Skip to content

Commit b00cb9a

Browse files
mpartipiloclaude
mpartipilo
and
claude
committed
ci: pin GitHub Actions to server SHAs
Align all uses: refs to the immutable commit SHAs used by weaviate/weaviate. Major versions bumped where necessary: checkout v6, docker/login v4, upload-artifact v7, download-artifact v8, cache v5. Tags preserved as comments. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent 5a32208 commit b00cb9a

1 file changed

Lines changed: 37 additions & 37 deletions

File tree

‎.github/workflows/main.yaml‎

Lines changed: 37 additions & 37 deletions
Original file line numberDiff line numberDiff line change
@@ -36,8 +36,8 @@ jobs:
3636
name: Run Linter and Formatter
3737
runs-on: ubuntu-latest
3838
steps:
39-
- uses: actions/checkout@v4
40-
- uses: actions/setup-python@v5
39+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
40+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
4141
with:
4242
python-version: "3.11"
4343
cache: 'pip' # caching pip dependencies
@@ -66,13 +66,13 @@ jobs:
6666
version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
6767
folder: ["weaviate", "integration", "integration_embedded"]
6868
steps:
69-
- uses: actions/checkout@v4
70-
- uses: actions/setup-python@v5
69+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
70+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
7171
with:
7272
python-version: ${{ matrix.version }}
7373
cache: 'pip' # caching pip dependencies
7474
- run: pip install -r requirements-devel.txt
75-
- uses: jakebailey/pyright-action@v2
75+
- uses: jakebailey/pyright-action@6cabc0f01c4994be48fd45cd9dbacdd6e1ee6e5e # v2
7676
with:
7777
version: 1.1.399
7878
working-directory: ${{ matrix.folder }}
@@ -86,8 +86,8 @@ jobs:
8686
version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
8787
folder: ["test", "mock_tests"]
8888
steps:
89-
- uses: actions/checkout@v4
90-
- uses: actions/setup-python@v5
89+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
90+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
9191
with:
9292
python-version: ${{ matrix.version }}
9393
cache: 'pip' # caching pip dependencies
@@ -96,7 +96,7 @@ jobs:
9696
run: pytest --cov -v --cov-report=term-missing --cov=weaviate --cov-report xml:coverage-${{ matrix.folder }}.xml ${{ matrix.folder }}
9797
- name: Archive code coverage results
9898
if: matrix.version == '3.10' && (github.ref_name != 'main')
99-
uses: actions/upload-artifact@v4
99+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
100100
with:
101101
name: coverage-report-${{ matrix.folder }}
102102
path: coverage-${{ matrix.folder }}.xml
@@ -110,8 +110,8 @@ jobs:
110110
grpc: ["1.59.5", "1.63.0", "1.65.0", "1.66.0", "1.68.0", "1.72.1", "1.73.0", "1.74.0"]
111111
protobuf: ["4.25.8", "5.26.0", "5.27.4", "5.28.3", "5.29.0", "6.30.0", "6.31.1", "6.32.0"]
112112
steps:
113-
- uses: actions/checkout@v4
114-
- uses: actions/setup-python@v5
113+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
114+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
115115
with:
116116
python-version: "3.11"
117117
cache: 'pip' # caching pip dependencies
@@ -129,11 +129,11 @@ jobs:
129129
version: ["3.10", "3.11", "3.12", "3.13", "3.14"]
130130
optional_dependencies: [false]
131131
steps:
132-
- uses: actions/checkout@v4
132+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
133133
with:
134134
fetch-depth: 0
135135
fetch-tags: true
136-
- uses: actions/setup-python@v5
136+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
137137
with:
138138
python-version: ${{ matrix.version }}
139139
cache: 'pip' # caching pip dependencies
@@ -145,7 +145,7 @@ jobs:
145145
run: pytest -v --cov --cov-report=term-missing --cov=weaviate --cov-report xml:coverage-integration-embedded.xml integration_embedded
146146
- name: Archive code coverage results
147147
if: matrix.version == '3.10' && (github.ref_name != 'main') && !github.event.pull_request.head.repo.fork
148-
uses: actions/upload-artifact@v4
148+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
149149
with:
150150
name: coverage-report-integration-embedded
151151
path: coverage-integration-embedded.xml
@@ -165,16 +165,16 @@ jobs:
165165
]
166166
optional_dependencies: [false]
167167
steps:
168-
- uses: actions/checkout@v4
168+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
169169
with:
170170
fetch-depth: 0
171171
fetch-tags: true
172-
- uses: actions/setup-python@v5
172+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
173173
with:
174174
python-version: ${{ matrix.versions.py }}
175175
cache: 'pip' # caching pip dependencies
176176
- name: Login to Docker Hub
177-
uses: docker/login-action@v3
177+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
178178
if: ${{ !github.event.pull_request.head.repo.fork && github.triggering_actor != 'dependabot[bot]' }}
179179
with:
180180
username: ${{secrets.DOCKER_USERNAME}}
@@ -198,7 +198,7 @@ jobs:
198198
run: pytest -n auto --dist loadgroup -v --cov --cov-report=term-missing --cov=weaviate --cov-report xml:coverage-integration.xml integration
199199
- name: Archive code coverage results
200200
