Skip to content

Commit adfd09b

Browse files
quant-ranger[bot]quant-ranger[bot]
authored
chore: Pin GitHub Actions dependencies with pinact (#318)
Co-authored-by: quant-ranger[bot] <132915763+quant-ranger[bot]@users.noreply.github.com>
1 parent 232d8f4 commit adfd09b

4 files changed

Lines changed: 33 additions & 33 deletions

File tree

‎.github/workflows/build_and_publish.yaml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -17,16 +17,16 @@ jobs:
1717
strategy:
1818
fail-fast: true
1919
steps:
20-
- uses: actions/checkout@v6
20+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2121
- name: Set up pixi
22-
uses: prefix-dev/setup-pixi@v0.9.4
22+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
2323
- name: Build
2424
# It seems as though flit publish expects a .pypirc file as compared to
2525
# only a token passed as an argument.
2626
# See https://flit.pypa.io/en/latest/cmdline.html#flit-publish
2727
run: |
2828
pixi run flit build
29-
- uses: actions/upload-artifact@v6
29+
- uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
3030
with:
3131
path: dist/*
3232

@@ -40,8 +40,8 @@ jobs:
4040
environment: pypi
4141
if: github.event_name == 'release' && github.event.action == 'published'
4242
steps:
43-
- uses: actions/download-artifact@v7
43+
- uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
4444
with:
4545
name: artifact
4646
path: dist
47-
- uses: pypa/gh-action-pypi-publish@v1.13.0
47+
- uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0

‎.github/workflows/ci.yaml‎

Lines changed: 23 additions & 23 deletions
Original file line numberDiff line numberDiff line change
@@ -19,9 +19,9 @@ jobs:
1919
runs-on: ubuntu-latest
2020
steps:
2121
- name: Checkout branch
22-
uses: actions/checkout@v6
22+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2323
- name: Set up pixi
24-
uses: prefix-dev/setup-pixi@v0.9.4
24+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
2525
with:
2626
environments: default lint
2727
- name: pre-commit
@@ -47,16 +47,16 @@ jobs:
4747
runs-on: ${{ matrix.os }}
4848
steps:
4949
- name: Checkout branch
50-
uses: actions/checkout@v6
50+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5151
- name: Set up pixi
52-
uses: prefix-dev/setup-pixi@v0.9.4
52+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
5353
with:
5454
environments: ${{ matrix.env }}
5555
- run: |
5656
pixi run -e ${{ matrix.env }} postinstall
5757
pixi run -e ${{ matrix.env }} coverage --color=yes
5858
- name: Generate code coverage report
59-
uses: codecov/codecov-action@v5.5.2
59+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
6060
with:
6161
file: ./coverage.xml
6262
token: ${{ secrets.CODECOV_TOKEN }}
@@ -86,9 +86,9 @@ jobs:
8686
- 1433:1433
8787
steps:
8888
- name: Checkout branch
89-
uses: actions/checkout@v6
89+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9090
- name: Set up pixi
91-
uses: prefix-dev/setup-pixi@v0.9.4
91+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
9292
with:
9393
environments: ${{ matrix.env }}
9494
- name: Wait for SQL Server
@@ -98,7 +98,7 @@ jobs:
9898
pixi run -e ${{ matrix.env }} postinstall
9999
pixi run -e ${{ matrix.env }} coverage --color=yes
100100
- name: Generate code coverage report
101-
uses: codecov/codecov-action@v5.5.2
101+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
102102
with:
103103
file: ./coverage.xml
104104
token: ${{ secrets.CODECOV_TOKEN }}
@@ -132,16 +132,16 @@ jobs:
132132
- 5432:5432
133133
steps:
134134
- name: Checkout branch
135-
uses: actions/checkout@v6
135+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
136136
- name: Set up pixi
137-
uses: prefix-dev/setup-pixi@v0.9.4
137+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
138138
with:
139139
environments: ${{ matrix.env }}
140140
- run: |
141141
pixi run -e ${{ matrix.env }} postinstall
142142
pixi run -e ${{ matrix.env }} coverage --color=yes
143143
- name: Generate code coverage report
144-
uses: codecov/codecov-action@v5.5.2
144+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
145145
with:
146146
file: ./coverage.xml
147147
token: ${{ secrets.CODECOV_TOKEN }}
@@ -176,9 +176,9 @@ jobs:
176176

