feat: Add actions.lock.

.devcontainer/devcontainer-lock.json

@@ -19,11 +19,6 @@
       "version": "2.1.1",
       "resolved": "ghcr.io/devcontainers/features/node@sha256:2a19d3b0b3879437637cfd292eb29fee0afcfbe6364e33db9afc4f80c5c1f956",
       "integrity": "sha256:2a19d3b0b3879437637cfd292eb29fee0afcfbe6364e33db9afc4f80c5c1f956"
-    },
-    "ghcr.io/joshuanianji/devcontainer-features/google-cloud-cli:1": {
-      "version": "1.0.1",
-      "resolved": "ghcr.io/joshuanianji/devcontainer-features/google-cloud-cli@sha256:e3af02f936916198f58ef4088d3be608372246d208f6f627c902ce62a8ae12ec",
-      "integrity": "sha256:e3af02f936916198f58ef4088d3be608372246d208f6f627c902ce62a8ae12ec"
     }
   }
 }

.devcontainer/devcontainer.json

@@ -1,8 +1,10 @@
 // For format details, see https://aka.ms/devcontainer.json. For config options, see the
 // README at: https://github.com/devcontainers/templates/tree/main/src/ubuntu
 {
-  "name": "Ubuntu",
+  "name": "GitHub Action",
   "image": "mcr.microsoft.com/devcontainers/base:ubuntu",
+  "workspaceFolder": "/workspaces/${localWorkspaceFolderBasename}",
+  "postCreateCommand": "/bin/sh ./.devcontainer/postCreateCommand.sh",
   "remoteUser": "vscode",
   "features": {
     "ghcr.io/devcontainers/features/dotnet:2": {
@@ -18,8 +20,7 @@
       "npmVersion": "lts",
       "nvmVersion": "latest"
     },
-    "ghcr.io/devcontainers/features/github-cli:1": {},
-    "ghcr.io/joshuanianji/devcontainer-features/google-cloud-cli:1": {}
+    "ghcr.io/devcontainers/features/github-cli:1": {}
   },
   "customizations": {
     "vscode": {

.devcontainer/postCreateCommand.sh

@@ -0,0 +1,11 @@
+#!/bin/sh
+script_user=`whoami`
+script_dir=$(realpath "$(dirname "$0")")
+
+echo "USER:" ${script_user}
+echo "DIR:" ${script_dir}
+echo
+
+# Install GitHub CLI extension for actions lock
+# Update command `gh actions-lock --no-narrow`
+gh extension install github/gh-actions-lock

