From 95648a8128ab100af08336df48a648cead39650a Mon Sep 17 00:00:00 2001
From: Graham Campbell <hello@gjcampbell.co.uk>
Date: Mon, 11 Sep 2023 10:30:48 +0100
Subject: [PATCH] GitHub Actions version upgrades and pins

---
 .github/workflows/build-docker.yml          |  4 ++--
 .github/workflows/ci.yml                    | 22 ++++++++++-----------
 .github/workflows/deploy-docker.yml         |  4 ++--
 .github/workflows/update-layer-versions.yml | 10 +++++-----
 4 files changed, 20 insertions(+), 20 deletions(-)

diff --git a/.github/workflows/build-docker.yml b/.github/workflows/build-docker.yml
index f3e16d8f9..ef83299d5 100644
--- a/.github/workflows/build-docker.yml
+++ b/.github/workflows/build-docker.yml
@@ -8,10 +8,10 @@ on:
 jobs:
   publish:
     name: Building images
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Build images
         run: make docker-images
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index e55049d45..8778b9d2f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
 
     php-tests:
         name: Tests - PHP ${{ matrix.php }} ${{ matrix.dependency-version }}
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22.04
         timeout-minutes: 15
         strategy:
             matrix:
@@ -24,9 +24,9 @@ jobs:
                         dependency-version: '--prefer-lowest'
         steps:
             -   name: Checkout
-                uses: actions/checkout@v2
+                uses: actions/checkout@v4
             # Node is required by some tests
-            -   uses: actions/setup-node@v1
+            -   uses: actions/setup-node@v3
                 with:
                     node-version: 12
             -   name: Setup PHP
@@ -50,19 +50,19 @@ jobs:
                 run: 'vendor/bin/phpunit --testsuite small'
 
     phpstan:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22.04
         name: PHPStan
         steps:
             -   name: Checkout
-                uses: actions/checkout@v2
+                uses: actions/checkout@v4
             -   name: Setup PHP
                 uses: shivammathur/setup-php@v2
                 with:
-                    php-version: 8.1
+                    php-version: '8.1'
                     tools: composer:v2, cs2pr
                     coverage: none
             -   name: Cache Composer dependencies
-                uses: actions/cache@v2
+                uses: actions/cache@v3
                 with:
                     path: ~/.composer/cache
                     key: php-composer-locked-${{ hashFiles('composer.lock') }}
@@ -73,19 +73,19 @@ jobs:
                 run: vendor/bin/phpstan analyse --error-format=checkstyle | cs2pr
 
     phpcs:
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22.04
         name: PHP CodeSniffer
         steps:
             -   name: Checkout
-                uses: actions/checkout@v2
+                uses: actions/checkout@v4
             -   name: Setup PHP
                 uses: shivammathur/setup-php@v2
                 with:
-                    php-version: 7.4
+                    php-version: '7.4'
                     tools: composer:v2, cs2pr
                     coverage: none
             -   name: Cache Composer dependencies
-                uses: actions/cache@v2
+                uses: actions/cache@v3
                 with:
                     path: ~/.composer/cache
                     key: php-composer-locked-${{ hashFiles('composer.lock') }}
diff --git a/.github/workflows/deploy-docker.yml b/.github/workflows/deploy-docker.yml
index 54127db44..32af77e5a 100644
--- a/.github/workflows/deploy-docker.yml
+++ b/.github/workflows/deploy-docker.yml
@@ -8,10 +8,10 @@ on:
 jobs:
   publish:
     name: Publishing images
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
 
       - name: Get the version
         id: get_version
diff --git a/.github/workflows/update-layer-versions.yml b/.github/workflows/update-layer-versions.yml
index c96943cb8..52a58ebce 100644
--- a/.github/workflows/update-layer-versions.yml
+++ b/.github/workflows/update-layer-versions.yml
@@ -14,16 +14,16 @@ permissions:
 jobs:
     update-layer-versions:
         name: Update layer versions
-        runs-on: ubuntu-latest
+        runs-on: ubuntu-22.04
         steps:
-            -   uses: actions/checkout@v3
+            -   uses: actions/checkout@v4
                 with:
                     # Check out the `v2` branch
                     # TODO Update that to `main` when the v2 is merged and released
                     ref: v2
 
             -   name: Set AWS credentials
-                uses: aws-actions/configure-aws-credentials@v1
+                uses: aws-actions/configure-aws-credentials@v3
                 with:
                     role-to-assume: arn:aws:iam::534081306603:role/bref-github-actions
                     role-session-name: bref-github-actions
@@ -32,7 +32,7 @@ jobs:
             -   name: Setup PHP
                 uses: shivammathur/setup-php@v2
                 with:
-                    php-version: 8.1
+                    php-version: '8.1'
                     tools: composer
 
             -   name: Install Composer dependencies
@@ -41,7 +41,7 @@ jobs:
             -   run: make layers.json
 
             -   name: Create Pull Request
-                uses: peter-evans/create-pull-request@v4
+                uses: peter-evans/create-pull-request@v5
                 with:
                     commit-message: Update layer versions
                     title: Updated AWS Lambda layers (Bref v2)