From 60a70cf9fafe23211716468cf5e589f7d44690cf Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 31 Mar 2026 12:08:06 +0000 Subject: [PATCH] chore(deps): pin dependencies Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/add-remove-labels.yml | 6 +++--- .github/workflows/add-welcome-comment-set-assignee.yml | 4 ++-- .github/workflows/build-push-container-on-merge.yml | 6 +++--- .github/workflows/cherry-pick-comment.yml | 4 ++-- .github/workflows/close-stale-issues.yml | 2 +- .github/workflows/labeler.yml | 4 ++-- .github/workflows/on-review-add-label.yml | 8 ++++---- .github/workflows/push-container-on-comment.yml | 8 ++++---- .github/workflows/size-labeler.yml | 4 ++-- .github/workflows/tox-tests.yml | 4 ++-- .github/workflows/verify_build_container.yml | 2 +- .github/workflows/workflow-review.yml | 2 +- 12 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/add-remove-labels.yml b/.github/workflows/add-remove-labels.yml index 19720a818..6ed7acc5b 100644 --- a/.github/workflows/add-remove-labels.yml +++ b/.github/workflows/add-remove-labels.yml @@ -26,7 +26,7 @@ jobs: steps: - name: Acknowledge the request with thumbs up reaction if: ${{ github.event.comment }} - uses: peter-evans/create-or-update-comment@v5 + uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5 with: comment-id: ${{ github.event.comment.id }} reactions: '+1' @@ -35,10 +35,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 - name: Run add remove labels env: diff --git a/.github/workflows/add-welcome-comment-set-assignee.yml b/.github/workflows/add-welcome-comment-set-assignee.yml index 8afe4d4d8..61070e0b1 100644 --- a/.github/workflows/add-welcome-comment-set-assignee.yml +++ b/.github/workflows/add-welcome-comment-set-assignee.yml @@ -12,10 +12,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 - name: Run add welcome comment env: diff --git a/.github/workflows/build-push-container-on-merge.yml b/.github/workflows/build-push-container-on-merge.yml index cd5764933..3c8905c29 100644 --- a/.github/workflows/build-push-container-on-merge.yml +++ b/.github/workflows/build-push-container-on-merge.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: ref: ${{ github.event.pull_request.base.ref }} - name: Set env TAG @@ -27,7 +27,7 @@ jobs: fi - name: Build Image id: build-image - uses: redhat-actions/buildah-build@v2 + uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2 with: image: opendatahub-tests tags: ${{ env.TAG }} @@ -36,7 +36,7 @@ jobs: - name: Push To Image Registry id: push-to-registry - uses: redhat-actions/push-to-registry@v2 + uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2 with: image: ${{ steps.build-image.outputs.image }} tags: ${{ steps.build-image.outputs.tags }} diff --git a/.github/workflows/cherry-pick-comment.yml b/.github/workflows/cherry-pick-comment.yml index 7844ca6a3..b5ab1d9f9 100644 --- a/.github/workflows/cherry-pick-comment.yml +++ b/.github/workflows/cherry-pick-comment.yml @@ -15,11 +15,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout the latest code - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: token: ${{ secrets.RHODS_CI_BOT_PAT }} fetch-depth: 0 # otherwise, you will fail to push refs to dest repo - name: Automatic Cherry Pick - uses: dbasunag/cherry-pick-pr@master + uses: dbasunag/cherry-pick-pr@1b63443cdf4944d11e58dcd835e6514b88680bef # master env: GITHUB_TOKEN: ${{ secrets.RHODS_CI_BOT_PAT }} diff --git a/.github/workflows/close-stale-issues.yml b/.github/workflows/close-stale-issues.yml index c7f966492..def38a9b1 100644 --- a/.github/workflows/close-stale-issues.yml +++ b/.github/workflows/close-stale-issues.yml @@ -7,7 +7,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v10 + - uses: actions/stale@b5d41d4e1d5dceea10e7104786b73624c18a190f # v10 with: stale-issue-message: 'This issue is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days.' days-before-stale: 60 diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml index 