update actions (#76)

* update actions

* sync and licenses

* sync

* fix tag

.github/scripts/deploy_image_from_artifact.sh

@@ -1,6 +1,6 @@
 #!/bin/bash
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022 Robert Bosch GmbH and Microsoft Corporation
+# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at

.github/workflows/build-docker-image.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022 Robert Bosch GmbH and Microsoft Corporation
+# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -35,25 +35,25 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: "recursive"
 
       - name: Clone Release Documentation Action repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: eclipse-velocitas/release-documentation-action
           path: "./.github/actions"
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - id: github-repository-name-case-adjusted
         name: Prepare repository name in lower case for docker upload. This supports repository names in mixed case
-        uses: ASzc/change-string-case-action@v5
+        uses: ASzc/change-string-case-action@v6
         with:
           string: ${{ github.repository }}
 
@@ -87,7 +87,7 @@ jobs:
 
       - name: "${{ env.APP_NAME }} -- Build image"
         id: image_build
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           provenance: false
           pull: true
@@ -140,14 +140,14 @@ jobs:
 
       - name: "${{ env.APP_NAME }} -- Upload trivy report as artifacts"
         if: ${{ always() && steps.image_build.outcome == 'success' }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
-          name: test-results
+          name: test-results-trivy
           path: |
             results/Documentation/renderer/*
 
       - name: "${{ env.APP_NAME }} -- Publish Trivy Scan Results"
-        uses: mikepenz/action-junit-report@v3
+        uses: mikepenz/action-junit-report@v4
         if: ${{ always() && steps.image_build.outcome == 'success' }}
         with:
           check_name: Trivy Scan Results (${{ env.APP_NAME }})
@@ -158,7 +158,7 @@ jobs:
 
       - name: "${{ env.APP_NAME }} -- Upload image to artifacts"
         if: ${{ steps.image_build.outcome == 'success' }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         env:
           VAPP_IMAGE: ${{ env.APP_NAME }}-${{ inputs.platform }}
         with:
@@ -168,7 +168,7 @@ jobs:
 
       - name: "${{ env.APP_NAME }} -- Upload AppManifest.json to artifacts"
         if: ${{ steps.image_build.outcome == 'success' }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: AppManifest
           path: ./app/AppManifest.json
@@ -180,7 +180,7 @@ jobs:
 
       - name: "${{ env.APP_NAME }} -- Upload generated podspec.yaml"
         if: ${{ steps.image_build.outcome == 'success' }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: Podspec
           path: ./podspec.yaml
@@ -192,7 +192,7 @@ jobs:
 
       - name: "${{ env.APP_NAME }} -- Upload generated helm chart"
         if: ${{ steps.image_build.outcome == 'success' }}
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: HelmChart
           path: ./helm

.github/workflows/build-multiarch-image.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022 Robert Bosch GmbH and Microsoft Corporation
+# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Get app-name
         id: export-app-name

.github/workflows/check-devcontainer.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2023 Robert Bosch GmbH
+# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -27,14 +27,13 @@ on:
   schedule:
     - cron: "0 4 * * *"
 
-
 jobs:
   automated-tests:
     runs-on: ubuntu-22.04
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Build devcontainer and run automated tests
         uses: devcontainers/ci@v0.3
@@ -44,7 +43,7 @@ jobs:
             pytest -sx .devcontainer/tests
 
       - name: Upload logs
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: always()
         with:
           name: logs

.github/workflows/check-licenses.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2023 Robert Bosch GmbH
+# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -34,10 +34,10 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Clone License Check Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           repository: eclipse-velocitas/license-check
           ref: v1.2.3
@@ -52,8 +52,9 @@ jobs:
           generate-dash: true
 
       - name: Setup Java JDK
-        uses: actions/setup-java@v1.4.4
+        uses: actions/setup-java@v4
         with:
+          distribution: 'temurin'
           java-version: 11.0.19
 
       - name: Run dash
@@ -64,7 +65,7 @@ jobs:
           java -jar dash.jar clearlydefined.input -summary DEPENDENCIES
 
       - name: Upload dash input/output as artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: always()
         with:
           name: "dash-artifacts"

.github/workflows/ci.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022-2023 Robert Bosch GmbH
+# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -42,7 +42,7 @@ jobs:
     name: "Build, Test and Lint"
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           submodules: "recursive"
 
@@ -81,7 +81,7 @@ jobs:
           output: both
 
       - name: Upload test-results as artifacts
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: test-results
           path: |

.github/workflows/ensure-lifecycle.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2023 Robert Bosch GmbH
+# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -32,7 +32,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Run CLI
         run: |

.github/workflows/gen-desired-state.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2023 Robert Bosch GmbH
+# Copyright (c) 2023-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -29,9 +29,9 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
-      - uses: actions/setup-python@v4
+      - uses: actions/setup-python@v5
         with:
           python-version: "3.10"
 
@@ -46,7 +46,7 @@ jobs:
 
