Skip to content

Commit 8b07b0c

Browse files
lhoupertlhoupert
committed
ci: pin GitHub Actions to SHA digests
Refs #1430
1 parent 9118a43 commit 8b07b0c

8 files changed

Lines changed: 96 additions & 96 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -15,15 +15,15 @@ jobs:
1515
name: Lint and Test
1616
runs-on: ubuntu-latest
1717
steps:
18-
- uses: actions/checkout@v4
18+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
1919
with:
2020
submodules: "recursive"
2121
- name: Install Rust
22-
uses: dtolnay/rust-toolchain@stable
22+
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
2323
with:
2424
components: rustfmt, clippy
25-
- uses: Swatinem/rust-cache@v2
26-
- uses: prefix-dev/setup-pixi@v0.8.1
25+
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
26+
- uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
2727
with:
2828
activate-environment: true
2929
cache: true
@@ -44,11 +44,11 @@ jobs:
4444
name: Fmt
4545
runs-on: ubuntu-latest
4646
steps:
47-
- uses: actions/checkout@v4
47+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
4848
with:
4949
submodules: "recursive"
5050
- name: Install Rust
51-
uses: dtolnay/rust-toolchain@master
51+
uses: dtolnay/rust-toolchain@3c5f7ea28cd621ae0bf5283f0e981fb97b8a7af9 # master
5252
with:
5353
toolchain: nightly-2025-05-14
5454
components: rustfmt
@@ -59,11 +59,11 @@ jobs:
5959
name: Lint and Test
6060
runs-on: ubuntu-latest
6161
steps:
62-
- uses: actions/checkout@v4
62+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
6363
with:
6464
submodules: "recursive"
6565
- name: Install Rust
66-
uses: dtolnay/rust-toolchain@stable
66+
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
6767

6868
# TODO: switch back to pixi environment
6969
- name: Install GEOS
@@ -99,12 +99,12 @@ jobs:
9999
# - "-F geos"
100100
# - "-F proj"
101101
# steps:
102-
# - uses: actions/checkout@v4
102+
# - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
103103
# with:
104104
# submodules: "recursive"
105-
# - uses: dtolnay/rust-toolchain@stable
106-
# - uses: Swatinem/rust-cache@v2
107-
# - uses: prefix-dev/setup-pixi@v0.8.1
105+
# - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
106+
# - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
107+
# - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
108108
# with:
109109
# activate-environment: true
110110
# cache: true
@@ -121,12 +121,12 @@ jobs:
121121
# build-benchmarks:
122122
# runs-on: ubuntu-latest
123123
# steps:
124-
# - uses: actions/checkout@v4
124+
# - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
125125
# with:
126126
# submodules: "recursive"
127-
# - uses: dtolnay/rust-toolchain@stable
128-
# - uses: Swatinem/rust-cache@v2
129-
# - uses: prefix-dev/setup-pixi@v0.8.1
127+
# - uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
128+
# - uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
129+
# - uses: prefix-dev/setup-pixi@ba3bb36eb2066252b2363392b7739741bb777659 # v0.8.1
130130
# with:
131131
# activate-environment: true
132132
# cache: true

‎.github/workflows/conventional-commits.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,6 @@ jobs:
99
runs-on: ubuntu-latest
1010
steps:
1111
- name: PR Conventional Commit Validation
12-
uses: ytanikin/pr-conventional-commits@1.4.0
12+
uses: ytanikin/pr-conventional-commits@6ac1cea04190fc076b0e539025501d7e7d241ac1 # 1.4.0
1313
with:
1414
task_types: '["feat","fix","docs","test","ci","refactor","perf","chore","revert"]'

