Bump the github-actions group with 6 updates

.github/workflows/cicd.yml

@@ -19,7 +19,7 @@ jobs:
  runs-on: ubuntu-22.04
  name: lint with isort, Black & flake8
  steps:
- - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  - name: "Prepare: restore caches, install Poetry, set up Python"
  uses: ./.github/actions/prepare
  with:
@@ -42,7 +42,7 @@ jobs:
  runs-on: ubuntu-22.04
  name: check CLI startup time
  steps:
- - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  - name: "Prepare: restore caches, install Poetry, set up Python"
  id: prepare
  uses: ./.github/actions/prepare
@@ -64,7 +64,7 @@ jobs:
  python-version: ["3.9", "3.10", "3.11"]
  name: test on Python ${{ matrix.python-version }}
  steps:
- - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  - name: Install system packages
  run: |
  sudo apt-get install \
@@ -103,12 +103,12 @@ jobs:
  poetry run pytest --cov=./ --cov-report xml --cov-append -m slow
  fi
  - name: Upload coverage to Codecov
- uses: codecov/codecov-action@e0b68c6749509c5f83f984dd99a76a1c1a231044 # v4.0.1
+ uses: codecov/codecov-action@c16abc29c95fcf9174b58eb7e1abf4c866893bc8 # v4.1.1
  env:
  CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
  - name: Save cache
  if: steps.prepare.outputs.cache-matched-key != format('poetry-installation-and-cache-{0}-{1}-{2}', matrix.python-version, env.POETRY_VERSION, hashFiles('**/poetry.lock'))
- uses: actions/cache/save@13aacd865c20de90d75de3b17ebe84f7a17d57d2 # v4.0.0
+ uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
  with:
  path: |
  ~/.cache/pipx/venvs
@@ -123,7 +123,7 @@ jobs:
  timeout-minutes: 15
  steps:
  - name: "Build image for testing"
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
  with:
  push: false
  tags: test-image
@@ -139,7 +139,7 @@ jobs:
  if: github.event_name == 'push' && github.ref == 'refs/heads/main'
  steps:
  - name: Login to Quay.io
- uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+ uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
  with:
  registry: quay.io
  username: ${{ secrets.YHTEENTOIMIVUUSPALVELUT_QUAY_IO_USERNAME }}
@@ -152,7 +152,7 @@ jobs:
  tags: |
  latest
  - name: Build and push to Quay.io
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
  with:
  push: true
  tags: ${{ steps.meta.outputs.tags }}
@@ -164,7 +164,7 @@ jobs:
  runs-on: ubuntu-22.04
  if: github.event_name == 'push' && contains(github.ref, 'refs/tags/')
  steps:
- - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
  - name: "Prepare: restore caches, install Poetry, set up Python"
  uses: ./.github/actions/prepare
  with:
@@ -178,7 +178,7 @@ jobs:
  poetry publish --build
 
  - name: Login to Quay.io
- uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+ uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
  with:
  registry: quay.io
  username: ${{ secrets.YHTEENTOIMIVUUSPALVELUT_QUAY_IO_USERNAME }}
@@ -193,7 +193,7 @@ jobs:
  type=semver,pattern={{version}}
  type=semver,pattern={{major}}.{{minor}}
  - name: Build and push to Quay.io
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
  with:
  push: true
  tags: ${{ steps.meta.outputs.tags }}

.github/workflows/codeql.yml

@@ -27,18 +27,18 @@ jobs:
 
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
 
  - name: Initialize CodeQL
- uses: github/codeql-action/init@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2
+ uses: github/codeql-action/init@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
  with:
  languages: ${{ matrix.language }}
  queries: +security-and-quality
 
  - name: Autobuild
- uses: github/codeql-action/autobuild@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2
+ uses: github/codeql-action/autobuild@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
 
  - name: Perform CodeQL Analysis
- uses: github/codeql-action/analyze@b7bf0a3ed3ecfa44160715d7c442788f65f0f923 # v3.23.2
+ uses: github/codeql-action/analyze@1b1aada464948af03b950897e5eb522f92603cc2 # v3.24.9
  with:
  category: "/language:${{ matrix.language }}"

.github/workflows/docker-rebuild.yml

@@ -10,15 +10,15 @@ jobs:
  timeout-minutes: 15
  steps:
  - name: "Build for testing"
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
  with:
  push: false
  tags: test-image
  - name: "Test with pytest"
  run: |
  docker run --rm --workdir /Annif test-image pytest -p no:cacheprovider
  - name: Login to Quay.io
- uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
+ uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3.1.0
  with:
  registry: quay.io
  username: ${{ secrets.YHTEENTOIMIVUUSPALVELUT_QUAY_IO_USERNAME }}
@@ -35,7 +35,7 @@ jobs:
  type=semver,pattern={{version}}
  type=semver,pattern={{major}}.{{minor}}
  - name: Build and push to Quay.io
- uses: docker/build-push-action@4a13e500e55cf31b7a5d59a38ab2040ab0f42f56 # v5.1.0
+ uses: docker/build-push-action@2cdde995de11925a030ce8070c3d77a52ffcf1c0 # v5.3.0
  with:
  push: true
  tags: ${{ steps.meta.outputs.tags }}