Update webfactory/ssh-agent action to v0.8.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
webfactory/ssh-agent	action	minor	v0.4.1 -> v0.8.0

---

Release Notes

webfactory/ssh-agent (webfactory/ssh-agent)

v0.8.0: SSH host keys no longer managed – read below 👇

Compare Source

Starting with this release, this action no longer writes GitHub's SSH host keys into the known_hosts SSH config file upon start.

GitHub changed their host keys on short notice this morning, see https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/. We took this as an opportunity to stop maintaining GH SSH keys in the code shipped with this action (#​171).

What you need to do:

• On GitHub hosted runners, nothing. ✔︎ These runners ship with SSH host keys (for github.com) maintained by directly by GitHub.
• On self-hosted runners, review and fix your SSH known_hosts file:
  • First, you'll find it bloated with redundant entries for github.com, as described in #​106. Remove these entries.
  • Review https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/. You probably removed the old (invalid) SSH key in the previous step.
  • Configure GitHub's current SSH keys as documented on https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/githubs-ssh-key-fingerprints
  • As long as versions before v0.8.0 of this action here are run on the self-hosted runner, the old entries will come back. Keep an eye on it, possibly you'll have to rinse & repeat.

Other code changes in this release

• Update to actions/checkout@v3 by @​mpdude in https://github.com/webfactory/ssh-agent/pull/143
• Allow the user to override the commands for git, ssh-agent, and ssh-add by @​DilumAluthge in https://github.com/webfactory/ssh-agent/pull/154

New Contributors

• @​prhiggins made their first contribution in https://github.com/webfactory/ssh-agent/pull/153
• @​kjarkur made their first contribution in https://github.com/webfactory/ssh-agent/pull/147
• @​DilumAluthge made their first contribution in https://github.com/webfactory/ssh-agent/pull/154

Full Changelog: webfactory/ssh-agent@v0.7.0...v0.8.0

v0.7.0

Compare Source

Added

• Add the log-public-key input that can be used to turn off logging key identities (#​122)

Fixed

• Fix path to git binary on Windows, assuming GitHub-hosted runners (#​136, #​137)
• Fix a nonsensical log message (#​139)

v0.6.0

Compare Source

Changed

• Update the version of Node used by the action from 12 to 16 (https://github.blog/changelog/2022-09-22-github-actions-all-actions-will-begin-running-on-node16-instead-of-node12/).

v0.5.4

Compare Source

Fixed

• Update changed GitHub Host Keys (#​102, #​101)

Changed

• Various documentation (README) improvements and additions
• Change logging to more precisely state that public keys are being printed

v0.5.3

Compare Source

Fixed

• Fixed cleanup phase to really terminate the ssh-agent (#​80)
• Fix termination of ssh-agent also on workflow failure (#​79)

Changed

• Various documentation (README) improvements and additions

v0.5.2

Compare Source

Fixed

• Use case-insensitive regex matching when scanning key comments (#​68, #​70, #​71)

Changed

• Log when a key is not used as a deploy key (#​69)

v0.5.1

Compare Source

Fixed

• Fix deployment key mapping on Windows virtual environment by using SSH binaries from the Git
  suite, terminate ssh-agent upon actio termination on Windows as well (#​63)
• Handle ENOENT exceptions with a graceful message

Changed

• Various documentation (README) improvements and additions

v0.5.0

Compare Source

Added

• Add support for GitHub Deployment Keys through key comments (#​59). Fixes #​30, closes #​38.
• Support for container-based workflows and Windows (#​17)

Fixed

• Fix scripts/build.js to work on Windows (#​38)

Changed

• Various documentation (README) improvements and additions

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[ghost]

👇 Click on the image for a new way to code review

• Make big changes easier — review code in small groups of related files

• Know where to start — see the whole change at a glance

• Take a code tour — explore the change with an interactive tour

• Make comments and review — all fully sync’ed with github

  Try it now!

Legend