Sync common files from infra repository (#1867)

Synchronized from bootc-dev/infra@81ea425.

Signed-off-by: bootc-dev Bot <bot@bootc.dev>
Co-authored-by: bootc-dev Bot <bot@bootc.dev>

Author: bootc-bot[bot]

.bootc-dev-infra-commit.txt

@@ -1 +1 @@
-10decade10bbbb5d7dea158661b612eb743ebad7
+81ea4256bec2b09cbfe95a1cbf8669003866dba1

.github/actions/bootc-ubuntu-setup/action.yml

@@ -65,24 +65,20 @@ runs:
     - name: Install libvirt and virtualization stack
       if: ${{ inputs.libvirt == 'true' }}
       shell: bash
-      env:
-        GH_TOKEN: ${{ github.token }}
       run: |
         set -xeuo pipefail
-        export BCVK_VERSION=0.8.0
+        export BCVK_VERSION=0.9.0
+        # see https://github.com/bootc-dev/bcvk/issues/176
         /bin/time -f '%E %C' sudo apt install -y libkrb5-dev pkg-config libvirt-dev genisoimage qemu-utils qemu-kvm virtiofsd libvirt-daemon-system python3-virt-firmware
         # Something in the stack is overriding this, but we want session right now for bcvk
         echo LIBVIRT_DEFAULT_URI=qemu:///session >> $GITHUB_ENV
         td=$(mktemp -d)
         cd $td
-        # Install bcvk from PR 172
-        gh run download 20107212783 --name bcvk-binary-tests --repo bootc-dev/bcvk
-        sudo install -m 755 bcvk /usr/bin/bcvk
-        # Install bcvk from release
-        # target=bcvk-$(arch)-unknown-linux-gnu
-        # /bin/time -f '%E %C' curl -LO https://github.com/bootc-dev/bcvk/releases/download/v${BCVK_VERSION}/${target}.tar.gz
-        # tar xzf ${target}.tar.gz
-        # sudo install -T ${target} /usr/bin/bcvk
+        # Install bcvk
+        target=bcvk-$(arch)-unknown-linux-gnu
+        /bin/time -f '%E %C' curl -LO https://github.com/bootc-dev/bcvk/releases/download/v${BCVK_VERSION}/${target}.tar.gz
+        tar xzf ${target}.tar.gz
+        sudo install -T ${target} /usr/bin/bcvk
         cd -
         rm -rf "$td"
 

.github/workflows/openssf-scorecard.yml

@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: "Checkout code"
-        uses: actions/checkout@v6
+        uses: actions/checkout@v4
         with:
           persist-credentials: false
 
@@ -37,7 +37,7 @@ jobs:
           publish_results: true
 
       - name: "Upload artifact"
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v4
         with:
           name: SARIF file
           path: results.sarif

.github/workflows/rebase.yml

@@ -21,13 +21,13 @@ jobs:
           owner: ${{ github.repository_owner }}
 
       - name: Checkout
-        uses: actions/checkout@v6
+        uses: actions/checkout@v5
         with:
           token: ${{ steps.token.outputs.token }}
           fetch-depth: 0
 
       - name: Automatic Rebase
-        uses: peter-evans/rebase@v4
+        uses: peter-evans/rebase@v3
         with:
           token: ${{ steps.token.outputs.token }}