diff --git a/.github/actions/cdn_deployment_aws/action.yaml b/.github/actions/cdn_deployment_aws/action.yaml index f586f30..d51af52 100644 --- a/.github/actions/cdn_deployment_aws/action.yaml +++ b/.github/actions/cdn_deployment_aws/action.yaml @@ -1,84 +1,84 @@ -name: CDN Deployment for AWS -description: Deploys to AWS CDN and optionally invalidates the path in CloudFront -inputs: - artifact: - description: Name of the artifact - required: true - invalidate_paths: - description: paths that get invalidated in cloud front - default: '' - aws_account_id: - description: The AWS account id - required: true - aws_distribution_id: - description: The CloudFront description id - required: true - aws_bucket_name: - description: The AWS bucket to sync - required: true - deploy_index_html: - description: Deploy a simple index.html file to S3 root - default: 'false' -runs: - using: 'composite' - - steps: - - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4 - with: - aws-region: us-east-2 - role-to-assume: arn:aws:iam::${{ inputs.aws_account_id }}:role/github-runner-for-cdn - - - name: Check Identity - shell: bash - run: aws sts get-caller-identity - - - uses: actions/download-artifact@v4 - with: - name: ${{ inputs.artifact }} - path: ./download - - - name: Deploy - shell: bash - run: aws s3 sync ./download s3://${{ inputs.aws_bucket_name }} - - - name: Create and Deploy Index HTML - if: ${{ inputs.deploy_index_html == 'true' }} - shell: bash - run: | - echo ' - - - - - UID2/EUID SDK Files - - - -

UID2/EUID SDK Files

-

This directory contains the latest SDK files for UID2 and EUID integration.

-
-
- SDK Files: Available in this directory -
-
- Documentation: Visit Documentation -
-
- - ' > index.html - aws s3 cp index.html s3://${{ inputs.aws_bucket_name }}/index.html - - - name: Invalidate CloudFront - uses: chetan/invalidate-cloudfront-action@cacab256f2bd90d1c04447a7d6afdaf6f346e7b3 # v2 - env: - DISTRIBUTION: ${{ inputs.aws_distribution_id }} - PATHS: ${{ inputs.invalidate_paths }} - AWS_REGION: us-east-2 +name: CDN Deployment for AWS +description: Deploys to AWS CDN and optionally invalidates the path in CloudFront +inputs: + artifact: + description: Name of the artifact + required: true + invalidate_paths: + description: paths that get invalidated in cloud front + default: '' + aws_account_id: + description: The AWS account id + required: true + aws_distribution_id: + description: The CloudFront description id + required: true + aws_bucket_name: + description: The AWS bucket to sync + required: true + deploy_index_html: + description: Deploy a simple index.html file to S3 root + default: 'false' +runs: + using: 'composite' + + steps: + - name: Configure AWS credentials + uses: aws-actions/configure-aws-credentials@e7f100cf4c008499ea8adda475de1042d6975c7b # v6.2.0 + with: + aws-region: us-east-2 + role-to-assume: arn:aws:iam::${{ inputs.aws_account_id }}:role/github-runner-for-cdn + + - name: Check Identity + shell: bash + run: aws sts get-caller-identity + + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + with: + name: ${{ inputs.artifact }} + path: ./download + + - name: Deploy + shell: bash + run: aws s3 sync ./download s3://${{ inputs.aws_bucket_name }} + + - name: Create and Deploy Index HTML + if: ${{ inputs.deploy_index_html == 'true' }} + shell: bash + run: | + echo ' + + + + + UID2/EUID SDK Files + + + +

UID2/EUID SDK Files

+

This directory contains the latest SDK files for UID2 and EUID integration.

