From 12be7672e1a35c0d9f6604b0acd99cb995bc9329 Mon Sep 17 00:00:00 2001 From: Peter Wilson Date: Tue, 12 Aug 2025 12:34:31 +0100 Subject: [PATCH] GitHub Actions: Pin versions for actions --- .github/workflows/lint.yaml | 4 ++-- .github/workflows/release.yaml | 4 ++-- .github/workflows/tests-unit.yaml | 6 ++++-- 3 files changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index a0e0d58..c24ebea 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -13,10 +13,10 @@ jobs: steps: - name: Check out the repository - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Install the latest version of uv and set the python version to 3.13 - uses: astral-sh/setup-uv@v6 + uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3 with: python-version: 3.13 activate-environment: true diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 626bc9a..fd74a77 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -14,12 +14,12 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out the repository - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: '3.11' diff --git a/.github/workflows/tests-unit.yaml b/.github/workflows/tests-unit.yaml index 5834570..3e2e985 100644 --- a/.github/workflows/tests-unit.yaml +++ b/.github/workflows/tests-unit.yaml @@ -25,9 +25,11 @@ jobs: runs-on: ${{ matrix.os }} steps: - - uses: actions/checkout@v4 + - name: Checkout + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - - uses: astral-sh/setup-uv@v6 + - name: Setup UV + uses: astral-sh/setup-uv@e92bafb6253dcd438e0484186d7669ea7a8ca1cc # v6.4.3 with: python-version: ${{ matrix.python-version }} activate-environment: true