Skip to content

Commit 9e201a7

Browse files
yshavityshavit
authored
GHA: upgrade and pin various actions
1 parent b3b8110 commit 9e201a7

10 files changed

Lines changed: 33 additions & 33 deletions

‎.github/workflows/build-release.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
runs-on: ubuntu-latest
4242
steps:
4343

44-
- uses: actions/checkout@v4
44+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
4545
with:
4646
ref: ${{ inputs.branch_name }}
4747

@@ -62,19 +62,19 @@ jobs:
6262
DOCKER_USERNAME: ${{ vars.DOCKERHUB_USERNAME }}
6363

6464
- name: Log in to Docker Hub
65-
uses: docker/login-action@v3
65+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 #v4.0.0
6666
with:
6767
username: ${{ vars.DOCKERHUB_USERNAME }}
6868
password: ${{ secrets.DOCKERHUB_PAT }}
6969

7070
- name: Gather metadata
7171
id: meta
72-
uses: docker/metadata-action@v5
72+
uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf #v6.0.0
7373
with:
7474
images: ${{ vars.DOCKERHUB_USERNAME }}/mdq
7575

7676
- name: Build and push
77-
uses: docker/build-push-action@v6
77+
uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 #v7.0.0
7878
with:
7979
context: .
8080
push: true
@@ -108,13 +108,13 @@ jobs:
108108
- name: rustc version
109109
run: rustc --version --verbose
110110

111-
- uses: actions/checkout@v4
111+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
112112
with:
113113
ref: ${{ inputs.branch_name }}
114114

115115
- name: "Cache cargo"
116116
id: cache-cargo
117-
uses: "actions/cache@v4"
117+
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 #v5.0.4
118118
with:
119119
path: |
120120
~/.cargo/bin/
@@ -158,12 +158,12 @@ jobs:
158158
run: chmod +x "$BUILD_FILE_PATH"
159159

160160
- name: Attest Build Provenance
161-
uses: actions/attest-build-provenance@v2
161+
uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 #v4.1.0
162162
with:
163163
subject-path: ${{ env.BUILD_FILE_PATH }}
164164

165165
- name: upload binary
166-
uses: actions/upload-artifact@v4
166+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f #v7.0.0
167167
with:
168168
if-no-files-found: error
169169
name: mdq-${{ matrix.target }}

‎.github/workflows/coverage.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -12,10 +12,10 @@ jobs:
1212
CARGO_TERM_COLOR: always
1313
steps:
1414

15-
- uses: actions/checkout@v4
15+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
1616

1717
- name: install cargo-tarpaulin
18-
uses: taiki-e/install-action@v2
18+
uses: taiki-e/install-action@06203676c62f0d3c765be3f2fcfbebbcb02d09f5 #v2.69.6
1919
with:
2020
tool: cargo-tarpaulin
2121

‎.github/workflows/formatting.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212

13-
- uses: actions/checkout@v4
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
1414

1515
- name: check for carriage returns
1616
run: |

‎.github/workflows/pr-checks.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
steps:
1515

1616
- name: Check out repo
17-
uses: actions/checkout@v4
17+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
1818

1919
- name: Also fetch target branch
2020
run: |

‎.github/workflows/prepare-new-release.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -41,7 +41,7 @@ jobs:
4141
git config --global user.name 'github-actions[bot]'
4242
git config --global user.email 'github-actions[bot]@users.noreply.github.com'
4343
44-
- uses: actions/checkout@v4
44+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
4545
with:
4646
ref: ${{ github.event.inputs.base_ref }}
4747

@@ -108,7 +108,7 @@ jobs:
108108
needs: [ create_draft, upload_assets ]
109109
steps:
110110

111-
- uses: actions/checkout@v4
111+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
112112
with:
113113
ref: pending-releases/${{ env.RELEASE_VERSION }}
114114

‎.github/workflows/readme-checks.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
runs-on: ubuntu-latest
1414
steps:
1515

16-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
1717

1818
- run: docker pull yshavit/mdq
1919

@@ -66,7 +66,7 @@ jobs:
6666
steps:
6767

6868
- name: Checkout
69-
uses: actions/checkout@v4
69+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
7070

7171
- name: Build docs
7272
run: cargo doc --no-deps
@@ -75,7 +75,7 @@ jobs:
7575
run: cp .github/gha_assets/crate-doc-root-redirect.html target/doc/index.html
7676

7777
- name: Upload artifact
78-
uses: actions/upload-pages-artifact@v3
78+
uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b #v4.0.0
7979
with:
8080
path: target/doc
8181

