diff --git a/.github/workflows/android-ci.yml b/.github/workflows/android-ci.yml index a38673c86..5ca572eb4 100644 --- a/.github/workflows/android-ci.yml +++ b/.github/workflows/android-ci.yml @@ -26,7 +26,7 @@ jobs: outputs: should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.android_any_modified != 'true' }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive @@ -54,14 +54,14 @@ jobs: IS_LOCAL_DEVELOPMENT: false MLN_ANDROID_STL: c++_static steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 - uses: ./.github/actions/setup-android-ci - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: ".nvmrc" @@ -99,7 +99,7 @@ jobs: - name: Configure AWS Credentials if: vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -207,7 +207,7 @@ jobs: working-directory: test/android steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 @@ -220,7 +220,7 @@ jobs: - name: Configure AWS Credentials if: vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -265,7 +265,7 @@ jobs: if: needs.pre_job.outputs.should_skip != 'true' steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 @@ -274,7 +274,7 @@ jobs: - name: Configure AWS Credentials if: vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -314,7 +314,7 @@ jobs: # automatically trigger android-release when code is pushed to main # and the platform/android/VERSION file has changed - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 if: github.ref == 'refs/heads/main' && github.event_name == 'push' - name: VERSION file changed diff --git a/.github/workflows/android-device-test.yml b/.github/workflows/android-device-test.yml index 51b0ff6fe..b23de6c72 100644 --- a/.github/workflows/android-device-test.yml +++ b/.github/workflows/android-device-test.yml @@ -78,9 +78,9 @@ jobs: runs-on: ubuntu-latest if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success' steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: '.nvmrc' @@ -143,7 +143,7 @@ jobs: - name: Configure AWS Credentials if: env.run_device_test == 'true' - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} diff --git a/.github/workflows/android-release.yml b/.github/workflows/android-release.yml index 5eb9dc5f4..af8413e98 100644 --- a/.github/workflows/android-release.yml +++ b/.github/workflows/android-release.yml @@ -13,7 +13,7 @@ jobs: run: working-directory: platform/android steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Validate and set version working-directory: . @@ -78,16 +78,16 @@ jobs: - Release - Debug steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: ".nvmrc" - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4 + - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v4 with: distribution: "temurin" java-version: "17" diff --git a/.github/workflows/android-testapp-release.yml b/.github/workflows/android-testapp-release.yml index 862209e30..e9b3903f0 100644 --- a/.github/workflows/android-testapp-release.yml +++ b/.github/workflows/android-testapp-release.yml @@ -10,7 +10,7 @@ jobs: create-android-testapp-release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Create Release run: | @@ -41,7 +41,7 @@ jobs: SENTRY_AUTH_TOKEN: ${{ secrets.SENTRY_AUTH_TOKEN }} SENTRY_DSN: ${{ secrets.SENTRY_DSN_ANDROID }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/cache-cleanup.yml b/.github/workflows/cache-cleanup.yml index 58c8ae0b2..c164713c3 100644 --- a/.github/workflows/cache-cleanup.yml +++ b/.github/workflows/cache-cleanup.yml @@ -15,7 +15,7 @@ jobs: contents: read steps: - name: Check out code - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Cleanup run: | diff --git a/.github/workflows/core-release.yml b/.github/workflows/core-release.yml index bc4348306..ccd400bdf 100644 --- a/.github/workflows/core-release.yml +++ b/.github/workflows/core-release.yml @@ -14,7 +14,7 @@ jobs: create-release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive @@ -45,13 +45,13 @@ jobs: needs: [create-release] runs-on: macos-latest steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive - run: brew install webp libuv - - uses: taiki-e/install-action@020705266844b275b711684191e11281be48860c # v2 + - uses: taiki-e/install-action@57511bcdf8cdb0eab6448cb7fa632952d9f25742 # v2 with: tool: armerge@2 @@ -97,14 +97,14 @@ jobs: - renderer: vulkan runner: { os: ubuntu-24.04-arm, arch: arm64 } steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive - name: Install dependencies run: .github/scripts/install-linux-deps - - uses: taiki-e/install-action@020705266844b275b711684191e11281be48860c # v2 + - uses: taiki-e/install-action@57511bcdf8cdb0eab6448cb7fa632952d9f25742 # v2 with: tool: armerge@2 @@ -145,7 +145,7 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive diff --git a/.github/workflows/gh-pages-android-api.yml b/.github/workflows/gh-pages-android-api.yml