build(deps): update envoyproxy/toolshed requirement to actions-v0.3.28

.github/workflows/_cve_fetch.yml

@@ -35,7 +35,7 @@ jobs:
         else
             echo "weekly_run=false" >> $GITHUB_OUTPUT
         fi
-    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.28
       name: Setup GCP
       with:
         key: ${{ secrets.gcs-cve-key }}

.github/workflows/_cve_scan.yml

@@ -28,7 +28,7 @@ jobs:
       id: vars
       run: |
         echo "cve-data-path=${{ inputs.cve-data-path }}" > $GITHUB_OUTPUT
-    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.28
       name: Setup GCP
       with:
         key: ${{ secrets.gcs-cve-key }}

.github/workflows/_finish.yml

@@ -36,7 +36,7 @@ jobs:
       actions: read
       contents: read
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       name: Incoming data
       id: needs
       with:
@@ -87,21 +87,21 @@ jobs:
                    summary: "Check has finished",
                    text: $text}}}}
 
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       name: Print summary
       with:
         input: ${{ toJSON(steps.needs.outputs.value).summary-title }}
         filter: |
           "## \(.)"
         options: -Rr
         output-path: GITHUB_STEP_SUMMARY
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.28
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.3.28
       name: Update check
       with:
         action: update

.github/workflows/_load.yml

@@ -100,7 +100,7 @@ jobs:
     # Handle any failure in triggering job
     # Remove any `checks` we dont care about
     # Prepare a check request
-    - uses: envoyproxy/toolshed/gh-actions/github/env/load@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/env/load@actions-v0.3.28
       name: Load env
       id: data
       with:
@@ -111,21 +111,21 @@ jobs:
         GH_TOKEN: ${{ github.token }}
 
     #  Update the check
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.28
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.3.28
       name: Update check
       if: ${{ fromJSON(steps.data.outputs.data).data.check.action == 'RUN' }}
       with:
         action: update
         checks: ${{ toJSON(fromJSON(steps.data.outputs.data).checks) }}
         token: ${{ steps.appauth.outputs.token }}
 
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       name: Print request summary
       with:
         input: |
@@ -145,7 +145,7 @@ jobs:
           | $summary.summary as $summary
           | "${{ inputs.template-request-summary }}"
 
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: request-output
       name: Load request
       with:

.github/workflows/_load_env.yml

@@ -63,18 +63,18 @@ jobs:
       request: ${{ steps.env.outputs.data }}
       trusted: true
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: started
       name: Create timestamp
       with:
         options: -r
         filter: |
           now
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.28
       id: checkout
       name: Checkout Envoy repository
     - name: Generate environment variables
-      uses: envoyproxy/toolshed/gh-actions/envoy/ci/env@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/envoy/ci/env@actions-v0.3.28
       id: env
       with:
         branch-name: ${{ inputs.branch-name }}
@@ -86,7 +86,7 @@ jobs:
 
     - name: Request summary
       id: summary
-      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.3.28
       with:
         actor: ${{ toJSON(fromJSON(steps.env.outputs.data).request.actor) }}
         base-sha: ${{ fromJSON(steps.env.outputs.data).request.base-sha }}

.github/workflows/_publish_release.yml

@@ -145,12 +145,12 @@ jobs:
     needs:
     - release
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.28
       id: appauth
       with:
         app_id: ${{ secrets.ENVOY_CI_SYNC_APP_ID }}
         key: ${{ secrets.ENVOY_CI_SYNC_APP_KEY }}
-    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/dispatch@actions-v0.3.28
       with:
         ref: main
         repository: ${{ fromJSON(inputs.request).request.version.dev && 'envoyproxy/envoy-website' || 'envoyproxy/archive' }}

.github/workflows/_publish_release_container.yml

@@ -56,7 +56,7 @@ jobs:
     - name: Generate manifest configuration (dev)
       id: dev-config
       if: ${{ inputs.dev && inputs.target-branch == 'main' }}
-      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       with:
         input-format: yaml
         filter: >-
@@ -126,7 +126,7 @@ jobs:
             - tools-dev-${{ github.sha }}
 
     - name: Generate manifest configuration (release)
-      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: release-config
       if: ${{ ! inputs.dev || ! inputs.target-branch != 'main' }}
       with:
@@ -198,7 +198,7 @@ jobs:
             - tools-v${{ inputs.version-major }}.${{ inputs.version-minor }}-latest
 
     - name: Collect and push OCI artifacts
-      uses: envoyproxy/toolshed/gh-actions/oci/collector@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/oci/collector@actions-v0.3.28
       with:
         artifacts-pattern: oci.*
         manifest-config: ${{ steps.dev-config.outputs.value || steps.release-config.outputs.value }}

.github/workflows/_request.yml

@@ -56,14 +56,14 @@ jobs:
       caches: ${{ steps.caches.outputs.value }}
       config: ${{ steps.config.outputs.config }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: started
       name: Create timestamp
       with:
         options: -r
         filter: |
           now
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.28
       id: checkout
       name: Checkout Envoy repository (requested)
       with:
@@ -77,7 +77,7 @@ jobs:
     # *ALL* variables collected should be treated as untrusted and should be sanitized before
     # use
     - name: Generate environment variables from commit
-      uses: envoyproxy/toolshed/gh-actions/envoy/ci/request@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/envoy/ci/request@actions-v0.3.28
       id: env
       with:
         branch-name: ${{ steps.checkout.outputs.branch-name }}
@@ -88,15 +88,15 @@ jobs:
         vars: ${{ toJSON(vars) }}
         working-directory: requested
 
