Skip to content

Commit f724e37

Browse files
chore(deps): pin dependencies
1 parent 8adaab1 commit f724e37

12 files changed

Lines changed: 60 additions & 60 deletions

.github/workflows/beta_release.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,13 @@ jobs:
1818
runs-on: ubuntu-latest
1919
steps:
2020
- name: Checkout
21-
uses: actions/checkout@v7
21+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
2222
with:
2323
fetch-depth: 0
2424

2525
- name: Create or update ref
2626
id: create-or-update-ref
27-
uses: ovsds/create-or-update-ref-action@v1
27+
uses: ovsds/create-or-update-ref-action@1157b2991820188d5a8e6f22656775d1d171f762 # v1
2828
with:
2929
ref: tags/beta
3030
sha: ${{ github.sha }}
@@ -51,7 +51,7 @@ jobs:
5151
gh release upload beta "CHANGELOG.md" --clobber
5252
5353
- name: Upload assets to github artifact
54-
uses: actions/upload-artifact@v7
54+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
5555
with:
5656
name: beta changelog
5757
path: ${{ github.workspace }}/CHANGELOG.md
@@ -108,12 +108,12 @@ jobs:
108108
runs-on: ubuntu-latest
109109
steps:
110110
- name: Checkout
111-
uses: actions/checkout@v7
111+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
112112
with:
113113
fetch-depth: 0
114114

115115
- name: Setup Go
116-
uses: actions/setup-go@v6
116+
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
117117
with:
118118
go-version: "1.26.4"
119119

@@ -124,7 +124,7 @@ jobs:
124124
FRONTEND_REPO: ${{ vars.FRONTEND_REPO }}
125125

126126
- name: Build
127-
uses: OpenListTeam/cgo-actions@v1.2.5
127+
uses: OpenListTeam/cgo-actions@6fcace5934c36d70503dba06e2396bb58b766130 # v1.2.5
128128
with:
129129
targets: ${{ matrix.target }}
130130
flags: ${{ matrix.flags || '-ldflags=' }}
@@ -185,7 +185,7 @@ jobs:
185185
echo "cleaned_target=$CLEANED_TARGET" >> $GITHUB_ENV
186186
187187
- name: Upload assets to github artifact
188-
uses: actions/upload-artifact@v7
188+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
189189
with:
190190
name: beta builds for ${{ env.cleaned_target }}
191191
path: ${{ github.workspace }}/build/compress/*

.github/workflows/build.yml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,13 +25,13 @@ jobs:
2525
runs-on: ubuntu-latest
2626
steps:
2727
- name: Checkout
28-
uses: actions/checkout@v7
28+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
2929

30-
- uses: benjlevesque/short-sha@v3.0
30+
- uses: benjlevesque/short-sha@599815c8ee942a9616c92bcfb4f947a3b670ab0b # v3.0
3131
id: short-sha
3232

3333
- name: Setup Go
34-
uses: actions/setup-go@v6
34+
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
3535
with:
3636
go-version: "1.26.4"
3737

@@ -42,7 +42,7 @@ jobs:
4242
FRONTEND_REPO: ${{ vars.FRONTEND_REPO }}
4343

4444
- name: Build
45-
uses: OpenListTeam/cgo-actions@v1.2.5
45+
uses: OpenListTeam/cgo-actions@6fcace5934c36d70503dba06e2396bb58b766130 # v1.2.5
4646
with:
4747
targets: ${{ matrix.target }}
4848
flags: ${{ contains(matrix.target, '-musl') && '-ldflags=-linkmode external -extldflags ''-static -fpic''' || '-ldflags=' }}
@@ -69,7 +69,7 @@ jobs:
6969
fi
7070
7171
- name: Upload artifact
72-
uses: actions/upload-artifact@v7
72+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
7373
with:
7474
name: openlist_${{ steps.short-sha.outputs.sha }}_${{ matrix.target }}
7575
path: build/*

