chore(deps): pin dependencies (main) (janus-idp#1555)

chore(deps): pin dependencies Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
debsmita1 · Apr 26, 2024 · d72a6c7 · d72a6c7
1 parent 67051c1
commit d72a6c7
Show file tree

Hide file tree

Showing 8 changed files with 22 additions and 22 deletions.
diff --git a/.github/actions/build/action.yaml b/.github/actions/build/action.yaml
@@ -12,13 +12,13 @@ runs:
   using: 'composite'
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
       with:
         node-version: ${{ inputs.node-version }}
         cache: 'yarn'
 
     - name: Setup local Turbo cache
-      uses: dtinth/setup-github-actions-caching-for-turbo@v1
+      uses: dtinth/setup-github-actions-caching-for-turbo@a0e976d970c2a94366a26984efcef3030e2c0115 # v1
 
     - name: Install dependencies
       shell: bash

diff --git a/.github/actions/test/action.yaml b/.github/actions/test/action.yaml
@@ -12,13 +12,13 @@ runs:
   using: 'composite'
   steps:
     - name: Setup Node.js
-      uses: actions/setup-node@v4
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
       with:
         node-version: ${{ inputs.node-version }}
         cache: 'yarn'
 
     - name: Setup local Turbo cache
-      uses: dtinth/setup-github-actions-caching-for-turbo@v1
+      uses: dtinth/setup-github-actions-caching-for-turbo@a0e976d970c2a94366a26984efcef3030e2c0115 # v1
 
     - name: Install dependencies
       shell: bash

diff --git a/.github/workflows/pr-playwright.yaml b/.github/workflows/pr-playwright.yaml
@@ -11,10 +11,10 @@ jobs:
     outputs:
       plugins: ${{ steps.scan.outputs.plugins }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 18
       - name: Determine changes
@@ -48,8 +48,8 @@ jobs:
     if: needs.changes.outputs.plugins != '[]'
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 18
       - name: Install dependencies
@@ -126,7 +126,7 @@ jobs:
           # Kill backend
           pid=$(lsof -i :7007 -Fp | grep p | sed s/p//)
           kill -9 $pid && echo "Backend shut down"
-      - uses: actions/upload-artifact@v4
+      - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4
         if: always()
         with:
           name: playwright-report

diff --git a/.github/workflows/pr-website.yaml b/.github/workflows/pr-website.yaml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           repository: janus-idp/janus-idp.github.io
           persist-credentials: false
@@ -24,7 +24,7 @@ jobs:
         id: pnpm-install
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'

diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml
@@ -11,7 +11,7 @@ jobs:
         node-version: [18, 20]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           fetch-depth: 0
 
@@ -29,7 +29,7 @@ jobs:
         node-version: [18, 20]
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           fetch-depth: 0
 

diff --git a/.github/workflows/publish-backend-plugin-manager.yaml b/.github/workflows/publish-backend-plugin-manager.yaml
@@ -54,7 +54,7 @@ jobs:
 
       - name: Checkout from master
         if: steps.get_checkout_ref.outputs.GIT_REF == 'master'
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           repository: backstage/backstage
           ref: master
@@ -64,7 +64,7 @@ jobs:
 
       - name: Checkout from a git ref
         if: steps.get_checkout_ref.outputs.GIT_REF != 'master'
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           repository: backstage/backstage
           ref: '${{ steps.get_checkout_ref.outputs.GIT_REF }}'
@@ -91,7 +91,7 @@ jobs:
           echo "GH Output: " && cat $GITHUB_OUTPUT
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         if: steps.test_commit_already_published.outputs.ALREADY_PUSHED == 'false'
         env:
           FORCE_COLOR: 0

diff --git a/.github/workflows/push-website.yaml b/.github/workflows/push-website.yaml
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           repository: janus-idp/janus-idp.github.io
           persist-credentials: false
@@ -30,7 +30,7 @@ jobs:
         id: pnpm-install
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version-file: '.nvmrc'
           cache: 'pnpm'
@@ -48,7 +48,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Repository Dispatch
-        uses: peter-evans/repository-dispatch@v2
+        uses: peter-evans/repository-dispatch@bf47d102fdb849e755b0b0023ea3e81a44b6f570 # v2
         with:
           token: ${{ secrets.PAT }}
           repository: janus-idp/janus-idp.github.io

diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: Test
         uses: ./.github/actions/test
@@ -35,7 +35,7 @@ jobs:
           private-key: ${{ secrets.JANUS_IDP_GITHUB_APP_PRIVATE_KEY }}
 
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           # don't persist the GITHUB_TOKEN
           # so that semantic-release can use use the generated token
@@ -45,7 +45,7 @@ jobs:
         uses: ./.github/actions/build
 
       - name: Setup Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version-file: '.nvmrc'
           registry-url: 'https://registry.npmjs.org'