Skip to content

Commit bf448d9

Browse files
renovate[bot]renovate[bot]
authored
chore(deps): pin dependencies
1 parent 1910e77 commit bf448d9

7 files changed

Lines changed: 48 additions & 48 deletions

‎.github/workflows/basic.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,11 +14,11 @@ jobs:
1414
runs-on: ubuntu-latest
1515
if: github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web'
1616
steps:
17-
- uses: actions/checkout@v6
17+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
1818
with:
1919
fetch-depth: 0
2020

21-
- uses: actions/setup-node@v6
21+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
2222
with:
2323
node-version: 'lts/*'
2424
cache: 'npm'

‎.github/workflows/deployment.yml‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
release_created: ${{ steps.release.outputs.release_created }}
2121
tag_name: ${{ steps.release.outputs.tag_name }}
2222
steps:
23-
- uses: googleapis/release-please-action@v4
23+
- uses: googleapis/release-please-action@5c625bfb5d1ff62eadeeb3772007f7f66fdcf071 # v4
2424
id: release
2525
with:
2626
token: ${{ secrets.GITHUB_TOKEN }}
@@ -39,9 +39,9 @@ jobs:
3939
contents: read
4040
packages: write
4141
steps:
42-
- uses: actions/checkout@v6
42+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
4343

44-
- uses: actions/setup-node@v6
44+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
4545
with:
4646
node-version: 'lts/*'
4747
registry-url: 'https://registry.npmjs.org'
@@ -72,9 +72,9 @@ jobs:
7272
pages: write
7373
if: ${{ github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web' }}
7474
steps:
75-
- uses: actions/checkout@v6
75+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
7676

77-
- uses: actions/setup-node@v6
77+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
7878
with:
7979
node-version: 'lts/*'
8080
cache: 'npm'
@@ -83,7 +83,7 @@ jobs:
8383
run: npm ci && npm --prefix packages/diracx-web-components run build-doc
8484

8585
- name: Upload artifact
86-
uses: actions/upload-pages-artifact@v4
86+
uses: actions/upload-pages-artifact@7b1f4a764d45c48632c6b24a0339c27f5614fb0b # v4
8787
with:
8888
path: packages/diracx-web-components/storybook-static
8989

@@ -97,7 +97,7 @@ jobs:
9797
steps:
9898
- id: deploy
9999
name: Deploy to GitHub Pages
100-
uses: actions/deploy-pages@v4
100+
uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4
101101
with:
102102
token: ${{ github.token }}
103103

@@ -108,22 +108,22 @@ jobs:
108108
runs-on: ubuntu-latest
109109
if: ${{ github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web' }}
110110
steps:
111-
- uses: actions/checkout@v6
111+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
112112

113113
- name: Set up QEMU
114-
uses: docker/setup-qemu-action@v4
114+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4
115115
- name: Set up Docker Buildx
116-
uses: docker/setup-buildx-action@v4
116+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
117117

118118
- name: Login to GitHub container registry
119-
uses: docker/login-action@v4
119+
uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4
120120
with:
121121
registry: ghcr.io
122122
username: ${{ github.actor }}
123123
password: ${{ secrets.GITHUB_TOKEN }}
124124

125125
- name: Build Docker image (dev)
126-
uses: docker/build-push-action@v7
126+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
127127
with:
128128
context: .
129129
push: ${{ github.event_name == 'push' && github.repository == 'DIRACGrid/diracx-web' && github.ref_name == 'main' }}
@@ -135,23 +135,23 @@ jobs:
135135
if: ${{ github.event_name == 'push' && github.repository == 'DIRACGrid/diracx-web' }}
136136
needs: release-please
137137
steps:
138-
- uses: actions/checkout@v6
138+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
139139

140140
- name: Set up QEMU
141-
uses: docker/setup-qemu-action@v4
141+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4
142142
- name: Set up Docker Buildx
143-
uses: docker/setup-buildx-action@v4
143+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
144144

145145
- name: Login to GitHub container registry
146-
uses: docker/login-action@v4
146+
uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4
147147
with:
148148
registry: ghcr.io
149149
username: ${{ github.actor }}
150150
password: ${{ secrets.GITHUB_TOKEN }}
151151

