diff --git a/.github/actions/prepare/action.yml b/.github/actions/prepare/action.yml index e8b953c1b..43588319f 100644 --- a/.github/actions/prepare/action.yml +++ b/.github/actions/prepare/action.yml @@ -7,7 +7,7 @@ runs: - uses: pnpm/action-setup@v4 with: version: 9 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4 with: cache: pnpm node-version: "20" diff --git a/.github/workflows/accessibility-alt-text-bot.yml b/.github/workflows/accessibility-alt-text-bot.yml index 96af67f4b..dc2a2c807 100644 --- a/.github/workflows/accessibility-alt-text-bot.yml +++ b/.github/workflows/accessibility-alt-text-bot.yml @@ -3,7 +3,7 @@ jobs: if: ${{ !endsWith(github.actor, '[bot]') }} runs-on: ubuntu-latest steps: - - uses: github/accessibility-alt-text-bot@v1.4.0 + - uses: github/accessibility-alt-text-bot@602a5efcf386c52ef8b9a11ead9bfa6ef8d56ba5 # v1.4.0 name: Accessibility Alt Text Bot diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 475d7007c..4faa806ab 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -3,7 +3,7 @@ jobs: name: Are The Types Wrong? runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm build - run: npx --yes @arethetypeswrong/cli --pack . --ignore-rules cjs-resolves-to-esm @@ -11,7 +11,7 @@ jobs: name: Build runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm build - run: node lib/index.js --version @@ -19,7 +19,7 @@ jobs: name: Lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm build - run: pnpm lint @@ -27,42 +27,42 @@ jobs: name: Lint Knip runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:knip lint_markdown: name: Lint Markdown runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:md lint_packages: name: Lint Packages runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:packages lint_spelling: name: Lint Spelling runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm lint:spelling prettier: name: Prettier runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm format --list-different test: name: Test runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm run test --coverage - env: @@ -75,7 +75,7 @@ jobs: name: Test Creation Script runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm run build - run: pnpm run test:create @@ -90,7 +90,7 @@ jobs: name: Test Initialization Script runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm run build - run: pnpm run test:initialize @@ -105,7 +105,7 @@ jobs: name: Test Migration Script runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm run build - run: pnpm run test:migrate @@ -120,7 +120,7 @@ jobs: name: Type Check runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - uses: ./.github/actions/prepare - run: pnpm tsc diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml index 4d788e7b5..82fcbfcec 100644 --- a/.github/workflows/contributors.yml +++ b/.github/workflows/contributors.yml @@ -2,13 +2,13 @@ jobs: contributors: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - uses: ./.github/actions/prepare - env: GITHUB_TOKEN: ${{ secrets.ACCESS_TOKEN }} - uses: JoshuaKGoldberg/all-contributors-auto-action@v0.5.0 + uses: JoshuaKGoldberg/all-contributors-auto-action@944abe4387e751b5bbb38616cb25cf4a4ca998f2 # v0.5.0 name: Contributors diff --git a/.github/workflows/post-release.yml b/.github/workflows/post-release.yml index 84acae058..c0a0be2b9 100644 --- a/.github/workflows/post-release.yml +++ b/.github/workflows/post-release.yml @@ -2,11 +2,11 @@ jobs: post_release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - run: echo "npm_version=$(npm pkg get version | tr -d '"')" >> "$GITHUB_ENV" - - uses: apexskier/github-release-commenter@v1 + - uses: apexskier/github-release-commenter@3bd413ad5e1d603bfe2282f9f06f2bdcec079327 # v1 with: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} comment-template: | diff --git a/.github/workflows/pr-review-requested.yml b/.github/workflows/pr-review-requested.yml index e2e518c8c..6fbec031e 100644 --- a/.github/workflows/pr-review-requested.yml +++ b/.github/workflows/pr-review-requested.yml @@ -2,7 +2,7 @@ jobs: pr_review_requested: runs-on: ubuntu-latest steps: - - uses: actions-ecosystem/action-remove-labels@v1 + - uses: actions-ecosystem/action-remove-labels@2ce5d41b4b6aa8503e285553f75ed56e0a40bae0 # v1 with: labels: "status: waiting for author" - if: failure() diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 710b3b1b0..5fd6e7892 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -5,7 +5,7 @@ jobs: release: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 ref: main