if: matrix.versions.py == '3.10' && (github.ref_name != 'main')
201-
uses: actions/upload-artifact@v4
201+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
202202
with:
203203
name: coverage-report-integration
204204
path: coverage-integration.xml
@@ -220,13 +220,13 @@ jobs:
220220
]
221221
optional_dependencies: [false]
222222
steps:
223-
- uses: actions/checkout@v4
224-
- uses: actions/setup-python@v5
223+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
224+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
225225
with:
226226
python-version: "3.11"
227227
cache: 'pip' # caching pip dependencies
228228
- name: Login to Docker Hub
229-
uses: docker/login-action@v3
229+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
230230
if: ${{ !github.event.pull_request.head.repo.fork && github.triggering_actor != 'dependabot[bot]' }}
231231
with:
232232
username: ${{secrets.DOCKER_USERNAME}}
@@ -245,25 +245,25 @@ jobs:
245245
runs-on: ubuntu-latest
246246
if: github.ref_name != 'main' && !github.event.pull_request.head.repo.fork
247247
steps:
248-
- uses: actions/checkout@v4
248+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
249249
- name: Download coverage artifacts mock
250-
uses: actions/download-artifact@v4
250+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
251251
with:
252252
name: coverage-report-mock_tests
253253
- name: Download coverage artifacts unit
254-
uses: actions/download-artifact@v4
254+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
255255
with:
256256
name: coverage-report-test
257257
- name: Download coverage integration
258-
uses: actions/download-artifact@v4
258+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
259259
with:
260260
name: coverage-report-integration
261261
- name: Download coverage integration embedded
262-
uses: actions/download-artifact@v4
262+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
263263
with:
264264
name: coverage-report-integration-embedded
265265
- name: Codecov
266-
uses: codecov/codecov-action@v4
266+
uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4
267267
with:
268268
fail_ci_if_error: true
269269
files: ./coverage-integration.xml, ./coverage-integration-embedded.xml, ./coverage-test.xml, ./coverage-mock_tests.xml
@@ -275,11 +275,11 @@ jobs:
275275
runs-on: ubuntu-latest
276276
steps:
277277
- name: Checkout
278-
uses: actions/checkout@v4
278+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
279279
with:
280280
fetch-depth: 0
281281
- name: Set up Python 3.11
282-
uses: actions/setup-python@v5
282+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
283283
with:
284284
python-version: "3.11"
285285
cache: 'pip' # caching pip dependencies
@@ -288,7 +288,7 @@ jobs:
288288
- name: Build a binary wheel
289289
run: python -m build
290290
- name: Create Wheel Artifacts
291-
uses: actions/upload-artifact@v4
291+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
292292
with:
293293
path: "dist/*.whl"
294294
name: weaviate-python-client-wheel
@@ -315,17 +315,17 @@ jobs:
315315
]
316316
steps:
317317
- name: Checkout
318-
uses: actions/checkout@v4
318+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
319319
with:
320320
fetch-depth: 0
321321
- name: Login to Docker Hub
322-
uses: docker/login-action@v3
322+
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4
323323
if: ${{ !github.event.pull_request.head.repo.fork && github.triggering_actor != 'dependabot[bot]' }}
324324
with:
325325
username: ${{secrets.DOCKER_USERNAME}}
326326
password: ${{secrets.DOCKER_PASSWORD}}
327327
- name: Download build artifact to append to release
328-
uses: actions/download-artifact@v4
328+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
329329
with:
330330
name: weaviate-python-client-wheel
331331
- run: |
@@ -343,11 +343,11 @@ jobs:
343343
runs-on: ubuntu-latest
344344
steps:
345345
- name: Checkout
346-
uses: actions/checkout@v4
346+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
347347
with:
348348
fetch-depth: 0
349349
- name: Set up Python 3.11
350-
uses: actions/setup-python@v5
350+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
351351
with:
352352
python-version: "3.11"
353353
cache: 'pip' # caching pip dependencies
@@ -357,7 +357,7 @@ jobs:
357357
run: python -m build
358358
- name: Publish distribution 📦 to PyPI on new tags
359359
if: startsWith(github.ref, 'refs/tags')
360-
uses: pypa/gh-action-pypi-publish@release/v1
360+
uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
361361
with:
362362
verbose: true
363363
password: ${{ secrets.PYPI_API_TOKEN }}
@@ -369,12 +369,12 @@ jobs:
369369
needs: [build-and-publish]
370370
steps:
371371
- name: Download build artifact to append to release
372-
uses: actions/download-artifact@v4
372+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
373373
with:
374374
name: weaviate-python-client-wheel
375375
path: dist
376376
- name: Release
377-
uses: softprops/action-gh-release@v1
377+
uses: softprops/action-gh-release@de2c0eb89ae2a093876385947365aca7b0e5f844 # v1
378378
with:
379379
generate_release_notes: true
380380
draft: true

0 commit comments

Comments
 (0)