Skip to content

Commit 1cc3d19

Browse files
ulgensulgens
committed
Pin GHA dependencies
Relates to #225
1 parent 1d5d462 commit 1cc3d19

3 files changed

Lines changed: 45 additions & 45 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,13 @@ jobs:
1818
name: Test
1919
runs-on: ubuntu-latest
2020
steps:
21-
- uses: actions/checkout@v4
21+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
2222
with:
2323
submodules: true
2424

2525
- uses: ./.github/actions/setup
2626

27-
- uses: actions/cache@v4
27+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
2828
with:
2929
path: |
3030
~/.cargo/bin/
@@ -43,7 +43,7 @@ jobs:
4343
name: Format
4444
runs-on: ubuntu-latest
4545
steps:
46-
- uses: actions/checkout@v4
46+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
4747
with:
4848
submodules: true
4949

@@ -58,15 +58,15 @@ jobs:
5858
name: Clippy
5959
runs-on: ubuntu-latest
6060
steps:
61-
- uses: actions/checkout@v4
61+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
6262
with:
6363
submodules: true
6464

6565
- uses: ./.github/actions/setup
6666
with:
6767
components: clippy
6868

69-
- uses: actions/cache@v4
69+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
7070
with:
7171
path: |
7272
~/.cargo/bin/
@@ -85,13 +85,13 @@ jobs:
8585
name: Build
8686
runs-on: ubuntu-latest
8787
steps:
88-
- uses: actions/checkout@v4
88+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
8989
with:
9090
submodules: true
9191

9292
- uses: ./.github/actions/setup
9393

94-
- uses: actions/cache@v4
94+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
9595
with:
9696
path: |
9797
~/.cargo/bin/

‎.github/workflows/docs.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -18,19 +18,19 @@ jobs:
1818
build:
1919
runs-on: ubuntu-22.04
2020
steps:
21-
- uses: actions/checkout@v4
21+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
2222
with:
2323
submodules: true
2424

2525
- uses: ./.github/actions/setup
2626

27-
- uses: actions/setup-python@v5
27+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
2828
with:
2929
python-version: '3.x'
3030

31-
- uses: astral-sh/setup-uv@v6
31+
- uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0
3232

33-
- uses: actions/cache@v4
33+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
3434
with:
3535
path: |
3636
~/.cargo/bin/
@@ -53,7 +53,7 @@ jobs:
5353
- name: Build docs
5454
run: uv run --project crates/processing_pyo3 --group docs mkdocs build
5555

56-
- uses: actions/upload-pages-artifact@v3
56+
- uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1
5757
with:
5858
path: site/
5959

@@ -65,4 +65,4 @@ jobs:
6565
url: ${{ steps.deployment.outputs.page_url }}
6666
steps:
6767
- id: deployment
68-
uses: actions/deploy-pages@v4
68+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5