.github/workflows/actions.lock

@@ -0,0 +1,160 @@
+# This file is machine-generated by `gh actions-lock`.
+# Do not edit by hand; run `gh actions-lock` to update.
+# Docs: https://gh.io/actions-lockfile
+version: 'v0.0.3'
+workflows:
+    '.github/workflows/articles-changed-detection.yaml':
+        - 'actions/checkout@v7'
+        - 'tj-actions/changed-files@v47'
+    '.github/workflows/articles-docker-multi-platform.yaml':
+        - 'actions/checkout@v7'
+        - 'actions/download-artifact@v8'
+        - 'actions/upload-artifact@v7'
+        - 'docker/build-push-action@v7'
+        - 'docker/login-action@v4'
+        - 'docker/metadata-action@v6'
+        - 'docker/setup-buildx-action@v4'
+    '.github/workflows/articles-oidc-authentication.yaml':
+        - 'actions/checkout@v7'
+        - 'google-github-actions/auth@v3'
+    '.github/workflows/blank.yml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-1-hello.yaml':
+        - 'actions/checkout@v7'
+        - 'actions/setup-go@v7'
+    '.github/workflows/chapter-2-1-ci.yaml':
+        - 'actions/checkout@v7'
+        - 'actions/setup-go@v7'
+    '.github/workflows/chapter-2-2-cd.yaml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-3-1-contexts.yaml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-3-2-artifacts.yaml':
+        - 'actions/checkout@v7'
+        - 'actions/download-artifact@v8'
+        - 'actions/upload-artifact@v7'
+    '.github/workflows/chapter-3-3-control-flow.yaml': []
+    '.github/workflows/chapter-3-4-caching.yaml':
+        - 'actions/cache@v6'
+        - 'actions/checkout@v7'
+        - 'actions/setup-dotnet@v6'
+        - 'actions/setup-go@v7'
+        - 'actions/setup-node@v7'
+        - 'pnpm/action-setup@v6'
+    '.github/workflows/chapter-3-5-triggers.yaml': []
+    '.github/workflows/chapter-3-6-permissions.yaml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-3-7-secrets.yaml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-4-1-containers.yaml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-4-2-matrix.yaml':
+        - 'actions/checkout@v7'
+        - 'actions/setup-go@v7'
+    '.github/workflows/chapter-4-2-matrix1-splitting.yaml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-4-2-matrix2-dynamic.yaml': []
+    '.github/workflows/chapter-4-3-cache-handling.yaml':
+        - 'actions/cache@v6'
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-5-1-e2e-test.yaml': []
+    '.github/workflows/chapter-5-2-timings1-test-environment-create.yaml': []
+    '.github/workflows/chapter-5-2-timings2-test-environment-update.yaml': []
+    '.github/workflows/chapter-5-2-timings3-test-environment-destroy.yaml': []
+    '.github/workflows/chapter-5-3-skips-if-no-changes-detected.yaml':
+        - 'actions/checkout@v7'
+    '.github/workflows/chapter-5-4-rerun-only-failed-tests.yaml':
+        - 'actions/cache@v6'
+        - 'actions/checkout@v7'
+        - 'actions/setup-node@v7'
+    '.github/workflows/ex-11-good-practices.yaml':
+        - 'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1'
+        - 'actions/checkout@v7.0.1'
+    '.github/workflows/reusable-e2e-test.yaml':
+        - 'actions/cache@v6'
+        - 'actions/checkout@v7'
+        - 'actions/setup-node@v7'
+        - 'pnpm/action-setup@v6'
+    '.github/workflows/verify-actions.yaml':
+        - 'actions/checkout@v7'
+dependencies:
+    'actions/cache@v6':
+        ref: 'v6'
+        commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
+        owner_id: 44036562
+        repo_id: 215566462
+    'actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1':
+        ref: 'v7.0.1'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v7':
+        ref: 'v7'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/checkout@v7.0.1':
+        ref: 'v7.0.1'
+        commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
+        owner_id: 44036562
+        repo_id: 197814629
+    'actions/download-artifact@v8':
+        ref: 'v8'
+        commit: 'sha1-9000827ccba6bdab643e8b6fd33ac0654aef8333'
+        owner_id: 44036562
+        repo_id: 192626254
+    'actions/setup-dotnet@v6':
+        ref: 'v6'
+        commit: 'sha1-0f4a354dd5547a28c70b7853dbd95d5b67886e73'
+        owner_id: 44036562
+        repo_id: 192625306
+    'actions/setup-go@v7':
+        ref: 'v7'
+        commit: 'sha1-b7ad1dad31e06c5925ef5d2fc7ad053ef454303e'
+        owner_id: 44036562
+        repo_id: 192624594
+    'actions/setup-node@v7':
+        ref: 'v7'
+        commit: 'sha1-949feb2413d6458794dcd2491c4babbbce0c15c1'
+        owner_id: 44036562
+        repo_id: 189476904
+    'actions/upload-artifact@v7':
+        ref: 'v7'
+        commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9'
+        owner_id: 44036562
+        repo_id: 192625955
+    'docker/build-push-action@v7':
+        ref: 'v7'
+        commit: 'sha1-c3c9e263c25d99ce0380d002d59b67737d91b0dc'
+        owner_id: 5429470
+        repo_id: 241092383
+    'docker/login-action@v4':
+        ref: 'v4'
+        commit: 'sha1-8aa5831fb8d48d8f76594c7ddde61ae58019f550'
+        owner_id: 5429470
+        repo_id: 287743349
+    'docker/metadata-action@v6':
+        ref: 'v6'
+        commit: 'sha1-dc802804100637a589fabce1cb79ff13a1411302'
+        owner_id: 5429470
+        repo_id: 306769011
+    'docker/setup-buildx-action@v4':
+        ref: 'v4'
+        commit: 'sha1-f87e5991a6d7451dcb8d9637bfbc97413f497069'
+        owner_id: 5429470
+        repo_id: 288485773
+    'google-github-actions/auth@v3':
+        ref: 'v3'
+        commit: 'sha1-7c6bc770dae815cd3e89ee6cdf493a5fab2cc093'
+        owner_id: 71461757
+        repo_id: 407242578
+    'pnpm/action-setup@v6':
+        ref: 'v6'
+        commit: 'sha1-73e46992e05b19abd31f2f3c20e0e7370d762115'
+        owner_id: 21320719
+        repo_id: 262289747
+    'tj-actions/changed-files@v47':
+        ref: 'v47'
+        commit: 'sha1-24d32ffd492484c1d75e0c0b894501ddb9d30d62'
+        owner_id: 67116787
+        repo_id: 344672439

