build(deps): bump the github-actions group with 5 updates

.github/workflows/auto-merge.yml

@@ -7,7 +7,7 @@ jobs:
  auto-merge:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  - uses: ahmadnassri/action-dependabot-auto-merge@v2
  with:
  # auto-merge rules are in /.github/auto-merge.yml

.github/workflows/code-coverage.yml

@@ -12,7 +12,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go
@@ -28,7 +28,7 @@ jobs:
  with:
  files: coverage.txt
  - name: Upload Logs
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: logs
  path: .logs/**/*.log

.github/workflows/compat-test.yml

@@ -14,7 +14,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go
@@ -26,7 +26,7 @@ jobs:
  - name: Compat Test
  run: make compat-tests
  - name: Upload Logs
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: logs
  path: .logs/**/*.log

.github/workflows/dependency-review.yml

@@ -15,6 +15,6 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: 'Checkout Repository'
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  - name: 'Dependency Review'
- uses: actions/dependency-review-action@v3
+ uses: actions/dependency-review-action@v4

.github/workflows/endurance-test.yml

@@ -19,7 +19,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go
@@ -31,7 +31,7 @@ jobs:
  - name: Endurance Tests
  run: make endurance-tests
  - name: Upload Logs
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: logs
  path: .logs/**/*.log

.github/workflows/htmlui-tests.yml

@@ -27,7 +27,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go
@@ -39,7 +39,7 @@ jobs:
  - name: Run Tests
  run: make htmlui-e2e-test
  - name: Upload Screenshots
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  path: .screenshots/**/*.png
  if-no-files-found: ignore

.github/workflows/license-check.yml

@@ -12,7 +12,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go

.github/workflows/lint.yml

@@ -26,7 +26,7 @@ jobs:
  runs-on: ${{ matrix.os }}
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go

.github/workflows/make.yml

@@ -40,7 +40,7 @@ jobs:
  continue-on-error: ${{ contains(matrix.os, 'self-hosted') }}
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go
@@ -100,7 +100,7 @@ jobs:
  # macOS signing certificate (base64-encoded), used by Electron Builder
  MACOS_SIGNING_IDENTITY: ${{ secrets.MACOS_SIGNING_IDENTITY }}
  - name: Upload Kopia Artifacts
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: kopia-${{ matrix.os }}
  path: |
@@ -122,7 +122,7 @@ jobs:
  if-no-files-found: ignore
  if: ${{ !contains(matrix.os, 'self-hosted') }}
  - name: Upload Kopia Binary
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: kopia_binaries-${{ matrix.os }}
  path: |
@@ -138,19 +138,19 @@ jobs:
  needs: build
  if: github.event_name != 'pull_request' && github.repository == 'kopia/kopia'
  steps:
- - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  - name: Set up QEMU
  uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
  - name: Set up Docker Buildx
  uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
  - name: Download Artifacts
- uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 # v4.1.0
+ uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
  with:
  pattern: kopia-*
  merge-multiple: true
  path: dist
  - name: Download Kopia Binaries
- uses: actions/download-artifact@f44cd7b40bfd40b6aa1cc1b9b5b7bf03d3c67110 # v4.1.0
+ uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4.1.4
  with:
  pattern: kopia_binaries-*
  merge-multiple: true

.github/workflows/ossf-scorecard.yml

@@ -26,7 +26,7 @@ jobs:
  steps:
  -
  name: "Checkout repo"
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  persist-credentials: false
  -
@@ -39,12 +39,12 @@ jobs:
  -
  # Upload the results to GitHub's code scanning dashboard.
  name: "Upload to results to dashboard"
- uses: github/codeql-action/upload-sarif@012739e5082ff0c22ca6d6ab32e07c36df03c4a4 # v3.22.12
+ uses: github/codeql-action/upload-sarif@4355270be187e1b672a7a1c7c7bae5afdc1ab94a # v3.24.10
  with:
  sarif_file: results.sarif
  -
  name: "Upload analysis results as 'Job Artifact'"
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: SARIF file
  path: results.sarif

.github/workflows/providers-core.yml

@@ -24,7 +24,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  ref: ${{ github.event.inputs.ref_name || github.ref }}

.github/workflows/providers-extra.yml

@@ -24,7 +24,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  ref: ${{ github.event.inputs.ref_name || github.ref }}

.github/workflows/race-detector.yml

@@ -12,7 +12,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go

.github/workflows/stress-test.yml

@@ -18,7 +18,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go
@@ -30,7 +30,7 @@ jobs:
  - name: Stress Test
  run: make stress-test
  - name: Upload Logs
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: logs
  path: .logs/**/*.log

.github/workflows/tests.yml

@@ -38,7 +38,7 @@ jobs:
  continue-on-error: ${{ contains(matrix.os, 'self-hosted') }}
  steps:
  - name: Check out repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  with:
  fetch-depth: 0
  - name: Set up Go
@@ -64,7 +64,7 @@ jobs:
  - name: Integration Tests
  run: make -j2 ci-integration-tests
  - name: Upload Logs
- uses: actions/upload-artifact@c7d193f32edcb7bfad88892161225aeda64e9392 # v4.0.0
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
  with:
  name: logs-${{ matrix.os }}
  path: .logs/**/*.log