@@ -58,16 +58,16 @@ jobs:
5858 env :
5959 GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
6060 steps :
61- - uses : actions/checkout@v5
61+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
6262 with :
6363 submodules : recursive
6464 - name : Install dist
6565 # we specify bash to get pipefail; it guards against the `curl` command
6666 # failing. otherwise `sh` won't catch that `curl` returned non-0
6767 shell : bash
68- run : " curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.28 .0/cargo-dist-installer.sh | sh"
68+ run : " curl --proto '=https' --tlsv1.2 -LsSf https://github.com/axodotdev/cargo-dist/releases/download/v0.29 .0/cargo-dist-installer.sh | sh"
6969 - name : Cache dist
70- uses : actions/upload-artifact@v4
70+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
7171 with :
7272 name : cargo-dist-cache
7373 path : ~/.cargo/bin/dist
8383 cat plan-dist-manifest.json
8484 echo "manifest=$(jq -c "." plan-dist-manifest.json)" >> "$GITHUB_OUTPUT"
8585 - name : " Upload dist-manifest.json"
86- uses : actions/upload-artifact@v4
86+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
8787 with :
8888 name : artifacts-plan-dist-manifest
8989 path : plan-dist-manifest.json
@@ -117,7 +117,7 @@ jobs:
117117 - name : enable windows longpaths
118118 run : |
119119 git config --global core.longpaths true
120- - uses : actions/checkout@v5
120+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
121121 with :
122122 submodules : recursive
123123 - name : Install Rust non-interactively if not already installed
@@ -135,7 +135,7 @@ jobs:
135135 run : ${{ matrix.install_dist.run }}
136136 # Get the dist-manifest
137137 - name : Fetch local artifacts
138- uses : actions/download-artifact@v5
138+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
139139 with :
140140 pattern : artifacts-*
141141 path : target/distrib/
@@ -168,7 +168,7 @@ jobs:
168168
169169 cp dist-manifest.json "$BUILD_MANIFEST_NAME"
170170 - name : " Upload artifacts"
171- uses : actions/upload-artifact@v4
171+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
172172 with :
173173 name : artifacts-build-local-${{ join(matrix.targets, '_') }}
174174 path : |
@@ -185,18 +185,18 @@ jobs:
185185 GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
186186 BUILD_MANIFEST_NAME : target/distrib/global-dist-manifest.json
187187 steps :
188- - uses : actions/checkout@v5
188+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
189189 with :
190190 submodules : recursive
191191 - name : Install cached dist
192- uses : actions/download-artifact@v5
192+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
193193 with :
194194 name : cargo-dist-cache
195195 path : ~/.cargo/bin/
196196 - run : chmod +x ~/.cargo/bin/dist
197197 # Get all the local artifacts for the global tasks to use (for e.g. checksums)
198198 - name : Fetch local artifacts
199- uses : actions/download-artifact@v5
199+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
200200 with :
201201 pattern : artifacts-*
202202 path : target/distrib/
@@ -214,7 +214,7 @@ jobs:
214214
215215 cp dist-manifest.json "$BUILD_MANIFEST_NAME"
216216 - name : " Upload artifacts"
217- uses : actions/upload-artifact@v4
217+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
218218 with :
219219 name : artifacts-build-global
220220 path : |
@@ -234,18 +234,18 @@ jobs:
234234 outputs :
235235 val : ${{ steps.host.outputs.manifest }}
236236 steps :
237- - uses : actions/checkout@v5
237+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
238238 with :
239239 submodules : recursive
240240 - name : Install cached dist
241- uses : actions/download-artifact@v5
241+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
242242 with :
243243 name : cargo-dist-cache
244244 path : ~/.cargo/bin/
245245 - run : chmod +x ~/.cargo/bin/dist
246246 # Fetch artifacts from scratch-storage
247247 - name : Fetch artifacts
248- uses : actions/download-artifact@v5
248+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
249249 with :
250250 pattern : artifacts-*
251251 path : target/distrib/
@@ -258,14 +258,14 @@ jobs:
258258 cat dist-manifest.json
259259 echo "manifest=$(jq -c "." dist-manifest.json)" >> "$GITHUB_OUTPUT"
260260 - name : " Upload dist-manifest.json"
261- uses : actions/upload-artifact@v4
261+ uses : actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
262262 with :
263263 # Overwrite the previous copy
264264 name : artifacts-dist-manifest
265265 path : dist-manifest.json
266266 # Create a GitHub Release while uploading all files to it
267267 - name : " Download GitHub Artifacts"
268- uses : actions/download-artifact@v5
268+ uses : actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5.0.0
269269 with :
270270 pattern : artifacts-*
271271 path : artifacts
@@ -296,6 +296,6 @@ jobs:
296296 env :
297297 GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
298298 steps :
299- - uses : actions/checkout@v5
299+ - uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
300300 with :
301301 submodules : recursive
0 commit comments