Skip to content

Commit 326679b

Browse files
budnixbudnix
authored
Update and pin all GH actions (#12067)
1 parent 2202440 commit 326679b

16 files changed

Lines changed: 161 additions & 162 deletions

‎.github/workflows/audit.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,13 +11,13 @@ jobs:
1111
name: PNPM audit
1212
runs-on: ubuntu-latest
1313
steps:
14-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
14+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
1515

16-
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
16+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # https://github.com/pnpm/action-setup/releases/tag/v4.2.0
1717
name: Install pnpm
1818

1919
- name: Use Node.js
20-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
20+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
2121
with:
2222
node-version-file: '.nvmrc'
2323
cache: 'pnpm'

‎.github/workflows/build-all.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -26,19 +26,19 @@ jobs:
2626
matrix:
2727
os: [ ubuntu-latest, macos-latest ]
2828
steps:
29-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
29+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
3030

3131
# should resolve node-gyp issue we have been having with builds
3232
- name: Set up Python ${{ env.PYTHON_VERSION }}
33-
uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0
33+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # https://github.com/actions/setup-python/releases/tag/v6.2.0
3434
with:
3535
python-version: ${{ env.PYTHON_VERSION }}
3636

37-
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
37+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # https://github.com/pnpm/action-setup/releases/tag/v4.2.0
3838
name: Install pnpm
3939

4040
- name: Use Node.js
41-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
41+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
4242
with:
4343
node-version-file: '.nvmrc'
4444
cache: 'pnpm'
@@ -71,13 +71,13 @@ jobs:
7171
mkdir D:/Temp -Force
7272
mkdir D:/npm-cache -Force
7373
74-
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
74+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # https://github.com/pnpm/action-setup/releases/tag/v4.2.0
7575
name: Install pnpm
7676
with:
7777
version: 10 # On Windows the `packageManager` field of `package.json` seems to not be recognized.
7878

7979
- name: Use Node.js
80-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
80+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
8181
with:
8282
node-version: ${{ env.NODE_VERSION }}
8383

‎.github/workflows/changelog.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -24,13 +24,13 @@ jobs:
2424
name: Check the changelog
2525
runs-on: ubuntu-latest
2626
steps:
27-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
27+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
2828

29-
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
29+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # https://github.com/pnpm/action-setup/releases/tag/v4.2.0
3030
name: Install pnpm
3131

3232
- name: Use Node.js
33-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
33+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
3434
with:
3535
node-version-file: '.nvmrc'
3636
cache: 'pnpm'

‎.github/workflows/code-quality.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,12 @@ jobs:
1414
name: SonarCloud
1515
runs-on: ubuntu-latest
1616
steps:
17-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
17+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
1818
with:
1919
fetch-depth: 0
2020

2121
- name: SonarCloud Scan
22-
uses: SonarSource/sonarqube-scan-action@fd88b7d7ccbaefd23d8f36f73b59db7a3d246602 # https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v6.0.0
22+
uses: SonarSource/sonarqube-scan-action@a31c9398be7ace6bbfaf30c0bd5d415f843d45e9 # https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v7.0.0
2323
env:
2424
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
2525

@@ -46,24 +46,24 @@ jobs:
4646
language: [javascript-typescript]
4747
steps:
4848
- name: Checkout repository
49-
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # https://github.com/actions/checkout/releases/tag/v4.1.7
49+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
5050

5151
- name: Initialize CodeQL
52-
uses: github/codeql-action/init@v3
52+
uses: github/codeql-action/init@89a39a4e59826350b863aa6b6252a07ad50cf83e # https://github.com/github/codeql-action/releases/tag/v4.32.4
5353
with:
5454
languages: ${{ matrix.language }}
5555
config-file: .github/codeql/codeql-config.yml
5656

5757
- name: Perform CodeQL Analysis
58-
uses: github/codeql-action/analyze@v3
58+
uses: github/codeql-action/analyze@89a39a4e59826350b863aa6b6252a07ad50cf83e # https://github.com/github/codeql-action/releases/tag/v4.32.4
5959
with:
6060
category: "/language:${{matrix.language}}"
6161

