Skip to content

Commit 95c63cb

Browse files
cthoytcthoyt
committed
Update and properly pin actions
Ran `pinact run --update`
1 parent 7ee4f89 commit 95c63cb

7 files changed

Lines changed: 26 additions & 26 deletions

File tree

‎.github/workflows/docker.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -8,17 +8,17 @@ jobs:
88
runs-on: ubuntu-latest
99
steps:
1010
- name: Set up QEMU
11-
uses: docker/setup-qemu-action@v1
11+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
1212
- name: Set up Docker Buildx
13-
uses: docker/setup-buildx-action@v1
13+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
1414
- name: Login to DockerHub
15-
uses: docker/login-action@v1
15+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
1616
with:
1717
username: ${{ secrets.DOCKERHUB_USERNAME }}
1818
password: ${{ secrets.DOCKERHUB_TOKEN }}
1919
- name: Build and push
2020
id: docker_build
21-
uses: docker/build-push-action@v2
21+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
2222
with:
2323
push: true
2424
# See: https://github.com/docker/build-push-action/blob/master/docs/advanced/multi-platform.md

‎.github/workflows/health.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
git config --local user.name "GitHub Action"
2525
git commit --all -m "🫀Health Report"
2626
- name: Push changes
27-
uses: ad-m/github-push-action@master
27+
uses: ad-m/github-push-action@77c5b412c50b723d2a4fbc6d71fb5723bcd439aa # v1.0.0
2828
with:
2929
github_token: ${{ secrets.GITHUB_TOKEN }}
3030
branch: ${{ github.ref }}

‎.github/workflows/new_prefix_pr.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ jobs:
1818
run: sleep 10
1919
- name: Check Issue Labels
2020
id: check_labels
21-
uses: actions/github-script@v6
21+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
2222
with:
2323
script: |
2424
const issue = context.payload.issue;
@@ -30,7 +30,7 @@ jobs:
3030
echo "Issue does not have 'New' and 'Prefix' labels. Ending workflow."
3131
exit 0
3232
- name: Set up Python ${{ matrix.python-version }}
33-
uses: actions/setup-python@v2
33+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
3434
with:
3535
python-version: ${{ matrix.python-version }}
3636
- name: Install dependencies
@@ -55,7 +55,7 @@ jobs:
5555
echo "::set-output name=branch_name::$branch_name"
5656
- name: Create Pull Request
5757
if: steps.check_labels.outputs.hasRequiredLabels == 'true'
58-
uses: peter-evans/create-pull-request@v3
58+
uses: peter-evans/create-pull-request@c0f553fe549906ede9cf27b5156039d195d2ece0 # v8.1.0
5959
with:
6060
branch: ${{ steps.create_branch.outputs.branch_name }}
6161
labels: New,Prefix

‎.github/workflows/paper_ranking.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -15,10 +15,10 @@ jobs:
1515

1616
steps:
1717
- name: Checkout repository
18-
uses: actions/checkout@v3
18+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1919

2020
- name: Set up Python
21-
uses: actions/setup-python@v3
21+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2222
with:
2323
python-version: "3.12"
2424

@@ -64,7 +64,7 @@ jobs:
6464

6565
- name: Find Existing Issue
6666
id: find-issue
67-
uses: actions/github-script@v6
67+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
6868
with:
6969
github-token: ${{ secrets.GITHUB_TOKEN }}
7070
script: |
@@ -79,7 +79,7 @@ jobs:
7979
8080
- name: Create or Update Issue with Comment
8181
id: create-or-update-issue
82-
uses: actions/github-script@v6
82+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
8383
with:
8484
github-token: ${{ secrets.GITHUB_TOKEN }}
8585
script: |

‎.github/workflows/tests.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
steps:
2323
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2424
- name: "Install uv"
25-
uses: "astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78" # v7.6.0
25+
uses: "astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57" # v8.0.0
2626
with:
2727
enable-cache: true
2828
cache-dependency-glob: "pyproject.toml"
@@ -47,7 +47,7 @@ jobs:
4747
steps:
4848
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4949
- name: "Install uv"
50-
uses: "astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78" # v7.6.0
50+
uses: "astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57" # v8.0.0
5151
with:
5252
enable-cache: true
5353
cache-dependency-glob: "pyproject.toml"
@@ -70,7 +70,7 @@ jobs:
7070
steps:
7171
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7272
- name: "Install uv"
73-
uses: "astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78" # v7.6.0
73+
uses: "astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57" # v8.0.0
7474
with:
7575
enable-cache: true
7676
cache-dependency-glob: "pyproject.toml"
@@ -93,7 +93,7 @@ jobs:
9393
run: uvx -p ${{ matrix.python-version }} --with tox-uv tox -e doctests
9494

9595
- name: Upload coverage report to codecov
96-
uses: codecov/codecov-action@1af58845a975a7985b0beb0cbe6fbbb71a41dbad # v5.5.3
96+
uses: codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v6.0.0
9797
if: success()
9898
with:
9999
file: coverage.xml

‎.github/workflows/update.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -8,13 +8,13 @@ jobs:
88
runs-on: ubuntu-latest
99
if: ${{ github.event_name != 'schedule' || github.repository == 'biopragmatics/bioregistry' }}
1010
steps:
11-
- uses: actions/checkout@master
11+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1212
with:
1313
persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
14-
fetch-depth: 0 # otherwise, you will failed to push refs to dest repo
15-
- uses: actions/setup-python@v2
14+
fetch-depth: 0 # otherwise, you will fail to push refs to dest repo
15+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1616
with:
17-
python-version: "3.12"
17+
python-version: "3.14"
1818
- name: Install dependencies
1919
run: |
2020
pip install tox tox-uv
@@ -79,7 +79,7 @@ jobs:
7979
tox -e bumpversion -- patch
8080
- name: Push changes
8181
if: steps.update.outputs.BR_UPDATED == 'true'
82-
uses: ad-m/github-push-action@master
82+
uses: ad-m/github-push-action@77c5b412c50b723d2a4fbc6d71fb5723bcd439aa # v1.0.0
8383
with:
8484
github_token: ${{ secrets.GITHUB_TOKEN }}
8585
branch: ${{ github.ref }}
@@ -95,20 +95,20 @@ jobs:
9595
############
9696
- name: Set up QEMU
9797
if: steps.update.outputs.BR_UPDATED == 'true'
98-
uses: docker/setup-qemu-action@v1
98+
uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0
9999
- name: Set up Docker Buildx
100100
if: steps.update.outputs.BR_UPDATED == 'true'
101-
uses: docker/setup-buildx-action@v1
101+
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
102102
- name: Login to DockerHub
103103
if: steps.update.outputs.BR_UPDATED == 'true'
104-
uses: docker/login-action@v1
104+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
105105
with:
106106
username: ${{ secrets.DOCKERHUB_USERNAME }}
107107
password: ${{ secrets.DOCKERHUB_TOKEN }}
108108
- name: Build and push
109109
if: steps.update.outputs.BR_UPDATED == 'true'
110110
id: docker_build
111-
uses: docker/build-push-action@v2
111+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
112112
with:
113113
push: true
114114
# See: https://github.com/docker/build-push-action/blob/master/docs/advanced/multi-platform.md

‎.github/workflows/update_prefix_cc.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ jobs:
77
build:
88
runs-on: ubuntu-latest
99
steps:
10-
- uses: actions/checkout@master
10+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1111
with:
1212
persist-credentials: false # otherwise, the token used is the GITHUB_TOKEN, instead of your personal token
1313
fetch-depth: 0 # otherwise, you will fail to push refs to dest repo

0 commit comments

Comments
 (0)