diff --git a/.github/workflows/api-docs.yaml b/.github/workflows/api-docs.yaml index 23176e9e..230c2387 100644 --- a/.github/workflows/api-docs.yaml +++ b/.github/workflows/api-docs.yaml @@ -24,7 +24,7 @@ jobs: python-version: 3.x - name: Setup cache - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4 + uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: key: ${{ github.ref }} path: .cache diff --git a/.github/workflows/compliance.yml b/.github/workflows/compliance.yml index 66e5b7d9..ae7261ef 100644 --- a/.github/workflows/compliance.yml +++ b/.github/workflows/compliance.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -35,20 +35,20 @@ jobs: - name: Send license report to Fossa # This will collect all necessary information (mostly used dependencies) and send it to the Fossa API - uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # Use a specific version if locking is preferred + uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # Use a specific version if locking is preferred with: api-key: ${{ secrets.FOSSA_LICENSE_SCAN_TOKEN }} - name: Check license compliance # This will poll the Fossa API until they have processed the information which we've sent in the previous step # and fail if Fossa found an issue with the licences of our dependencies. - uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # Use a specific version if locking is preferred + uses: fossas/fossa-action@ff70fe9fe17cbd2040648f1c45e8ec4e4884dcf3 # Use a specific version if locking is preferred with: api-key: ${{ secrets.FOSSA_LICENSE_SCAN_TOKEN }} run-tests: true - name: Send Slack notification if license check failed - uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d + uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 if: failure() && github.ref == 'refs/heads/main' with: status: ${{ job.status }} diff --git a/.github/workflows/continuous-integration.yml b/.github/workflows/continuous-integration.yml index 9859ae41..6ebc8c05 100644 --- a/.github/workflows/continuous-integration.yml +++ b/.github/workflows/continuous-integration.yml @@ -14,7 +14,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -29,7 +29,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -44,7 +44,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -78,7 +78,7 @@ jobs: # for coverage comment action fetch-depth: 1000 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -88,6 +88,6 @@ jobs: run: make tests-with-cov - name: Coverage comment id: coverage_comment - uses: py-cov-action/python-coverage-comment-action@7188638f871f721a365d644f505d1ff3df20d683 + uses: py-cov-action/python-coverage-comment-action@63f52f4fbbffada6e8dee8ec432de7e01df9ba79 with: GITHUB_TOKEN: ${{ github.token }} diff --git a/.github/workflows/deploy-prod.yml b/.github/workflows/deploy-prod.yml index 5729e31a..4109c8a6 100644 --- a/.github/workflows/deploy-prod.yml +++ b/.github/workflows/deploy-prod.yml @@ -18,7 +18,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -28,6 +28,6 @@ jobs: - name: Build run: make build - name: publish - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 with: repository-url: ${{env.pypi}} diff --git a/.github/workflows/deploy-test.yml b/.github/workflows/deploy-test.yml index a54653e0..94d33eba 100644 --- a/.github/workflows/deploy-test.yml +++ b/.github/workflows/deploy-test.yml @@ -20,13 +20,13 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" - name: Build run: make build - name: Publish - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 with: repository-url: ${{ env.pypi }} diff --git a/.github/workflows/deploy.yml b/.github/workflows/deploy.yml index afb927b5..a97f895f 100644 --- a/.github/workflows/deploy.yml +++ b/.github/workflows/deploy.yml @@ -27,7 +27,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10" @@ -37,6 +37,6 @@ jobs: - name: Build run: make build - name: publish - uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # v1.13.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0 with: repository-url: ${{env.pypi}} diff --git a/.github/workflows/high-prio-bug.yml b/.github/workflows/high-prio-bug.yml index 8ff46663..3900147a 100644 --- a/.github/workflows/high-prio-bug.yml +++ b/.github/workflows/high-prio-bug.yml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Send Slack alert for high priority bug - uses: act10ns/slack@44541246747a30eb3102d87f7a4cc5471b0ffb7d + uses: act10ns/slack@d96404edccc6d6467fc7f8134a420c851b1e9054 with: status: High Priority Bug message: High Priority Bug ${{ github.event.issue.html_url }} diff --git a/.github/workflows/merge-queue.yml b/.github/workflows/merge-queue.yml index 6eb720bb..1499a9e1 100644 --- a/.github/workflows/merge-queue.yml +++ b/.github/workflows/merge-queue.yml @@ -39,7 +39,7 @@ jobs: steps: - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Install uv - uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: enable-cache: true python-version: "3.10"