@@ -35,10 +35,10 @@ jobs:
3535 version : ${{ steps.version.outputs.version }}
3636 steps :
3737 - name : Checkout source code
38- uses : actions/checkout@v6
38+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
3939
4040 - name : Install uv
41- uses : astral-sh/setup-uv@v7
41+ uses : astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
4242 if : ${{ always() }}
4343 with :
4444 activate-environment : true
4949 run : uv sync --frozen
5050
5151 - name : Set PyPI version
52- uses : PowerGridModel/pgm-version-bump@main
52+ uses : PowerGridModel/pgm-version-bump@b75ff549cae00be1ca859d181dbc460f69003643 # v0.1.2
5353 with :
5454 token : ${{ secrets.GITHUB_TOKEN }}
5555
6262 uv build
6363
6464 - name : Store built wheel file
65- uses : actions/upload-artifact@v7
65+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
6666 with :
6767 name : power-grid-model-ds
6868 path : dist/
@@ -78,10 +78,10 @@ jobs:
7878 runs-on : ${{ matrix.os }}
7979 steps :
8080 - name : Checkout source code
81- uses : actions/checkout@v6
81+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
8282
8383 - name : Install uv
84- uses : astral-sh/setup-uv@v7
84+ uses : astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
8585 if : ${{ always() }}
8686 with :
8787 activate-environment : true
9191 run : uv tool install poethepoet
9292
9393 - name : Load built wheel file
94- uses : actions/download-artifact@v8
94+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
9595 with :
9696 name : power-grid-model-ds
9797 path : dist/
@@ -114,10 +114,10 @@ jobs:
114114 tag : ${{ steps.tag.outputs.tag }}
115115 steps :
116116 - name : Checkout source code
117- uses : actions/checkout@v6
117+ uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
118118
119119 - name : Load built wheel file
120- uses : actions/download-artifact@v8
120+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
121121 with :
122122 name : power-grid-model-ds
123123 path : dist/
@@ -132,7 +132,7 @@ jobs:
132132 run : echo "${{ steps.tag.outputs.tag }}"
133133
134134 - name : Release
135- uses : softprops/action-gh-release@v2
135+ uses : softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
136136 with :
137137 files : |
138138 ./dist/*
@@ -161,7 +161,7 @@ jobs:
161161 run : ls -la assets-to-publish
162162
163163 - name : Upload assets to PyPI
164- uses : pypa/gh-action-pypi-publish@release/v1
164+ uses : pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0
165165 with :
166166 # To test, use the TestPyPI:
167167 # repository-url: https://test.pypi.org/legacy/
0 commit comments