Merge pull request #122 from synadia-labs/pdp/secfix-tjactions-changedfiles

security: tj-actions/changed-files: SHA-lock actions

Author: philpennock

.github/workflows/ui.yml

@@ -16,7 +16,7 @@ jobs:
 
       - name: Get changes to UI directory
         id: ui-edited
-        uses: tj-actions/changed-files@v42
+        uses: tj-actions/changed-files@aa08304bd477b800d468db44fe10f6c61f7f7b11  ## @v42 reiified by pdp 2025-03-14 in repo compromised tags incident
         with:
           files: natster-io/**
   check-formatter:

.github/workflows/ui_prod.yml

@@ -17,7 +17,7 @@ jobs:
 
       - name: Get changes to UI directory
         id: ui-edited
-        uses: tj-actions/changed-files@v42
+        uses: tj-actions/changed-files@aa08304bd477b800d468db44fe10f6c61f7f7b11  ## @v42 reiified by pdp 2025-03-14 in repo compromised tags incident
         with:
           files: natster-io/**
 

.github/workflows/ui_qa.yml

@@ -16,7 +16,7 @@ jobs:
 
       - name: Get changes to UI directory
         id: ui-edited
-        uses: tj-actions/changed-files@v34
+        uses: tj-actions/changed-files@ce4b8e3cba2220de8132ac9721ff754efd6bb7d7  ## @v34 reiified by pdp 2025-03-14 in repo compromised tags incident
         with:
           files: natster-io/**