From 94148a20c245cd5c8a52a47a8c2d323f6e23a85a Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=C3=9Clgen=20Sar=C4=B1kavak?= Date: Mon, 10 Aug 2026 14:10:15 +0300 Subject: [PATCH] Pin GHA dependencies Relates to #225 Hashes and comments are generated via pinact: https://github.com/suzuki-shunsuke/pinact --- .github/workflows/ci.yml | 14 ++++---- .github/workflows/docs.yml | 12 +++---- .github/workflows/release.yml | 64 +++++++++++++++++------------------ 3 files changed, 45 insertions(+), 45 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 169c51f9..8c9180c7 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -18,13 +18,13 @@ jobs: name: Test runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - uses: ./.github/actions/setup - - uses: actions/cache@v4 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | ~/.cargo/bin/ @@ -43,7 +43,7 @@ jobs: name: Format runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true @@ -58,7 +58,7 @@ jobs: name: Clippy runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true @@ -66,7 +66,7 @@ jobs: with: components: clippy - - uses: actions/cache@v4 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | ~/.cargo/bin/ @@ -85,13 +85,13 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - uses: ./.github/actions/setup - - uses: actions/cache@v4 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | ~/.cargo/bin/ diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index aca6e3df..930c7674 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -18,19 +18,19 @@ jobs: build: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - uses: ./.github/actions/setup - - uses: actions/setup-python@v5 + - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: '3.x' - - uses: astral-sh/setup-uv@v6 + - uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6.8.0 - - uses: actions/cache@v4 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | ~/.cargo/bin/ @@ -53,7 +53,7 @@ jobs: - name: Build docs run: uv run --project crates/processing_pyo3 --group docs mkdocs build - - uses: actions/upload-pages-artifact@v3 + - uses: actions/upload-pages-artifact@56afc609e74202658d3ffba0e8f6dda462b719fa # v3.0.1 with: path: site/ @@ -65,4 +65,4 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} steps: - id: deployment - uses: actions/deploy-pages@v4 + uses: actions/deploy-pages@d6db90164ac5ed86f2b6aed7e0febac5b3c0c03e # v4.0.5 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a379efed..466d830e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,7 +12,7 @@ jobs: generate-stubs: runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - uses: ./.github/actions/setup @@ -20,7 +20,7 @@ jobs: run: | cargo build --release -p processing_pyo3 cargo run --release -p generate_stubs - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: type-stubs path: crates/processing_pyo3/mewnala/*.pyi @@ -33,21 +33,21 @@ jobs: # TODO: add aarch64 when we are ready to address long build times target: [x86_64] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - - uses: actions/setup-python@v5 + - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: '3.x' - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: type-stubs path: crates/processing_pyo3/mewnala - name: Setup QEMU if: matrix.target == 'aarch64' - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0 - name: Build wheels - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0 with: container: "quay.io/pypa/manylinux_2_34_${{matrix.target}}:latest" docker-options: "-e PKG_CONFIG_PATH=/usr/lib64/pkgconfig:/usr/lib/${{matrix.target}}-linux-gnu/pkgconfig:/usr/local/lib/pkgconfig" @@ -66,7 +66,7 @@ jobs: libxkbcommon-devel wayland-devel wayland-protocols-devel \ glfw-devel $EXTRA_PACKAGES working-directory: crates/processing_pyo3 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: wheels-linux-${{ matrix.target }} path: crates/processing_pyo3/dist @@ -82,23 +82,23 @@ jobs: # TODO: lets add this build when we have a moment # - runner: macos-15-intel steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - - uses: actions/setup-python@v5 + - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: '3.x' - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: type-stubs path: crates/processing_pyo3/mewnala - name: Build wheels - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0 with: target: ${{ matrix.target }} args: --release --out dist --find-interpreter working-directory: crates/processing_pyo3 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: wheels-macos-${{ matrix.target }} path: crates/processing_pyo3/dist @@ -107,23 +107,23 @@ jobs: runs-on: windows-latest needs: generate-stubs steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - - uses: actions/setup-python@v5 + - uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: '3.x' - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: type-stubs path: crates/processing_pyo3/mewnala - name: Build wheels - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0 with: target: x64 args: --release --out dist --find-interpreter working-directory: crates/processing_pyo3 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: wheels-windows-x64 path: crates/processing_pyo3/dist @@ -132,20 +132,20 @@ jobs: runs-on: ubuntu-latest needs: generate-stubs steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: type-stubs path: crates/processing_pyo3/mewnala - name: Build sdist - uses: PyO3/maturin-action@v1 + uses: PyO3/maturin-action@e83996d129638aa358a18fbd1dfb82f0b0fb5d3b # v1.51.0 with: command: sdist args: --out dist working-directory: crates/processing_pyo3 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: wheels-sdist path: crates/processing_pyo3/dist @@ -154,7 +154,7 @@ jobs: name: FFI Linux (x86_64) runs-on: ubuntu-22.04 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - uses: ./.github/actions/setup @@ -168,7 +168,7 @@ jobs: cp crates/processing_ffi/include/processing.h staging/include/ cp LICENSE.md staging/ tar -czvf libprocessing-${{ github.ref_name }}-linux-x86_64.tar.gz -C staging . - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: libprocessing-linux-x86_64 path: libprocessing-${{ github.ref_name }}-linux-x86_64.tar.gz @@ -177,7 +177,7 @@ jobs: name: FFI macOS (aarch64) runs-on: macos-14 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - uses: dtolnay/rust-toolchain@stable @@ -191,7 +191,7 @@ jobs: cp crates/processing_ffi/include/processing.h staging/include/ cp LICENSE.md staging/ tar -czvf libprocessing-${{ github.ref_name }}-macos-aarch64.tar.gz -C staging . - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: libprocessing-macos-aarch64 path: libprocessing-${{ github.ref_name }}-macos-aarch64.tar.gz @@ -200,7 +200,7 @@ jobs: name: FFI Windows (x64) runs-on: windows-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4.4.0 with: submodules: true - uses: dtolnay/rust-toolchain@stable @@ -216,7 +216,7 @@ jobs: Copy-Item crates/processing_ffi/include/processing.h staging/include/ Copy-Item LICENSE.md staging/ Compress-Archive -Path staging/* -DestinationPath libprocessing-${{ github.ref_name }}-windows-x64.zip - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: libprocessing-windows-x64 path: libprocessing-${{ github.ref_name }}-windows-x64.zip @@ -230,7 +230,7 @@ jobs: id-token: write environment: pypi steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: pattern: wheels-* merge-multiple: true @@ -246,17 +246,17 @@ jobs: permissions: contents: write steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: pattern: libprocessing-* merge-multiple: true path: release-assets - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: pattern: wheels-* merge-multiple: true path: release-assets - - uses: softprops/action-gh-release@v2 + - uses: softprops/action-gh-release@3bb12739c298aeb8a4eeaf626c5b8d85266b0e65 # v2.6.2 with: files: release-assets/* generate_release_notes: true