chore(actions): move actions to new org

.github/workflows/master.yml

@@ -5,10 +5,13 @@ on:
     branches: 
     - master
 
+permissions:
+  contents: write
+
 jobs:
   prepare:
     name: Calculate Version and Build Number
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     outputs:
       build_number: ${{ steps.build_number.outputs.value }}
@@ -18,14 +21,12 @@ jobs:
       version: ${{ steps.version.outputs.value }}
 
     steps:
-    - uses: actions/checkout@v3
-      with:
-        token: ${{ secrets.ACCESS_TOKEN }}
+    - uses: actions/checkout@v4
 
     - uses: cycjimmy/semantic-release-action@v2
       id: semantic
       env:
-        GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
         dry_run: true
         semantic_version: 17.3.7
@@ -42,16 +43,16 @@ jobs:
     if: needs.prepare.outputs.new_release == 'true'
 
     name: Generates Prerelease
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     needs: prepare
 
     steps:
     - name: Create Pre Release
-      uses: actions/create-release@v1
+      uses: actions/create-release@v2
       env:
         BUILD: ${{ needs.prepare.outputs.build_number }}
-        GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         VERSION: ${{ needs.prepare.outputs.release }}
       with:
         tag_name: build/${{ env.VERSION }}/${{ env.BUILD }}
@@ -63,20 +64,20 @@ jobs:
     if: needs.prepare.outputs.new_release == 'true'
 
     name: Draft Release
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     needs: prepare
 
     steps:
     - name: Delete Previous drafts
       uses: hugo19941994/delete-draft-releases@v1.0.0
       env:
-        GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
 
     - name: Create Draft Release
-      uses: actions/create-release@v1
+      uses: actions/create-release@v2
       env:
-        GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }}
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
         tag_name: ${{ needs.prepare.outputs.release }}
         release_name: ${{ needs.prepare.outputs.release }}

.github/workflows/prerelease.yml

@@ -5,10 +5,14 @@ on:
     types:
     - prereleased
 
+permissions:
+  contents: write
+  id-token: write
+
 jobs:
   prepare:
     name: Prepare
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     outputs:
       version: ${{ steps.version.outputs.value }}
@@ -20,12 +24,12 @@ jobs:
 
   package:
     name: Build and Package
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     needs: prepare
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Setup Python 3.7
       uses: actions/setup-python@v4
@@ -41,48 +45,43 @@ jobs:
       run: make package PYTHON=python version=${{ steps.version.outputs.value }}
 
     - name: Upload Pipeline Artifacts
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         retention-days: 1
         name: built-artifacts
         path: dist/
 
   upload-assets:
     name: Upload Assets to Release
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     needs:
     - prepare
     - package
 
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4
       with:
         name: built-artifacts
         path: dist/
 
-    - uses: AButler/upload-release-assets@v2.0
+    - uses: softprops/action-gh-release@v2
       with:
         files: 'dist/*'
-        repo-token: ${{ secrets.ACCESS_TOKEN }}
-        release-tag: ${{ needs.package.outputs.version }}
+        tag_name: ${{ needs.package.outputs.version }}
 
   publish-private-pypi:
     name: Publish packages to PyPi
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     needs:
     - prepare
     - package
 
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4
       with:
         name: built-artifacts
         path: dist/
 
-    - uses: pypa/gh-action-pypi-publish@v1.6.4
-      with:
-        user: ${{ secrets.PRIVATE_PYPI_USERNAME }}
-        password: ${{ secrets.PRIVATE_PYPI_PASSWORD }}
-        repository_url: ${{ secrets.PRIVATE_PYPI_URL }}
+    - uses: pypa/gh-action-pypi-publish@release/v1

.github/workflows/pull_request.yml

@@ -10,17 +10,17 @@ on:
 jobs:
   validate:
     name: Validate
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Setup Python 3.7
       uses: actions/setup-python@v4
       with:
         python-version: '3.7'
 
-    - uses: actions/cache@v3
+    - uses: actions/cache@v4
       with:
         path: ~/.cache/pip
         key: ${{ runner.os }}-pip-${{ hashFiles('**/requirements.txt') }}

.github/workflows/release.yml

@@ -5,16 +5,20 @@ on:
     types:
     - released
 
+permissions:
+  contents: write
+  id-token: write
+
 jobs:
   package:
     name: Build and Package
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     outputs:
       version: ${{ steps.version.outputs.value }}
 
     steps:
-    - uses: actions/checkout@v3
+    - uses: actions/checkout@v4
 
     - name: Version
       id: version
@@ -34,43 +38,39 @@ jobs:
       run: make package PYTHON=python version=${{ steps.version.outputs.value }}
 
     - name: Upload Pipeline Artifacts
-      uses: actions/upload-artifact@v3
+      uses: actions/upload-artifact@v4
       with:
         retention-days: 1
         name: built-artifacts
         path: dist/
 
   upload-assets:
     name: Upload Assets to Release
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     needs: package
 
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4
       with:
         name: built-artifacts
         path: dist/
 
-    - uses: AButler/upload-release-assets@v2.0
+    - uses: softprops/action-gh-release@v2
       with:
         files: 'dist/*'
-        repo-token: ${{ secrets.ACCESS_TOKEN }}
-        release-tag: ${{ needs.package.outputs.version }}
+        tag_name: ${{ needs.package.outputs.version }}
 
   publish-pypi:
     name: Publish packages to PyPi
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-22.04
 
     needs: package
 
     steps:
-    - uses: actions/download-artifact@v3
+    - uses: actions/download-artifact@v4
       with:
         name: built-artifacts
         path: dist/
 
-    - uses: pypa/gh-action-pypi-publish@v1.6.4
-      with:
-        user: __token__
-        password: ${{ secrets.PYPI_API_TOKEN }}
+    - uses: pypa/gh-action-pypi-publish@release/v1