index faeba8c7f..843d88bd3 100644 --- a/.github/workflows/gh-pages-android-api.yml +++ b/.github/workflows/gh-pages-android-api.yml @@ -15,9 +15,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4 + - uses: actions/setup-java@dded0888837ed1f317902acf8a20df0ad188d165 # v4 with: distribution: "temurin" java-version: "17" diff --git a/.github/workflows/gh-pages-android-examples.yml b/.github/workflows/gh-pages-android-examples.yml index caef000cd..9b3313fce 100644 --- a/.github/workflows/gh-pages-android-examples.yml +++ b/.github/workflows/gh-pages-android-examples.yml @@ -17,7 +17,7 @@ jobs: shell: bash steps: - name: Checkout 🛎️ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Generate documentation run: make mkdocs-build diff --git a/.github/workflows/gh-pages-cpp-api.yml b/.github/workflows/gh-pages-cpp-api.yml index 9100c49c5..a907aa1fb 100644 --- a/.github/workflows/gh-pages-cpp-api.yml +++ b/.github/workflows/gh-pages-cpp-api.yml @@ -8,7 +8,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: true diff --git a/.github/workflows/gh-pages-docc.yml b/.github/workflows/gh-pages-docc.yml index ff534d0e4..2c3e01d15 100644 --- a/.github/workflows/gh-pages-docc.yml +++ b/.github/workflows/gh-pages-docc.yml @@ -20,10 +20,10 @@ jobs: runs-on: macos-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -52,10 +52,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout 🛎️ - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Download DocC docs artifacts - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v4 with: name: docc-docs path: build diff --git a/.github/workflows/gh-pages-mdbook.yml b/.github/workflows/gh-pages-mdbook.yml index ec6bdbcb9..a43ab1aca 100644 --- a/.github/workflows/gh-pages-mdbook.yml +++ b/.github/workflows/gh-pages-mdbook.yml @@ -16,7 +16,7 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - uses: extractions/setup-just@e33e0265a09d6d736e2ee1e0eb685ef1de4669ff # v3 - name: Setup mdBook uses: peaceiris/actions-mdbook@ee69d230fe19748b7abf22df32acaa93833fad08 # v2 @@ -40,9 +40,9 @@ jobs: name: Deploy runs-on: ubuntu-latest steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Download book - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v4 with: name: book path: artifacts/book diff --git a/.github/workflows/ios-ci.yml b/.github/workflows/ios-ci.yml index bc9ac860b..e7926f425 100644 --- a/.github/workflows/ios-ci.yml +++ b/.github/workflows/ios-ci.yml @@ -38,7 +38,7 @@ jobs: outputs: should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files-yaml.outputs.ios_any_modified != 'true' }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive @@ -72,7 +72,7 @@ jobs: working-directory: platform/ios shell: bash steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 @@ -200,7 +200,7 @@ jobs: - name: Configure AWS Credentials if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -229,7 +229,7 @@ jobs: working-directory: platform/ios shell: bash steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 @@ -247,7 +247,7 @@ jobs: (github.event_name == 'push' && steps.version-file-ios-changed.outputs.any_changed == 'true') run: echo make_release=true >> "$GITHUB_ENV" - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 if: env.make_release with: node-version-file: ".nvmrc" @@ -293,7 +293,7 @@ jobs: cat changelog_for_version.md - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -320,7 +320,7 @@ jobs: - name: Release (GitHub) if: env.make_release id: github_release - uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2 + uses: softprops/action-gh-release@6cbd405e2c4e67a21c47fa9e383d020e4e28b836 # v2 with: name: ios-v${{ env.version }} files: | @@ -378,7 +378,7 @@ jobs: runs-on: macos-14 if: needs.pre_job.outputs.should_skip != 'true' steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/ios-device-test.yml b/.github/workflows/ios-device-test.yml index 2b06977c3..8fee83cd8 100644 --- a/.github/workflows/ios-device-test.yml +++ b/.github/workflows/ios-device-test.yml @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-22.04 if: github.repository_owner == 'maplibre' && github.event.workflow_run.conclusion == 'success' steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Generate token uses: actions/create-github-app-token@a8d616148505b5069dccd32f177bb87d7f39123b # v2 @@ -50,7 +50,7 @@ jobs: files: "${{ matrix.test.xcTestFile }}, ${{ matrix.test.ipaFile }}" - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} diff --git a/.github/workflows/ios-release-cocoapods.yml b/.github/workflows/ios-release-cocoapods.yml index 6d4c595be..6db7f1c35 100644 --- a/.github/workflows/ios-release-cocoapods.yml +++ b/.github/workflows/ios-release-cocoapods.yml @@ -14,7 +14,7 @@ jobs: working-directory: platform/ios runs-on: macos-14 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: