Merge pull request #52 from dnanexus/jmares-update_to_24.04_runner

[COMPUTE-1239, APPS-3123] updated runner to 24.04

Author: dnanexus-mares

.github/workflows/actions/install-sbt/action.yml

@@ -0,0 +1,15 @@
+name: 'Install SBT'
+description: 'This action installs SBT'
+
+runs:
+  using: 'composite'
+  steps:
+    - name: Install SBT
+      id: install-sbt
+      run: |
+        sudo apt-get update
+        echo "deb https://repo.scala-sbt.org/scalasbt/debian all main" | sudo tee /etc/apt/sources.list.d/sbt.list
+        curl -sL "https://keyserver.ubuntu.com/pks/lookup?op=get&search=0x99E82A75642AC823" | sudo apt-key add
+        sudo apt-get update
+        sudo apt-get install -y sbt
+      shell: bash

.github/workflows/codeql.yml

@@ -40,11 +40,11 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@v3
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v2
+      uses: github/codeql-action/init@70df9def86d22bf0ea4e7f8b956e7b92e7c1ea22 # v2.20.7
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -58,7 +58,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v2
+      uses: github/codeql-action/autobuild@70df9def86d22bf0ea4e7f8b956e7b92e7c1ea22 # v2.20.7
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -71,6 +71,6 @@ jobs:
     #     ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v2
+      uses: github/codeql-action/analyze@70df9def86d22bf0ea4e7f8b956e7b92e7c1ea22 # v2.20.7
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/main.yml

@@ -15,16 +15,18 @@ permissions:
 jobs:
   test:
     name: Test
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Git Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
       - name: Install Java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2 # v1.4.3
         with:
           java-version: 11
+      - name: Install SBT
+        uses: ./.github/workflows/actions/install-sbt
       - name: Build
         run: |
           # compile antlr4 sources

.github/workflows/release.yml

@@ -12,10 +12,10 @@ permissions:
 jobs:
   run-release:
     name: cwlScala Release
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Git checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
       - name: Version check
@@ -26,9 +26,11 @@ jobs:
             exit 1
           fi
       - name: Install java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2 # v1.4.3
         with:
           java-version: 11
+      - name: Install SBT
+        uses: ./.github/workflows/actions/install-sbt
       - name: Install & build
         run: |
           # compile antlr4 sources
@@ -60,7 +62,7 @@ jobs:
           sed -n '/## ${{ github.event.inputs.release-version }}/,/##/p' RELEASE_NOTES.md | sed '1d; $d' > $RELEASE_NOTES_PATH
           echo ::set-output name=release-notes-path::$(echo "${RELEASE_NOTES_PATH}")
       - name: Commit changes to application.conf files
-        uses: EndBug/add-and-commit@v7
+        uses: EndBug/add-and-commit@8c12ff729a98cfbcd3fe38b49f55eceb98a5ec02 # v7.5.0
         with:
           message: 'Release ${{ github.event.inputs.release-version }}'
           add: '[
@@ -70,7 +72,7 @@ jobs:
           tag: ${{ github.event.inputs.release-version }}
       - name: Create release entry
         id: create-release
-        uses: actions/create-release@v1
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -81,7 +83,7 @@ jobs:
           prerelease: false
       - name: Upload assembly JAR
         id: upload-release-assembly
-        uses: actions/upload-release-asset@v1
+        uses: actions/upload-release-asset@e8f9f06c4b078e705bd2ea027f0926603fc9b4d5 # v1.0.2
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -105,7 +107,7 @@ jobs:
           sbt publish
       - name: Rollback release if unsuccessfull
         if: ${{ cancelled() || failure() }}
-        uses: author/action-rollback@stable
+        uses: author/action-rollback@f4473931b1155b601092ec00eb1fa4882b80219f # 1.0.4
         with:
           release_id: ${{ steps.create-release.outputs.id }}
           tag: ${{ github.event.inputs.release-version }}

.github/workflows/snapshot.yml

@@ -10,16 +10,18 @@ permissions:
 jobs:
   publish:
     name: Publish Snapshot
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     steps:
       - name: Git Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           submodules: true
       - name: Install Java
-        uses: actions/setup-java@v1
+        uses: actions/setup-java@d202f5dbf7256730fb690ec59f6381650114feb2 # v1.4.3
         with:
           java-version: 11
+      - name: Install SBT
+        uses: ./.github/workflows/actions/install-sbt
       - name: Install other dependencies
         run: |
           sudo apt update -y && sudo apt install -y jq
@@ -41,7 +43,7 @@ jobs:
           version_id=`echo $version_json | jq -r .data.repository.packages.nodes[0].version.id`
           echo ::set-output name=version_id::"${version_id}"
       - name: Delete existing snapshot
-        uses: actions/delete-package-versions@v2
+        uses: actions/delete-package-versions@000223ef3eaa3505c63d4c610f57ef103bcab46d # v2.0.2
         if: ${{ steps.versions.outputs.version_id != 'null' }}
         with:
           repo: dnanexus