Merge pull request #3 from canonical/renovate/auto-github-actions

nsklikas · web-flow · commit 724d78d0bb2a · 2025-07-15T15:28:41.000+02:00
chore(deps): pin dependencies
diff --git a/.github/workflows/_charm-build.yaml b/.github/workflows/_charm-build.yaml
@@ -40,7 +40,7 @@ jobs:
         with:
           fetch-depth: 0
       - name: Setup lxd
-        uses: canonical/setup-lxd@v0.1.2
+        uses: canonical/setup-lxd@54a5806e490d92e207b57183cf111ed54bbdeff4 # v0.1.2
         with:
           channel: latest/stable
       - name: Install charmcraft
@@ -67,7 +67,7 @@ jobs:
           echo charm-paths=$(echo '${{ steps.get-charm-info.outputs.charm-platforms }}' | jq -r --arg charm ${{ steps.get-charm-info.outputs.charm-name }} '.[] |= split(":") | .[] |= join("-", .) | map($charm + "_" + . + ".charm") | join(",")') >> $GITHUB_OUTPUT
       - id: artifact-name
         run: echo artifact='${{ github.sha }}-${{ github.job }}' >> $GITHUB_OUTPUT
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.artifact-name.outputs.artifact }}
           path: ${{ github.workspace }}/*.charm
diff --git a/.github/workflows/_charm-linting.yaml b/.github/workflows/_charm-linting.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 1
 
diff --git a/.github/workflows/_charm-release.yaml b/.github/workflows/_charm-release.yaml
@@ -12,16 +12,16 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
       - name: Select CharmHub channel
-        uses: canonical/charming-actions/channel@2.4.0
+        uses: canonical/charming-actions/channel@1753e0803f70445132e92acd45c905aba6473225 # 2.7.0
         id: channel
 
       - name: Release charm to CharmHub
-        uses: canonical/charming-actions/upload-charm@2.4.0
+        uses: canonical/charming-actions/upload-charm@1753e0803f70445132e92acd45c905aba6473225 # 2.7.0
         env:
           CHANNEL: ${{ steps.channel.outputs.name }}
         with:
diff --git a/.github/workflows/_charm-tests-integration.yaml b/.github/workflows/_charm-tests-integration.yaml
@@ -50,7 +50,7 @@ jobs:
       - node-size-validation
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Setup operator environment (microk8s)
         uses: charmed-kubernetes/actions-operator@main
@@ -69,7 +69,7 @@ jobs:
         run: echo "CHARM_PATH=${{ github.workspace }}/${{ needs.build.outputs.charm-paths }}" >> $GITHUB_ENV
 
       - name: Download charm artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: ${{ github.sha }}-build
 
diff --git a/.github/workflows/_charm-tests-unit.yaml b/.github/workflows/_charm-tests-unit.yaml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install dependencies
         run: python -m pip install tox
diff --git a/.github/workflows/_rock-build.yaml b/.github/workflows/_rock-build.yaml
@@ -22,7 +22,7 @@ jobs:
       rock: ${{ steps.rockcraft.outputs.rock }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - uses: canonical/craft-actions/rockcraft-pack@main
         id: rockcraft
@@ -54,13 +54,13 @@ jobs:
           syft ${{ steps.rockcraft.outputs.rock }} -o spdx-json=${{ steps.rockcraft.outputs.rock }}.sbom.json
 
       - name: Upload SBOMs
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.rockcraft.outputs.rock }}-sbom
           path: "${{ steps.rockcraft.outputs.rock }}.sbom.json"
 
       - name: Upload rock
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
         with:
           name: ${{ steps.rockcraft.outputs.rock }}
           path: ${{ steps.rockcraft.outputs.rock }}
diff --git a/.github/workflows/_rock-gh-publish.yaml b/.github/workflows/_rock-gh-publish.yaml
@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Download Artifact
-        uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: ${{ inputs.rock }}
 
diff --git a/.github/workflows/_rock-linting.yaml b/.github/workflows/_rock-linting.yaml
@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Install yamllint
         run: |
diff --git a/.github/workflows/_rock-oci-publish.yaml b/.github/workflows/_rock-oci-publish.yaml
@@ -39,7 +39,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
       - name: Golang setup
-        uses: actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
         with:
           go-version: ">=1.22.0"
       # install oci-factory via golang and set path in environment
diff --git a/.github/workflows/_rock-scan.yaml b/.github/workflows/_rock-scan.yaml
@@ -20,6 +20,6 @@ jobs:
           output: 'trivy-results.sarif'
 
