From cb8cbb11b641ec27ba39a8ff37ddafc2ee71c4f7 Mon Sep 17 00:00:00 2001 From: Nico Flaig Date: Tue, 10 Mar 2026 13:25:54 +0000 Subject: [PATCH] chore: pin github actions by commit hash --- .github/actions/core-dump/action.yml | 2 +- .github/actions/setup-and-build/action.yml | 8 ++++---- .github/dependabot.yml | 10 ++++++++++ .github/workflows/benchmark.yml | 4 ++-- .github/workflows/binaries.yml | 6 +++--- .github/workflows/build-debug-node.yml | 4 ++-- .github/workflows/check-specrefs.yml | 2 +- .github/workflows/codeql-analysis.yml | 8 ++++---- .github/workflows/docker.yml | 10 +++++----- .github/workflows/docs-backfill.yml | 6 +++--- .github/workflows/docs-check.yml | 4 ++-- .github/workflows/docs-version.yml | 6 +++--- .github/workflows/docs.yml | 10 +++++----- .github/workflows/kurtosis.yml | 6 +++--- .github/workflows/lint-pr-title.yml | 2 +- .github/workflows/publish-dev.yml | 8 ++++---- .github/workflows/publish-manual.yml | 2 +- .github/workflows/publish-nextfork.yml | 8 ++++---- .github/workflows/publish-rc.yml | 12 ++++++------ .github/workflows/publish-stable.yml | 14 +++++++------- .github/workflows/test-sim.yml | 18 +++++++++--------- .github/workflows/test.yml | 22 +++++++++++----------- 22 files changed, 91 insertions(+), 81 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/actions/core-dump/action.yml b/.github/actions/core-dump/action.yml index e2e0b1224912..910747888ab0 100644 --- a/.github/actions/core-dump/action.yml +++ b/.github/actions/core-dump/action.yml @@ -10,7 +10,7 @@ runs: shell: sh - name: Backup core dump - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: core-dump path: /cores/* diff --git a/.github/actions/setup-and-build/action.yml b/.github/actions/setup-and-build/action.yml index d19a8154bc2f..8071ca6b9f4b 100644 --- a/.github/actions/setup-and-build/action.yml +++ b/.github/actions/setup-and-build/action.yml @@ -8,10 +8,10 @@ inputs: runs: using: "composite" steps: - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@c5ba7f7862a0f64c1b1a05fbac13e0b8e86ba08c # v4 - name: Setup Node - uses: actions/setup-node@v6 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: ${{inputs.node}} check-latest: true @@ -32,7 +32,7 @@ runs: run: echo "key=build-cache-${{ runner.os }}-${{ runner.arch }}-node-${{ inputs.node }}-${{ github.sha }}" >> $GITHUB_OUTPUT - name: Restore build - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 id: cache-build-restore with: path: | @@ -58,7 +58,7 @@ runs: run: pnpm check-bundle - name: Cache build artifacts - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: | lib/ diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 000000000000..05c25f68de31 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,10 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + groups: + actions: + patterns: + - "*" diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index 6781922b5304..b3067d991ce8 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -30,7 +30,7 @@ jobs: steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: 24 @@ -38,7 +38,7 @@ jobs: # Restore performance downloaded states - name: Restore performance state cache - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: packages/state-transition/test-cache key: perf-states-${{ hashFiles('packages/state-transition/test/perf/params.ts') }} diff --git a/.github/workflows/binaries.yml b/.github/workflows/binaries.yml index 2bbab6ccdc50..15bc25bd42eb 100644 --- a/.github/workflows/binaries.yml +++ b/.github/workflows/binaries.yml @@ -27,7 +27,7 @@ jobs: arch: arm64 runs-on: ${{matrix.os}} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Install arm64 specifics if: matrix.arch == 'arm64' run: |- @@ -45,13 +45,13 @@ jobs: npx caxa -m "Unpacking Lodestar binary, please wait..." -e "dashboards/**" -e "docs/**" -D -p "pnpm clean:nm && pnpm install --frozen-lockfile --prod" --input . --output "lodestar" -- "{{caxa}}/node_modules/.bin/node" "--max-old-space-size=8192" "{{caxa}}/packages/cli/bin/lodestar.js" tar -czf "dist/lodestar-${{ inputs.version }}-${{ matrix.platform }}-${{ matrix.arch }}.tar.gz" "lodestar" - name: Upload binaries - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: binaries-${{ matrix.os }} path: dist/ if-no-files-found: error - name: Sanity check binary - uses: actions/github-script@v7 + uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7.1.0 with: script: | exec.exec('./lodestar dev'); diff --git a/.github/workflows/build-debug-node.yml b/.github/workflows/build-debug-node.yml index f9c4c5802a2e..fc1b03b0b2f5 100644 --- a/.github/workflows/build-debug-node.yml +++ b/.github/workflows/build-debug-node.yml @@ -18,7 +18,7 @@ jobs: run: apt-get install python3 g++ make python3-pip - name: Download Node.js source - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: repository: "nodejs/node" ref: "v${{ github.event.inputs.version }}" @@ -44,7 +44,7 @@ jobs: working-directory: "nodejs" - name: Upload build to artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: nodejs-debug-build-${{ github.event.inputs.version }} path: nodejs-debug-build-${{ github.event.inputs.version }} diff --git a/.github/workflows/check-specrefs.yml b/.github/workflows/check-specrefs.yml index 229b832b4f97..51fd320e497a 100644 --- a/.github/workflows/check-specrefs.yml +++ b/.github/workflows/check-specrefs.yml @@ -16,7 +16,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Check version consistency run: | diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 2d635afe2688..0c9d3f33e522 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -47,11 +47,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@8dca8a82e2fa1a2c8908956f711300f9c4a4f4f6 # v2 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -64,7 +64,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@8dca8a82e2fa1a2c8908956f711300f9c4a4f4f6 # v2 # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -77,4 +77,4 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@8dca8a82e2fa1a2c8908956f711300f9c4a4f4f6 # v2 diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index d8056e7f03e5..db5d3f607be5 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -29,13 +29,13 @@ jobs: - arch: arm64 runner: buildjet-4vcpu-ubuntu-2204-arm steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: ref: ${{ inputs.ref || github.sha }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -74,9 +74,9 @@ jobs: needs: docker steps: - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3.7.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/docs-backfill.yml b/.github/workflows/docs-backfill.yml index a68f8e99507e..d40d03311ea5 100644 --- a/.github/workflows/docs-backfill.yml +++ b/.github/workflows/docs-backfill.yml @@ -22,7 +22,7 @@ jobs: name: Backfill versioned docs runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: ref: unstable fetch-depth: 0 @@ -73,9 +73,9 @@ jobs: - name: Install pnpm if: steps.versions.outputs.missing != '' && github.event.inputs.dry_run != 'true' - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@c5ba7f7862a0f64c1b1a05fbac13e0b8e86ba08c # v4 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 if: steps.versions.outputs.missing != '' && github.event.inputs.dry_run != 'true' with: node-version: 24 diff --git a/.github/workflows/docs-check.yml b/.github/workflows/docs-check.yml index 7969c198615d..50d810b2727c 100644 --- a/.github/workflows/docs-check.yml +++ b/.github/workflows/docs-check.