From bd7239a05cde8ee339731c992453d7db471bab9c Mon Sep 17 00:00:00 2001 From: "penpot-renovate[bot]" <338182062+penpot-renovate[bot]@users.noreply.github.com> Date: Sun, 1 Nov 2026 19:27:53 +0100 Subject: [PATCH] :arrow_up: update GitHub Actions (#12715) - docker/login-action v4.7.0 (.github/workflows/build-renovate.yml) - docker/login-action v4.7.0 (.github/workflows/build-renovate.yml) - docker/login-action v4.7.0 (.github/workflows/build-renovate.yml) - docker/login-action v4.7.0 (.github/workflows/build-renovate.yml) - docker/login-action v4.7.0 (.github/workflows/build-renovate.yml) - docker/login-action v4.7.0 (.github/workflows/build-renovate.yml) - docker/login-action v4.7.0 (.github/workflows/build-docker.yml) - docker/login-action v4.7.0 (.github/workflows/build-docker.yml) - docker/login-action v4.7.0 (.github/workflows/build-docker.yml) - docker/login-action v4.7.0 (.github/workflows/build-docker.yml) - docker/login-action v4.7.0 (.github/workflows/build-docker.yml) - docker/login-action v4.7.0 (.github/workflows/build-docker-devenv.yml) - docker/login-action v4.7.0 (.github/workflows/build-docker-devenv.yml) - node 26.13.0 (.github/workflows/plugins-deploy-styles-doc.yml) - node 26.13.0 (.github/workflows/plugins-deploy-api-doc.yml) - pnpm/setup v3.1.2 (.github/workflows/plugins-deploy-styles-doc.yml) - pnpm/setup v3.1.2 (.github/workflows/plugins-deploy-api-doc.yml) Signed-off-by: penpot-renovate[bot] <338182062+penpot-renovate[bot]@users.noreply.github.com> --- .github/workflows/build-docker-devenv.yml | 4 ++-- .github/workflows/build-docker.yml | 10 +++++----- .github/workflows/build-renovate.yml | 12 ++++++------ .github/workflows/plugins-deploy-api-doc.yml | 4 ++-- .github/workflows/plugins-deploy-styles-doc.yml | 4 ++-- 5 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/build-docker-devenv.yml b/.github/workflows/build-docker-devenv.yml index a1c99e2bdd..0b62cf100e 100644 --- a/.github/workflows/build-docker-devenv.yml +++ b/.github/workflows/build-docker-devenv.yml @@ -38,13 +38,13 @@ jobs: uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Login to Docker Registry (push destination) - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: username: ${{ secrets.PUB_DOCKER_USERNAME }} password: ${{ secrets.PUB_DOCKER_PASSWORD }} - name: Login to Docker Hardened Images registry (base image pull) - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: dhi.io username: ${{ secrets.PUB_DOCKER_USERNAME }} diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml index 613f806571..4d15460ad6 100644 --- a/.github/workflows/build-docker.yml +++ b/.github/workflows/build-docker.yml @@ -200,7 +200,7 @@ jobs: ref: ${{ inputs.sha != '' && inputs.sha || inputs.gh_ref }} - name: Login to Docker Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ${{ secrets.DOCKER_REGISTRY }} username: ${{ secrets.DOCKER_USERNAME }} @@ -210,7 +210,7 @@ jobs: # images from DockerHub for unregistered users. # https://docs.docker.com/docker-hub/usage/ - name: Login to DockerHub Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: username: ${{ secrets.PUB_DOCKER_USERNAME }} password: ${{ secrets.PUB_DOCKER_PASSWORD }} @@ -222,7 +222,7 @@ jobs: # reuses the same PUB_DOCKER_* credentials as the DockerHub # login above. - name: Login to Docker Hardened Images registry (base image pull) - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: dhi.io username: ${{ secrets.PUB_DOCKER_USERNAME }} @@ -301,7 +301,7 @@ jobs: uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Login to Docker Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ${{ secrets.DOCKER_REGISTRY }} username: ${{ secrets.DOCKER_USERNAME }} @@ -371,7 +371,7 @@ jobs: uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Login to Docker Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ${{ secrets.DOCKER_REGISTRY }} username: ${{ secrets.DOCKER_USERNAME }} diff --git a/.github/workflows/build-renovate.yml b/.github/workflows/build-renovate.yml index 09f8a51aa0..6145e7e2fd 100644 --- a/.github/workflows/build-renovate.yml +++ b/.github/workflows/build-renovate.yml @@ -114,20 +114,20 @@ jobs: persist-credentials: false - name: Login to Docker Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ${{ secrets.DOCKER_REGISTRY }} username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - name: Login to DockerHub Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: username: ${{ secrets.PUB_DOCKER_USERNAME }} password: ${{ secrets.PUB_DOCKER_PASSWORD }} - name: Login to Docker Hardened Images registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: dhi.io username: ${{ secrets.PUB_DOCKER_USERNAME }} @@ -191,13 +191,13 @@ jobs: persist-credentials: false - name: Login to DockerHub Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: username: ${{ secrets.PUB_DOCKER_USERNAME }} password: ${{ secrets.PUB_DOCKER_PASSWORD }} - name: Login to Docker Hardened Images registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: dhi.io username: ${{ secrets.PUB_DOCKER_USERNAME }} @@ -242,7 +242,7 @@ jobs: persist-credentials: false - name: Login to Docker Hardened Images registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: dhi.io username: ${{ secrets.PUB_DOCKER_USERNAME }} diff --git a/.github/workflows/plugins-deploy-api-doc.yml b/.github/workflows/plugins-deploy-api-doc.yml index ed7ec0e978..f5301f9844 100644 --- a/.github/workflows/plugins-deploy-api-doc.yml +++ b/.github/workflows/plugins-deploy-api-doc.yml @@ -48,10 +48,10 @@ jobs: # No dependency cache here: a deploy must not restore a cache that # other workflows can write to. - name: Setup pnpm + Node.js - uses: pnpm/setup@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 # v3.1.1 + uses: pnpm/setup@fa36a5ef7dcdefc3a7cb25655c122e00cf6e636e # v3.1.2 with: working-directory: plugins - runtime: node@24.22.2 + runtime: node@26.13.0 install: false - name: Install deps diff --git a/.github/workflows/plugins-deploy-styles-doc.yml b/.github/workflows/plugins-deploy-styles-doc.yml index 72b67fa1cb..d084affd59 100644 --- a/.github/workflows/plugins-deploy-styles-doc.yml +++ b/.github/workflows/plugins-deploy-styles-doc.yml @@ -46,10 +46,10 @@ jobs: # No dependency cache here: a deploy must not restore a cache that # other workflows can write to. - name: Setup pnpm + Node.js - uses: pnpm/setup@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 # v3.1.1 + uses: pnpm/setup@fa36a5ef7dcdefc3a7cb25655c122e00cf6e636e # v3.1.2 with: working-directory: plugins - runtime: node@24.22.2 + runtime: node@26.13.0 install: false - name: Install deps