github: Add ai-watchdog workflow and update other workflows' versions

See #14147

diff --git a/.github/workflows/aiwatchdog.yml b/.github/workflows/aiwatchdog.yml
new file mode 100644 (file)
index 0000000..de37270
--- /dev/null
+++ b/.github/workflows/aiwatchdog.yml
@@ -0,0 +1,14 @@
+name: AI Detection
+on: [pull_request]
+permissions:
+  contents: read
+  pull-requests: write
+jobs:
+  detect-ai:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - name: AI Watchdog
+        uses: Citric-Sheep/ai-watchdog@0db4a635d309db0f8d82642130dfc33e91cf33fa # v0.2.3
+        with:
+          openai-api-key: ${{ secrets.OPENAI_API_KEY }}

diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml
index c4f3c34c3d2db4526b669cf9a1e7f90100a9a8ab..8eab2f3ee8a63a1963dff1cfe03b0533708b11b6 100644 (file)
--- a/.github/workflows/image.yml
+++ b/.github/workflows/image.yml
@@ -16,20 +16,20 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Docker meta
         id: meta
-        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
+        uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0
         with:
           images: ${{ env.REGISTRY_IMAGE }}
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
 
       - name: Login to GHCR
         # Login is only needed when the image is pushed
-        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -37,7 +37,7 @@ jobs:
 
       - name: Build and push
         id: build
-        uses: docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1
+        uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
         with:
           context: .
           provenance: mode=max

diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index 3c8a55232855a6944eca4a57068849b3aac94fbb..7af0f7ea72f89cc5959fa23b5a707bdddf83b74d 100644 (file)
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -24,7 +24,7 @@ jobs:
             This pull request has been automatically locked since there
             has not been any recent activity after it was closed.
             Please open a new issue for related bugs.
-      - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           operations-per-run: 999
           days-before-issue-stale: 365

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 262fcdabc00d91ce04f6853996d9cbd06fbcb766..c521728c89f70375860b7381ef6f2ab73acc5c30 100644 (file)
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -34,9 +34,9 @@ jobs:
           docker-images: true
           swap-storage: true
       - name: Checkout code
-        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
       - name: Install Go
-        uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
+        uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
         with:
           go-version: ${{ matrix.go-version }}
           check-latest: true
@@ -45,7 +45,7 @@ jobs:
             **/go.sum
             **/go.mod
       - name: Install Ruby
-        uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0
+        uses: ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # v1.268.0
         with:
           ruby-version: "3.4.5"
       - name: Install gems
@@ -62,7 +62,7 @@ jobs:
           java-version: "25"
           java-package: jre
       - name: Install Python
-        uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1
+        uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0
         with:
           python-version: "3.x"
       - name: Install Mage

diff --git a/docs/.github/workflows/codeql-analysis.yml b/docs/.github/workflows/codeql-analysis.yml
index 6f7038c9e63afeef0e159746266583dd6d4f5c8f..1354ffe8bcafd2d3f5275e98e6dde73e57c6a763 100644 (file)
--- a/docs/.github/workflows/codeql-analysis.yml
+++ b/docs/.github/workflows/codeql-analysis.yml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v5
+        uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3

diff --git a/docs/.github/workflows/markdownlint.yml b/docs/.github/workflows/markdownlint.yml
index 0e2ac88fb243fbe4af29caa2b7ca57dc6bd4516e..ee8bfd4e7c09f924ae6cfa6c3a83731c84f60a2e 100644 (file)
--- a/docs/.github/workflows/markdownlint.yml
+++ b/docs/.github/workflows/markdownlint.yml
@@ -7,9 +7,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v5
+      uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
     - name: Run Markdown linter
-      uses: DavidAnson/markdownlint-cli2-action@v20
+      uses: DavidAnson/markdownlint-cli2-action@30a0e04f1870d58f8d717450cc6134995f993c63 # v21.0.0
       with:
         globs: # set to null to override default of *.{md,markdown}
       continue-on-error: false

diff --git a/docs/.github/workflows/spellcheck.yml b/docs/.github/workflows/spellcheck.yml
index d9036f18a32c542737af9fd087e179362554fb1e..3f402fe78e8eadf2310ebf1d5d949dd771954aa0 100644 (file)
--- a/docs/.github/workflows/spellcheck.yml
+++ b/docs/.github/workflows/spellcheck.yml
@@ -12,13 +12,13 @@ jobs:
   spellcheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: streetsidesoftware/cspell-action@v7
+      - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
+      - uses: streetsidesoftware/cspell-action@3294df585d3d639e30f3bc019cb11940b9866e95 # v8.0.0
         with:
           incremental_files_only: true
           strict: true
           # cspell uses the .cspell.json configuration file
-      - uses: codespell-project/actions-codespell@v2
+      - uses: codespell-project/actions-codespell@8f01853be192eb0f849a5c7d721450e7a467c579 # v2.2
         with:
           check_filenames: true
           check_hidden: true

diff --git a/docs/.github/workflows/stale.yml b/docs/.github/workflows/stale.yml
index c537f16421ebab51f08e1b72aea522139d5bf67a..9513953f70ef7ae64fb571a3a4484409c26b91bd 100644 (file)
--- a/docs/.github/workflows/stale.yml
+++ b/docs/.github/workflows/stale.yml
@@ -13,7 +13,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/stale@v9
+      - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0
         with:
           days-before-stale: 90 # default is 60
           days-before-close: 14 # default is 7