‎.github/workflows/python-core-wheels.yml‎

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -39,19 +39,19 @@ jobs:
3939
- geoarrow-core
4040
- geoarrow-compute
4141
steps:
42-
- uses: actions/checkout@v4
43-
- uses: actions/setup-python@v5
42+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
43+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
4444
with:
4545
python-version: 3.x
4646
- name: Build wheels
47-
uses: PyO3/maturin-action@v1
47+
uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1
4848
with:
4949
target: ${{ matrix.platform.target }}
5050
args: --release --out dist -i 3.9 -i 3.10 -i 3.11 -i 3.12 -i 3.13 -i 3.14 --manifest-path python/${{ matrix.module }}/Cargo.toml
5151
sccache: "true"
5252
manylinux: auto
5353
- name: Upload wheels
54-
uses: actions/upload-artifact@v4
54+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
5555
with:
5656
name: wheels-linux-${{ matrix.platform.target }}-${{ matrix.module }}
5757
path: dist
@@ -74,19 +74,19 @@ jobs:
7474
# - geoarrow-core
7575
# - geoarrow-compute
7676
# steps:
77-
# - uses: actions/checkout@v4
78-
# - uses: actions/setup-python@v5
77+
# - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
78+
# - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
7979
# with:
8080
# python-version: 3.x
8181
# - name: Build wheels
82-
# uses: PyO3/maturin-action@v1
82+
# uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1
8383
# with:
8484
# target: ${{ matrix.platform.target }}
8585
# args: --release --out dist -i 3.9 -i 3.10 -i 3.11 -i 3.12 -i 3.13 -i 3.14 --manifest-path python/${{ matrix.module }}/Cargo.toml
8686
# sccache: "true"
8787
# manylinux: musllinux_1_2
8888
# - name: Upload wheels
89-
# uses: actions/upload-artifact@v4
89+
# uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
9090
# with:
9191
# name: wheels-musllinux-${{ matrix.platform.target }}-${{ matrix.module }}
9292
# path: dist
@@ -102,19 +102,19 @@ jobs:
102102
- geoarrow-core
103103
- geoarrow-compute
104104
steps:
105-
- uses: actions/checkout@v4
106-
- uses: actions/setup-python@v5
105+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
106+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
107107
with:
108108
python-version: 3.x
109109
architecture: ${{ matrix.platform.target }}
110110
- name: Build wheels
111-
uses: PyO3/maturin-action@v1
111+
uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1
112112
with:
113113
target: ${{ matrix.platform.target }}
114114
args: --release --out dist -i 3.9 -i 3.10 -i 3.11 -i 3.12 -i 3.13 -i 3.14 --manifest-path python/${{ matrix.module }}/Cargo.toml
115115
sccache: "true"
116116
- name: Upload wheels
117-
uses: actions/upload-artifact@v4
117+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
118118
with:
119119
name: wheels-windows-${{ matrix.platform.target }}-${{ matrix.module }}
120120
path: dist
@@ -132,18 +132,18 @@ jobs:
132132
- geoarrow-core
133133
- geoarrow-compute
134134
steps:
135-
- uses: actions/checkout@v4
136-
- uses: actions/setup-python@v5
135+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
136+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
137137
with:
138138
python-version: 3.x
139139
- name: Build wheels
140-
uses: PyO3/maturin-action@v1
140+
uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1
141141
with:
142142
target: ${{ matrix.platform.target }}
143143
args: --release --out dist -i 3.9 -i 3.10 -i 3.11 -i 3.12 -i 3.13 -i 3.14 --manifest-path python/${{ matrix.module }}/Cargo.toml
144144
sccache: "true"
145145
- name: Upload wheels
146-
uses: actions/upload-artifact@v4
146+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
147147
with:
148148
name: wheels-macos-${{ matrix.platform.target }}-${{ matrix.module }}
149149
path: dist
@@ -159,7 +159,7 @@ jobs:
159159
# - geoarrow-core
160160
# - geoarrow-compute
161161
# steps:
162-
# - uses: actions/checkout@v4
162+
# - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
163163
# - run: pip install pyodide-build
164164
# - name: Get Emscripten and Python version info
165165
# shell: bash
@@ -171,34 +171,34 @@ jobs:
171171
# with:
172172
# version: ${{ env.EMSCRIPTEN_VERSION }}
173173
# actions-cache-folder: emsdk-cache
174-
# - uses: actions/setup-python@v5
174+
# - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
175175
# with:
176176
# python-version: ${{ env.PYTHON_VERSION }}
177177
# - run: pip install pyodide-build
178178
# - name: Build wheels
179-
# uses: PyO3/maturin-action@v1
179+
# uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1
180180
# with:
181181
# rust-toolchain: nightly
182182
# target: ${{ matrix.platform.target }}
183183
# args: --release --out dist -i 3.9 -i 3.10 -i 3.11 -i 3.12 -i 3.13 -i 3.14 --no-default-features --manifest-path python/${{ matrix.module }}/Cargo.toml
184184
# sccache: "true"
185185
# - name: Upload wheels
186-
# uses: actions/upload-artifact@v4
186+
# uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
187187
# with:
188188
# name: wasm-wheels-${{ matrix.module }}
189189
# path: dist
190190

191191
# sdist:
192192
# runs-on: ubuntu-latest
193193
# steps:
194-
# - uses: actions/checkout@v4
194+
# - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
195195
# - name: Build sdist
196-
# uses: PyO3/maturin-action@v1
196+
# uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1
197197
# with:
198198
# command: sdist
199199
# args: --out dist --manifest-path python/${{ matrix.module }}/Cargo.toml
200200
# - name: Upload sdist
201-
# uses: actions/upload-artifact@v4
201+
# uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
202202
# with:
203203
# name: wheels-sdist
204204
# path: dist
@@ -212,9 +212,9 @@ jobs:
212212
# Used to upload release artifacts
213213
contents: write
214214
steps:
215-
- uses: actions/download-artifact@v4
215+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
216216
- name: Publish to PyPI
217-
uses: PyO3/maturin-action@v1
217+
uses: PyO3/maturin-action@04ac600d27cdf7a9a280dadf7147097c42b757ad # v1
218218
env:
219219
MATURIN_PYPI_TOKEN: ${{ secrets.PYPI_API_TOKEN }}
220220
with:

‎.github/workflows/python-docs.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,24 +20,24 @@ jobs:
2020
run:
2121
working-directory: python
2222
steps:
23-
- uses: actions/checkout@v4
23+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2424
# We need to additionally fetch the gh-pages branch for mike deploy
2525
with:
2626
fetch-depth: 0
2727

2828
- name: Install Rust
29-
uses: dtolnay/rust-toolchain@stable
29+
uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable
3030

31-
- uses: Swatinem/rust-cache@v2
31+
- uses: Swatinem/rust-cache@e18b497796c12c097a38f9edb9d0641fb99eee32 # v2
3232

3333
- name: Set up Python 3.11
3434
id: setup-python
35-
uses: actions/setup-python@v4
35+
uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
3636
with:
3737
python-version: "3.11"
3838

3939
- name: Install a specific version of uv
40-
uses: astral-sh/setup-uv@v6
40+
uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6
4141
with:
4242
enable-cache: true
4343
version: "0.8.x"

0 commit comments

Comments
 (0)