Skip to content

Commit 5d02018

Browse files
chore(deps): pin dependencies
1 parent 87fd933 commit 5d02018

7 files changed

Lines changed: 37 additions & 37 deletions

File tree

.github/workflows/benchmark-evidence.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -35,16 +35,16 @@ jobs:
3535

3636
steps:
3737
- name: Checkout
38-
uses: actions/checkout@v4
38+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3939

4040
- name: Setup vcpkg
41-
uses: lukka/run-vcpkg@v11
41+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
4242
with:
4343
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
4444
doNotCache: false
4545

4646
- name: Setup Python
47-
uses: actions/setup-python@v5
47+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
4848
with:
4949
python-version: "3.12"
5050

@@ -114,7 +114,7 @@ jobs:
114114
.\scripts\bench.ps1 @params
115115
116116
- name: Upload benchmark artifacts
117-
uses: actions/upload-artifact@v4
117+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
118118
with:
119119
name: benchmark-evidence-windows-${{ github.run_id }}-${{ github.run_attempt }}
120120
path: ${{ steps.opts.outputs.bench_dir }}

.github/workflows/ci.yml

Lines changed: 17 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: Checkout
28-
uses: actions/checkout@v4
28+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2929

3030
- name: Validate Python lockfile
3131
shell: bash
@@ -41,7 +41,7 @@ jobs:
4141
echo "OK: $LOCKFILE is valid UTF-8 and contains no NUL bytes"
4242
4343
- name: Setup Python and dependencies
44-
uses: actions/setup-python@v5
44+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
4545
with:
4646
python-version: "3.12"
4747
cache: "pip"
@@ -64,7 +64,7 @@ jobs:
6464

6565
steps:
6666
- name: Checkout
67-
uses: actions/checkout@v4
67+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
6868

6969
- name: Validate Python lockfile
7070
shell: bash
@@ -80,7 +80,7 @@ jobs:
8080
echo "OK: $LOCKFILE is valid UTF-8 and contains no NUL bytes"
8181
8282
- name: Setup Python and dependencies
83-
uses: actions/setup-python@v5
83+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
8484
with:
8585
python-version: "3.12"
8686
cache: "pip"
@@ -119,7 +119,7 @@ jobs:
119119

120120
steps:
121121
- name: Checkout
122-
uses: actions/checkout@v4
122+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
123123

124124
- name: Install system dependencies
125125
run: |
@@ -141,14 +141,14 @@ jobs:
141141
echo "OK: $LOCKFILE is valid UTF-8 and contains no NUL bytes"
142142
143143
- name: Setup vcpkg
144-
uses: lukka/run-vcpkg@v11
144+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
145145
with:
146146
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
147147
doNotCache: false
148148

149149
- name: Install Python integration deps
150150
if: ${{ matrix.grpc_integration }}
151-
uses: actions/setup-python@v5
151+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
152152
with:
153153
python-version: "3.12"
154154
cache: "pip"
@@ -181,15 +181,15 @@ jobs:
181181

182182
steps:
183183
- name: Checkout
184-
uses: actions/checkout@v4
184+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
185185

186186
- name: Install system dependencies
187187
run: |
188188
sudo apt-get update
189189
sudo apt-get install -y ninja-build g++ python3
190190
191191
- name: Setup vcpkg
192-
uses: lukka/run-vcpkg@v11
192+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
193193
with:
194194
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
195195
doNotCache: false
@@ -207,7 +207,7 @@ jobs:
207207
echo "out_dir=$OUT_DIR" >> "$GITHUB_OUTPUT"
208208
209209
- name: Upload strict-dimensional artifacts
210-
uses: actions/upload-artifact@v4
210+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
211211
with:
212212
name: strict-dimensional-validation-${{ github.run_id }}-${{ github.run_attempt }}
213213
path: ${{ steps.dimensional.outputs.out_dir }}
@@ -219,10 +219,10 @@ jobs:
219219

220220
steps:
221221
- name: Checkout
222-
uses: actions/checkout@v4
222+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
223223

224224
- name: Setup vcpkg
225-
uses: lukka/run-vcpkg@v11
225+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
226226
with:
227227
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
228228
doNotCache: false
@@ -242,10 +242,10 @@ jobs:
242242

243243
steps:
244244
- name: Checkout
245-
uses: actions/checkout@v4
245+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
246246

247247
- name: Setup vcpkg
248-
uses: lukka/run-vcpkg@v11
248+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
249249
with:
250250
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
251251
doNotCache: false
@@ -265,15 +265,15 @@ jobs:
265265

266266
steps:
267267
- name: Checkout
268-
uses: actions/checkout@v4
268+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
269269

270270
- name: Install system dependencies
271271
run: |
272272
sudo apt-get update
273273
sudo apt-get install -y ninja-build g++ graphviz
274274
275275
- name: Setup vcpkg
276-
uses: lukka/run-vcpkg@v11
276+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
277277
with:
278278
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
279279
doNotCache: false
@@ -293,7 +293,7 @@ jobs:
293293
test -s "$OUT"
294294
295295
version-sync:
296-
uses: anolishq/.github/.github/workflows/version-sync.yml@main
296+
uses: anolishq/.github/.github/workflows/version-sync.yml@15f6901a9ef7e845841d371a64addb04b0f7755a # main
297297
with:
298298
python-version: '3.12'
299299
working-directory: '.'

