From fcc41b2262cc083a34150f726667883dbc1023e1 Mon Sep 17 00:00:00 2001 From: Kay Robbins Date: Tue, 14 Apr 2026 15:06:20 -0500 Subject: [PATCH] Pinned actions to SHA hashes --- .github/workflows/ci.yaml | 4 ++-- .github/workflows/ci_cov.yaml | 6 +++--- .github/workflows/ci_windows.yaml | 4 ++-- .github/workflows/docs.yaml | 10 +++++----- .github/workflows/links.yaml | 6 +++--- .github/workflows/mdformat.yaml | 4 ++-- .github/workflows/notebook_tests.yaml | 4 ++-- .github/workflows/ruff.yaml | 4 ++-- .github/workflows/spec_tests.yaml | 4 ++-- .github/workflows/test_installer.yaml | 4 ++-- .github/workflows/typos.yaml | 4 ++-- 11 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index e8f23b7b..6836cd27 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -38,12 +38,12 @@ jobs: runs-on: ${{ matrix.platform }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: submodules: true - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: ${{ matrix.python-version }} enable-cache: true diff --git a/.github/workflows/ci_cov.yaml b/.github/workflows/ci_cov.yaml index 06d84b24..169e6b78 100644 --- a/.github/workflows/ci_cov.yaml +++ b/.github/workflows/ci_cov.yaml @@ -19,12 +19,12 @@ jobs: runs-on: ${{ matrix.platform }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: submodules: true - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: ${{ matrix.python-version }} enable-cache: true @@ -56,7 +56,7 @@ jobs: # Upload coverage to qlty - name: Upload coverage to qlty - uses: qltysh/qlty-action/coverage@v2 + uses: qltysh/qlty-action/coverage@a19242102d17e497f437d7466aa01b528537e899 # v2 with: oidc: true files: coverage.xml diff --git a/.github/workflows/ci_windows.yaml b/.github/workflows/ci_windows.yaml index 55f671ed..3e3a28a6 100644 --- a/.github/workflows/ci_windows.yaml +++ b/.github/workflows/ci_windows.yaml @@ -19,12 +19,12 @@ jobs: runs-on: ${{ matrix.platform }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: submodules: false - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: ${{ matrix.python-version }} enable-cache: true diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index 558cfb7e..ef9cbda9 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -19,12 +19,12 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: fetch-depth: 0 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: '3.10' enable-cache: true @@ -48,10 +48,10 @@ jobs: sphinx-build -b html docs docs/_build/html - name: Setup Pages - uses: actions/configure-pages@v6 + uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6 - name: Upload artifact - uses: actions/upload-pages-artifact@v4 + uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5 with: path: ./docs/_build/html @@ -78,4 +78,4 @@ jobs: - name: Deploy to GitHub Pages # This is the official action for deploying the artifact to GitHub Pages id: deployment - uses: actions/deploy-pages@v5 + uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5 diff --git a/.github/workflows/links.yaml b/.github/workflows/links.yaml index 529ca6ca..c4b2b89c 100644 --- a/.github/workflows/links.yaml +++ b/.github/workflows/links.yaml @@ -17,10 +17,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: '3.12' enable-cache: true @@ -40,7 +40,7 @@ jobs: - name: Link Checker id: lychee - uses: lycheeverse/lychee-action@v2.8.0 + uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2.8.0 with: args: --config lychee.toml --verbose --no-progress --max-redirects 10 'docs/_build/html/**/*.html' README.md RELEASE_GUIDE.md CONTRIBUTING.md fail: true diff --git a/.github/workflows/mdformat.yaml b/.github/workflows/mdformat.yaml index 49911075..29dcd13d 100644 --- a/.github/workflows/mdformat.yaml +++ b/.github/workflows/mdformat.yaml @@ -17,10 +17,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: '3.12' enable-cache: true diff --git a/.github/workflows/notebook_tests.yaml b/.github/workflows/notebook_tests.yaml index f3c2755d..23963992 100644 --- a/.github/workflows/notebook_tests.yaml +++ b/.github/workflows/notebook_tests.yaml @@ -28,12 +28,12 @@ jobs: python-version: ["3.10", "3.13"] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: submodules: true - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: ${{ matrix.python-version }} enable-cache: true diff --git a/.github/workflows/ruff.yaml b/.github/workflows/ruff.yaml index a8bb085b..d6ba2666 100644 --- a/.github/workflows/ruff.yaml +++ b/.github/workflows/ruff.yaml @@ -15,10 +15,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: "3.12" enable-cache: true diff --git a/.github/workflows/spec_tests.yaml b/.github/workflows/spec_tests.yaml index ab92943f..79f33550 100644 --- a/.github/workflows/spec_tests.yaml +++ b/.github/workflows/spec_tests.yaml @@ -20,12 +20,12 @@ jobs: steps: - name: Checkout hed-python - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: submodules: true - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: ${{ matrix.python-version }} enable-cache: true diff --git a/.github/workflows/test_installer.yaml b/.github/workflows/test_installer.yaml index 3bd93d87..55013a53 100644 --- a/.github/workflows/test_installer.yaml +++ b/.github/workflows/test_installer.yaml @@ -16,9 +16,9 @@ jobs: python-version: ["3.10", "3.13"] steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: python-version: ${{ matrix.python-version }} enable-cache: true diff --git a/.github/workflows/typos.yaml b/.github/workflows/typos.yaml index f77f6b38..6c95bf14 100644 --- a/.github/workflows/typos.yaml +++ b/.github/workflows/typos.yaml @@ -17,10 +17,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7 with: enable-cache: true cache-dependency-glob: "**/pyproject.toml"