From d72a6c7d2cab2a18472c55ab0d72c78a8337e1cf Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 26 Apr 2024 14:28:02 +0000 Subject: [PATCH] chore(deps): pin dependencies (main) (#1555) chore(deps): pin dependencies Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/actions/build/action.yaml | 4 ++-- .github/actions/test/action.yaml | 4 ++-- .github/workflows/pr-playwright.yaml | 10 +++++----- .github/workflows/pr-website.yaml | 4 ++-- .github/workflows/pr.yaml | 4 ++-- .github/workflows/publish-backend-plugin-manager.yaml | 6 +++--- .github/workflows/push-website.yaml | 6 +++--- .github/workflows/push.yaml | 6 +++--- 8 files changed, 22 insertions(+), 22 deletions(-) diff --git a/.github/actions/build/action.yaml b/.github/actions/build/action.yaml index aec2a22c17..a79c186773 100644 --- a/.github/actions/build/action.yaml +++ b/.github/actions/build/action.yaml @@ -12,13 +12,13 @@ runs: using: 'composite' steps: - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: ${{ inputs.node-version }} cache: 'yarn' - name: Setup local Turbo cache - uses: dtinth/setup-github-actions-caching-for-turbo@v1 + uses: dtinth/setup-github-actions-caching-for-turbo@a0e976d970c2a94366a26984efcef3030e2c0115 # v1 - name: Install dependencies shell: bash diff --git a/.github/actions/test/action.yaml b/.github/actions/test/action.yaml index c9df38bc76..830191abe7 100644 --- a/.github/actions/test/action.yaml +++ b/.github/actions/test/action.yaml @@ -12,13 +12,13 @@ runs: using: 'composite' steps: - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: ${{ inputs.node-version }} cache: 'yarn' - name: Setup local Turbo cache - uses: dtinth/setup-github-actions-caching-for-turbo@v1 + uses: dtinth/setup-github-actions-caching-for-turbo@a0e976d970c2a94366a26984efcef3030e2c0115 # v1 - name: Install dependencies shell: bash diff --git a/.github/workflows/pr-playwright.yaml b/.github/workflows/pr-playwright.yaml index e155378b5f..2220a9f0b6 100644 --- a/.github/workflows/pr-playwright.yaml +++ b/.github/workflows/pr-playwright.yaml @@ -11,10 +11,10 @@ jobs: outputs: plugins: ${{ steps.scan.outputs.plugins }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18 - name: Determine changes @@ -48,8 +48,8 @@ jobs: if: needs.changes.outputs.plugins != '[]' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18 - name: Install dependencies @@ -126,7 +126,7 @@ jobs: # Kill backend pid=$(lsof -i :7007 -Fp | grep p | sed s/p//) kill -9 $pid && echo "Backend shut down" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4 if: always() with: name: playwright-report diff --git a/.github/workflows/pr-website.yaml b/.github/workflows/pr-website.yaml index 04875c15a4..a74a547dd3 100644 --- a/.github/workflows/pr-website.yaml +++ b/.github/workflows/pr-website.yaml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: repository: janus-idp/janus-idp.github.io persist-credentials: false @@ -24,7 +24,7 @@ jobs: id: pnpm-install - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version-file: '.nvmrc' cache: 'pnpm' diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 904c269b37..6b82a0a18c 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -11,7 +11,7 @@ jobs: node-version: [18, 20] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: fetch-depth: 0 @@ -29,7 +29,7 @@ jobs: node-version: [18, 20] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: fetch-depth: 0 diff --git a/.github/workflows/publish-backend-plugin-manager.yaml b/.github/workflows/publish-backend-plugin-manager.yaml index 92217f3044..c5d963df54 100644 --- a/.github/workflows/publish-backend-plugin-manager.yaml +++ b/.github/workflows/publish-backend-plugin-manager.yaml @@ -54,7 +54,7 @@ jobs: - name: Checkout from master if: steps.get_checkout_ref.outputs.GIT_REF == 'master' - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: repository: backstage/backstage ref: master @@ -64,7 +64,7 @@ jobs: - name: Checkout from a git ref if: steps.get_checkout_ref.outputs.GIT_REF != 'master' - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: repository: backstage/backstage ref: '${{ steps.get_checkout_ref.outputs.GIT_REF }}' @@ -91,7 +91,7 @@ jobs: echo "GH Output: " && cat $GITHUB_OUTPUT - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 if: steps.test_commit_already_published.outputs.ALREADY_PUSHED == 'false' env: FORCE_COLOR: 0 diff --git a/.github/workflows/push-website.yaml b/.github/workflows/push-website.yaml index a76bd6c692..6bc05e1de1 100644 --- a/.github/workflows/push-website.yaml +++ b/.github/workflows/push-website.yaml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: repository: janus-idp/janus-idp.github.io persist-credentials: false @@ -30,7 +30,7 @@ jobs: id: pnpm-install - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version-file: '.nvmrc' cache: 'pnpm' @@ -48,7 +48,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Repository Dispatch - uses: peter-evans/repository-dispatch@v2 + uses: peter-evans/repository-dispatch@bf47d102fdb849e755b0b0023ea3e81a44b6f570 # v2 with: token: ${{ secrets.PAT }} repository: janus-idp/janus-idp.github.io diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml index 659ae01f92..f090d38922 100644 --- a/.github/workflows/push.yaml +++ b/.github/workflows/push.yaml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 - name: Test uses: ./.github/actions/test @@ -35,7 +35,7 @@ jobs: private-key: ${{ secrets.JANUS_IDP_GITHUB_APP_PRIVATE_KEY }} - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 with: # don't persist the GITHUB_TOKEN # so that semantic-release can use use the generated token @@ -45,7 +45,7 @@ jobs: uses: ./.github/actions/build - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version-file: '.nvmrc' registry-url: 'https://registry.npmjs.org'