fetch-depth: 0 diff --git a/.github/workflows/linux-ci.yml b/.github/workflows/linux-ci.yml index e88ca26e9..466e242e5 100644 --- a/.github/workflows/linux-ci.yml +++ b/.github/workflows/linux-ci.yml @@ -33,7 +33,7 @@ jobs: outputs: should_skip: ${{ github.event_name != 'workflow_dispatch' && steps.changed-files.outputs.linux_any_modified != 'true' }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive @@ -65,13 +65,13 @@ jobs: rust: true runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 - name: Initialize CodeQL - uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3 + uses: github/codeql-action/init@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3 with: languages: cpp @@ -102,7 +102,7 @@ jobs: - name: Configure AWS Credentials if: vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -174,7 +174,7 @@ jobs: # CodeQL - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3 + uses: github/codeql-action/analyze@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3 with: category: "/language:cpp" @@ -220,7 +220,7 @@ jobs: linux-coverage: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 @@ -236,7 +236,7 @@ jobs: ${{ runner.os }}-bazel- path: ~/.cache/bazel - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: '.nvmrc' diff --git a/.github/workflows/macos-ci.yml b/.github/workflows/macos-ci.yml index 81d00548b..c3b5fa1ad 100644 --- a/.github/workflows/macos-ci.yml +++ b/.github/workflows/macos-ci.yml @@ -57,7 +57,7 @@ jobs: shell: bash steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 diff --git a/.github/workflows/node-ci.yml b/.github/workflows/node-ci.yml index 590068fdc..3b03c8531 100644 --- a/.github/workflows/node-ci.yml +++ b/.github/workflows/node-ci.yml @@ -95,7 +95,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: true fetch-depth: 0 @@ -136,7 +136,7 @@ jobs: /usr/sbin/update-ccache-symlinks - name: Use Node.js from nvmrc - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: 'platform/node/.nvmrc' diff --git a/.github/workflows/node-release.yml b/.github/workflows/node-release.yml index 3f6870d16..7ec9a0d40 100644 --- a/.github/workflows/node-release.yml +++ b/.github/workflows/node-release.yml @@ -13,12 +13,12 @@ jobs: run: shell: bash steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: fetch-depth: 0 - name: Use Node.js from nvmrc - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: 'platform/node/.nvmrc' @@ -65,7 +65,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: true fetch-depth: 0 @@ -106,7 +106,7 @@ jobs: /usr/sbin/update-ccache-symlinks - name: Use Node.js from nvmrc - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: 'platform/node/.nvmrc' @@ -249,12 +249,12 @@ jobs: shell: bash steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: fetch-depth: 0 - name: Use Node.js from nvmrc - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: 'platform/node/.nvmrc' @@ -287,7 +287,7 @@ jobs: - name: Update Release Notes id: update_release_notes - uses: ncipollo/release-action@bcfe5470707e8832e12347755757cec0eb3c22af # v1 + uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/pr-bloaty-ios.yml b/.github/workflows/pr-bloaty-ios.yml index d8ed573fa..d3fd4017e 100644 --- a/.github/workflows/pr-bloaty-ios.yml +++ b/.github/workflows/pr-bloaty-ios.yml @@ -19,13 +19,13 @@ jobs: outputs: should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: sparse-checkout: | .github .nvmrc - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: '.nvmrc' @@ -44,7 +44,7 @@ jobs: if: needs.pre_job.outputs.should_skip == 'false' runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Cache Bloaty id: cache-bloaty @@ -82,7 +82,7 @@ jobs: - name: Configure AWS Credentials if: vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} diff --git a/.github/workflows/pr-linux-tests.yml b/.github/workflows/pr-linux-tests.yml index 8a2790da1..0677aa777 100644 --- a/.github/workflows/pr-linux-tests.yml +++ b/.github/workflows/pr-linux-tests.yml @@ -22,13 +22,13 @@ jobs: outputs: should_skip: ${{ steps.parent_workflow.outputs.was_skipped_or_cancelled }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: sparse-checkout: | .github .nvmrc - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: '.nvmrc' @@ -47,7 +47,7 @@ jobs: if: needs.pre_job.outputs.should_skip == 'false' runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - uses: ./.github/actions/get-pr-number id: get-pr-number @@ -92,7 +92,7 @@ jobs: - name: Configure AWS Credentials if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} @@ -136,7 +136,7 @@ jobs: if: needs.pre_job.outputs.should_skip == 'false' runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: true @@ -166,7 +166,7 @@ jobs: - name: Configure AWS Credentials if: github.ref == 'refs/heads/main' && vars.OIDC_AWS_ROLE_TO_ASSUME - uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4 + uses: aws-actions/configure-aws-credentials@a03048d87541d1d9fcf2ecf528a4a65ba9bd7838 # v4 with: aws-region: us-west-2 role-to-assume: ${{ vars.OIDC_AWS_ROLE_TO_ASSUME }} diff --git a/.github/workflows/qt-ci.yml b/.github/workflows/qt-ci.yml index 279d06e98..490bfc28d 100644 --- a/.github/workflows/qt-ci.yml +++ b/.github/workflows/qt-ci.yml @@ -99,7 +99,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: path: source fetch-depth: 0 diff --git a/.github/workflows/rust-ci.yaml b/.github/workflows/rust-ci.yaml index a71f2ba8b..7c4589ad3 100644 --- a/.github/workflows/rust-ci.yaml +++ b/.github/workflows/rust-ci.yaml @@ -24,18 +24,18 @@ jobs: - os: windows-latest - os: ubuntu-latest steps: - - uses: taiki-e/install-action@020705266844b275b711684191e11281be48860c # v2 + - uses: taiki-e/install-action@57511bcdf8cdb0eab6448cb7fa632952d9f25742 # v2 with: { tool: just } - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - run: just -v ci-test msrv: name: Rust tests MSRV (Minimal Supported Rust Version) runs-on: ubuntu-latest steps: - - uses: taiki-e/install-action@020705266844b275b711684191e11281be48860c # v2 + - uses: taiki-e/install-action@57511bcdf8cdb0eab6448cb7fa632952d9f25742 # v2 with: { tool: just } - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - name: Read crate metadata id: metadata run: echo "rust-version=$(sed -ne 's/rust-version *= *\"\(.*\)\"/\1/p' Cargo.toml)" >> "$GITHUB_OUTPUT" diff --git a/.github/workflows/typecheck-scripts.yml b/.github/workflows/typecheck-scripts.yml index 6bbf60c0d..f7dee1887 100644 --- a/.github/workflows/typecheck-scripts.yml +++ b/.github/workflows/typecheck-scripts.yml @@ -9,7 +9,7 @@ jobs: typecheck-scripts: runs-on: ubuntu-latest steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - run: | npm install diff --git a/.github/workflows/upload-coverage.yml b/.github/workflows/upload-coverage.yml index 9e18797b9..b565b7066 100644 --- a/.github/workflows/upload-coverage.yml +++ b/.github/workflows/upload-coverage.yml @@ -12,13 +12,13 @@ jobs: outputs: should_run: ${{ !steps.parent_workflow.outputs.was_skipped_or_cancelled }} steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: sparse-checkout: | .github .nvmrc - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v4 with: node-version-file: '.nvmrc' @@ -37,7 +37,7 @@ jobs: if: needs.pre_job.outputs.should_run == 'true' runs-on: ubuntu-latest steps: - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 - uses: ./.github/actions/download-workflow-run-artifact with: @@ -46,7 +46,7 @@ jobs: - name: Upload coverage report if: '!cancelled()' - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5 + uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5 with: override_commit: ${{ github.event.workflow_run.head_sha }} override_pr: ${{ github.event.workflow_run.pull_requests[0].number }} diff --git a/.github/workflows/windows-ci.yml b/.github/workflows/windows-ci.yml index 474a5395b..a31efe152 100644 --- a/.github/workflows/windows-ci.yml +++ b/.github/workflows/windows-ci.yml @@ -37,7 +37,7 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive fetch-depth: 0 @@ -62,7 +62,7 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: sparse-checkout: | platform/windows/vendor @@ -117,12 +117,12 @@ jobs: - run: | git config --system core.longpaths true - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive - name: Initialize CodeQL - uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3 + uses: github/codeql-action/init@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3 with: languages: cpp @@ -165,7 +165,7 @@ jobs: # CodeQL - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3 + uses: github/codeql-action/analyze@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3 with: category: "/language:cpp" @@ -253,11 +253,11 @@ jobs: git config --system core.longpaths true git config --system core.autocrlf input - - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4 + - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v4 with: submodules: recursive - - uses: msys2/setup-msys2@40677d36a502eb2cf0fb808cc9dec31bf6152638 # v2 + - uses: msys2/setup-msys2@fb197b72ce45fb24f17bf3f807a388985654d1f2 # v2 with: msystem: ${{ matrix.msystem }} update: true @@ -276,7 +276,7 @@ jobs: libuv:p - name: Initialize CodeQL - uses: github/codeql-action/init@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3 + uses: github/codeql-action/init@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3 with: languages: cpp @@ -305,7 +305,7 @@ jobs: # CodeQL - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@3c3833e0f8c1c83d449a7478aa59c036a9165498 # v3 + uses: github/codeql-action/analyze@f1f6e5f6af878fb37288ce1c627459e94dbf7d01 # v3 with: category: "/language:cpp"