       - id: github-repository-name-case-adjusted
         name: Prepare repository name in lower case for docker upload.
-        uses: ASzc/change-string-case-action@v5
+        uses: ASzc/change-string-case-action@v6
         with:
           string: ${{ github.repository }}
 

.github/workflows/release.yml

@@ -1,5 +1,5 @@
 # This file is maintained by velocitas CLI, do not modify manually. Change settings in .velocitas.json
-# Copyright (c) 2022 Robert Bosch GmbH and Microsoft Corporation
+# Copyright (c) 2022-2024 Contributors to the Eclipse Foundation
 #
 # This program and the accompanying materials are made available under the
 # terms of the Apache License, Version 2.0 which is available at
@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Get app-name
         id: export-app-name
@@ -52,23 +52,23 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - id: get_version
         uses: battila7/get-version-action@v2
 
       - run: echo "Using VehicleApp version ${{ steps.get_version.outputs.version-without-v }} from tag"
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - id: github-repository-name-case-adjusted
         name: Prepare repository name in lower case for docker upload.
-        uses: ASzc/change-string-case-action@v5
+        uses: ASzc/change-string-case-action@v6
         with:
           string: ${{ github.repository }}
 
@@ -81,7 +81,7 @@ jobs:
           intervalSeconds: 20
 
       - name: Download builds from Build multiarch image workflow artifacts
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v3
         with:
           github_token: ${{secrets.GITHUB_TOKEN}}
           workflow: build-multiarch-image.yml
@@ -119,9 +119,9 @@ jobs:
     name: Generate release documentation
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
-      - uses: actions/setup-node@v3
+      - uses: actions/setup-node@v4
         with:
           node-version: "18"
           check-latest: true
@@ -143,7 +143,7 @@ jobs:
           intervalSeconds: 30
 
       - name: Download artifact from CI workflow
-        uses: dawidd6/action-download-artifact@v2
+        uses: dawidd6/action-download-artifact@v3
         with:
           workflow: ci.yml
           workflow_conclusion: success

.velocitas.json

@@ -6,7 +6,7 @@
         },
         {
             "name": "devenv-github-workflows",
-            "version": "v4.1.2"
+            "version": "v4.1.3"
         },
         {
             "name": "devenv-github-templates",

NOTICE-3RD-PARTY-CONTENT.md

@@ -23,7 +23,7 @@
 |node-semver|0.6.1|MIT|
 |nodeenv|1.8.0|BSD|
 |patch-ng|1.17.4|MIT|
-|platformdirs|4.1.0|MIT|
+|platformdirs|4.2.0|MIT|
 |pluginbase|1.0.1|BSD|
 |pre-commit|3.5.0|MIT|
 |pygments|2.17.2|Simplified BSD|
@@ -39,25 +39,25 @@
 ## Workflows
 | Dependency | Version | License |
 |:-----------|:-------:|--------:|
-|actions/checkout|v3|MIT License|
-|actions/setup-java|v1.4.4|MIT License|
-|actions/setup-node|v3|MIT License|
-|actions/setup-python|v4|MIT License|
-|actions/upload-artifact|v3|MIT License|
+|actions/checkout|v4|MIT License|
+|actions/setup-java|v4|MIT License|
+|actions/setup-node|v4|MIT License|
+|actions/setup-python|v5|MIT License|
+|actions/upload-artifact|v4|MIT License|
 |aquasecurity/trivy-action|0.11.2|Apache License 2.0|
-|ASzc/change-string-case-action|v5|ISC License|
+|ASzc/change-string-case-action|v6|ISC License|
 |battila7/get-version-action|v2|MIT License|
-|dawidd6/action-download-artifact|v2|MIT License|
+|dawidd6/action-download-artifact|v3|MIT License|
 |de-vri-es/setup-git-credentials|v2|BSD 2-Clause "Simplified" License|
 |devcontainers/ci|v0.3|MIT License|
-|docker/build-push-action|v4|Apache License 2.0|
-|docker/login-action|v2|Apache License 2.0|
-|docker/setup-buildx-action|v2|Apache License 2.0|
-|docker/setup-qemu-action|v2|Apache License 2.0|
+|docker/build-push-action|v5|Apache License 2.0|
+|docker/login-action|v3|Apache License 2.0|
+|docker/setup-buildx-action|v3|Apache License 2.0|
+|docker/setup-qemu-action|v3|Apache License 2.0|
 |fountainhead/action-wait-for-check|v1.1.0|MIT License|
 |haya14busa/action-cond|v1|MIT License|
 |irongut/CodeCoverageSummary|v1.3.0|MIT License|
-|mikepenz/action-junit-report|v3|Apache License 2.0|
+|mikepenz/action-junit-report|v4|Apache License 2.0|
 |peaceiris/actions-gh-pages|v3|MIT License|
 |peaceiris/actions-hugo|v2|MIT License|
 |pre-commit/action|v3.0.0|MIT License|