@@ -96,4 +96,4 @@ jobs:
9696

9797
- name: Deploy to GitHub Pages
9898
id: deployment
99-
uses: actions/deploy-pages@v4
99+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e #v4.0.5

‎.github/workflows/release-assets.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -58,7 +58,7 @@ jobs:
5858
echo "version=$release_version" >> "$GITHUB_OUTPUT"
5959
echo "version_tag=v$release_version" >> "$GITHUB_OUTPUT"
6060
61-
- uses: actions/checkout@v4
61+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
6262
with:
6363
ref: ${{ env.BRANCH_NAME }}
6464
fetch-depth: '50' # all we really need is >1, but this can give us additional context
@@ -106,7 +106,7 @@ jobs:
106106

107107
- name: "Download binaries from job"
108108
id: download
109-
uses: actions/download-artifact@v4
109+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1
110110
with:
111111
pattern: mdq-*
112112
merge-multiple: 'false'

‎.github/workflows/release-publish.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -68,7 +68,7 @@ jobs:
6868
steps:
6969

7070
- name: Log in to Docker Hub
71-
uses: docker/login-action@v3
71+
uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 #v4.0.0
7272
with:
7373
username: ${{ vars.DOCKERHUB_USERNAME }}
7474
password: ${{ secrets.DOCKERHUB_PAT }}
@@ -98,7 +98,7 @@ jobs:
9898
env:
9999
PR_JSON: ${{ needs.verify.outputs.pr-json }}
100100

101-
- uses: actions/checkout@v4
101+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
102102
with:
103103
ref: ${{ steps.base-ref.outputs.name }}
104104

@@ -161,7 +161,7 @@ jobs:
161161
runs-on: ubuntu-latest
162162
steps:
163163

164-
- uses: actions/checkout@v4
164+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
165165
with:
166166
ref: "v${{ env.RELEASE_VERSION }}"
167167

‎.github/workflows/rust.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
runs-on: ubuntu-latest
1515
steps:
1616

17-
- uses: actions/checkout@v4
17+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
1818

1919
- name: cargo build
2020
run: RUSTFLAGS=-Awarnings scripts/cargo_to_gh rustc --message-format json
@@ -32,7 +32,7 @@ jobs:
3232
exit "$exit_code"
3333
3434
- name: Upload binary
35-
uses: actions/upload-artifact@v4
35+
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f #v7.0.0
3636
with:
3737
name: mdq-binary
3838
path: target/debug/mdq
@@ -45,7 +45,7 @@ jobs:
4545
runs-on: ubuntu-latest
4646
needs: build
4747
steps:
48-
- uses: actions/checkout@v4
48+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
4949
- name: version
5050
run: cargo version
5151
- name: cargo ${{ matrix.tool }}
@@ -63,7 +63,7 @@ jobs:
6363
needs: build
6464
steps:
6565

66-
- uses: actions/checkout@v4
66+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
6767

6868
- name: cargo test
6969
run: |
@@ -89,7 +89,7 @@ jobs:
8989
needs: build
9090
runs-on: ubuntu-latest
9191
steps:
92-
- uses: actions/checkout@v4
92+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
9393
- name: cargo fmt
9494
run: cargo fmt --check
9595

@@ -99,7 +99,7 @@ jobs:
9999
permissions:
100100
contents: read
101101
steps:
102-
- uses: actions/checkout@v4
102+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
103103

104104
- name: check file
105105
run: file scripts/flatten-rustdoc-json
@@ -133,10 +133,10 @@ jobs:
133133
env:
134134
UNIQUE_PATH: ${{ github.run_id }}-${{ github.run_number }}-${{ github.run_attempt }}
135135
steps:
136-
- uses: actions/checkout@v4
136+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
137137

138138
- name: Download binary
139-
uses: actions/download-artifact@v4
139+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1
140140
with:
141141
name: mdq-binary
142142
path: /tmp/mdq-binary-${{ env.UNIQUE_PATH }}

‎.github/workflows/system-test.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
runs-on: ubuntu-latest
1212
steps:
1313

14-
- uses: actions/cache@v4
14+
- uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 #v5.0.4
1515
with:
1616
path: |
1717
~/.cargo/bin/
@@ -22,7 +22,7 @@ jobs:
2222
key: ${{ runner.os }}-cargo-${{ hashFiles('**/Cargo.lock') }}
2323

2424
- name: Checkout code
25-
uses: actions/checkout@v4
25+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd #v0.6.2
2626

2727
- name: Build mdq
2828
run: cargo build

0 commit comments

Comments
 (0)