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: 24 @@ -29,4 +29,4 @@ jobs: # Run spellcheck AFTER building docs, in case the CLI reference has issues - name: Spellcheck - uses: rojopolis/spellcheck-github-actions@0.32.0 + uses: rojopolis/spellcheck-github-actions@531492f4dd27f0593ca398f2ed225d1b92eec828 # 0.32.0 diff --git a/.github/workflows/docs-version.yml b/.github/workflows/docs-version.yml index 3535fd32975b..30c0ad799cf4 100644 --- a/.github/workflows/docs-version.yml +++ b/.github/workflows/docs-version.yml @@ -33,14 +33,14 @@ jobs: fi # Checkout the tagged release to build its docs - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: ref: ${{ github.ref }} - name: Install pnpm - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@c5ba7f7862a0f64c1b1a05fbac13e0b8e86ba08c # v4 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: 24 check-latest: true diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 4171b2ee116d..8f73dd7e1c0e 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -30,14 +30,14 @@ jobs: - name: Log Deployment Ref run: echo "Deploying docs from ref $DEPLOY_REF" - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: ref: ${{ env.DEPLOY_REF }} - name: Install pnpm before setup node - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@c5ba7f7862a0f64c1b1a05fbac13e0b8e86ba08c # v4 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: 24 check-latest: true @@ -48,7 +48,7 @@ jobs: run: echo "v8CppApiVersion=$(node --print "process.versions.modules")" >> $GITHUB_OUTPUT - name: Restore dependencies - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 id: cache-deps with: path: | @@ -91,7 +91,7 @@ jobs: run: pnpm install && pnpm build - name: Deploy - uses: peaceiris/actions-gh-pages@v3 + uses: peaceiris/actions-gh-pages@4a2e02b36f31d8974a0d09d3bb9f3172aa2d0d0d # v3 with: github_token: ${{ secrets.GITHUB_TOKEN }} publish_dir: ./docs/build diff --git a/.github/workflows/kurtosis.yml b/.github/workflows/kurtosis.yml index bf1ad642a76f..4d17d9c50d66 100644 --- a/.github/workflows/kurtosis.yml +++ b/.github/workflows/kurtosis.yml @@ -11,17 +11,17 @@ jobs: name: Build and run Kurtosis runs-on: buildjet-4vcpu-ubuntu-2204 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3.12.0 - name: Build Docker image - local only run: > docker buildx build . --load \ --tag chainsafe/lodestar:kurtosis-ci \ --build-arg COMMIT=$(git rev-parse HEAD) - name: Run test - uses: ethpandaops/kurtosis-assertoor-github-action@v1 + uses: ethpandaops/kurtosis-assertoor-github-action@5932604b244dbd2ddb811516b516a9094f4d2c2f # v1 with: ethereum_package_args: ".github/workflows/assets/kurtosis_sim_test_config.yaml" diff --git a/.github/workflows/lint-pr-title.yml b/.github/workflows/lint-pr-title.yml index 873343c8d799..49270f091a95 100644 --- a/.github/workflows/lint-pr-title.yml +++ b/.github/workflows/lint-pr-title.yml @@ -14,7 +14,7 @@ jobs: name: Validate PR title runs-on: ubuntu-latest steps: - - uses: amannn/action-semantic-pull-request@v5 + - uses: amannn/action-semantic-pull-request@e32d7e603df1aa1ba07e981f2a23455dee596825 # v5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/publish-dev.yml b/.github/workflows/publish-dev.yml index 0abec636425a..479b0495125e 100644 --- a/.github/workflows/publish-dev.yml +++ b/.github/workflows/publish-dev.yml @@ -19,14 +19,14 @@ jobs: runs-on: ubuntu-latest steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 - name: Install pnpm before setup node - uses: pnpm/action-setup@v4 + uses: pnpm/action-setup@c5ba7f7862a0f64c1b1a05fbac13e0b8e86ba08c # v4 - - uses: actions/setup-node@v6 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: 24 registry-url: "https://registry.npmjs.org" @@ -36,7 +36,7 @@ jobs: id: node run: echo "v8CppApiVersion=$(node --print "process.versions.modules")" >> $GITHUB_OUTPUT - name: Restore dependencies - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 id: cache-deps with: path: | diff --git a/.github/workflows/publish-manual.yml b/.github/workflows/publish-manual.yml index ad7bc6a31321..34a279719dd5 100644 --- a/.github/workflows/publish-manual.yml +++ b/.github/workflows/publish-manual.yml @@ -23,7 +23,7 @@ jobs: name: Validate inputs runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: ref: ${{ inputs.ref }} fetch-depth: 0 