.github/workflows/chapter-4-1-containers.yaml

@@ -27,7 +27,7 @@ jobs:
       contents: read
     # ジョブコンテナを指定することで、ジョブ全体をコンテナ内で実行することができる.
     container:
-      image: golang:1.26
+      image: golang:1.26@sha256:5ebd6e7dc13f9e273ed9470679eb295d8b6e7de3b6379c8a5e17a9e6c3eabd38
     steps:
       - run: go version
 
@@ -39,7 +39,7 @@ jobs:
     # サービスコンテナはジョブの開始時に起動され、ジョブの終了時に停止されます。
     services:
       postgres:
-        image: postgres
+        image: postgres:latest@sha256:e3d24f6906d0760bf4da0dae872415391ededefad23fd471c47dc53b0ddf3c42
         ports:
           - 5432:5432
         env:

.github/workflows/reusable-e2e-test.yaml

@@ -48,7 +48,7 @@ jobs:
       - run: pnpm install
         working-directory: ${{ inputs.working-directory }}
       # Use a custom.
-      - uses: ./.github/actions/setup-playwright
+      - uses: $/.github/actions/setup-playwright
         with:
           working-directory: ${{ inputs.working-directory }}
       - run: pnpm exec playwright test --project chromium

.github/workflows/verify-actions.yaml

@@ -0,0 +1,37 @@
+name: Vetrify Github Actions
+
+on:
+  pull_request:
+    paths:
+      - '.github/workflows/**'
+      - '.github/actions/**'
+  workflow_dispatch:
+
+permissions: {}
+
+defaults:
+  run:
+    shell: bash
+
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  # actions-lock を使用するサイトでは、CIの最優先（最初に）ロックファイル検証を行ってください
+  verify-lock:
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    permissions:
+      contents: read
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v7
+
+      - name: Install actions-lock extension
+        run: gh extension install github/gh-actions-lock
+
+      - name: Verify actions-lock
+        run: gh actions-lock --verify
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

chapters/dotnet/HelloWorld/HelloWorld.csproj

@@ -11,7 +11,7 @@
   </PropertyGroup>
 
   <ItemGroup>
-    <PackageReference Include="Microsoft.Extensions.Logging" Version="10.0.14" />
+    <PackageReference Include="Microsoft.Extensions.Logging" Version="11.0.0" />
   </ItemGroup>
 
