Skip to content

Commit ed2f444

Browse files
chore(deps): pin dependencies
1 parent ad39582 commit ed2f444

8 files changed

+37
-37
lines changed

.github/workflows/astarte-apps-build-workflow.yaml

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -25,27 +25,27 @@ jobs:
2525
env:
2626
MIX_ENV: ci
2727
steps:
28-
- uses: actions/checkout@v2
29-
- uses: actions/cache@v4
28+
- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
29+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
3030
with:
3131
path: apps/${{ inputs.app }}/deps
3232
key: ${{ runner.os }}-dialyzer-mix-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-${{ hashFiles(format('{0}{1}{2}{3}', github.workspace, '/apps/', inputs.app, '/mix.lock')) }}
3333
restore-keys: |
3434
${{ runner.os }}-dialyzer-mix-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-
35-
- uses: actions/cache@v4
35+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
3636
with:
3737
path: apps/${{ inputs.app }}/_build
3838
key: ${{ runner.os }}-dialyzer-_build-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-${{ github.sha }}
3939
restore-keys: |
4040
${{ runner.os }}-dialyzer-_build-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-
41-
- uses: actions/cache@v4
41+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
4242
id: plt_cache
4343
with:
4444
path: apps/${{ inputs.app }}/dialyzer_cache
4545
key: ${{ runner.os }}-dialyzer_cache-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-${{ github.sha }}
4646
restore-keys: |
4747
${{ runner.os }}-dialyzer_cache-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-
48-
- uses: erlef/setup-beam@v1.15
48+
- uses: erlef/setup-beam@c2e02f777c158310fc6d3d4e11b36a52d2d52db8 # v1.15
4949
with:
5050
otp-version: ${{ env.otp_version }}
5151
elixir-version: ${{ env.elixir_version }}
@@ -94,8 +94,8 @@ jobs:
9494
CASSANDRA_NODES: localhost
9595
RABBITMQ_HOST: localhost
9696
steps:
97-
- uses: actions/checkout@v2
98-
- uses: actions/cache@v4
97+
- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
98+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
9999
with:
100100
path: apps/${{ inputs.app }}/deps
101101
key: ${{ runner.os }}-apps-mix-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-${{ hashFiles(format('{0}{1}{2}{3}', github.workspace, '/apps/', inputs.app, '/mix.lock')) }}
@@ -109,7 +109,7 @@ jobs:
109109
# key: ${{ runner.os }}-apps-_build-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-${{ github.sha }}
110110
# restore-keys: |
111111
# ${{ runner.os }}-apps-_build-${{ env.otp_version }}-${{ env.elixir_version }}-${{ inputs.app }}-
112-
- uses: erlef/setup-beam@v1.15
112+
- uses: erlef/setup-beam@c2e02f777c158310fc6d3d4e11b36a52d2d52db8 # v1.15
113113
with:
114114
otp-version: ${{ env.otp_version }}
115115
elixir-version: ${{ env.elixir_version }}
@@ -129,7 +129,7 @@ jobs:
129129
- name: Compile
130130
working-directory: ./apps/${{ inputs.app }}
131131
run: mix compile --warning-as-errors --force
132-
- uses: actions/setup-node@v1
132+
- uses: actions/setup-node@f1f314fca9dfce2769ece7d933488f076716723e # v1
133133
with:
134134
node-version: '10.x'
135135
- name: Wait for Cassandra
@@ -146,7 +146,7 @@ jobs:
146146
if: |
147147
matrix.database == 'scylladb/scylla:5.2.2' &&
148148
${{ github.repository }} == astarte-platform/astarte
149-
uses: codecov/codecov-action@v5
149+
uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5
150150
with:
151151
fail_ci_if_error: true
152152
token: ${{ secrets.CODECOV_TOKEN }}