.github/workflows/dimensional-validation-evidence.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -27,15 +27,15 @@ jobs:
2727

2828
steps:
2929
- name: Checkout
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3131

3232
- name: Install system dependencies
3333
run: |
3434
sudo apt-get update
3535
sudo apt-get install -y ninja-build g++ python3
3636
3737
- name: Setup vcpkg
38-
uses: lukka/run-vcpkg@v11
38+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
3939
with:
4040
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
4141
doNotCache: false
@@ -75,7 +75,7 @@ jobs:
7575
python3 scripts/run_dimensional_validation.py "${ARGS[@]}"
7676
7777
- name: Upload dimensional artifacts
78-
uses: actions/upload-artifact@v4
78+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
7979
with:
8080
name: dimensional-validation-evidence-linux-${{ github.run_id }}-${{ github.run_attempt }}
8181
path: ${{ steps.opts.outputs.out_dir }}

.github/workflows/docs.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,4 +19,4 @@ on:
1919

2020
jobs:
2121
check:
22-
uses: anolishq/.github/.github/workflows/docs-check.yml@v2
22+
uses: anolishq/.github/.github/workflows/docs-check.yml@bc164399678c8e0921a9c606b660bb4a16ad9e98 # v2

.github/workflows/metrics.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,4 +9,4 @@ on:
99

1010
jobs:
1111
collect:
12-
uses: anolishq/.github/.github/workflows/metrics.yml@v1
12+
uses: anolishq/.github/.github/workflows/metrics.yml@fa90acda2a76e1a81fb6266be94f50d7d2fb6fd0 # v1

.github/workflows/numerical-validation-evidence.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,16 +32,16 @@ jobs:
3232

3333
steps:
3434
- name: Checkout
35-
uses: actions/checkout@v4
35+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3636

3737
- name: Setup vcpkg
38-
uses: lukka/run-vcpkg@v11
38+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
3939
with:
4040
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
4141
doNotCache: false
4242

4343
- name: Setup Python
44-
uses: actions/setup-python@v5
44+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
4545
with:
4646
python-version: "3.12"
4747

@@ -91,7 +91,7 @@ jobs:
9191
python @args
9292
9393
- name: Upload validation artifacts
94-
uses: actions/upload-artifact@v4
94+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
9595
with:
9696
name: numerical-validation-evidence-windows-${{ github.run_id }}-${{ github.run_attempt }}
9797
path: ${{ steps.opts.outputs.validation_dir }}

.github/workflows/release.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ env:
1414
jobs:
1515
metrics:
1616
name: Collect metrics
17-
uses: anolishq/.github/.github/workflows/metrics.yml@v1
17+
uses: anolishq/.github/.github/workflows/metrics.yml@fa90acda2a76e1a81fb6266be94f50d7d2fb6fd0 # v1
1818
with:
1919
tag: ${{ github.ref_name }}
2020

@@ -23,7 +23,7 @@ jobs:
2323
runs-on: ubuntu-24.04
2424

2525
steps:
26-
- uses: actions/checkout@v4
26+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2727

2828
- name: Install system dependencies
2929
run: |
@@ -35,7 +35,7 @@ jobs:
3535
run: echo "version=${GITHUB_REF_NAME#v}" >> "$GITHUB_OUTPUT"
3636

3737
- name: Setup Python and dependencies
38-
uses: actions/setup-python@v5
38+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
3939
with:
4040
python-version: "3.12"
4141
cache: "pip"
@@ -47,7 +47,7 @@ jobs:
4747
python -m pip install -r requirements-lock.txt
4848
4949
- name: Setup vcpkg
50-
uses: lukka/run-vcpkg@v11
50+
uses: lukka/run-vcpkg@b1a0dd252f06b9e25b3c022a9a03bd7a427fb6a2 # v11.6
5151
with:
5252
vcpkgGitCommitId: ${{ env.VCPKG_COMMIT }}
5353
doNotCache: false
@@ -104,7 +104,7 @@ jobs:
104104
> manifest.json
105105
106106
- name: Create GitHub release
107-
uses: softprops/action-gh-release@v2
107+
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
108108
with:
109109
files: |
110110
fluxgraph-*.tar.gz
@@ -118,12 +118,12 @@ jobs:
118118
needs: [release-linux-x86_64, metrics]
119119
steps:
120120
- name: Download metrics artifact
121-
uses: actions/download-artifact@v4
121+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
122122
with:
123123
name: metrics-${{ github.event.repository.name }}-${{ github.run_number }}
124124
path: metrics-out/
125125

126126
- name: Upload metrics.json to release
127-
uses: softprops/action-gh-release@v2
127+
uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2
128128
with:
129129
files: metrics-out/metrics.json

0 commit comments

Comments
 (0)