@@ -58,21 +58,21 @@ jobs:
5858 UV_PYTHON : ${{ matrix.python-version }}
5959 UV_RESOLUTION : ${{ matrix.uv-resolution }}
6060 steps :
61- - uses : actions/checkout@v6
61+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6262 - name : Set up Python
63- uses : actions/setup-python@v6
63+ uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
6464 with :
6565 python-version : ${{ matrix.python-version }}
6666 - name : Setup uv
67- uses : astral-sh/setup-uv@v7
67+ uses : astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
6868 with :
6969 enable-cache : true
7070 cache-dependency-glob : |
7171 pyproject.toml
7272 uv.lock
7373 # Allow debugging with tmate
7474 - name : Setup tmate session
75- uses : mxschmitt/action-tmate@v3
75+ uses : mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
7676 if : ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
7777 with :
7878 limit-access-to-actor : true
8787 COVERAGE_FILE : coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}
8888 CONTEXT : ${{ runner.os }}-py${{ matrix.python-version }}
8989 - name : Store coverage files
90- uses : actions/upload-artifact@v7
90+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9191 with :
9292 name : coverage-${{ runner.os }}-${{ matrix.python-version }}
9393 path : coverage
@@ -98,26 +98,26 @@ jobs:
9898 - test
9999 runs-on : ubuntu-latest
100100 steps :
101- - uses : actions/checkout@v6
102- - uses : actions/setup-python@v6
101+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
102+ - uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
103103 with :
104104 python-version-file : " .python-version"
105105 - name : Setup uv
106- uses : astral-sh/setup-uv@v7
106+ uses : astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
107107 with :
108108 enable-cache : true
109109 cache-dependency-glob : |
110110 pyproject.toml
111111 uv.lock
112112 - name : Get coverage files
113- uses : actions/download-artifact@v8
113+ uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
114114 with :
115115 pattern : coverage-*
116116 path : coverage
117117 merge-multiple : true
118118 # Allow debugging with tmate
119119 - name : Setup tmate session
120- uses : mxschmitt/action-tmate@v3
120+ uses : mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
121121 if : ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
122122 with :
123123 limit-access-to-actor : true
@@ -127,7 +127,7 @@ jobs:
127127 - run : uv run coverage combine coverage
128128 - run : uv run coverage html --title "Coverage for ${{ github.sha }}"
129129 - name : Store coverage HTML
130- uses : actions/upload-artifact@v7
130+ uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
131131 with :
132132 name : coverage-html
133133 path : htmlcov
@@ -142,6 +142,6 @@ jobs:
142142 runs-on : ubuntu-latest
143143 steps :
144144 - name : Decide whether the needed jobs succeeded or failed
145- uses : re-actors/alls-green@release/v1
145+ uses : re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
146146 with :
147147 jobs : ${{ toJSON(needs) }}
0 commit comments