From 56d7925a974e1b4457f9f07fcffbbf44d7b7c2fa Mon Sep 17 00:00:00 2001 From: =?utf8?q?Bj=C3=B8rn=20Erik=20Pedersen?= Date: Tue, 18 Nov 2025 19:05:13 +0100 Subject: [PATCH] github: Add ai-watchdog workflow and update other workflows' versions See #14147 --- .github/workflows/aiwatchdog.yml | 14 ++++++++++++++ .github/workflows/image.yml | 10 +++++----- .github/workflows/stale.yml | 2 +- .github/workflows/test.yml | 8 ++++---- docs/.github/workflows/codeql-analysis.yml | 2 +- docs/.github/workflows/markdownlint.yml | 4 ++-- docs/.github/workflows/spellcheck.yml | 6 +++--- docs/.github/workflows/stale.yml | 2 +- 8 files changed, 31 insertions(+), 17 deletions(-) create mode 100644 .github/workflows/aiwatchdog.yml diff --git a/.github/workflows/aiwatchdog.yml b/.github/workflows/aiwatchdog.yml new file mode 100644 index 000000000..de37270c8 --- /dev/null +++ b/.github/workflows/aiwatchdog.yml @@ -0,0 +1,14 @@ +name: AI Detection +on: [pull_request] +permissions: + contents: read + pull-requests: write +jobs: + detect-ai: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - name: AI Watchdog + uses: Citric-Sheep/ai-watchdog@0db4a635d309db0f8d82642130dfc33e91cf33fa # v0.2.3 + with: + openai-api-key: ${{ secrets.OPENAI_API_KEY }} diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml index c4f3c34c3..8eab2f3ee 100644 --- a/.github/workflows/image.yml +++ b/.github/workflows/image.yml @@ -16,20 +16,20 @@ jobs: steps: - name: Checkout - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 - name: Docker meta id: meta - uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1 + uses: docker/metadata-action@318604b99e75e41977312d83839a89be02ca4893 # v5.9.0 with: images: ${{ env.REGISTRY_IMAGE }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Login to GHCR # Login is only needed when the image is pushed - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0 with: registry: ghcr.io username: ${{ github.repository_owner }} @@ -37,7 +37,7 @@ jobs: - name: Build and push id: build - uses: docker/build-push-action@16ebe778df0e7752d2cfcbd924afdbbd89c1a755 # v6.6.1 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . provenance: mode=max diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 3c8a55232..7af0f7ea7 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -24,7 +24,7 @@ jobs: This pull request has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs. - - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0 + - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0 with: operations-per-run: 999 days-before-issue-stale: 365 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 262fcdabc..c521728c8 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -34,9 +34,9 @@ jobs: docker-images: true swap-storage: true - name: Checkout code - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 - name: Install Go - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 + uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0 with: go-version: ${{ matrix.go-version }} check-latest: true @@ -45,7 +45,7 @@ jobs: **/go.sum **/go.mod - name: Install Ruby - uses: ruby/setup-ruby@44511735964dcb71245e7e55f72539531f7bc0eb # v1.257.0 + uses: ruby/setup-ruby@8aeb6ff8030dd539317f8e1769a044873b56ea71 # v1.268.0 with: ruby-version: "3.4.5" - name: Install gems @@ -62,7 +62,7 @@ jobs: java-version: "25" java-package: jre - name: Install Python - uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f # v5.1.1 + uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 with: python-version: "3.x" - name: Install Mage diff --git a/docs/.github/workflows/codeql-analysis.yml b/docs/.github/workflows/codeql-analysis.yml index 6f7038c9e..1354ffe8b 100644 --- a/docs/.github/workflows/codeql-analysis.yml +++ b/docs/.github/workflows/codeql-analysis.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 - name: Initialize CodeQL uses: github/codeql-action/init@v3 diff --git a/docs/.github/workflows/markdownlint.yml b/docs/.github/workflows/markdownlint.yml index 0e2ac88fb..ee8bfd4e7 100644 --- a/docs/.github/workflows/markdownlint.yml +++ b/docs/.github/workflows/markdownlint.yml @@ -7,9 +7,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 - name: Run Markdown linter - uses: DavidAnson/markdownlint-cli2-action@v20 + uses: DavidAnson/markdownlint-cli2-action@30a0e04f1870d58f8d717450cc6134995f993c63 # v21.0.0 with: globs: # set to null to override default of *.{md,markdown} continue-on-error: false diff --git a/docs/.github/workflows/spellcheck.yml b/docs/.github/workflows/spellcheck.yml index d9036f18a..3f402fe78 100644 --- a/docs/.github/workflows/spellcheck.yml +++ b/docs/.github/workflows/spellcheck.yml @@ -12,13 +12,13 @@ jobs: spellcheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 - - uses: streetsidesoftware/cspell-action@v7 + - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 + - uses: streetsidesoftware/cspell-action@3294df585d3d639e30f3bc019cb11940b9866e95 # v8.0.0 with: incremental_files_only: true strict: true # cspell uses the .cspell.json configuration file - - uses: codespell-project/actions-codespell@v2 + - uses: codespell-project/actions-codespell@8f01853be192eb0f849a5c7d721450e7a467c579 # v2.2 with: check_filenames: true check_hidden: true diff --git a/docs/.github/workflows/stale.yml b/docs/.github/workflows/stale.yml index c537f1642..9513953f7 100644 --- a/docs/.github/workflows/stale.yml +++ b/docs/.github/workflows/stale.yml @@ -13,7 +13,7 @@ jobs: pull-requests: write runs-on: ubuntu-latest steps: - - uses: actions/stale@v9 + - uses: actions/stale@5f858e3efba33a5ca4407a664cc011ad407f2008 # v10.1.0 with: days-before-stale: 90 # default is 60 days-before-close: 14 # default is 7 -- 2.39.5