Merge pull request #105 from WyriHaximus/renovate/pin-dependencies

chore(deps): pin dependencies

Author: WyriHaximus

.github/workflows/ci.yml

@@ -12,7 +12,7 @@ jobs:
       REF: ${{ steps.generate-ref.outputs.ref }}
     steps:
       - run: helm version
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - run: helm version
       - id: generate-ref
         name: Generate Ref
@@ -51,7 +51,7 @@ jobs:
           - "helm plugin install https://github.com/hypnoglow/helm-s3.git && helm plugin list"
           - "helm env"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - uses: ./
         with:
           exec: ${{ matrix.exec }}
@@ -65,7 +65,7 @@ jobs:
       matrix:
         runner: ${{ fromJson(needs.runner-matrix.outputs.runner) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - run: helm version
       - uses: ./
         id: helm3
@@ -93,9 +93,9 @@ jobs:
       matrix:
         runner: ${{ fromJson(needs.runner-matrix.outputs.runner) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Create k8s Kind Cluster
-        uses: helm/kind-action@v1.12.0
+        uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
       - name: Get running image ID
         id: ps
         run: printf "::set-output name=id::%s" $(docker ps --format "{{.ID}}")
@@ -181,9 +181,9 @@ jobs:
       matrix:
         runner: ${{ fromJson(needs.runner-matrix.outputs.runner) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Create k8s Kind Cluster
-        uses: helm/kind-action@v1.12.0
+        uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
       - name: Get running image ID
         id: ps
         run: printf "::set-output name=id::%s" $(docker ps --format "{{.ID}}")
@@ -243,7 +243,7 @@ jobs:
             printf "::set-output name=cnt::%s" $(cat ~/.kube/config)
           kubeconfig: ${{ steps.kubeconfig.outputs.kubeconfig }}
       - name: "Assert kubeconfig really contains: junk"
-        uses: nick-fields/assert-action@v2
+        uses: nick-fields/assert-action@aa0067e01f0f6545c31755d6ca128c5a3a14f6bf # v2
         with:
           expected: junk
           actual: ${{ steps.getkubeconfigcontents.outputs.cnt }}
@@ -289,9 +289,9 @@ jobs:
       matrix:
         runner: ${{ fromJson(needs.runner-matrix.outputs.runner) }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
       - name: Create k8s Kind Cluster
-        uses: helm/kind-action@v1.12.0
+        uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0
       - name: Get running image ID
         id: ps
         run: printf "::set-output name=id::%s" $(docker ps --format "{{.ID}}")

.github/workflows/craft-release.yaml

@@ -13,7 +13,7 @@ jobs:
       changelog: ${{ steps.changelog.outputs.changelog }}
     steps:
       - name: Generate changelog
-        uses: WyriHaximus/github-action-jwage-changelog-generator@v1
+        uses: WyriHaximus/github-action-jwage-changelog-generator@ede372670d88c4afefdffbcba5527e9e3a37778a # v1
         id: changelog
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -29,7 +29,7 @@ jobs:
       - generate-changelog
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         with:
           fetch-depth: 0 # Required due to the way Git works, without it this action won't be able to find any or the correct tags
       - name: Create release/${{ env.MILESTONE }} branch
@@ -50,7 +50,7 @@ jobs:
           MILESTONE_DESCRIPTION: ${{ github.event.milestone.description }}
           CHANGELOG: ${{ needs.generate-changelog.outputs.changelog }}
       - name: Create release
-        uses: actions/create-release@v1
+        uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:
@@ -60,7 +60,7 @@ jobs:
           draft: false
           prerelease: false
       - name: Updated related tags
-        uses: haya14busa/action-update-semver@v1
+        uses: haya14busa/action-update-semver@22a3666f9309f0d72ab0ea6c49b7a8019c1eab38 # v1
         with:
           tag: ${{ env.MILESTONE }}
 

.github/workflows/set-milestone-on-pr.yaml

@@ -13,7 +13,7 @@ jobs:
   set-milestone:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4
         if: github.event.pull_request.milestone == null
       - name: 'Get Previous tag'
         if: github.event.pull_request.milestone == null
@@ -39,7 +39,7 @@ jobs:
       - name: 'Get next versions'
         if: github.event.pull_request.milestone == null
         id: semvers
-        uses: "WyriHaximus/github-action-next-semvers@v1"
+        uses: "WyriHaximus/github-action-next-semvers@d079934efaf011a4cf8912d4637097fe35d32b93" # v1
         with:
           version: ${{ steps.previoustag.outputs.tag }}
           strict: false