The server for Open Course World

Upgrade github actions

+10 -11
+10 -11
.github/workflows/docker-publish.yml
··· 32 32 33 33 steps: 34 34 - name: Checkout repository 35 - uses: actions/checkout@v3 35 + uses: actions/checkout@v4 36 36 37 37 # Install the cosign tool except on PR 38 38 # https://github.com/sigstore/cosign-installer 39 39 - name: Install cosign 40 40 if: github.event_name != 'pull_request' 41 - uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1 41 + uses: sigstore/cosign-installer@v3.5.0 42 42 with: 43 - cosign-release: 'v2.1.1' 43 + cosign-release: 'v2.2.4' 44 + 44 45 45 - # Set up BuildKit Docker container builder to be able to build 46 - # multi-platform images and export cache 47 - # https://github.com/docker/setup-buildx-action 48 - - name: Set up Docker Buildx 49 - uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0 46 + # Workaround: https://github.com/docker/build-push-action/issues/461 47 + - name: Setup Docker buildx 48 + uses: docker/setup-buildx-action@v3 50 49 51 50 # Login against a Docker registry except on PR 52 51 # https://github.com/docker/login-action 53 52 - name: Log into registry ${{ env.REGISTRY }} 54 53 if: github.event_name != 'pull_request' 55 - uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0 54 + uses: docker/login-action@v3 56 55 with: 57 56 registry: ${{ env.REGISTRY }} 58 57 username: ${{ github.actor }} ··· 62 61 # https://github.com/docker/metadata-action 63 62 - name: Extract Docker metadata 64 63 id: meta 65 - uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0 64 + uses: docker/metadata-action@v5 66 65 with: 67 66 images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} 68 67 ··· 70 69 # https://github.com/docker/build-push-action 71 70 - name: Build and push Docker image 72 71 id: build-and-push 73 - uses: docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0 72 + uses: docker/build-push-action@v5 74 73 with: 75 74 context: . 76 75 push: ${{ github.event_name != 'pull_request' }}