{ secrets.GCR_CREDENTIALS }}'
 
       - name: Setup Gcloud SDK
-        uses: google-github-actions/setup-gcloud@v0
+        uses: google-github-actions/setup-gcloud@77e7a554d41e2ee56fc945c52dfd3f33d12def9a #v2.1.4
 
       - name: Configure docker
         run: gcloud auth configure-docker
 
       - name: Cache Docker layers
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-${{ env.SERVICE }}-buildx
 
       - name: Restore node_modules
-        uses: actions/cache@v2
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: '**/node_modules'
           key: ${{ runner.os }}-modules-${{ hashFiles('**/yarn.lock') }}
@@ -120,7 +120,7 @@ jobs:
         run: yarn build-storybook
 
       - name: Docker build and push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 #v6.13.0
         with:
           context: .
           file: Dockerfile.storybook