6262
fossa-scan:
6363
name: FOSSA Scan
6464
runs-on: ubuntu-latest
6565
steps:
66-
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # https://github.com/actions/checkout/releases/tag/v4.1.7
67-
- uses: fossas/fossa-action@47ef11b1e1e3812e88dae436ccbd2d0cbd1adab0 # https://github.com/fossas/fossa-action/releases/tag/v1.3.3
66+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
67+
- uses: fossas/fossa-action@c414b9ad82eaad041e47a7cf62a4f02411f427a0 # https://github.com/fossas/fossa-action/releases/tag/v1.8.0
6868
with:
6969
api-key: ${{secrets.FOSSA_API_KEY}}

‎.github/workflows/docs-algolia-reindex.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
name: Docs Algolia Reindex Previous Versions Manual Action
1010
runs-on: ubuntu-latest
1111
steps:
12-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
12+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
1313

1414
- name: Algolia crawler start
1515
env:

‎.github/workflows/docs-examples.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,13 +16,13 @@ jobs:
1616
runs-on: ubuntu-latest
1717
steps:
1818
- name: Checkout the pull request merge commit
19-
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
19+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
2020

21-
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
21+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # https://github.com/pnpm/action-setup/releases/tag/v4.2.0
2222
name: Install pnpm
2323

2424
- name: Use Node.js
25-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
25+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
2626
with:
2727
node-version-file: '.nvmrc'
2828
cache: 'npm'

‎.github/workflows/docs-linter.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -18,13 +18,13 @@ jobs:
1818
name: JS & CSS & VUE
1919
runs-on: ubuntu-latest
2020
steps:
21-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
21+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
2222

23-
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
23+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # https://github.com/pnpm/action-setup/releases/tag/v4.2.0
2424
name: Install pnpm
2525

2626
- name: Use Node.js
27-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
27+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
2828
with:
2929
node-version-file: '.nvmrc'
3030
cache: 'npm'

‎.github/workflows/docs-production.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -23,16 +23,16 @@ jobs:
2323
if: ${{ github.ref != 'refs/heads/prod-docs/latest' }} # Exclude the prod-docs-latest branch from triggering the workflow
2424
runs-on: ubuntu-latest
2525
steps:
26-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
26+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
2727

2828
- name: Use Node.js
29-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
29+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
3030
with:
3131
node-version-file: '.nvmrc'
3232
cache: 'npm'
3333
cache-dependency-path: docs/package-lock.json
3434

35-
- uses: actions/github-script@d556feaca394842dc55e4734bf3bb9f685482fa0 # https://github.com/actions/github-script/releases/tag/v6.3.3
35+
- uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # https://github.com/actions/github-script/releases/tag/v8.0.0
3636
id: get-docs-version
3737
with:
3838
script: return context.ref.match(/^refs\/heads\/prod\-docs\/(\d+\.\d+)$/)[1] ?? '';
@@ -77,7 +77,7 @@ jobs:
7777
./build_current_version.sh
7878
7979
- name: Publish production to Netlify
80-
uses: nick-fields/retry@v3
80+
uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # https://github.com/nick-fields/retry/releases/tag/v3.0.2
8181
with:
8282
timeout_seconds: 1600
8383
max_attempts: 3
@@ -92,8 +92,8 @@ jobs:
9292
NETLIFY_SITE_ID: ${{ secrets.NETLIFY_PROD_SITE_ID }}
9393

9494
- name: Algolia crawler start
95-
env:
96-
crawler-name: Github Crawler
95+
env:
96+
crawler-name: Github Crawler
9797
crawler-id: 8062e3d3-ea11-422a-a31a-3b8003bef6f6
9898
crawler-user-id: 61f462d3-fa0d-465f-8fc1-e39231615539
9999
crawler-api-key: ${{ secrets.CRAWLER_API_KEY }}
@@ -103,4 +103,4 @@ jobs:
103103
--auth-no-challenge \
104104
--user='${{ env.crawler-user-id }}' \
105105
--password='${{ env.crawler-api-key}}' \
106-
'https://crawler.algolia.com/api/1/crawlers/${{ env.crawler-id }}/reindex'
106+
'https://crawler.algolia.com/api/1/crawlers/${{ env.crawler-id }}/reindex'

‎.github/workflows/docs-staging-delete.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,18 +13,18 @@ jobs:
1313
name: Delete Netlify Site if exist
1414
runs-on: ubuntu-latest
1515
steps:
16-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
16+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
1717

1818
- name: Use Node.js
19-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
19+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
2020
with:
2121
node-version-file: ".nvmrc"
2222
cache: "npm"
2323
cache-dependency-path: docs/package-lock.json
2424