‎.github/workflows/release.yml‎

Lines changed: 32 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -12,15 +12,15 @@ jobs:
1212
generate-stubs:
1313
runs-on: ubuntu-22.04
1414
steps:
15-
- uses: actions/checkout@v4
15+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
1616
with:
1717
submodules: true
1818
- uses: ./.github/actions/setup
1919
- name: Generate type stubs
2020
run: |
2121
cargo build --release -p processing_pyo3
2222
cargo run --release -p generate_stubs
23-
- uses: actions/upload-artifact@v4
23+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
2424
with:
2525
name: type-stubs
2626
path: crates/processing_pyo3/mewnala/*.pyi
@@ -33,21 +33,21 @@ jobs:
3333
# TODO: add aarch64 when we are ready to address long build times
3434
target: [x86_64]
3535
steps:
36-
- uses: actions/checkout@v4
36+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
3737
with:
3838
submodules: true
39-
- uses: actions/setup-python@v5
39+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
4040
with:
4141
python-version: '3.x'
42-
- uses: actions/download-artifact@v4
42+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
4343
with:
4444
name: type-stubs
4545
path: crates/processing_pyo3/mewnala
4646
- name: Setup QEMU
4747
if: matrix.target == 'aarch64'
48-
uses: docker/setup-qemu-action@v3
48+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
4949
- name: Build wheels
50-
uses: PyO3/maturin-action@v1
50+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
5151
with:
5252
container: "quay.io/pypa/manylinux_2_34_${{matrix.target}}:latest"
5353
docker-options: "-e PKG_CONFIG_PATH=/usr/lib64/pkgconfig:/usr/lib/${{matrix.target}}-linux-gnu/pkgconfig:/usr/local/lib/pkgconfig"
@@ -66,7 +66,7 @@ jobs:
6666
libxkbcommon-devel wayland-devel wayland-protocols-devel \
6767
glfw-devel $EXTRA_PACKAGES
6868
working-directory: crates/processing_pyo3
69-
- uses: actions/upload-artifact@v4
69+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
7070
with:
7171
name: wheels-linux-${{ matrix.target }}
7272
path: crates/processing_pyo3/dist
@@ -82,23 +82,23 @@ jobs:
8282
# TODO: lets add this build when we have a moment
8383
# - runner: macos-15-intel
8484
steps:
85-
- uses: actions/checkout@v4
85+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
8686
with:
8787
submodules: true
88-
- uses: actions/setup-python@v5
88+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
8989
with:
9090
python-version: '3.x'
91-
- uses: actions/download-artifact@v4
91+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
9292
with:
9393
name: type-stubs
9494
path: crates/processing_pyo3/mewnala
9595
- name: Build wheels
96-
uses: PyO3/maturin-action@v1
96+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
9797
with:
9898
target: ${{ matrix.target }}
9999
args: --release --out dist --find-interpreter
100100
working-directory: crates/processing_pyo3
101-
- uses: actions/upload-artifact@v4
101+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
102102
with:
103103
name: wheels-macos-${{ matrix.target }}
104104
path: crates/processing_pyo3/dist
@@ -107,23 +107,23 @@ jobs:
107107
runs-on: windows-latest
108108
needs: generate-stubs
109109
steps:
110-
- uses: actions/checkout@v4
110+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
111111
with:
112112
submodules: true
113-
- uses: actions/setup-python@v5
113+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
114114
with:
115115
python-version: '3.x'
116-
- uses: actions/download-artifact@v4
116+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
117117
with:
118118
name: type-stubs
119119
path: crates/processing_pyo3/mewnala
120120
- name: Build wheels
121-
uses: PyO3/maturin-action@v1
121+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
122122
with:
123123
target: x64
124124
args: --release --out dist --find-interpreter
125125
working-directory: crates/processing_pyo3
126-
- uses: actions/upload-artifact@v4
126+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
127127
with:
128128
name: wheels-windows-x64
129129
path: crates/processing_pyo3/dist
@@ -132,20 +132,20 @@ jobs:
132132
runs-on: ubuntu-latest
133133
needs: generate-stubs
134134
steps:
135-
- uses: actions/checkout@v4
135+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
136136
with:
137137
submodules: true
138-
- uses: actions/download-artifact@v4
138+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
139139
with:
140140
name: type-stubs
141141
path: crates/processing_pyo3/mewnala
142142
- name: Build sdist
143-
uses: PyO3/maturin-action@v1
143+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
144144
with:
145145
command: sdist
146146
args: --out dist
147147
working-directory: crates/processing_pyo3
148-
- uses: actions/upload-artifact@v4
148+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
149149
with:
150150
name: wheels-sdist
151151
path: crates/processing_pyo3/dist
@@ -154,7 +154,7 @@ jobs:
154154
name: FFI Linux (x86_64)
155155
runs-on: ubuntu-22.04
156156
steps:
157-
- uses: actions/checkout@v4
157+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
158158
with:
159159
submodules: true
160160
- uses: ./.github/actions/setup
@@ -168,7 +168,7 @@ jobs:
168168
cp crates/processing_ffi/include/processing.h staging/include/
169169
cp LICENSE.md staging/
170170
tar -czvf libprocessing-${{ github.ref_name }}-linux-x86_64.tar.gz -C staging .
171-
- uses: actions/upload-artifact@v4
171+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
172172
with:
173173
name: libprocessing-linux-x86_64
174174
path: libprocessing-${{ github.ref_name }}-linux-x86_64.tar.gz
@@ -177,7 +177,7 @@ jobs:
177177
name: FFI macOS (aarch64)
178178
runs-on: macos-14
179179
steps:
180-
- uses: actions/checkout@v4
180+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
181181
with:
182182
submodules: true
183183
- uses: dtolnay/rust-toolchain@stable
@@ -191,7 +191,7 @@ jobs:
191191
cp crates/processing_ffi/include/processing.h staging/include/
192192
cp LICENSE.md staging/
193193
tar -czvf libprocessing-${{ github.ref_name }}-macos-aarch64.tar.gz -C staging .
194-
- uses: actions/upload-artifact@v4
194+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
195195
with:
196196
name: libprocessing-macos-aarch64
197197
path: libprocessing-${{ github.ref_name }}-macos-aarch64.tar.gz
@@ -200,7 +200,7 @@ jobs:
200200
name: FFI Windows (x64)
201201
runs-on: windows-latest
202202
steps:
203-
- uses: actions/checkout@v4
203+
- uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0
204204
with:
205205
submodules: true
206206
- uses: dtolnay/rust-toolchain@stable
@@ -216,7 +216,7 @@ jobs:
216216
Copy-Item crates/processing_ffi/include/processing.h staging/include/
217217
Copy-Item LICENSE.md staging/
218218
Compress-Archive -Path staging/* -DestinationPath libprocessing-${{ github.ref_name }}-windows-x64.zip
219-
- uses: actions/upload-artifact@v4
219+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
220220
with:
221221
name: libprocessing-windows-x64
222222
path: libprocessing-${{ github.ref_name }}-windows-x64.zip
@@ -230,7 +230,7 @@ jobs:
230230
id-token: write
231231
environment: pypi
232232
steps:
233-
- uses: actions/download-artifact@v4
233+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
234234
with:
235235
pattern: wheels-*
236236
merge-multiple: true
@@ -246,17 +246,17 @@ jobs:
246246
permissions:
247247
contents: write
248248
steps:
249-
- uses: actions/download-artifact@v4
249+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
250250
with:
251251
pattern: libprocessing-*
252252
merge-multiple: true
253253
path: release-assets
254-
- uses: actions/download-artifact@v4
254+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
255255
with:
256256
pattern: wheels-*
257257
merge-multiple: true
258258
path: release-assets
259-
- uses: softprops/action-gh-release@v2
259+
- uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2
260260
with:
261261
files: release-assets/*
262262
generate_release_notes: true

0 commit comments

Comments
 (0)