.github/workflows/astarte-end-to-end-test-workflow.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
name: End-to-end Test
3131
runs-on: ubuntu-22.04
3232
steps:
33-
- uses: actions/checkout@v2
33+
- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
3434
- name: Initialize docker compose files
3535
run: docker run -v $(pwd)/compose:/compose astarte/docker-compose-initializer
3636
- name: Build Astarte containers
@@ -70,15 +70,15 @@ jobs:
7070
run: |
7171
JWT=$(./astartectl utils gen-jwt appengine channels -k test_private.pem)
7272
echo "E2E_JWT=$JWT" >> $GITHUB_ENV
73-
- uses: actions/cache@v4
73+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
7474
with:
7575
path: tools/astarte_e2e/deps
7676
key: deps-${{ env.otp_version }}-${{ env.elixir_version }}-${{ hashFiles(format('{0}{1}{2}', github.workspace, '/tools/astarte_e2e', '/mix.lock')) }}
77-
- uses: actions/cache@v4
77+
- uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
7878
with:
7979
path: tools/astarte_e2e/_build
8080
key: build-${{ env.otp_version }}-${{ env.elixir_version }}
81-
- uses: erlef/setup-beam@v1.15
81+
- uses: erlef/setup-beam@c2e02f777c158310fc6d3d4e11b36a52d2d52db8 # v1.15
8282
with:
8383
otp-version: ${{ env.otp_version }}
8484
elixir-version: ${{ env.elixir_version }}

.github/workflows/docs-workflow.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,15 +21,15 @@ jobs:
2121
runs-on: ubuntu-22.04
2222
steps:
2323
# Checkout the source
24-
- uses: actions/checkout@v2
24+
- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
2525
with:
2626
path: astarte
2727
# Checkout the docs repository
28-
- uses: actions/checkout@v2
28+
- uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
2929
with:
3030
repository: astarte-platform/docs
3131
path: docs
32-
- uses: erlef/setup-beam@v1.15
32+
- uses: erlef/setup-beam@c2e02f777c158310fc6d3d4e11b36a52d2d52db8 # v1.15
3333
with:
3434
elixir-version: "1.15.7"
3535
otp-version: "26.1"
@@ -46,7 +46,7 @@ jobs:
4646
mkdir docs/$DOCS_DIRNAME
4747
cp -r astarte/doc/doc/* docs/$DOCS_DIRNAME/
4848
- name: Checkout Swagger UI
49-
uses: actions/checkout@v2
49+
uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2
5050
with:
5151
repository: swagger-api/swagger-ui
5252
path: swagger-ui

.github/workflows/pr-container-build-workflow.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
- astarte_realm_management_api
2626
- astarte_trigger_engine
2727
steps:
28-
- uses: actions/checkout@v4
28+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
2929
- name: Building Docker Image
3030
env:
3131
CONTAINER_IMAGE_NAME: gh_actions_test

.github/workflows/publish-release-to-dockerhub-workflow.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -42,25 +42,25 @@ jobs:
4242
- e2e_tests
4343
steps:
4444
- name: Check out the repo
45-
uses: actions/checkout@v4
45+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
4646

4747
- name: Get current datetime
4848
id: datetime
4949
run: |
5050
echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
5151
5252
- name: Log in to Docker Hub
53-
uses: docker/login-action@v3.4.0
53+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
5454
with:
5555
username: ${{ secrets.DOCKER_USERNAME }}
5656
password: ${{ secrets.DOCKER_PASSWORD }}
5757

5858
- name: Set up Docker Buildx
59-
uses: docker/setup-buildx-action@v3
59+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
6060

6161
- name: Extract metadata (tags, labels) for Docker
6262
id: meta
63-
uses: docker/metadata-action@v5.7.0
63+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
6464
with:
6565
images: |
6666
astarte/${{ matrix.app }}
@@ -73,7 +73,7 @@ jobs:
7373
7474
- name: Build and push tagged Docker image
7575
id: push
76-
uses: docker/build-push-action@v6.18.0
76+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
7777
with:
7878
context: apps/${{ matrix.app }}
7979
file: Dockerfile

