Merge pull request #3 from ycharts/github-actions-commit-hashes

use commit hashes instead of tags for action versions

Author: skoobasteeve

.github/workflows/codecov.yml

@@ -16,9 +16,9 @@ jobs:
                 os: [ubuntu-latest, macos-latest, windows-latest]
                 python-version: ["3.11"]
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
             - name: Set up Python ${{ matrix.python-version }}
-              uses: actions/setup-python@v4
+              uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
               with:
                   python-version: ${{ matrix.python-version }}
                   cache: 'pip'
@@ -30,7 +30,7 @@ jobs:
                 pip install pytest pytest-cov
                 pytest --cov=./ --cov-report=xml
             - name: Upload coverage to Codecov
-              uses: codecov/codecov-action@v3
+              uses: codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
               with:
                 files: ./coverage.xml
-                fail_ci_if_error: true
+                fail_ci_if_error: true

.github/workflows/main.yml

@@ -23,9 +23,9 @@ jobs:
                   - os: macos-latest
                     python-version: "3.7"
         steps:
-            - uses: actions/checkout@v3
+            - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
             - name: Set up Python ${{ matrix.python-version }}
-              uses: actions/setup-python@v4
+              uses: actions/setup-python@8d9ed9ac5c53483de85588cdf95a591a75ab9f55 # v5.5.0
               with:
                   python-version: ${{ matrix.python-version }}
                   cache: 'pip'
@@ -44,4 +44,4 @@ jobs:
                   black --check --diff .
             - name: Check with flake8
               run: |
-                  flake8 --show-source --statistics .
+                  flake8 --show-source --statistics .

renovate.json

@@ -0,0 +1,7 @@
+{
+  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+  "extends": [
+    "github>ycharts/ycharts_systems:renovate-default.json5"
+  ],
+  "enabledManagers": ["github-actions"]
+}