2525
- name: Get PR details
2626
id: get-pr
27-
uses: actions/github-script@v7
27+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # https://github.com/actions/github-script/releases/tag/v8.0.0
2828
with:
2929
script: |
3030
const { data: pullRequest } = await github.rest.pulls.get({

‎.github/workflows/docs-staging.yml‎

Lines changed: 9 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -26,25 +26,25 @@ jobs:
2626
runs-on: ubuntu-latest
2727

2828
steps:
29-
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # https://github.com/actions/checkout/releases/tag/v4.1.1
29+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # https://github.com/actions/checkout/releases/tag/v6.0.2
3030

31-
- uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0
31+
- uses: pnpm/action-setup@41ff72655975bd51cab0327fa583b6e92b6d3061 # https://github.com/pnpm/action-setup/releases/tag/v4.2.0
3232
name: Install pnpm
3333

3434
- name: Use Node.js
35-
uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # https://github.com/actions/setup-node/releases/tag/v4.4.0
35+
uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # https://github.com/actions/setup-node/releases/tag/v6.2.0
3636
with:
3737
node-version-file: '.nvmrc'
3838
cache: 'pnpm'
3939

4040
- name: Find PR
41-
uses: jwalton/gh-find-current-pr@7ada613939e2a233c83a1320679446fa1c6bdcb9 # https://github.com/jwalton/gh-find-current-pr/tree/v1.3.2
41+
uses: jwalton/gh-find-current-pr@89ee5799558265a1e0e31fab792ebb4ee91c016b # https://github.com/jwalton/gh-find-current-pr/tree/v1.3.3
4242
id: pr-finder
4343

4444
- name: Get PR details
4545
id: get-pr
4646
if: ${{ steps.pr-finder.outputs.pr }}
47-
uses: actions/github-script@v7
47+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # https://github.com/actions/github-script/releases/tag/v8.0.0
4848
with:
4949
script: |
5050
const { data: pullRequest } = await github.rest.pulls.get({
@@ -84,7 +84,7 @@ jobs:
8484
BRANCH_NAME: ${{ steps.get-pr.outputs.source_branch || github.ref_name }}
8585

8686
- name: Publish sticky comment in PR. Docs are being built
87-
uses: marocchino/sticky-pull-request-comment@adca94abcaf73c10466a71cc83ae561fd66d1a56 # https://github.com/marocchino/sticky-pull-request-comment/tree/v2.3.0
87+
uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # https://github.com/marocchino/sticky-pull-request-comment/tree/v2.9.4
8888
if: ${{ steps.pr-finder.outputs.pr }}
8989
with:
9090
number: ${{ steps.pr-finder.outputs.pr }}
@@ -103,7 +103,7 @@ jobs:
103103
npm run all build -- --e examples visual-tests
104104
105105
mkdir -p docs/.vuepress/public/@handsontable
106-
106+
107107
# cp -r ./wrappers/angular-wrapper docs/.vuepress/public/@handsontable
108108
# cp -r ./wrappers/react-wrapper docs/.vuepress/public/@handsontable
109109
# cp -r ./wrappers/vue3 docs/.vuepress/public/@handsontable
@@ -147,7 +147,7 @@ jobs:
147147
cp -r ../../wrappers/vue3 docs/docs/@handsontable/
148148
149149
- name: Publish preview to Netlify
150-
uses: nick-fields/retry@v3
150+
uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # https://github.com/nick-fields/retry/releases/tag/v3.0.2
151151
with:
152152
timeout_seconds: 1600
153153
max_attempts: 3
@@ -159,10 +159,9 @@ jobs:
159159
env:
160160
NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_PREVIEW_AUTH_TOKEN }}
161161
NETLIFY_SITE_ID: ${{ env.NETLIFY_SITE_ID }}
162-
163162

164163
- name: Publish sticky comment in PR
165-
uses: marocchino/sticky-pull-request-comment@adca94abcaf73c10466a71cc83ae561fd66d1a56 # https://github.com/marocchino/sticky-pull-request-comment/tree/v2.3.0
164+
uses: marocchino/sticky-pull-request-comment@773744901bac0e8cbb5a0dc842800d45e9b2b405 # https://github.com/marocchino/sticky-pull-request-comment/tree/v2.9.4
166165
if: ${{ steps.pr-finder.outputs.pr }}
167166
with:
168167
number: ${{ steps.pr-finder.outputs.pr }}

0 commit comments

Comments
 (0)