diff --git a/.github/workflows/cicd-1-pull-request.yaml b/.github/workflows/cicd-1-pull-request.yaml index 0d1ec63d..edb1163f 100644 --- a/.github/workflows/cicd-1-pull-request.yaml +++ b/.github/workflows/cicd-1-pull-request.yaml @@ -35,7 +35,7 @@ jobs: pr_number: ${{ steps.pr_exists.outputs.pr_number }} steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Set CI/CD variables" id: variables run: | @@ -133,7 +133,7 @@ jobs: runs-on: ubuntu-latest if: needs.metadata.outputs.does_pull_request_exist == 'true' || (github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'reopened')) steps: - - uses: actions/checkout@v5.0.0 + - uses: actions/checkout@v6 - name: Trigger dynamic environment creation env: APP_PEM_FILE: ${{ secrets.APP_PEM_FILE }} diff --git a/.github/workflows/cicd-3-deploy.yaml b/.github/workflows/cicd-3-deploy.yaml index 3c8582d1..5c8081b5 100644 --- a/.github/workflows/cicd-3-deploy.yaml +++ b/.github/workflows/cicd-3-deploy.yaml @@ -52,7 +52,7 @@ jobs: # tag: ${{ steps.variables.outputs.tag }} steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Set CI/CD variables" id: variables run: | @@ -85,7 +85,7 @@ jobs: needs: metadata steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Get version" id: get-asset-version diff --git a/.github/workflows/pr_closed.yaml b/.github/workflows/pr_closed.yaml index 06fd9b6e..b7b1708d 100644 --- a/.github/workflows/pr_closed.yaml +++ b/.github/workflows/pr_closed.yaml @@ -48,7 +48,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5.0.0 + uses: actions/checkout@v6 - name: Updating Main Environment env: diff --git a/.github/workflows/pr_destroy_dynamic_env.yaml b/.github/workflows/pr_destroy_dynamic_env.yaml index fe2ac78a..23857cdb 100644 --- a/.github/workflows/pr_destroy_dynamic_env.yaml +++ b/.github/workflows/pr_destroy_dynamic_env.yaml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5.0.0 + - uses: actions/checkout@v6 - name: Trigger dynamic environment creation env: APP_PEM_FILE: ${{ secrets.APP_PEM_FILE }} diff --git a/.github/workflows/release_created.yaml b/.github/workflows/release_created.yaml index 4338ba12..186be871 100644 --- a/.github/workflows/release_created.yaml +++ b/.github/workflows/release_created.yaml @@ -24,7 +24,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5.0.0 + uses: actions/checkout@v6 - name: Deploy Nonprod Environment env: diff --git a/.github/workflows/scheduled-repository-template-sync.yaml b/.github/workflows/scheduled-repository-template-sync.yaml index e4d37b7f..871999ed 100644 --- a/.github/workflows/scheduled-repository-template-sync.yaml +++ b/.github/workflows/scheduled-repository-template-sync.yaml @@ -16,10 +16,10 @@ jobs: steps: - name: Check out the repository - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: Check out external repository - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: repository: NHSDigital/nhs-notify-repository-template path: nhs-notify-repository-template diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 032cc122..5dd7d3ba 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,7 +32,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@ff7abcd0c3c05ccf6adc123a8cd1fd4fb30fb493 # v4.2.2 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v4.2.2 with: persist-credentials: false diff --git a/.github/workflows/stage-1-commit.yaml b/.github/workflows/stage-1-commit.yaml index a621ba5e..b842c2cd 100644 --- a/.github/workflows/stage-1-commit.yaml +++ b/.github/workflows/stage-1-commit.yaml @@ -39,7 +39,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history is needed to scan all commits - name: "Scan secrets" @@ -50,7 +50,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history is needed to compare branches - name: "Check file format" @@ -61,7 +61,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history is needed to compare branches - name: "Check Markdown format" @@ -75,7 +75,7 @@ jobs: contents: write steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history is needed to compare branches - name: "Check to see if Terraform Docs are up-to-date" @@ -96,7 +96,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history is needed to compare branches - name: "Check English usage" @@ -107,7 +107,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history is needed to compare branches - name: "Check TODO usage" @@ -119,7 +119,7 @@ jobs: terraform_changed: ${{ steps.check.outputs.terraform_changed }} steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Check for Terraform changes" id: check @@ -143,7 +143,7 @@ jobs: if: needs.detect-terraform-changes.outputs.terraform_changed == 'true' steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Lint Terraform" uses: ./.github/actions/lint-terraform trivy: @@ -154,7 +154,7 @@ jobs: if: needs.detect-terraform-changes.outputs.terraform_changed == 'true' steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Setup ASDF" uses: asdf-vm/actions/setup@b7bcd026f18772e44fe1026d729e1611cc435d47 # v4 - name: "Perform Setup" @@ -170,7 +170,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Count lines of code" uses: ./.github/actions/create-lines-of-code-report with: @@ -189,7 +189,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Scan dependencies" uses: ./.github/actions/scan-dependencies with: diff --git a/.github/workflows/stage-2-test.yaml b/.github/workflows/stage-2-test.yaml index ee95a848..e986ae95 100644 --- a/.github/workflows/stage-2-test.yaml +++ b/.github/workflows/stage-2-test.yaml @@ -51,7 +51,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - uses: actions/setup-node@v6 with: node-version: 24.10.0 @@ -68,7 +68,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - uses: actions/setup-node@v6 with: node-version: 24.10.0 @@ -101,7 +101,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - uses: actions/setup-node@v6 with: node-version: 24.10.0 @@ -114,7 +114,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - uses: actions/setup-node@v6 with: node-version: 24.10.0 @@ -128,7 +128,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Run test coverage check" run: | make test-coverage @@ -145,7 +145,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 with: fetch-depth: 0 # Full history is needed to improving relevancy of reporting - name: "Download coverage report for SONAR" diff --git a/.github/workflows/stage-3-build.yaml b/.github/workflows/stage-3-build.yaml index bc28487c..17f0c4d4 100644 --- a/.github/workflows/stage-3-build.yaml +++ b/.github/workflows/stage-3-build.yaml @@ -39,7 +39,7 @@ jobs: timeout-minutes: 15 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Build docs" uses: ./.github/actions/build-docs with: diff --git a/.github/workflows/stage-4-acceptance.yaml b/.github/workflows/stage-4-acceptance.yaml index f74d9211..36e9627b 100644 --- a/.github/workflows/stage-4-acceptance.yaml +++ b/.github/workflows/stage-4-acceptance.yaml @@ -28,7 +28,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Create infractructure" run: | echo "Creating infractructure..." @@ -45,7 +45,7 @@ jobs: timeout-minutes: 10 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Run contract test" run: | make test-contract @@ -59,7 +59,7 @@ jobs: timeout-minutes: 10 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Run security test" run: | make test-security @@ -73,7 +73,7 @@ jobs: timeout-minutes: 10 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Run UI test" run: | make test-ui @@ -87,7 +87,7 @@ jobs: timeout-minutes: 10 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Run UI performance test" run: | make test-ui-performance @@ -99,7 +99,7 @@ jobs: runs-on: ubuntu-latest needs: environment-set-up steps: - - uses: actions/checkout@v5.0.0 + - uses: actions/checkout@v6 # Calls out to the nhs-notify-internal repo. # The nhs-notify-internal repo will run the tests # setup in ./.github/actions/acceptance-tests/action.yaml @@ -126,7 +126,7 @@ jobs: timeout-minutes: 10 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Run accessibility test" run: | make test-accessibility @@ -140,7 +140,7 @@ jobs: timeout-minutes: 10 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Run load tests" run: | make test-load @@ -164,7 +164,7 @@ jobs: timeout-minutes: 5 steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Tear down environment" run: | echo "Tearing down environment..." diff --git a/.github/workflows/stage-5-publish.yaml b/.github/workflows/stage-5-publish.yaml index a04a7b49..6d38c0cc 100644 --- a/.github/workflows/stage-5-publish.yaml +++ b/.github/workflows/stage-5-publish.yaml @@ -43,7 +43,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@v5 + uses: actions/checkout@v6 - name: "Get artifacts: jekyll docs" uses: actions/download-artifact@v5