+
+
+ SDK Files: Available in this directory +
+
+ Documentation: Visit Documentation +
+
+ + ' > index.html + aws s3 cp index.html s3://${{ inputs.aws_bucket_name }}/index.html + + - name: Invalidate CloudFront + uses: chetan/invalidate-cloudfront-action@cacab256f2bd90d1c04447a7d6afdaf6f346e7b3 # v2 + env: + DISTRIBUTION: ${{ inputs.aws_distribution_id }} + PATHS: ${{ inputs.invalidate_paths }} + AWS_REGION: us-east-2 diff --git a/.github/workflows/build-sdk-package.yml b/.github/workflows/build-sdk-package.yml index ef2d1c1..105bf35 100644 --- a/.github/workflows/build-sdk-package.yml +++ b/.github/workflows/build-sdk-package.yml @@ -30,11 +30,11 @@ jobs: node-version: [20.x] target: [development, production] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ needs.incrementVersionNumber.outputs.git_tag_or_hash }} - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ matrix.node-version }} - name: Get Package Version @@ -51,14 +51,14 @@ jobs: # Upload SDK artifacts for CDN - name: Upload UID2 SDK artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: uid2SDK-${{ matrix.target }}-${{ steps.version.outputs.package_version }} path: ./dist/uid2-sdk-${{ steps.version.outputs.package_version }}.js retention-days: 30 - name: Upload EUID SDK artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: euidSDK-${{ matrix.target }}-${{ steps.version.outputs.package_version }} path: ./dist/euid-sdk-${{ steps.version.outputs.package_version }}.js @@ -67,7 +67,7 @@ jobs: # Upload NPM package artifacts - name: Upload UID2 NPM package if: matrix.target == 'production' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: uid2-npm-package-${{ steps.version.outputs.package_version }} path: ./dist/uid2-npm/ @@ -75,7 +75,7 @@ jobs: - name: Upload EUID NPM package if: matrix.target == 'production' - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: euid-npm-package-${{ steps.version.outputs.package_version }} path: ./dist/euid-npm/ @@ -92,7 +92,7 @@ jobs: steps: - name: Build Changelog id: github_release_changelog - uses: mikepenz/release-changelog-builder-action@32e3c96f29a6532607f638797455e9e98cfc703d # v4 + uses: mikepenz/release-changelog-builder-action@348e88fab4c37338b1e803ceb2d4a7a5db6c0833 # v6.2.2 with: toTag: v${{ needs.incrementVersionNumber.outputs.new_version }} configurationJson: | @@ -100,7 +100,7 @@ jobs: "pr_template": " - #{{TITLE}} - ( PR: ##{{NUMBER}} )" } - name: Create Release Notes - uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2 + uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0 with: name: v${{ needs.incrementVersionNumber.outputs.new_version }} body: ${{ steps.github_release_changelog.outputs.changelog }} diff --git a/.github/workflows/build-secure-signal.yml b/.github/workflows/build-secure-signal.yml index 7f4d0af..cc90a2d 100644 --- a/.github/workflows/build-secure-signal.yml +++ b/.github/workflows/build-secure-signal.yml @@ -14,15 +14,15 @@ jobs: uid2_modified: ${{ steps.verify_uid2.outputs.any_modified }} euid_modified: ${{ steps.verify_euid.outputs.any_modified }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Check for change to src/secureSignalUid2.ts id: verify_uid2 - uses: tj-actions/changed-files@716b1e13042866565e00e85fd4ec490e186c4a2f # v41 + uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6 with: files: src/secureSignalUid2.ts - name: Check for change to src/secureSignalEuid.ts id: verify_euid - uses: tj-actions/changed-files@716b1e13042866565e00e85fd4ec490e186c4a2f # v41 + uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 # v47.0.6 with: files: src/secureSignalEuid.ts @@ -35,9 +35,9 @@ jobs: target: [development, production] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ matrix.node-version }} cache: 'npm' @@ -49,7 +49,7 @@ jobs: # Upload UID2 Secure Signals Files - name: Upload UID2 Secure Signals Files - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: ${{ matrix.target }}Uid2SecureSignalScript path: ./dist/uid2SecureSignal.js @@ -57,7 +57,7 @@ jobs: # Upload EUID Secure Signals Files - name: Upload EUID Secure Signals Files - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: ${{ matrix.target }}EuidSecureSignalScript path: ./dist/euidSecureSignal.js diff --git a/.github/workflows/node.js.yaml b/.github/workflows/node.js.yaml index f992106..c62c433 100644 --- a/.github/workflows/node.js.yaml +++ b/.github/workflows/node.js.yaml @@ -18,9 +18,9 @@ jobs: # See supported Node.js release schedule at https://nodejs.org/en/about/releases/ steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Use Node.js ${{ matrix.node-version }} - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ matrix.node-version }} cache: 'npm'