152152
- name: Build Docker image
153153
if: ${{ needs.release-please.outputs.release_created == 'true' }}
154-
uses: docker/build-push-action@v7
154+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
155155
with:
156156
context: .
157157
push: true
@@ -170,13 +170,13 @@ jobs:
170170
if: ${{ needs.release-please.outputs.release_created == 'true' }}
171171
steps:
172172
- name: Checkout diracx-web (for update script)
173-
uses: actions/checkout@v6
173+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
174174
with:
175175
path: diracx-web
176176
sparse-checkout: .github/workflows
177177

178178
- name: Checkout diracx-charts
179-
uses: actions/checkout@v6
179+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
180180
with:
181181
repository: DIRACGrid/diracx-charts
182182
token: ${{ secrets.CHARTS_UPDATE_TOKEN }}
@@ -203,7 +203,7 @@ jobs:
203203
pre-commit run --all-files || true
204204
205205
- name: Install pixi
206-
uses: prefix-dev/setup-pixi@v0.8.1
206+
uses: prefix-dev/setup-pixi@5185adfbffb4bd703da3010310260805d89ebb11 # v0.9.6
207207

208208
- name: Commit and push changes
209209
if: success()

‎.github/workflows/diracx-web-components-test.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,9 +22,9 @@ jobs:
2222
runs-on: ubuntu-latest
2323
if: github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web'
2424
steps:
25-
- uses: actions/checkout@v6
25+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
2626

27-
- uses: actions/setup-node@v6
27+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
2828
with:
2929
node-version: 'lts/*'
3030
cache: 'npm'

‎.github/workflows/diracx-web-test.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020
runs-on: ubuntu-latest
2121
if: github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web'
2222
steps:
23-
- uses: actions/checkout@v6
23+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
2424

2525
- name: Clone source
2626
run: |
@@ -65,7 +65,7 @@ jobs:
6565

6666
- name: Upload Cypress screenshots
6767
if: failure()
68-
uses: actions/upload-artifact@v7
68+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
6969
with:
7070
name: cypress-screenshots
7171
path: packages/diracx-web/cypress/screenshots

‎.github/workflows/draft-on-changes-requested.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
outputs:
1717
pr_number: ${{ steps.pr.outputs.number }}
1818
steps:
19-
- uses: actions/download-artifact@v8
19+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
2020
with:
2121
name: pr-info
2222
run-id: ${{ github.event.workflow_run.id }}
@@ -26,7 +26,7 @@ jobs:
2626

2727
draft:
2828
needs: get-pr
29-
uses: DIRACGrid/.github/.github/workflows/draft-on-changes-requested.yml@main
29+
uses: DIRACGrid/.github/.github/workflows/draft-on-changes-requested.yml@a599200da5df9e3ea9104a6b9b99eb5bf83754a3 # main
3030
with:
3131
pr_number: ${{ fromJSON(needs.get-pr.outputs.pr_number) }}
3232
secrets:

‎.github/workflows/gubbins-test.yml‎

Lines changed: 19 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -17,9 +17,9 @@ jobs:
1717
runs-on: ubuntu-latest
1818
if: github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web'
1919
steps:
20-
- uses: actions/checkout@v6
20+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
2121

22-
- uses: actions/setup-node@v6
22+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
2323
with:
2424
node-version: 'lts/*'
2525
cache: 'npm'
@@ -62,10 +62,10 @@ jobs:
6262
6363
# Build gubbins container images using pixi
6464
- name: Set up Docker Buildx
65-
uses: docker/setup-buildx-action@v4
65+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
6666

6767
- name: Build gubbins services image
68-
uses: docker/build-push-action@v7
68+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
6969
with:
7070
context: ../diracx
7171
file: ../diracx/containers/Dockerfile
@@ -75,7 +75,7 @@ jobs:
7575
outputs: type=docker,dest=/tmp/gubbins_services_image.tar
7676

