From f1cf1d802cf81c5b32b3a09cadfa4db72bfac70e Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 12 Dec 2024 00:47:52 +0000 Subject: [PATCH 1/2] chore(deps): update myrotvorets/composite-actions digest to b2ee801 --- .github/workflows/build.yml | 2 +- .github/workflows/lint.yml | 4 ++-- .github/workflows/npm-publish.yml | 4 ++-- .github/workflows/package-audit.yml | 2 +- .github/workflows/push-tag.yml | 2 +- .github/workflows/sonarscan.yml | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index ae78c23..0789fb9 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -41,6 +41,6 @@ jobs: registry.npmjs.org:443 - name: Build and test - uses: myrotvorets/composite-actions/build-test-nodejs@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/build-test-nodejs@b2ee801d40bc37c1303783f99e1fce35fc33bd52 with: node-version: ${{ matrix.node.version }} diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index f6e25be..31af4c7 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -36,7 +36,7 @@ jobs: registry.npmjs.org:443 - name: Run code style check - uses: myrotvorets/composite-actions/node-run-script@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/node-run-script@b2ee801d40bc37c1303783f99e1fce35fc33bd52 with: script: lint @@ -59,6 +59,6 @@ jobs: registry.npmjs.org:443 - name: Run type check - uses: myrotvorets/composite-actions/node-run-script@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/node-run-script@b2ee801d40bc37c1303783f99e1fce35fc33bd52 with: script: typecheck diff --git a/.github/workflows/npm-publish.yml b/.github/workflows/npm-publish.yml index 033b42e..5f4afdf 100644 --- a/.github/workflows/npm-publish.yml +++ b/.github/workflows/npm-publish.yml @@ -39,7 +39,7 @@ jobs: registry.npmjs.org:443 - name: Prepare source - uses: myrotvorets/composite-actions/node-prepublish@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/node-prepublish@b2ee801d40bc37c1303783f99e1fce35fc33bd52 publish: name: Publish package (${{ matrix.registry }}) @@ -79,7 +79,7 @@ jobs: npm.pkg.github.com:443 - name: Publish package - uses: myrotvorets/composite-actions/node-publish@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/node-publish@b2ee801d40bc37c1303783f99e1fce35fc33bd52 with: node-auth-token: ${{ secrets[matrix.secret] }} registry-url: ${{ matrix.registry_url }} diff --git a/.github/workflows/package-audit.yml b/.github/workflows/package-audit.yml index bb3f9e4..3855605 100644 --- a/.github/workflows/package-audit.yml +++ b/.github/workflows/package-audit.yml @@ -30,4 +30,4 @@ jobs: registry.npmjs.org:443 - name: Audit with NPM - uses: myrotvorets/composite-actions/node-package-audit@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/node-package-audit@b2ee801d40bc37c1303783f99e1fce35fc33bd52 diff --git a/.github/workflows/push-tag.yml b/.github/workflows/push-tag.yml index 6fc7964..ba77ad6 100644 --- a/.github/workflows/push-tag.yml +++ b/.github/workflows/push-tag.yml @@ -34,7 +34,7 @@ jobs: registry.npmjs.org:443 - name: Build and test - uses: myrotvorets/composite-actions/build-test-nodejs@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/build-test-nodejs@b2ee801d40bc37c1303783f99e1fce35fc33bd52 release: name: Prepare the release diff --git a/.github/workflows/sonarscan.yml b/.github/workflows/sonarscan.yml index 1f90322..e95ca3b 100644 --- a/.github/workflows/sonarscan.yml +++ b/.github/workflows/sonarscan.yml @@ -41,7 +41,7 @@ jobs: sonarcloud.io:443 - name: Run SonarCloud analysis - uses: myrotvorets/composite-actions/node-sonarscan@cecb96664cb67f063d11aedb7456874eda7e9028 + uses: myrotvorets/composite-actions/node-sonarscan@b2ee801d40bc37c1303783f99e1fce35fc33bd52 with: sonar-token: ${{ secrets.SONAR_TOKEN }} test-script: 'test:sonarqube' From 834d530e6c6da19bcd87ec8b3ad20a6f8b667d6d Mon Sep 17 00:00:00 2001 From: Myrotvorets Date: Thu, 12 Dec 2024 03:03:11 +0200 Subject: [PATCH 2/2] Allow `binaries.sonarsource.com` --- .github/workflows/sonarscan.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/sonarscan.yml b/.github/workflows/sonarscan.yml index e95ca3b..f723a9c 100644 --- a/.github/workflows/sonarscan.yml +++ b/.github/workflows/sonarscan.yml @@ -30,6 +30,7 @@ jobs: egress-policy: block allowed-endpoints: > api.github.com:443 + binaries.sonarsource.com:443 github.com:443 npm.pkg.github.com:443 objects.githubusercontent.com:443