       - name: Upload scan results to GitHub
-        uses: github/codeql-action/upload-sarif@fc7e4a0fa01c3cca5fd6a1fddec5c0740c977aa2 # v3
+        uses: github/codeql-action/upload-sarif@181d5eefc20863364f96762470ba6f862bdef56b # v3
         with:
           sarif_file: 'trivy-results.sarif'
diff --git a/.github/workflows/_secscan.yaml b/.github/workflows/_secscan.yaml
@@ -39,7 +39,7 @@ jobs:
           sudo snap install canonical-secscan-client
           sudo snap connect canonical-secscan-client:home system:home
       - name: Download artifact
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: ${{ inputs.artifacts-key }}
       - name: Run secscan
diff --git a/.github/workflows/charm-deploy.yaml b/.github/workflows/charm-deploy.yaml
@@ -42,8 +42,8 @@ jobs:
     name: Deploy
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@v4
-      - uses: hashicorp/setup-terraform@v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+      - uses: hashicorp/setup-terraform@b9cd54a3c349d3f38e8881555d616ced269862dd # v3
         with:
           terraform_wrapper: false
       - name: "Set environment to configure provider"
diff --git a/.github/workflows/charm-libs-release.yaml b/.github/workflows/charm-libs-release.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/charm-libs-update.yaml b/.github/workflows/charm-libs-update.yaml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           fetch-depth: 0
 
diff --git a/.github/workflows/charm-promotion.yaml b/.github/workflows/charm-promotion.yaml
@@ -31,10 +31,10 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Promote charm to channel
-        uses: canonical/charming-actions/promote-charm@2.7.0
+        uses: canonical/charming-actions/promote-charm@1753e0803f70445132e92acd45c905aba6473225 # 2.7.0
         with:
           credentials: ${{ secrets.CHARMCRAFT_CREDENTIALS }}
           origin-channel: ${{ inputs.origin-channel }}
diff --git a/.github/workflows/charm-publish.yaml b/.github/workflows/charm-publish.yaml
@@ -85,7 +85,7 @@ jobs:
           destination_channel="${{ inputs.destination_channel || needs.check.outputs.channel }}"
           echo "setting output of destination_channel=$destination_channel"
           echo "destination_channel=$destination_channel" >> $GITHUB_OUTPUT
-      - uses: actions/download-artifact@v4
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
         with:
           name: ${{ needs.build.outputs.artifacts-key }}
       - name: Upload charm to charmhub
diff --git a/.github/workflows/charm-release.yaml b/.github/workflows/charm-release.yaml
@@ -14,7 +14,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@a02a34c4d625f9be7cb89156071d8567266a2445 # v4
         id: release
         with:   
           token: ${{ secrets.PAT_TOKEN }}
diff --git a/.github/workflows/oci-update-pr.yaml b/.github/workflows/oci-update-pr.yaml
@@ -49,7 +49,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
         with:
           ref: ${{ inputs.base-branch }}
           repository: ${{ inputs.repository }}
diff --git a/.github/workflows/pr-auto-approval.yaml b/.github/workflows/pr-auto-approval.yaml
@@ -18,7 +18,7 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
 
       - name: Approve pull request
         run: |
diff --git a/.github/workflows/release-please.yaml b/.github/workflows/release-please.yaml
@@ -13,7 +13,7 @@ jobs:
   release-please:
     runs-on: ubuntu-latest
     steps:
-      - uses: googleapis/release-please-action@v4
+      - uses: googleapis/release-please-action@a02a34c4d625f9be7cb89156071d8567266a2445 # v4
         with:
           target-branch: main
           config-file: release-please-config.json
