diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e9a57ed9c..053459015 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -87,7 +87,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3 + uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -101,7 +101,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3 + uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 # v3 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -114,7 +114,7 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3 + uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3 with: category: "/language:${{matrix.language}}" diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 3ba4e0b21..1e1bb4181 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,7 +24,7 @@ jobs: go-version-file: go.mod - name: Run GoReleaser for stable release - uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6 + uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6 if: (!contains(github.ref, 'pre')) with: # You can pass flags to goreleaser via GORELEASER_ARGS diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 310931aaf..c146c108c 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -53,7 +53,7 @@ jobs: if: needs.changes.outputs.should-run-tests == 'true' name: Tests runs-on: ubuntu-24.04 - container: ghcr.io/runatlantis/testing-env:latest@sha256:143a71dd97160495dbcaa30601f0868123672f207d8a78894ea7b36b946e23f9 + container: ghcr.io/runatlantis/testing-env:latest@sha256:725981e9090c977f8055f5ec5ba7a63430a8f0337ab955978e6b8cc2cd0236c3 steps: - name: Harden Runner uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1 diff --git a/docker-compose.yml b/docker-compose.yml index ba9aeaf88..bc3ad5d1e 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -1,7 +1,7 @@ # Note: This file is only used for Atlantis local development services: ngrok: - image: ngrok/ngrok:latest@sha256:0dbf30ec036f2369d3b9018a8287aa2414deb90ccf44536cb2fcfd238b3d4f70 + image: ngrok/ngrok:latest@sha256:1dae5be9a74825c44ab9c89be047e18b7b71ce5ce4453cabfcfec2e541e67b14 ports: - 4040:4040 command: diff --git a/runatlantis.io/docs/repo-level-atlantis-yaml.md b/runatlantis.io/docs/repo-level-atlantis-yaml.md index a3978c067..48cb5e8c3 100644 --- a/runatlantis.io/docs/repo-level-atlantis-yaml.md +++ b/runatlantis.io/docs/repo-level-atlantis-yaml.md @@ -53,40 +53,40 @@ manually configured project, the manually configured project will take precedenc ## Example Using All Keys ```yaml -version: 3 -automerge: true -autodiscover: +version: 3 # Available since v0.1.0 +automerge: true # Available since v0.15.0 +autodiscover: # Available since v0.18.0 mode: auto ignore_paths: - some/path -delete_source_branch_on_merge: true -parallel_plan: true -parallel_apply: true -abort_on_execution_order_fail: true +delete_source_branch_on_merge: true # Available since v0.15.0 +parallel_plan: true # Available since v0.17.0 +parallel_apply: true # Available since v0.17.0 +abort_on_execution_order_fail: true # Available since v0.17.0 projects: -- name: my-project-name - branch: /main/ - dir: . - workspace: default - terraform_distribution: terraform - terraform_version: v0.11.0 - delete_source_branch_on_merge: true - repo_locking: true # deprecated: use repo_locks instead - repo_locks: +- name: my-project-name # Available since v0.1.0 + branch: /main/ # Available since v0.20.0 + dir: . # Available since v0.1.0 + workspace: default # Available since v0.1.0 + terraform_distribution: terraform # Available since v0.25.0 + terraform_version: v0.11.0 # Available since v0.1.0 + delete_source_branch_on_merge: true # Available since v0.17.0 + repo_locking: true # deprecated: use repo_locks instead, Available since v0.17.0 + repo_locks: # Available since v0.17.0 mode: on_plan - custom_policy_check: false - autoplan: + custom_policy_check: false # Available since v0.17.0 + autoplan: # Available since v0.1.0 when_modified: ["*.tf", "../modules/**/*.tf", ".terraform.lock.hcl"] enabled: true - plan_requirements: [mergeable, approved, undiverged] - apply_requirements: [mergeable, approved, undiverged] - import_requirements: [mergeable, approved, undiverged] - silence_pr_comments: ["apply"] - execution_order_group: 1 - depends_on: + plan_requirements: [mergeable, approved, undiverged] # Available since v0.17.0 + apply_requirements: [mergeable, approved, undiverged] # Available since v0.17.0 + import_requirements: [mergeable, approved, undiverged] # Available since v0.17.0 + silence_pr_comments: ["apply"] # Available since v0.17.0 + execution_order_group: 1 # Available since v0.17.0 + depends_on: # Available since v0.20.0 - project-1 - workflow: myworkflow -workflows: + workflow: myworkflow # Available since v0.17.0 +workflows: # Available since v0.1.0 myworkflow: plan: steps: @@ -102,7 +102,7 @@ workflows: steps: - run: echo hi - apply -allowed_regexp_prefixes: +allowed_regexp_prefixes: # Available since v0.19.0 - dev/ - staging/ ```