 </Project>

chapters/dotnet/HelloWorld/packages.lock.json

@@ -4,49 +4,55 @@
     "net10.0": {
       "Microsoft.Extensions.Logging": {
         "type": "Direct",
-        "requested": "[10.0.14, )",
-        "resolved": "10.0.14",
-        "contentHash": "O2fXL6JmtkFwkigxS8fPTQpLXxGDjgZco5D+h88s++Cl0bDCs023PVkpNoifciJ+f30I82jnp8tpwF0wCLdFtA==",
+        "requested": "[11.0.0, )",
+        "resolved": "11.0.0",
+        "contentHash": "zsse8MOgo0bj2KAEsSkg9WtNAfZbHbTlGeqfhy5PGozomM3zQM0XzumSQzQ0451IWNSJWLqYaSIQEpCi2j1sCA==",
         "dependencies": {
-          "Microsoft.Extensions.DependencyInjection": "10.0.14",
-          "Microsoft.Extensions.Logging.Abstractions": "10.0.14",
-          "Microsoft.Extensions.Options": "10.0.14"
+          "Microsoft.Extensions.DependencyInjection": "11.0.0",
+          "Microsoft.Extensions.Logging.Abstractions": "11.0.0",
+          "Microsoft.Extensions.Options": "11.0.0"
         }
       },
       "Microsoft.Extensions.DependencyInjection": {
         "type": "Transitive",
-        "resolved": "10.0.14",
-        "contentHash": "2LzcuVjemeXR+WdY9wGIr8iGb7fYsDAit+IScxXX2XJnX0b++mWcE/WO6fEGIqhdMfSQM2ZS5JGMHYZix7YXZg==",
+        "resolved": "11.0.0",
+        "contentHash": "KygQMITBDDPXw7+AAgdwQvVAaTXuDsc1iCAuvhO73ERxKX+d92cdbgZmpoYF7DIUq2hfs/yO2KD87uIreRy3MA==",
         "dependencies": {
-          "Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.14"
+          "Microsoft.Extensions.DependencyInjection.Abstractions": "11.0.0"
         }
       },
       "Microsoft.Extensions.DependencyInjection.Abstractions": {
         "type": "Transitive",
-        "resolved": "10.0.14",
-        "contentHash": "QtpQzuSZVyTPCuHW058yCs9Nj0394uUkNyFHS813nOmK9UgUdBdaprJ5PPsBgsQIpxADTsTkbaMMonykem6qdw=="
+        "resolved": "11.0.0",
+        "contentHash": "a2c4Kp55miXT6G+DSb75pczXQJHgNMzPyZEyMxrrKxuQrgvctcDWJWD9fVe/uGbQdu4Z0c3B7AVKp1DXmD64nQ=="
       },
       "Microsoft.Extensions.Logging.Abstractions": {
         "type": "Transitive",
-        "resolved": "10.0.14",
-        "contentHash": "SwcbEBtkECq3D2oywvHkm46fyrX9Dd2JPWphDnHUc2+cUWR1Mdo41atAjh/9iZjgQxuvbKfZKXqostT/LZfefA==",
+        "resolved": "11.0.0",
+        "contentHash": "MTMO2V1eT9Dm5VIpJGLNwIjAjoBErUlfuB+DEaZ0tb8J+Nf/Xlj8he5AztK9p1iOJPIyuBeOrVy2u/CSdsfzPw==",
         "dependencies": {
-          "Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.14"
+          "Microsoft.Extensions.DependencyInjection.Abstractions": "11.0.0",
+          "System.Diagnostics.DiagnosticSource": "11.0.0"
         }
       },
       "Microsoft.Extensions.Options": {
         "type": "Transitive",
-        "resolved": "10.0.14",
-        "contentHash": "EeN/33S418m9oWEaZY4N5T+BNxtOqNTIFoFbIgBKwylh4OJPKIWFAzbIhpTdNbwUs26MhkmbLCAbdY+YCJ1dIQ==",
+        "resolved": "11.0.0",
+        "contentHash": "AaNswJ3NqdNCNqQVlU7iTkvrrrzqrSSxkOC3bLlrwv/CPN7YRz3HoJk7o4ey5v6U8bOHocHsyYoJ7ihK1KUWyQ==",
         "dependencies": {
-          "Microsoft.Extensions.DependencyInjection.Abstractions": "10.0.14",
-          "Microsoft.Extensions.Primitives": "10.0.14"
+          "Microsoft.Extensions.DependencyInjection.Abstractions": "11.0.0",
+          "Microsoft.Extensions.Primitives": "11.0.0"
         }
       },
       "Microsoft.Extensions.Primitives": {
         "type": "Transitive",
-        "resolved": "10.0.14",
-        "contentHash": "1bbZqqCJTPba3inTADExbp/9PsGVyvGOX3zr6tFr7ySCgVkX9Lpw7BV0TizktNItd3SsbUu1sQfSAYm1GZMoNw=="
+        "resolved": "11.0.0",
+        "contentHash": "HH2akbW2HeY/xeZJA5UceuQQX+1Pv/Kxrz/x4XPoH6wYDtgPIlBeOTZlQXlT+b50b1Ym/xfP+WJCX9FW4uLBXQ=="
+      },
+      "System.Diagnostics.DiagnosticSource": {
+        "type": "Transitive",
+        "resolved": "11.0.0",
+        "contentHash": "+boRR9uSKiIPtFeRLGwO5xylhDF80xpwM+dmk5jgIqqeUKLbujGkGICMTKqQrBzKO6fIp8BU8DV6YZkQukqo3A=="
       }
     }
   }

chapters/e2e/package.json

@@ -8,7 +8,7 @@
   "license": "MIT",
   "type": "module",
   "devDependencies": {
-    "@playwright/test": "^1.64.1",
+    "@playwright/test": "^1.65.0",
     "@types/node": "^26.6.6"
   }
 }