.github/workflows/publish-snapshot-to-dockerhub-workflow.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -48,15 +48,15 @@ jobs:
4848
- astarte_trigger_engine
4949
steps:
5050
- name: Check out the repo
51-
uses: actions/checkout@v4
51+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
5252

5353
- name: Get current datetime
5454
id: datetime
5555
run: |
5656
echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
5757
5858
- name: Log in to Docker Hub
59-
uses: docker/login-action@v3.4.0
59+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
6060
with:
6161
username: ${{ secrets.DOCKER_USERNAME }}
6262
password: ${{ secrets.DOCKER_PASSWORD }}
@@ -68,11 +68,11 @@ jobs:
6868
echo "TAG=$TAG" >> "$GITHUB_OUTPUT"
6969
7070
- name: Set up Docker Buildx
71-
uses: docker/setup-buildx-action@v3
71+
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
7272

7373
- name: Extract metadata (tags, labels) for Docker
7474
id: meta
75-
uses: docker/metadata-action@v5.7.0
75+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
7676
with:
7777
images: |
7878
astarte/${{ matrix.app }}
@@ -86,7 +86,7 @@ jobs:
8686
8787
- name: Build and push tagged Docker image
8888
id: push
89-
uses: docker/build-push-action@v6.18.0
89+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
9090
with:
9191
context: apps/${{ matrix.app }}
9292
file: Dockerfile

.github/workflows/publish-tool-release-to-dockerhub-workflow.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -27,22 +27,22 @@ jobs:
2727
- astarte_import
2828
steps:
2929
- name: Check out the repo
30-
uses: actions/checkout@v4
30+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3131

3232
- name: Get current datetime
3333
id: datetime
3434
run: |
3535
echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
3636
3737
- name: Log in to Docker Hub
38-
uses: docker/login-action@v3.4.0
38+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
3939
with:
4040
username: ${{ secrets.DOCKER_USERNAME }}
4141
password: ${{ secrets.DOCKER_PASSWORD }}
4242

4343
- name: Extract metadata (tags, labels) of Astarte tools for Docker
4444
id: meta
45-
uses: docker/metadata-action@v5.7.0
45+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
4646
with:
4747
images: |
4848
astarte/${{ matrix.app }}
@@ -55,7 +55,7 @@ jobs:
5555
5656
- name: Build and push tagged Docker image of Astarte tools
5757
id: push
58-
uses: docker/build-push-action@v6.18.0
58+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
5959
with:
6060
context: tools/${{ matrix.app }}
6161
file: tools/${{ matrix.app }}/Dockerfile

.github/workflows/publish-tool-snapshot-to-dockerhub-workflow.yaml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -32,15 +32,15 @@ jobs:
3232
- astarte_import
3333
steps:
3434
- name: Check out the repo
35-
uses: actions/checkout@v4
35+
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3636

3737
- name: Get current datetime
3838
id: datetime
3939
run: |
4040
echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
4141
4242
- name: Log in to Docker Hub
43-
uses: docker/login-action@v3.4.0
43+
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
4444
with:
4545
username: ${{ secrets.DOCKER_USERNAME }}
4646
password: ${{ secrets.DOCKER_PASSWORD }}
@@ -53,7 +53,7 @@ jobs:
5353
5454
- name: Extract metadata (tags, labels) of Astarte tools for Docker
5555
id: meta
56-
uses: docker/metadata-action@v5.7.0
56+
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
5757
with:
5858
images: |
5959
astarte/${{ matrix.app }}
@@ -67,7 +67,7 @@ jobs:
6767
6868
- name: Build and push tagged Docker image of Astarte tools
6969
id: push
70-
uses: docker/build-push-action@v6.18.0
70+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
7171
with:
7272
context: tools/${{ matrix.app }}
7373
file: tools/${{ matrix.app }}/Dockerfile

0 commit comments

Comments
 (0)