diff --git a/.github/workflows/publish-nextfork.yml b/.github/workflows/publish-nextfork.yml index 84eabc546728..80413ab1df0c 100644 --- a/.github/workflows/publish-nextfork.yml +++ b/.github/workflows/publish-nextfork.yml @@ -22,12 +22,12 @@ jobs: runs-on: ubuntu-latest steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 - name: Install pnpm before setup node - uses: pnpm/action-setup@v4 - - uses: actions/setup-node@v6 + uses: pnpm/action-setup@c5ba7f7862a0f64c1b1a05fbac13e0b8e86ba08c # v4 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0 with: node-version: 24 registry-url: "https://registry.npmjs.org" @@ -37,7 +37,7 @@ jobs: id: node run: echo "v8CppApiVersion=$(node --print "process.versions.modules")" >> $GITHUB_OUTPUT - name: Restore dependencies - uses: actions/cache@master + uses: actions/cache@0769f2e44373d687c841be56f618397100943c5e # master id: cache-deps with: path: | diff --git a/.github/workflows/publish-rc.yml b/.github/workflows/publish-rc.yml index aabcde7ee3d5..3a7b0058cc90 100644 --- a/.github/workflows/publish-rc.yml +++ b/.github/workflows/publish-rc.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 0 @@ -59,7 +59,7 @@ jobs: needs: [tag, binaries] if: needs.tag.outputs.is_rc == 'true' steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 # Needs full depth for changelog generation @@ -71,14 +71,14 @@ jobs: run: node scripts/generate_changelog.mjs ${{ needs.tag.outputs.prev_tag }} ${{ needs.tag.outputs.tag }} CHANGELOG.md - name: Get binaries - uses: actions/download-artifact@v5 + uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0 with: path: dist/ merge-multiple: true - name: Create Release id: create_release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -111,7 +111,7 @@ jobs: # In case of failure - name: Rollback on failure if: failure() - uses: author/action-rollback@1.0.4 + uses: author/action-rollback@f4473931b1155b601092ec00eb1fa4882b80219f # 1.0.4 with: release_id: ${{ steps.create_release.outputs.id }} tag: ${{ needs.tag.outputs.tag }} @@ -125,7 +125,7 @@ jobs: needs: [tag, npm] if: needs.tag.outputs.is_rc == 'true' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - run: scripts/await-release.sh ${{ needs.tag.outputs.tag }} rc 900 docker: diff --git a/.github/workflows/publish-stable.yml b/.github/workflows/publish-stable.yml index 7bf82a6fe45d..2c4dbf7d6221 100644 --- a/.github/workflows/publish-stable.yml +++ b/.github/workflows/publish-stable.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout code - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 @@ -65,7 +65,7 @@ jobs: needs: [tag, binaries] if: needs.tag.outputs.is_stable == 'true' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 0 # Needs full depth for changelog generation @@ -77,14 +77,14 @@ jobs: run: node scripts/generate_changelog.mjs ${{ needs.tag.outputs.prev_tag }} ${{ needs.tag.outputs.tag }} CHANGELOG.md - name: Get binaries - uses: actions/download-artifact@v4 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: path: dist/ merge-multiple: true - name: Create Release id: create_release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: @@ -101,7 +101,7 @@ jobs: # In case of failure - name: Rollback on failure if: failure() - uses: author/action-rollback@1.0.4 + uses: author/action-rollback@f4473931b1155b601092ec00eb1fa4882b80219f # 1.0.4 with: release_id: ${{ steps.create_release.outputs.id }} tag: ${{ needs.tag.outputs.tag }} @@ -115,7 +115,7 @@ jobs: needs: [tag, npm] if: needs.tag.outputs.is_stable == 'true' steps: - - uses: nflaig/release-comment-on-pr@v1 + - uses: nflaig/release-comment-on-pr@addf0108e7a60a9aaef4eee2900d69b126a75a5d # v1 with: token: ${{ secrets.GH_PAGES_TOKEN }} @@ -125,7 +125,7 @@ jobs: needs: [tag, npm] if: needs.tag.outputs.is_stable == 'true' steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - run: scripts/await-release.sh ${{ needs.tag.outputs.tag }} latest 900 