Skip to content

Commit 6f596ce

Browse files
adhami3310adhami3310
authored
pin actions (#6)
1 parent c6823b0 commit 6f596ce

1 file changed

Lines changed: 39 additions & 60 deletions

File tree

‎.github/workflows/CI.yml‎

Lines changed: 39 additions & 60 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# This file is autogenerated by maturin v1.13.1
1+
# This file is autogenerated by maturin v1.13.3
22
# To update, run
33
#
44
# maturin generate-ci github
@@ -37,26 +37,26 @@ jobs:
3737
- runner: ubuntu-22.04
3838
target: ppc64le
3939
steps:
40-
- uses: actions/checkout@v6
41-
- uses: actions/setup-python@v6
40+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
41+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4242
with:
43-
python-version: 3.8
43+
python-version: "3.8"
4444
- name: Build wheels
45-
uses: PyO3/maturin-action@v1
45+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
4646
with:
4747
target: ${{ matrix.platform.target }}
4848
args: --release --out dist
4949
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
5050
manylinux: auto
5151
- name: Build free-threaded wheels
52-
uses: PyO3/maturin-action@v1
52+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
5353
with:
5454
target: ${{ matrix.platform.target }}
5555
args: --release --out dist -i python3.14t
5656
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
5757
manylinux: auto
5858
- name: Upload wheels
59-
uses: actions/upload-artifact@v6
59+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
6060
with:
6161
name: wheels-linux-${{ matrix.platform.target }}
6262
path: dist
@@ -75,26 +75,26 @@ jobs:
7575
- runner: ubuntu-22.04
7676
target: armv7
7777
steps:
78-
- uses: actions/checkout@v6
79-
- uses: actions/setup-python@v6
78+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
79+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
8080
with:
81-
python-version: 3.8
81+
python-version: "3.8"
8282
- name: Build wheels
83-
uses: PyO3/maturin-action@v1
83+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
8484
with:
8585
target: ${{ matrix.platform.target }}
8686
args: --release --out dist
8787
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
8888
manylinux: musllinux_1_2
8989
- name: Build free-threaded wheels
90-
uses: PyO3/maturin-action@v1
90+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
9191
with:
9292
target: ${{ matrix.platform.target }}
9393
args: --release --out dist -i python3.14t
9494
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
9595
manylinux: musllinux_1_2
9696
- name: Upload wheels
97-
uses: actions/upload-artifact@v6
97+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
9898
with:
9999
name: wheels-musllinux-${{ matrix.platform.target }}
100100
path: dist
@@ -110,58 +110,37 @@ jobs:
110110
- runner: windows-latest
111111
target: x86
112112
python_arch: x86
113+
- runner: windows-11-arm
114+
target: aarch64
115+
python_arch: arm64
113116
steps:
114-
- uses: actions/checkout@v6
115-
- uses: actions/setup-python@v6
117+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
118+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
116119
with:
117-
python-version: 3.13
120+
python-version: "3.13"
118121
architecture: ${{ matrix.platform.python_arch }}
119122
- name: Build wheels
120-
uses: PyO3/maturin-action@v1
123+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
121124
with:
122125
target: ${{ matrix.platform.target }}
123126
args: --release --out dist
124127
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
125-
- uses: actions/setup-python@v6
128+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
126129
with:
127-
python-version: 3.14t
130+
python-version: "3.14t"
128131
architecture: ${{ matrix.platform.python_arch }}
129132
- name: Build free-threaded wheels
130-
uses: PyO3/maturin-action@v1
133+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
131134
with:
132135
target: ${{ matrix.platform.target }}
133136
args: --release --out dist -i python3.14t
134137
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
135138
- name: Upload wheels
136-
uses: actions/upload-artifact@v6
139+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
137140
with:
138141
name: wheels-windows-${{ matrix.platform.target }}
139142
path: dist
140143

141-
# Free-threaded 3.14t wheels for windows-11-arm are skipped: the runner image
142-
# ships with Python 3.14 GIL preinstalled, which breaks setup-python's 3.14t
143-
# install. Tracked upstream at
144-
# https://github.com/actions/partner-runner-images/issues/154
145-
windows_arm:
146-
runs-on: windows-11-arm
147-
steps:
148-
- uses: actions/checkout@v6
149-
- uses: actions/setup-python@v6
150-
with:
151-
python-version: 3.13
152-
architecture: arm64
153-
- name: Build wheels
154-
uses: PyO3/maturin-action@v1
155-
with:
156-
target: aarch64
157-
args: --release --out dist
158-
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
159-
- name: Upload wheels
160-
uses: actions/upload-artifact@v6
161-
with:
162-
name: wheels-windows-aarch64
163-
path: dist
164-
165144
macos:
166145
runs-on: ${{ matrix.platform.runner }}
167146
strategy:
@@ -172,42 +151,42 @@ jobs:
172151
- runner: macos-latest
173152
target: aarch64
174153
steps:
175-
- uses: actions/checkout@v6
176-
- uses: actions/setup-python@v6
154+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
155+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
177156
with:
178-
python-version: 3.8
157+
python-version: "3.8"
179158
- name: Build wheels
180-
uses: PyO3/maturin-action@v1
159+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
181160
with:
182161
target: ${{ matrix.platform.target }}
183162
args: --release --out dist
184163
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
185-
- uses: actions/setup-python@v6
164+
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
186165
with:
187-
python-version: 3.14t
166+
python-version: "3.14t"
188167
- name: Build free-threaded wheels
189-
uses: PyO3/maturin-action@v1
168+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
190169
with:
191170
target: ${{ matrix.platform.target }}
192171
args: --release --out dist -i python3.14t
193172
sccache: ${{ !startsWith(github.ref, 'refs/tags/') }}
194173
- name: Upload wheels
195-
uses: actions/upload-artifact@v6
174+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
196175
with:
197176
name: wheels-macos-${{ matrix.platform.target }}
198177
path: dist
199178

200179
sdist:
201180
runs-on: ubuntu-latest
202181
steps:
203-
- uses: actions/checkout@v6
182+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
204183
- name: Build sdist
205-
uses: PyO3/maturin-action@v1
184+
uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0
206185
with:
207186
command: sdist
208187
args: --out dist
209188
- name: Upload sdist
210-
uses: actions/upload-artifact@v6
189+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
211190
with:
212191
name: wheels-sdist
213192
path: dist
@@ -216,7 +195,7 @@ jobs:
216195
name: Release
217196
runs-on: ubuntu-latest
218197
if: ${{ startsWith(github.ref, 'refs/tags/') || github.event_name == 'workflow_dispatch' }}
219-
needs: [linux, musllinux, windows, windows_arm, macos, sdist]
198+
needs: [linux, musllinux, windows, macos, sdist]
220199
permissions:
221200
# Use to sign the release artifacts
222201
id-token: write
@@ -225,14 +204,14 @@ jobs:
225204
# Used to generate artifact attestation
226205
attestations: write
227206
steps:
228-
- uses: actions/download-artifact@v7
207+
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
229208
- name: Generate artifact attestation
230-
uses: actions/attest-build-provenance@v3
209+
uses: actions/attest@59d89421af93a897026c735860bf21b6eb4f7b26 # v4.1.0
231210
with:
232211
subject-path: 'wheels-*/*'
233212
- name: Install uv
234213
if: ${{ startsWith(github.ref, 'refs/tags/') }}
235-
uses: astral-sh/setup-uv@v7
214+
uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
236215
- name: Publish to PyPI
237216
if: ${{ startsWith(github.ref, 'refs/tags/') }}
238217
run: uv publish 'wheels-*/*'

0 commit comments

Comments
 (0)