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.28
       id: checkout-target
       name: Checkout Envoy repository (target branch)
       with:
         branch: ${{ fromJSON(steps.env.outputs.data).request.target-branch }}
         config: |
           fetch-depth: 1
           path: target
-    - uses: envoyproxy/toolshed/gh-actions/hashfiles@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/hashfiles@actions-v0.3.28
       id: bazel-cache-hash
       name: Bazel cache hash
       with:
@@ -105,7 +105,7 @@ jobs:
 
     - name: Request summary
       id: summary
-      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/github/env/summary@actions-v0.3.28
       with:
         actor: ${{ toJSON(fromJSON(steps.env.outputs.data).request.actor) }}
         base-sha: ${{ fromJSON(steps.env.outputs.data).request.base-sha }}
@@ -121,7 +121,7 @@ jobs:
         target-branch: ${{ fromJSON(steps.env.outputs.data).request.target-branch }}
 
     - name: Environment data
-      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: data
       with:
         input: |
@@ -164,26 +164,26 @@ jobs:
         path: /tmp/cache
         key: ${{ fromJSON(steps.data.outputs.value).request.build-image.default }}-arm64
 
-    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.28
       name: Setup GCP
       with:
         key: ${{ secrets.gcs-cache-key }}
 
-    - uses: envoyproxy/toolshed/gh-actions/gcs/cache/exists@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/gcs/cache/exists@actions-v0.3.28
       name: Check GCS bucket cache (x64)
       id: cache-exists-bazel-x64
       with:
         bucket: ${{ inputs.gcs-cache-bucket }}
         key: ${{ fromJSON(steps.data.outputs.value).config.ci.cache.bazel }}-x64
-    - uses: envoyproxy/toolshed/gh-actions/gcs/cache/exists@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/gcs/cache/exists@actions-v0.3.28
       name: Check GCS bucket cache (arm64)
       id: cache-exists-bazel-arm64
       with:
         bucket: ${{ inputs.gcs-cache-bucket }}
         key: ${{ fromJSON(steps.data.outputs.value).config.ci.cache.bazel }}-arm64
 
     - name: Caches
-      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+      uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: caches
       with:
         input-format: yaml

.github/workflows/_request_cache_bazel.yml

@@ -51,22 +51,22 @@ jobs:
     name: "[${{ inputs.arch }}] Prime Bazel cache"
     if: ${{ ! fromJSON(inputs.caches).bazel[inputs.arch] }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/checkout@actions-v0.3.28
       id: checkout-target
       name: Checkout Envoy repository (target branch)
       with:
         branch: ${{ fromJSON(inputs.request).request.target-branch }}
         config: |
           fetch-depth: 1
 
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.28
       id: appauth
       name: Appauth (mutex lock)
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
 
-    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/gcp/setup@actions-v0.3.28
       name: Setup GCP
       with:
         key: ${{ secrets.gcs-cache-key }}
@@ -76,7 +76,7 @@ jobs:
         sudo mkdir /build
         sudo chown runner:docker /build
         echo "GITHUB_TOKEN=${{ github.token }}" >> $GITHUB_ENV
-    - uses: envoyproxy/toolshed/gh-actions/cache/prime@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/cache/prime@actions-v0.3.28
       id: bazel-cache
       name: Prime Bazel cache
       with:

.github/workflows/_request_cache_docker.yml

@@ -51,29 +51,29 @@ jobs:
     name: "[${{ inputs.arch }}] Prime Docker cache"
     if: ${{ ! fromJSON(inputs.caches).docker[inputs.arch] }}
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.28
       id: appauth
       name: Appauth (mutex lock)
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/docker/cache/prime@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/docker/cache/prime@actions-v0.3.28
       id: docker
       name: Prime Docker cache (${{ inputs.image-tag }}${{ inputs.cache-suffix }})
       with:
         image-tag: ${{ inputs.image-tag }}
         key-suffix: ${{ inputs.cache-suffix }}
         lock-token: ${{ steps.appauth.outputs.token }}
         lock-repository: ${{ inputs.lock-repository }}
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: data
       name: Cache data
       with:
         input-format: yaml
         input: |
           cached: ${{ steps.docker.outputs.cached }}
           key: ${{ inputs.image-tag }}${{ inputs.cache-suffix }}
-    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.3.28
       name: Summary
       with:
         json: ${{ steps.data.outputs.value }}

.github/workflows/_request_checks.yml

@@ -55,7 +55,7 @@ jobs:
     runs-on: ${{ fromJSON(inputs.env).config.ci.agent-ubuntu }}
     name: Start checks
     steps:
-    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/jq@actions-v0.3.28
       id: check-config
       name: Prepare check data
       with:
@@ -78,13 +78,13 @@ jobs:
           | .skipped.output.summary = "${{ inputs.skipped-summary }}"
           | .skipped.output.text = ""
 
-    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/appauth@actions-v0.3.28
       name: Appauth
       id: appauth
       with:
         app_id: ${{ secrets.app-id }}
         key: ${{ secrets.app-key }}
-    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/checks@actions-v0.3.28
       name: Start checks
       id: checks
       with:
@@ -95,7 +95,7 @@ jobs:
 
           ${{ fromJSON(inputs.env).summary.summary }}
         token: ${{ steps.appauth.outputs.token }}
-    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/json/table@actions-v0.3.28
       name: Summary
       with:
         collapse-open: true
@@ -119,7 +119,7 @@ jobs:
         output-path: GITHUB_STEP_SUMMARY
         title: Checks started/skipped
 
-    - uses: envoyproxy/toolshed/gh-actions/github/env/save@actions-v0.3.26
+    - uses: envoyproxy/toolshed/gh-actions/github/env/save@actions-v0.3.28
       name: Save env
       id: data
       with: