1111 - ' main'
1212 - ' 3.*'
1313
14- permissions :
15- contents : read
14+ permissions : {}
1615
1716concurrency :
1817 # https://docs.github.com/en/actions/writing-workflows/workflow-syntax-for-github-actions#concurrency
6463 run : |
6564 apt update && apt install git -yq
6665 git config --global --add safe.directory "$GITHUB_WORKSPACE"
67- - uses : actions/checkout@v6
66+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
6867 with :
6968 fetch-depth : 1
7069 persist-credentials : false
@@ -101,10 +100,10 @@ jobs:
101100 needs : build-context
102101 if : needs.build-context.outputs.run-tests == 'true'
103102 steps :
104- - uses : actions/checkout@v6
103+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
105104 with :
106105 persist-credentials : false
107- - uses : actions/setup-python@v6
106+ - uses : actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
108107 with :
109108 python-version : ' 3.x'
110109 - name : Runner image version
@@ -206,16 +205,16 @@ jobs:
206205 strategy :
207206 fail-fast : false
208207 matrix :
209- # macos-26 is Apple Silicon, macos-26 -intel is Intel.
210- # macos-26 -intel only runs tests against the GIL-enabled CPython.
208+ # macos-26 is Apple Silicon, macos-15 -intel is Intel.
209+ # macos-15 -intel only runs tests against the GIL-enabled CPython.
211210 os :
212211 - macos-26
213- - macos-26 -intel
212+ - macos-15 -intel
214213 free-threading :
215214 - false
216215 - true
217216 exclude :
218- - os : macos-26 -intel
217+ - os : macos-15 -intel
219218 free-threading : true
220219 uses : ./.github/workflows/reusable-macos.yml
221220 with :
@@ -291,7 +290,7 @@ jobs:
291290 SSLLIB_DIR : ${{ github.workspace }}/multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}
292291 LD_LIBRARY_PATH : ${{ github.workspace }}/multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}/lib
293292 steps :
294- - uses : actions/checkout@v6
293+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
295294 with :
296295 persist-credentials : false
297296 - name : Runner image version
@@ -302,7 +301,7 @@ jobs:
302301 run : sudo ./.github/workflows/posix-deps-apt.sh
303302 - name : ' Restore SSL library build'
304303 id : cache-ssl-lib
305- uses : actions/cache@v5
304+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
306305 with :
307306 path : ./multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}
308307 key : ${{ matrix.os }}-multissl-${{ matrix.ssllib.name }}-${{ matrix.ssllib.version }}
@@ -350,7 +349,7 @@ jobs:
350349
351350 runs-on : ${{ matrix.runs-on }}
352351 steps :
353- - uses : actions/checkout@v6
352+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
354353 with :
355354 persist-credentials : false
356355 - name : Build and test
@@ -363,7 +362,7 @@ jobs:
363362 timeout-minutes : 60
364363 runs-on : macos-14
365364 steps :
366- - uses : actions/checkout@v6
365+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
367366 with :
368367 persist-credentials : false
369368
@@ -401,7 +400,7 @@ jobs:
401400 OPENSSL_VER : 3.5.5
402401 PYTHONSTRICTEXTENSIONBUILD : 1
403402 steps :
404- - uses : actions/checkout@v6
403+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
405404 with :
406405 persist-credentials : false
407406 - name : Register gcc problem matcher
@@ -415,7 +414,7 @@ jobs:
415414 echo "LD_LIBRARY_PATH=${GITHUB_WORKSPACE}/multissl/openssl/${OPENSSL_VER}/lib" >> "$GITHUB_ENV"
416415 - name : ' Restore OpenSSL build'
417416 id : cache-openssl
418- uses : actions/cache@v5
417+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
419418 with :
420419 path : ./multissl/openssl/${{ env.OPENSSL_VER }}
421420 key : ${{ runner.os }}-multissl-openssl-${{ env.OPENSSL_VER }}
@@ -462,7 +461,7 @@ jobs:
462461 ./python -m venv "$VENV_LOC" && "$VENV_PYTHON" -m pip install -r "${GITHUB_WORKSPACE}/Tools/requirements-hypothesis.txt"
463462 - name : ' Restore Hypothesis database'
464463 id : cache-hypothesis-database
465- uses : actions/cache@v5
464+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
466465 with :
467466 path : ${{ env.CPYTHON_BUILDDIR }}/.hypothesis/
468467 key : hypothesis-database-${{ github.head_ref || github.run_id }}
@@ -489,7 +488,7 @@ jobs:
489488 -x test_subprocess \
490489 -x test_signal \
491490 -x test_sysconfig
492- - uses : actions/upload-artifact@v7
491+ - uses : actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
493492 if : always()
494493 with :
495494 name : hypothesis-example-db
@@ -510,7 +509,7 @@ jobs:
510509 PYTHONSTRICTEXTENSIONBUILD : 1
511510 ASAN_OPTIONS : detect_leaks=0:allocator_may_return_null=1:handle_segv=0
512511 steps :
513- - uses : actions/checkout@v6
512+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
514513 with :
515514 persist-credentials : false
516515 - name : Runner image version
@@ -520,7 +519,7 @@ jobs:
520519 - name : Install dependencies
521520 run : sudo ./.github/workflows/posix-deps-apt.sh
522521 - name : Set up GCC-10 for ASAN
523- uses : egor-tensin/setup-gcc@v2
522+ uses : egor-tensin/setup-gcc@a2861a8b8538f49cf2850980acccf6b05a1b2ae4 # v2.0
524523 with :
525524 version : 10
526525 - name : Configure OpenSSL env vars
@@ -530,7 +529,7 @@ jobs:
530529 echo "LD_LIBRARY_PATH=${GITHUB_WORKSPACE}/multissl/openssl/${OPENSSL_VER}/lib" >> "$GITHUB_ENV"
531530 - name : ' Restore OpenSSL build'
532531 id : cache-openssl
533- uses : actions/cache@v5
532+ uses : actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
534533 with :
535534 path : ./multissl/openssl/${{ env.OPENSSL_VER }}
536535 key : ${{ matrix.os }}-multissl-openssl-${{ env.OPENSSL_VER }}
@@ -577,7 +576,7 @@ jobs:
577576 needs : build-context
578577 if : needs.build-context.outputs.run-ubuntu == 'true'
579578 steps :
580- - uses : actions/checkout@v6
579+ - uses : actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
581580 with :
582581 persist-credentials : false
583582 - name : Runner image version
0 commit comments