Skip to content

Commit 12f4a2b

Browse files
panvapanva
committed
ci: pin GHA dependencies
1 parent d4ee992 commit 12f4a2b

File tree

4 files changed

+46
-36
lines changed

4 files changed

+46
-36
lines changed

‎.github/dependabot.yml‎

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,10 @@
1+
version: 2
2+
updates:
3+
- package-ecosystem: "github-actions"
4+
directory: "/"
5+
schedule:
6+
interval: "monthly"
7+
groups:
8+
actions:
9+
patterns:
10+
- "*"

‎.github/workflows/conformance.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -79,9 +79,9 @@ jobs:
7979

8080
steps:
8181
- name: Checkout
82-
uses: actions/checkout@v4
82+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
8383
- name: Load Cached Conformance Suite Build
84-
uses: actions/cache@v4
84+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
8585
id: cache
8686
with:
8787
path: ./conformance-suite
@@ -95,7 +95,7 @@ jobs:
9595
docker compose -f docker-compose-dev.yml up -d
9696
while ! curl -skfail https://localhost.emobix.co.uk:8443/api/runner/available >/dev/null; do sleep 2; done
9797
- name: Setup node
98-
uses: actions/setup-node@v4
98+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
9999
with:
100100
node-version: lts/*
101101
cache: 'npm'
@@ -119,7 +119,7 @@ jobs:
119119
sudo rm -rf mongo
120120
- name: Upload test artifacts
121121
id: artifact-upload-step
122-
uses: actions/upload-artifact@v4
122+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
123123
with:
124124
path: |
125125
*.zip

‎.github/workflows/release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,11 @@ jobs:
1414
id-token: write
1515
steps:
1616
- name: Checkout
17-
uses: actions/checkout@v4
17+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
1818
with:
1919
fetch-depth: 0
2020
- name: Setup node
21-
uses: actions/setup-node@v4
21+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
2222
with:
2323
node-version: lts/*
2424
registry-url: https://registry.npmjs.org
@@ -30,7 +30,7 @@ jobs:
3030
contents: read
3131
id-token: write
3232
steps:
33-
- uses: actions/checkout@v4
33+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
3434
with:
3535
fetch-depth: 0
3636
- run: npx jsr publish
@@ -44,7 +44,7 @@ jobs:
4444
contents: write
4545
steps:
4646
- name: Checkout
47-
uses: actions/checkout@v4
47+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
4848
with:
4949
fetch-depth: 0
5050
- run: git push origin $GITHUB_SHA:v3.x
@@ -65,11 +65,11 @@ jobs:
6565
discussions: write
6666
steps:
6767
- name: Checkout
68-
uses: actions/checkout@v4
68+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
6969
with:
7070
fetch-depth: 2
7171
- name: Setup node
72-
uses: actions/setup-node@v4
72+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
7373
with:
7474
node-version: lts/*
7575
cache: 'npm'