docker: diff --git a/.github/workflows/test-sim.yml b/.github/workflows/test-sim.yml index 6cfaf1be3c27..1020b272bafc 100644 --- a/.github/workflows/test-sim.yml +++ b/.github/workflows/test-sim.yml @@ -28,7 +28,7 @@ jobs: runs-on: buildjet-4vcpu-ubuntu-2204 steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: 24 @@ -39,7 +39,7 @@ jobs: runs-on: buildjet-4vcpu-ubuntu-2204 steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: 24 @@ -57,7 +57,7 @@ jobs: GENESIS_DELAY_SLOTS: ${{github.event.inputs.genesisDelaySlots}} - name: Upload debug log test files for "packages/cli" if: ${{ always() }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: sim-test-multifork-logs path: packages/cli/test-logs @@ -68,7 +68,7 @@ jobs: runs-on: buildjet-4vcpu-ubuntu-2204 steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: 24 @@ -86,7 +86,7 @@ jobs: GENESIS_DELAY_SLOTS: ${{github.event.inputs.genesisDelaySlots}} - name: Upload debug log test files for "packages/cli" if: ${{ always() }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: sim-test-endpoints-logs path: packages/cli/test-logs @@ -97,7 +97,7 @@ jobs: runs-on: buildjet-4vcpu-ubuntu-2204 steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: 24 @@ -115,7 +115,7 @@ jobs: GENESIS_DELAY_SLOTS: ${{github.event.inputs.genesisDelaySlots}} - name: Upload debug log test files for "packages/cli" if: ${{ always() }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: sim-test-eth-backup-provider-logs path: packages/cli/test-logs @@ -126,7 +126,7 @@ jobs: runs-on: buildjet-4vcpu-ubuntu-2204 steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: 24 @@ -144,7 +144,7 @@ jobs: GENESIS_DELAY_SLOTS: ${{github.event.inputs.genesisDelaySlots}} - name: Upload debug log test files for "packages/cli" if: ${{ always() }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: sim-test-mixed-clients-logs path: packages/cli/test-logs diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 8b0e2d1dbd50..11fe85bf3bcb 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -22,7 +22,7 @@ jobs: node: [24] steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: ${{ matrix.node }} @@ -44,7 +44,7 @@ jobs: matrix: node: [24] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: ${{ matrix.node }} @@ -70,7 +70,7 @@ jobs: matrix: node: [24] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: @@ -91,14 +91,14 @@ jobs: matrix: node: [24] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: ${{ matrix.node }} # Cache validator slashing protection data tests - name: Restore spec tests cache - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: packages/validator/spec-tests key: spec-test-data-${{ hashFiles('packages/validator/test/spec/params.ts') }} @@ -114,7 +114,7 @@ jobs: # if: ${{ failure() && steps.unit_tests.conclusion == 'failure' }} - name: Upload coverage data - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@b9fd7d16f6d7d1b5d2bec1a2887e65ceed900238 # v4.6.0 with: token: ${{ secrets.CODECOV_TOKEN }} fail_ci_if_error: true @@ -131,7 +131,7 @@ jobs: node: [24] steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: @@ -153,7 +153,7 @@ jobs: - name: Upload debug log test for test env if: ${{ always() }} - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: name: debug-e2e-test-logs-node-${{matrix.node}} path: test-logs/e2e-test-env @@ -168,7 +168,7 @@ jobs: node: [24] steps: # - Uses YAML anchors in the future - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: ${{ matrix.node }} @@ -189,14 +189,14 @@ jobs: matrix: node: [24] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - uses: "./.github/actions/setup-and-build" with: node: ${{ matrix.node }} # Download spec tests with cache - name: Restore spec tests cache - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: packages/beacon-node/spec-tests key: spec-test-data-${{ hashFiles('packages/beacon-node/test/spec/specTestVersioning.ts') }}