From 0c380e3982b4564b020d133bcd7865d8df2ab5ee Mon Sep 17 00:00:00 2001 From: Alexandr Garbuzov Date: Fri, 21 Jul 2023 12:55:56 +0300 Subject: [PATCH] CI: dependencies pinned by hashes (#2915) --- .github/workflows/deploy-prep.yml | 4 ++-- .github/workflows/e2e-test.yml | 4 ++-- .github/workflows/empty-issues-closer.yaml | 4 ++-- .github/workflows/generate-theme-doc.yml | 4 ++-- .github/workflows/label-pr.yml | 2 +- .github/workflows/preview-theme.yml | 6 +++--- .github/workflows/prs-cache-clean.yml | 2 +- .github/workflows/stale-theme-pr-closer.yaml | 6 +++--- .github/workflows/test.yml | 6 +++--- .github/workflows/top-issues-dashboard.yml | 2 +- .github/workflows/update-langs.yaml | 6 +++--- 11 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/deploy-prep.yml b/.github/workflows/deploy-prep.yml index 0626e13..7e34f19 100644 --- a/.github/workflows/deploy-prep.yml +++ b/.github/workflows/deploy-prep.yml @@ -10,10 +10,10 @@ jobs: if: github.repository == 'anuraghazra/github-readme-stats' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Deployment Prep run: python ./.github/workflows/deploy-prep.py - - uses: stefanzweifel/git-auto-commit-action@v4 + - uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a # v4.16.0 with: branch: vercel create_branch: true diff --git a/.github/workflows/e2e-test.yml b/.github/workflows/e2e-test.yml index 6eb6764..0571625 100644 --- a/.github/workflows/e2e-test.yml +++ b/.github/workflows/e2e-test.yml @@ -17,10 +17,10 @@ jobs: node-version: [18.x] steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 with: node-version: ${{ matrix.node-version }} cache: npm diff --git a/.github/workflows/empty-issues-closer.yaml b/.github/workflows/empty-issues-closer.yaml index 3f7a6bc..44babaf 100644 --- a/.github/workflows/empty-issues-closer.yaml +++ b/.github/workflows/empty-issues-closer.yaml @@ -26,10 +26,10 @@ jobs: name: Close empty issues runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 # NOTE: Retrieve issue templates. + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 # NOTE: Retrieve issue templates. - name: Run empty issues closer action - uses: rickstaa/empty-issues-closer-action@v1 + uses: rickstaa/empty-issues-closer-action@ed1f6e2f4c64f00e4ef6e9d0b03a822a58e33bee # v1.0.92 env: github_token: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/generate-theme-doc.yml b/.github/workflows/generate-theme-doc.yml index e9929fc..5555946 100644 --- a/.github/workflows/generate-theme-doc.yml +++ b/.github/workflows/generate-theme-doc.yml @@ -29,10 +29,10 @@ jobs: node-version: [18.x] steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 with: node-version: ${{ matrix.node-version }} cache: npm diff --git a/.github/workflows/label-pr.yml b/.github/workflows/label-pr.yml index 80da17b..f12cd0d 100644 --- a/.github/workflows/label-pr.yml +++ b/.github/workflows/label-pr.yml @@ -21,6 +21,6 @@ jobs: if: github.repository == 'anuraghazra/github-readme-stats' runs-on: ubuntu-latest steps: - - uses: actions/labeler@v4 + - uses: actions/labeler@0967ca812e7fdc8f5f71402a1b486d5bd061fe20 # v4.2.0 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" diff --git a/.github/workflows/preview-theme.yml b/.github/workflows/preview-theme.yml index b583499..119bcd3 100644 --- a/.github/workflows/preview-theme.yml +++ b/.github/workflows/preview-theme.yml @@ -30,15 +30,15 @@ jobs: node-version: [18.x] steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 with: node-version: ${{ matrix.node-version }} cache: npm - - uses: bahmutov/npm-install@v1 + - uses: bahmutov/npm-install@c5482d70ec8706408996e31ac94075030694993f # v1.8.32 with: useLockFile: false diff --git a/.github/workflows/prs-cache-clean.yml b/.github/workflows/prs-cache-clean.yml index 51e7717..3d31c4b 100644 --- a/.github/workflows/prs-cache-clean.yml +++ b/.github/workflows/prs-cache-clean.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Cleanup run: | diff --git a/.github/workflows/stale-theme-pr-closer.yaml b/.github/workflows/stale-theme-pr-closer.yaml index 6e6756d..cc943d2 100644 --- a/.github/workflows/stale-theme-pr-closer.yaml +++ b/.github/workflows/stale-theme-pr-closer.yaml @@ -27,15 +27,15 @@ jobs: node-version: [18.x] steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 with: node-version: ${{ matrix.node-version }} cache: npm - - uses: bahmutov/npm-install@v1 + - uses: bahmutov/npm-install@c5482d70ec8706408996e31ac94075030694993f # v1.8.32 with: useLockFile: false diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 89afb05..43f28bb 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -18,10 +18,10 @@ jobs: node-version: [18.x] steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 with: node-version: ${{ matrix.node-version }} cache: npm @@ -40,4 +40,4 @@ jobs: npm run format:check - name: Code Coverage - uses: codecov/codecov-action@v3 + uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4 diff --git a/.github/workflows/top-issues-dashboard.yml b/.github/workflows/top-issues-dashboard.yml index c5e5eae..f2783bf 100644 --- a/.github/workflows/top-issues-dashboard.yml +++ b/.github/workflows/top-issues-dashboard.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Run top issues action - uses: rickstaa/top-issues-action@v1 + uses: rickstaa/top-issues-action@d2877f7138b441041a7ed9682d4179fb5ecd8e48 # v1.3.18 env: github_token: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/update-langs.yaml b/.github/workflows/update-langs.yaml index 1e67655..a59c483 100644 --- a/.github/workflows/update-langs.yaml +++ b/.github/workflows/update-langs.yaml @@ -27,10 +27,10 @@ jobs: node-version: [18.x] steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 - name: Setup Node - uses: actions/setup-node@v3 + uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0 with: node-version: ${{ matrix.node-version }} cache: npm @@ -44,7 +44,7 @@ jobs: run: npm run generate-langs-json - name: Create Pull Request if upstream language file is changed - uses: peter-evans/create-pull-request@v4 + uses: peter-evans/create-pull-request@38e0b6e68b4c852a5500a94740f0e535e0d7ba54 # v4.2.4 with: commit-message: "refactor: update languages JSON" branch: "update_langs/patch"