177177
steps:
178178
- name: Checkout branch
179-
uses: actions/checkout@v6
179+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
180180
- name: Set up pixi
181-
uses: prefix-dev/setup-pixi@v0.9.4
181+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
182182
with:
183183
environments: ${{ matrix.env }}
184184
- name: Wait for db2 to load
@@ -188,7 +188,7 @@ jobs:
188188
pixi run -e ${{ matrix.env }} postinstall
189189
pixi run -e ${{ matrix.env }} coverage --color=yes
190190
- name: Generate code coverage report
191-
uses: codecov/codecov-action@v5.5.2
191+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
192192
with:
193193
file: ./coverage.xml
194194
token: ${{ secrets.CODECOV_TOKEN }}
@@ -208,16 +208,16 @@ jobs:
208208
- snowflake-py310
209209
steps:
210210
- name: Checkout branch
211-
uses: actions/checkout@v6
211+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
212212
- name: Set up pixi
213-
uses: prefix-dev/setup-pixi@v0.9.4
213+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
214214
with:
215215
environments: ${{ matrix.env }}
216216
- run: |
217217
pixi run -e ${{ matrix.env }} postinstall
218218
pixi run -e ${{ matrix.env }} coverage --color=yes
219219
- name: Generate code coverage report
220-
uses: codecov/codecov-action@v5.5.2
220+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
221221
with:
222222
file: ./coverage.xml
223223
token: ${{ secrets.CODECOV_TOKEN }}
@@ -235,16 +235,16 @@ jobs:
235235
- duckdb-sa2
236236
steps:
237237
- name: Checkout branch
238-
uses: actions/checkout@v6
238+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
239239
- name: Set up pixi
240-
uses: prefix-dev/setup-pixi@v0.9.4
240+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
241241
with:
242242
environments: ${{ matrix.env }}
243243
- run: |
244244
pixi run -e ${{ matrix.env }} postinstall
245245
pixi run -e ${{ matrix.env }} coverage --color=yes
246246
- name: Generate code coverage report
247-
uses: codecov/codecov-action@v5.5.2
247+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
248248
with:
249249
file: ./coverage.xml
250250
token: ${{ secrets.CODECOV_TOKEN }}
@@ -262,20 +262,20 @@ jobs:
262262
- bigquery-sa2
263263
steps:
264264
- name: Checkout branch
265-
uses: actions/checkout@v6
265+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
266266
- name: "Authenticate to Google Cloud"
267267
uses: "google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093"
268268
with:
269269
credentials_json: "${{ secrets.GCP_KEY }}"
270270
- name: Set up pixi
271-
uses: prefix-dev/setup-pixi@v0.9.4
271+
uses: prefix-dev/setup-pixi@a0af7a228712d6121d37aba47adf55c1332c9c2e # v0.9.4
272272
with:
273273
environments: ${{ matrix.env }}
274274
- run: |
275275
pixi run -e ${{ matrix.env }} postinstall
276276
pixi run -e ${{ matrix.env }} coverage
277277
- name: Generate code coverage report
278-
uses: codecov/codecov-action@v5.5.2
278+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
279279
with:
280280
file: ./coverage.xml
281281
token: ${{ secrets.CODECOV_TOKEN }}

‎.github/workflows/codeql.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -40,11 +40,11 @@ jobs:
4040

4141
steps:
4242
- name: Checkout repository
43-
uses: actions/checkout@v6
43+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4444

4545
# Initializes the CodeQL tools for scanning.
4646
- name: Initialize CodeQL
47-
uses: github/codeql-action/init@v4
47+
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
4848
with:
4949
languages: ${{ matrix.language }}
5050
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -57,7 +57,7 @@ jobs:
5757
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
5858
# If this step fails, then you should remove it and run the build manually (see below)
5959
- name: Autobuild
60-
uses: github/codeql-action/autobuild@v4
60+
uses: github/codeql-action/autobuild@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
6161

6262
# ℹ️ Command-line programs to run using the OS shell.
6363
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -70,6 +70,6 @@ jobs:
7070
# ./location_of_script_within_repo/buildscript.sh
7171

7272
- name: Perform CodeQL Analysis
73-
uses: github/codeql-action/analyze@v4
73+
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # v4.32.4
7474
with:
7575
category: "/language:${{matrix.language}}"

‎.github/workflows/docs.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
runs-on: ubuntu-latest
1212
steps:
1313
- name: Checkout branch
14-
uses: actions/checkout@v6
14+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1515
- name: Set up pixi
1616
uses: prefix-dev/setup-pixi@33be5bafa68042a7d0747866e21e5a686bf961a1
1717
with:

0 commit comments

Comments
 (0)