‎.github/workflows/test.yml‎

Lines changed: 26 additions & 26 deletions
Original file line numberDiff line numberDiff line change
@@ -16,9 +16,9 @@ jobs:
1616
runs-on: ubuntu-latest
1717
steps:
1818
- name: Checkout
19-
uses: actions/checkout@v4
19+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
2020
- name: Setup node
21-
uses: actions/setup-node@v4
21+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
2222
with:
2323
node-version: lts/*
2424
cache: 'npm'
@@ -29,9 +29,9 @@ jobs:
2929
runs-on: ubuntu-latest
3030
steps:
3131
- name: Checkout
32-
uses: actions/checkout@v4
32+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
3333
- name: Setup node
34-
uses: actions/setup-node@v4
34+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
3535
with:
3636
node-version: lts/*
3737
cache: 'npm'
@@ -47,14 +47,14 @@ jobs:
4747
- format
4848
steps:
4949
- name: Checkout
50-
uses: actions/checkout@v4
50+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
5151
- name: Setup node
52-
uses: actions/setup-node@v4
52+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
5353
with:
5454
node-version: lts/*
5555
cache: 'npm'
5656
- run: npm clean-install
57-
- uses: r-lib/actions/setup-pandoc@v2
57+
- uses: r-lib/actions/setup-pandoc@6f6e5bc62fba3a704f74e7ad7ef7676c5c6a2590 # v2.11.4
5858
with:
5959
pandoc-version: latest
6060
- run: npm run build
@@ -80,9 +80,9 @@ jobs:
8080
runs-on: ubuntu-latest
8181
steps:
8282
- name: Checkout
83-
uses: actions/checkout@v4
83+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
8484
- name: Setup node
85-
uses: actions/setup-node@v4
85+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
8686
with:
8787
node-version: ${{ matrix.node-version }}
8888
cache: 'npm'
@@ -93,7 +93,7 @@ jobs:
9393
- name: Upload server logs
9494
if: ${{ failure() && matrix.suite == 'tap:node' }}
9595
id: artifact-upload-step
96-
uses: actions/upload-artifact@v4
96+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
9797
with:
9898
path: server.log
9999
name: node idx(${{ strategy.job-index }}) server log
@@ -105,9 +105,9 @@ jobs:
105105
runs-on: macos-15
106106
steps:
107107
- name: Checkout
108-
uses: actions/checkout@v4
108+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
109109
- name: Setup node
110-
uses: actions/setup-node@v4
110+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
111111
with:
112112
node-version: lts/*
113113
cache: 'npm'
@@ -118,7 +118,7 @@ jobs:
118118
- name: Upload server logs
119119
if: ${{ failure() }}
120120
id: artifact-upload-step
121-
uses: actions/upload-artifact@v4
121+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
122122
with:
123123
path: server.log
124124
name: electron server log
@@ -130,12 +130,12 @@ jobs:
130130
runs-on: ubuntu-latest
131131
steps:
132132
- name: Checkout
133-
uses: actions/checkout@v4
134-
- uses: denoland/setup-deno@v2
133+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
134+
- uses: denoland/setup-deno@e95548e56dfa95d4e1a28d6f422fafe75c4c26fb # v2.0.3
135135
with:
136136
deno-version: latest
137137
- name: Setup node
138-
uses: actions/setup-node@v4
138+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
139139
with:
140140
node-version: lts/*
141141
cache: 'npm'
@@ -147,7 +147,7 @@ jobs:
147147
- name: Upload server logs
148148
if: ${{ failure() }}
149149
id: artifact-upload-step
150-
uses: actions/upload-artifact@v4
150+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
151151
with:
152152
path: server.log
153153
name: deno server log
@@ -159,9 +159,9 @@ jobs:
159159
runs-on: ubuntu-latest
160160
steps:
161161
- name: Checkout
162-
uses: actions/checkout@v4
162+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
163163
- name: Setup node
164-
uses: actions/setup-node@v4
164+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
165165
with:
166166
node-version: lts/*
167167
cache: 'npm'
@@ -177,12 +177,12 @@ jobs:
177177
runs-on: ubuntu-latest
178178
steps:
179179
- name: Checkout
180-
uses: actions/checkout@v4
181-
- uses: oven-sh/setup-bun@v2
180+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
181+
- uses: oven-sh/setup-bun@735343b667d3e6f658f44d0eca948eb6282f2b76 # v2.0.2
182182
with:
183183
bun-version: latest
184184
- name: Setup node
185-
uses: actions/setup-node@v4
185+
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
186186
with:
187187
node-version: lts/*
188188
cache: 'npm'
@@ -192,7 +192,7 @@ jobs:
192192
- name: Upload server logs
193193
if: ${{ failure() }}
194194
id: artifact-upload-step
195-
uses: actions/upload-artifact@v4
195+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
196196
with:
197197
path: server.log
198198
name: bun server log
@@ -219,9 +219,9 @@ jobs:
219219
# id: safari
220220
# steps:
221221
# - name: Checkout
222-
# uses: actions/checkout@v4
222+
# uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
223223
# - name: Setup node
224-
# uses: actions/setup-node@v4
224+
# uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
225225
# with:
226226
# node-version: lts/*
227227
# cache: 'npm'
@@ -239,7 +239,7 @@ jobs:
239239
# - name: Upload server logs
240240
# if: ${{ failure() }}
241241
# id: artifact-upload-step
242-
# uses: actions/upload-artifact@v4
242+
# uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
243243
# with:
244244
# path: server.log
245245
# name: ${{ matrix.browser.name }} server log

0 commit comments

Comments
 (0)