.github/workflows/changelog.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
runs-on: ubuntu-latest
1515
steps:
1616
- name: Checkout code
17-
uses: actions/checkout@v7
17+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
1818
with:
1919
fetch-depth: 0
2020

.github/workflows/issue_pr_comment.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
if: github.event_name == 'issues'
1717
steps:
1818
- name: Check issue for unchecked tasks and reply
19-
uses: actions/github-script@v9
19+
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
2020
with:
2121
script: |
2222
let comment = "";
@@ -81,7 +81,7 @@ jobs:
8181
if: github.event_name == 'pull_request'
8282
steps:
8383
- name: Check PR title for required prefix and comment
84-
uses: actions/github-script@v9
84+
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9
8585
with:
8686
script: |
8787
const title = context.payload.pull_request.title || "";

.github/workflows/release.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
runs-on: ubuntu-latest
1515
steps:
1616
- name: Prerelease
17-
uses: irongut/EditRelease@v1.2.0
17+
uses: irongut/EditRelease@ccf529ad26dddf9996e7dd0f24ca5da4ea507cc2 # v1.2.0
1818
with:
1919
token: ${{ secrets.GITHUB_TOKEN }}
2020
id: ${{ github.event.release.id }}
@@ -33,7 +33,7 @@ jobs:
3333

3434
- name: Free Disk Space (Ubuntu)
3535
if: matrix.target-platform == ''
36-
uses: jlumbroso/free-disk-space@main
36+
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # main
3737
with:
3838
tool-cache: false
3939
android: true
@@ -44,12 +44,12 @@ jobs:
4444
swap-storage: true
4545

4646
- name: Setup Go
47-
uses: actions/setup-go@v6
47+
uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
4848
with:
4949
go-version: '1.26.4'
5050

5151
- name: Checkout
52-
uses: actions/checkout@v7
52+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
5353
with:
5454
fetch-depth: 1
5555
fetch-tags: true

.github/workflows/release_docker.yml

Lines changed: 24 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -43,15 +43,15 @@ jobs:
4343
runs-on: ubuntu-latest
4444
steps:
4545
- name: Checkout
46-
uses: actions/checkout@v7
46+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
4747

48-
- uses: actions/setup-go@v6
48+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
4949
with:
5050
go-version: '1.26'
5151

5252
- name: Cache Musl
5353
id: cache-musl
54-
uses: actions/cache@v6
54+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
5555
with:
5656
path: build/musl-libs
5757
key: docker-musl-libs-v2
@@ -69,7 +69,7 @@ jobs:
6969
FRONTEND_REPO: ${{ vars.FRONTEND_REPO }}
7070

7171
- name: Upload artifacts
72-
uses: actions/upload-artifact@v7
72+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
7373
with:
7474
name: ${{ env.ARTIFACT_NAME }}
7575
overwrite: true
@@ -83,15 +83,15 @@ jobs:
8383
runs-on: ubuntu-latest
8484
steps:
8585
- name: Checkout
86-
uses: actions/checkout@v7
86+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
8787

88-
- uses: actions/setup-go@v6
88+
- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
8989
with:
9090
go-version: '1.26.4'
9191

9292
- name: Cache Musl
9393
id: cache-musl
94-
uses: actions/cache@v6
94+
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6
9595
with:
9696
path: build/musl-libs
9797
key: docker-musl-libs-v2
@@ -109,7 +109,7 @@ jobs:
109109
FRONTEND_REPO: ${{ vars.FRONTEND_REPO }}
110110

111111
- name: Upload artifacts
112-
uses: actions/upload-artifact@v7
112+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
113113
with:
114114
name: ${{ env.ARTIFACT_NAME_LITE }}
115115
overwrite: true
@@ -146,36 +146,36 @@ jobs:
146146
tag_favor: "suffix=-aio,onlatest=true"
147147
steps:
148148
- name: Checkout
149-
uses: actions/checkout@v7
150-
- uses: actions/download-artifact@v8
149+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
150+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
151151
with:
152152
name: ${{ env.ARTIFACT_NAME }}
153153
path: 'build/'
154154