106e8eab8..ba0be55fd 100644 --- a/.github/workflows/labeler.yml +++ b/.github/workflows/labeler.yml @@ -9,5 +9,5 @@ jobs: pull-requests: write runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/labeler@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6 diff --git a/.github/workflows/on-review-add-label.yml b/.github/workflows/on-review-add-label.yml index fdc16522c..2ff42fcc8 100644 --- a/.github/workflows/on-review-add-label.yml +++ b/.github/workflows/on-review-add-label.yml @@ -22,7 +22,7 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Download artifact' - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 with: script: | let allArtifacts = await github.rest.actions.listWorkflowRunArtifacts({ @@ -48,7 +48,7 @@ jobs: - name: 'Unzip artifact' run: unzip context.zip - name: 'Return Parsed JSON' - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8 id: return-parsed-json with: script: | @@ -79,10 +79,10 @@ jobs: echo "REVIEW_COMMENT_BODY=${{ needs.download_context_artifact.outputs.review_comment_body }}" >> "$GITHUB_ENV" echo "GITHUB_USER_LOGIN=${{ needs.download_context_artifact.outputs.user_login }}" >> "$GITHUB_ENV" echo "ACTION=${{ needs.download_context_artifact.outputs.action }}" >> "$GITHUB_ENV" - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 - name: 'Run add-remove-labels action' env: GITHUB_TOKEN: ${{ secrets.RHODS_CI_BOT_PAT }} diff --git a/.github/workflows/push-container-on-comment.yml b/.github/workflows/push-container-on-comment.yml index 30e5fd690..54ebdea39 100644 --- a/.github/workflows/push-container-on-comment.yml +++ b/.github/workflows/push-container-on-comment.yml @@ -15,11 +15,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout pull request - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: ref: refs/pull/${{ github.event.issue.number }}/head - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 - name: Check if the user is authorized env: @@ -38,7 +38,7 @@ jobs: echo "TAG=pr-${{ github.event.issue.number }}" >> "$GITHUB_ENV" - name: Build Image to push id: build-image - uses: redhat-actions/buildah-build@v2 + uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2 with: image: opendatahub-tests tags: ${{ env.TAG }} @@ -46,7 +46,7 @@ jobs: ./Dockerfile - name: Push To Image Registry id: push-to-registry - uses: redhat-actions/push-to-registry@v2 + uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2 with: image: ${{ steps.build-image.outputs.image }} tags: ${{ steps.build-image.outputs.tags }} diff --git a/.github/workflows/size-labeler.yml b/.github/workflows/size-labeler.yml index 176d574ac..cf25cb884 100644 --- a/.github/workflows/size-labeler.yml +++ b/.github/workflows/size-labeler.yml @@ -16,10 +16,10 @@ jobs: cancel-in-progress: true steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 - name: Run size labeler env: diff --git a/.github/workflows/tox-tests.yml b/.github/workflows/tox-tests.yml index c78065604..4e16cac19 100644 --- a/.github/workflows/tox-tests.yml +++ b/.github/workflows/tox-tests.yml @@ -13,10 +13,10 @@ jobs: cancel-in-progress: true steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 - name: Install tox-uv run: | diff --git a/.github/workflows/verify_build_container.yml b/.github/workflows/verify_build_container.yml index 52687e2d3..1dcfdd709 100644 --- a/.github/workflows/verify_build_container.yml +++ b/.github/workflows/verify_build_container.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Checkout Pull Request Branch - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: ref: ${{ github.event.pull_request.head.sha }} diff --git a/.github/workflows/workflow-review.yml b/.github/workflows/workflow-review.yml index f298d46b0..654249f82 100644 --- a/.github/workflows/workflow-review.yml +++ b/.github/workflows/workflow-review.yml @@ -44,7 +44,7 @@ jobs: user_login: $user_login, action: $action }' >> context.json - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 with: name: context.json path: ./