.github: update and pin actions/cache to latest 4.x (#13555)

Update and pin actions/cache usage to latest 4.x. These were previously
pointing to `@3` which pulls in the latest v3 as they are released, with
the potential to break our workflows if a breaking change or malicious
version on the `@3` stream is ever pushed.

Changing this to a pinned version also means that dependabot will keep
this in the pinned version format (e.g., referencing a SHA) when it
opens a PR to bump the dependency.

The breaking change between v3 and v4 is that v4 requires Node 20 which
should be a non-issue where this is run.

Updates #cleanup

Signed-off-by: Mario Minardi <mario@tailscale.com>
This commit is contained in:
Mario Minardi 2024-09-23 16:34:55 -06:00 committed by GitHub
parent a3f7e72321
commit a8bd0cb9c2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -80,7 +80,7 @@ jobs:
- name: checkout - name: checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Restore Cache - name: Restore Cache
uses: actions/cache@v3 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
with: with:
# Note: unlike the other setups, this is only grabbing the mod download # Note: unlike the other setups, this is only grabbing the mod download
# cache, rather than the whole mod directory, as the download cache # cache, rather than the whole mod directory, as the download cache
@ -159,7 +159,7 @@ jobs:
cache: false cache: false
- name: Restore Cache - name: Restore Cache
uses: actions/cache@v3 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
with: with:
# Note: unlike the other setups, this is only grabbing the mod download # Note: unlike the other setups, this is only grabbing the mod download
# cache, rather than the whole mod directory, as the download cache # cache, rather than the whole mod directory, as the download cache
@ -260,7 +260,7 @@ jobs:
- name: checkout - name: checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Restore Cache - name: Restore Cache
uses: actions/cache@v3 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
with: with:
# Note: unlike the other setups, this is only grabbing the mod download # Note: unlike the other setups, this is only grabbing the mod download
# cache, rather than the whole mod directory, as the download cache # cache, rather than the whole mod directory, as the download cache
@ -319,7 +319,7 @@ jobs:
- name: checkout - name: checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Restore Cache - name: Restore Cache
uses: actions/cache@v3 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
with: with:
# Note: unlike the other setups, this is only grabbing the mod download # Note: unlike the other setups, this is only grabbing the mod download
# cache, rather than the whole mod directory, as the download cache # cache, rather than the whole mod directory, as the download cache
@ -367,7 +367,7 @@ jobs:
- name: checkout - name: checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
- name: Restore Cache - name: Restore Cache
uses: actions/cache@v3 uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
with: with:
# Note: unlike the other setups, this is only grabbing the mod download # Note: unlike the other setups, this is only grabbing the mod download
# cache, rather than the whole mod directory, as the download cache # cache, rather than the whole mod directory, as the download cache