From d9a516127cbebbbecc788d74ee2a24c99ea86d92 Mon Sep 17 00:00:00 2001 From: Robbert Broersma Date: Sun, 15 Sep 2024 21:59:48 +0200 Subject: [PATCH] build: upgrade github actions and use hash signatures --- .../workflows/block-autosquash-commits.yml | 2 +- .github/workflows/commit-lint.yml | 4 +- .github/workflows/continuous-delivery.yml | 44 +++++++++---------- .github/workflows/semantic-pull-requests.yml | 6 +-- 4 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/block-autosquash-commits.yml b/.github/workflows/block-autosquash-commits.yml index a12b4e8fd13..b3499d831db 100644 --- a/.github/workflows/block-autosquash-commits.yml +++ b/.github/workflows/block-autosquash-commits.yml @@ -13,6 +13,6 @@ jobs: steps: - name: Block Autosquash Commits - uses: xt0rted/block-autosquash-commits-action@v2.2.0 + uses: xt0rted/block-autosquash-commits-action@79880c36b4811fe549cfffe20233df88876024e7 # v2.2.0 with: repo-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/commit-lint.yml b/.github/workflows/commit-lint.yml index 0a93e8898d0..79fb33f5937 100644 --- a/.github/workflows/commit-lint.yml +++ b/.github/workflows/commit-lint.yml @@ -5,5 +5,5 @@ jobs: commitlint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: wagoid/commitlint-github-action@v5 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.6 + - uses: wagoid/commitlint-github-action@9763196e10f27aef304c9b8b660d31d97fce0f99 # v5.5.1 diff --git a/.github/workflows/continuous-delivery.yml b/.github/workflows/continuous-delivery.yml index 1446ffe1e5e..c5bc170afac 100644 --- a/.github/workflows/continuous-delivery.yml +++ b/.github/workflows/continuous-delivery.yml @@ -16,13 +16,13 @@ jobs: steps: - name: Checkout branch - uses: actions/checkout@v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.6 - name: Install pnpm - uses: pnpm/action-setup@v4.0.0 + uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 #v4.0.0 - name: Set up Node.js version - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version-file: .nvmrc cache: pnpm @@ -40,13 +40,13 @@ jobs: steps: - name: Checkout branch - uses: actions/checkout@v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.6 - name: Install pnpm - uses: pnpm/action-setup@v4.0.0 + uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 #v4.0.0 - name: Set up Node.js version - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version-file: .nvmrc cache: pnpm @@ -67,13 +67,13 @@ jobs: steps: - name: Checkout branch - uses: actions/checkout@v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.6 - name: Install pnpm - uses: pnpm/action-setup@v4.0.0 + uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 #v4.0.0 - name: Set up Node.js version - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version-file: .nvmrc cache: pnpm @@ -115,14 +115,14 @@ jobs: path: packages/design-system-website/dist/ - name: "Retain build artifact: website" - uses: actions/upload-artifact@v4.3.3 + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0 with: name: website path: packages/design-system-website/dist/ retention-days: 1 - name: "Retain build artifact: storybook" - uses: actions/upload-artifact@v4.3.3 + uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0 with: name: storybook path: packages/storybook/dist/ @@ -136,13 +136,13 @@ jobs: steps: - name: Checkout branch - uses: actions/checkout@v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.6 - name: Install pnpm - uses: pnpm/action-setup@v4.0.0 + uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 #v4.0.0 - name: Set up Node.js version - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version-file: .nvmrc cache: pnpm @@ -168,15 +168,15 @@ jobs: steps: - name: Checkout branch - uses: actions/checkout@v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.6 with: fetch-depth: 0 - name: Install pnpm - uses: pnpm/action-setup@v4.0.0 + uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 #v4.0.0 - name: Set up Node.js version - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version-file: .nvmrc cache: pnpm @@ -192,7 +192,7 @@ jobs: pnpm run --if-present build - name: Publish to Chromatic - uses: chromaui/action@v11.3.5 + uses: chromaui/action@6eca23b4399151ac2cfc17fa95190d807c7e9519 # v11.10.2 if: github.event.pull_request.draft == false with: autoAcceptChanges: ${{ env.MAIN_BRANCH }} @@ -226,15 +226,15 @@ jobs: steps: - name: Checkout release branch - uses: actions/checkout@v4.1.6 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.6 with: token: ${{ secrets.GH_TOKEN }} - name: Install pnpm - uses: pnpm/action-setup@v4.0.0 + uses: pnpm/action-setup@fe02b34f77f8bc703788d5817da081398fad5dd2 #v4.0.0 - name: Set up Node.js version - uses: actions/setup-node@v4.0.2 + uses: actions/setup-node@1e60f620b9541d16bece96c5465dc8ee9832be0b # v4.0.3 with: node-version-file: .nvmrc cache: pnpm @@ -261,7 +261,7 @@ jobs: # pnpm run release - name: "Continuous Deployment: publish changeset to GitHub repository" - uses: changesets/action@v1.4.7 + uses: changesets/action@3de3850952bec538fde60aac71731376e57b9b57 # v1.4.8 id: changeset env: GITHUB_TOKEN: ${{ secrets.GH_TOKEN }} diff --git a/.github/workflows/semantic-pull-requests.yml b/.github/workflows/semantic-pull-requests.yml index 8c5614f16e2..6629caa053b 100644 --- a/.github/workflows/semantic-pull-requests.yml +++ b/.github/workflows/semantic-pull-requests.yml @@ -9,15 +9,15 @@ jobs: steps: - name: Validate PR title - uses: amannn/action-semantic-pull-request@v5 + uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # v5.5.3 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: validateSingleCommit: true validateSingleCommitMatchesPrTitle: true - name: Checkout branch - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: fetch-depth: 0 - name: Validate commit messages - uses: wagoid/commitlint-github-action@v5 + uses: wagoid/commitlint-github-action@9763196e10f27aef304c9b8b660d31d97fce0f99 # v5.5.1