7777
- name: Build gubbins client image
78-
uses: docker/build-push-action@v7
78+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
7979
with:
8080
context: ../diracx
8181
file: ../diracx/containers/Dockerfile
@@ -85,7 +85,7 @@ jobs:
8585
outputs: type=docker,dest=/tmp/gubbins_client_image.tar
8686

8787
- name: Upload gubbins images
88-
uses: actions/upload-artifact@v7
88+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
8989
with:
9090
name: gubbins-images
9191
path: /tmp/gubbins_*_image.tar
@@ -94,9 +94,9 @@ jobs:
9494
runs-on: ubuntu-latest
9595
if: ${{ github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web' }}
9696
steps:
97-
- uses: actions/checkout@v6
97+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
9898

99-
- uses: actions/setup-node@v6
99+
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
100100
with:
101101
node-version: 'lts/*'
102102
registry-url: 'https://registry.npmjs.org'
@@ -129,7 +129,7 @@ jobs:
129129
run: npm install
130130

131131
- name: Upload the extensions directory
132-
uses: actions/upload-artifact@v7
132+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
133133
with:
134134
name: gubbins-web
135135
path: /tmp/gubbins-web
@@ -148,15 +148,15 @@ jobs:
148148
needs: prepare-gubbins-frontend-as-a-standalone
149149
if: ${{ github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web' }}
150150
steps:
151-
- uses: actions/checkout@v6
151+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
152152

153153
- name: Set up QEMU
154-
uses: docker/setup-qemu-action@v4
154+
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4
155155
- name: Set up Docker Buildx
156-
uses: docker/setup-buildx-action@v4
156+
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
157157

158158
- name: Login to GitHub container registry
159-
uses: docker/login-action@v4
159+
uses: docker/login-action@c99871dec2022cc055c062a10cc1a1310835ceb4 # v4
160160
with:
161161
registry: ghcr.io
162162
username: ${{ github.actor }}
@@ -166,7 +166,7 @@ jobs:
166166
# WARNING: In your CI/CD pipeline, you should remove the following steps #
167167
# ------------------------------------------------------------------------#
168168
- name: Download gubbins-web
169-
uses: actions/download-artifact@v7
169+
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
170170
with:
171171
name: gubbins-web
172172
path: /tmp/gubbins-web
@@ -175,7 +175,7 @@ jobs:
175175

176176
# In your extension, you have to push the image to the registry (check deployment.yml)
177177
- name: Build Docker image (extension example)
178-
uses: docker/build-push-action@v7
178+
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7
179179
with:
180180
context: /tmp/gubbins-web
181181
push: false
@@ -188,7 +188,7 @@ jobs:
188188
needs: [prepare-gubbins-frontend-as-a-standalone, prepare-gubbins-backend]
189189
if: github.event_name != 'push' || github.repository == 'DIRACGrid/diracx-web'
190190
steps:
191-
- uses: actions/checkout@v6
191+
- uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
192192

193193
- name: Clone source
194194
run: |
@@ -204,7 +204,7 @@ jobs:
204204
git clone https://github.com/DIRACGrid/diracx.git
205205
206206
- name: Download gubbins images
207-
uses: actions/download-artifact@v7
207+
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
208208
with:
209209
name: gubbins-images
210210
path: /tmp/
@@ -217,7 +217,7 @@ jobs:
217217
rm -f /tmp/gubbins_client_image.tar
218218
219219
- name: Download gubbins-web
220-
uses: actions/download-artifact@v7
220+
uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7
221221
with:
222222
name: gubbins-web
223223
path: /tmp/gubbins-web
@@ -287,7 +287,7 @@ jobs:
287287

288288
- name: Upload Cypress screenshots
289289
if: failure()
290-
uses: actions/upload-artifact@v7
290+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
291291
with:
292292
name: cypress-screenshots
293293
path: /tmp/gubbins-web/cypress/screenshots

‎.github/workflows/record-changes-requested.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
runs-on: ubuntu-latest
1111
steps:
1212
- run: echo "${{ github.event.pull_request.number }}" > pr_number.txt
13-
- uses: actions/upload-artifact@v7
13+
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
1414
with:
1515
name: pr-info
1616
path: pr_number.txt

0 commit comments

Comments
 (0)