155155
- name: Set up QEMU
156-
uses: docker/setup-qemu-action@v3
156+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
157157

158158
- name: Set up Docker Buildx
159-
uses: docker/setup-buildx-action@v3
159+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
160160

161161
- name: Login to GitHub Container Registry
162162
if: env.IMAGE_PUSH == 'true'
163-
uses: docker/login-action@v3
163+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
164164
with:
165165
registry: ${{ env.REGISTRY }}
166166
username: ${{ github.actor }}
167167
password: ${{ secrets.GITHUB_TOKEN }}
168168

169169
- name: Login to DockerHub Container Registry
170170
if: env.IMAGE_PUSH == 'true'
171-
uses: docker/login-action@v3
171+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
172172
with:
173173
username: ${{ vars.DOCKERHUB_ORG_NAME_BACKUP || env.DOCKERHUB_ORG_NAME }}
174174
password: ${{ secrets.DOCKERHUB_TOKEN }}
175175

176176
- name: Docker meta
177177
id: meta
178-
uses: docker/metadata-action@v5
178+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
179179
with:
180180
images: |
181181
${{ env.REGISTRY }}/${{ env.GHCR_ORG_NAME }}/${{ env.IMAGE_NAME }}
@@ -190,7 +190,7 @@ jobs:
190190
191191
- name: Build and push
192192
id: docker_build
193-
uses: docker/build-push-action@v6
193+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
194194
with:
195195
context: .
196196
file: Dockerfile.ci
@@ -230,36 +230,36 @@ jobs:
230230
tag_favor: "suffix=-lite-aio,onlatest=true"
231231
steps:
232232
- name: Checkout
233-
uses: actions/checkout@v7
234-
- uses: actions/download-artifact@v8
233+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
234+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
235235
with:
236236
name: ${{ env.ARTIFACT_NAME_LITE }}
237237
path: 'build/'
238238

239239
- name: Set up QEMU
240-
uses: docker/setup-qemu-action@v3
240+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
241241

242242
- name: Set up Docker Buildx
243-
uses: docker/setup-buildx-action@v3
243+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
244244

245245
- name: Login to GitHub Container Registry
246246
if: env.IMAGE_PUSH == 'true'
247-
uses: docker/login-action@v3
247+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
248248
with:
249249
registry: ${{ env.REGISTRY }}
250250
username: ${{ github.actor }}
251251
password: ${{ secrets.GITHUB_TOKEN }}
252252

253253
- name: Login to DockerHub Container Registry
254254
if: env.IMAGE_PUSH == 'true'
255-
uses: docker/login-action@v3
255+
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
256256
with:
257257
username: ${{ vars.DOCKERHUB_ORG_NAME_BACKUP || env.DOCKERHUB_ORG_NAME }}
258258
password: ${{ secrets.DOCKERHUB_TOKEN }}
259259

260260
- name: Docker meta
261261
id: meta
262-
uses: docker/metadata-action@v5
262+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5
263263
with:
264264
images: |
265265
${{ env.REGISTRY }}/${{ env.GHCR_ORG_NAME }}/${{ env.IMAGE_NAME }}
@@ -274,7 +274,7 @@ jobs:
274274
275275
- name: Build and push
276276
id: docker_build
277-
uses: docker/build-push-action@v6
277+
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
278278
with:
279279
context: .
280280
file: Dockerfile.ci

.github/workflows/sync_repo.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
name: Sync GitHub to Gitee
1313
steps:
1414
- name: Checkout
15-
uses: actions/checkout@v7
15+
uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
1616
with:
1717
fetch-depth: 0
1818

0 commit comments

Comments
 (0)