chore(deps): pin dependencies

serious-scaffold · Apr 1, 2024 · e4fc009 · e4fc009
1 parent 8040435
commit e4fc009
Show file tree

Hide file tree

Showing 6 changed files with 32 additions and 32 deletions.
diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml
@@ -26,13 +26,13 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           ref: ${{ github.head_ref }}
 
       - name: Cache
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
         with:
           path: ~/.cache/vcpkg
           key: x64-linux-gcc-${{ hashFiles('vcpkg.json') }}
@@ -59,7 +59,7 @@ jobs:
         run: cmake --build out/build/x64-linux-gcc --target ss-cpp-docs
 
       - name: Deploy to GitHub Pages
-        uses: peaceiris/actions-gh-pages@v3
+        uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847 # v3
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           publish_dir: ./docs/_build/html
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -21,23 +21,23 @@ jobs:
   pre-commit:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5
         with:
           python-version: 3.11
 
-      - uses: pre-commit/action@v3.0.1
+      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
         with:
           extra_args: --hook-stage manual --all-files
 
   consistency:
     if: ${{ !cancelled() && ! failure() }}
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
 
@@ -127,12 +127,12 @@ jobs:
           - cppcheck: true
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
 
       - name: Cache
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
         with:
           path: |
             ~/vcpkg
@@ -204,7 +204,7 @@ jobs:
           cmake --build out/build/${{ matrix.arch.type }}-${{ matrix.presets.os.type }}-${{ matrix.presets.compiler.type }} --target ccov-all
 
       - name: Upload coverage report
-        uses: codecov/codecov-action@v4.1.0
+        uses: codecov/codecov-action@54bcd8715eee62d40e33596ef5e8f0f48dbbccab # v4.1.0
         with:
           token: ${{ secrets.CODECOV_TOKEN }}
           directory: out/build/${{ matrix.arch.type }}-${{ matrix.presets.os.type }}-${{ matrix.presets.compiler.type }}/code_coverage
@@ -219,10 +219,10 @@ jobs:
     timeout-minutes: 15
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
 
       - name: Cache
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
         with:
           path: ~/.cache/vcpkg
           key: x64-linux-gcc-${{ hashFiles('vcpkg.json') }}
@@ -277,7 +277,7 @@ jobs:
       - name: Generate a bot token with BOT_APP_ID
         id: bot_token
         if: vars.BOT_APP_ID && env.BOT_PRIVATE_KEY != null
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@78e5f2ddc08efcb88fbbee6cfa3fed770ba550c3 # v1
         env:
           BOT_PRIVATE_KEY: ${{ secrets.BOT_PRIVATE_KEY }}
         with:
@@ -293,12 +293,12 @@ jobs:
           echo "# :warning: GITHUB_TOKEN is used" >> $GITHUB_STEP_SUMMARY
           echo "The GITHUB_TOKEN is used instead of a bot token or PAT that will not emit the released publish event for triggering a released workflow." >> $GITHUB_STEP_SUMMARY
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
         with:
           fetch-depth: 0
           token: ${{ steps.bot_token.outputs.token || secrets.PAT || secrets.GITHUB_TOKEN }}
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4
         with:
           node-version: 20
 

diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
@@ -27,7 +27,7 @@ jobs:
       - id: generate-token
         name: Generate a token with GitHub App if App ID exists
         if: vars.BOT_APP_ID
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@78e5f2ddc08efcb88fbbee6cfa3fed770ba550c3 # v1
         with:
           app-id: ${{ vars.BOT_APP_ID }}
           private-key: ${{ secrets.BOT_PRIVATE_KEY }}

diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/cd.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/cd.yml.jinja
@@ -26,13 +26,13 @@ jobs:
       id-token: write
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11v4
         with:
           token: {{ '${{ secrets.GITHUB_TOKEN }}' }}
           ref: {{ '${{ github.head_ref }}' }}
 
       - name: Cache
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f90c45773b623bea8c8e75f6c82b208c3cf94ea4f90c45773b623bea8c8e75f6c82b208c3cf94ea4f9v4
         with:
           path: ~/.cache/vcpkg
           key: x64-linux-gcc-{{ '${{ hashFiles(\'vcpkg.json\') }}' }}
@@ -59,7 +59,7 @@ jobs:
         run: cmake --build out/build/x64-linux-gcc --target {{ repo_name }}-docs
 
       - name: Deploy to GitHub Pages
-        uses: peaceiris/actions-gh-pages@v3
+        uses: peaceiris/actions-gh-pages@373f7f263a76c20808c831209c920827a82a2847v3
         with:
           github_token: {{ '${{ secrets.GITHUB_TOKEN }}' }}
           publish_dir: ./docs/_build/html
diff --git a/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/ci.yml.jinja b/template/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/ci.yml.jinja
@@ -21,23 +21,23 @@ jobs:
   pre-commit:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11v4
         with:
           fetch-depth: 0
 
-      - uses: actions/setup-python@v5
+      - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982dv5
         with:
           python-version: 3.11
 
-      - uses: pre-commit/action@v3.0.1
+      - uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecdv3.0.1
         with:
           extra_args: --hook-stage manual --all-files
 [% if repo_name == 'ss-cpp' %]
   consistency:
     if: {{ '${{ !cancelled() && ! failure() }}' }}
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11v4
         with:
           fetch-depth: 0
 
@@ -131,12 +131,12 @@ jobs:
           - cppcheck: true
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11v4
         with:
           fetch-depth: 0
 
       - name: Cache
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f90c45773b623bea8c8e75f6c82b208c3cf94ea4f90c45773b623bea8c8e75f6c82b208c3cf94ea4f9v4
         with:
           path: |
             ~/vcpkg
@@ -208,7 +208,7 @@ jobs:
           cmake --build out/build/{{ '${{ matrix.arch.type }}-${{ matrix.presets.os.type }}-${{ matrix.presets.compiler.type }}' }} --target ccov-all
 [% if use_codecov == true %]
       - name: Upload coverage report
-        uses: codecov/codecov-action@v4.1.0
+        uses: codecov/codecov-action@54bcd8715eee62d40e33596ef5e8f0f48dbbccabv4.1.0
         with:
           token: {{ '${{ secrets.CODECOV_TOKEN }}' }}
           directory: out/build/{{ '${{ matrix.arch.type }}-${{ matrix.presets.os.type }}-${{ matrix.presets.compiler.type }}' }}/code_coverage
@@ -228,10 +228,10 @@ jobs:
     timeout-minutes: 15
 
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11v4
 
       - name: Cache
-        uses: actions/cache@v4
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f90c45773b623bea8c8e75f6c82b208c3cf94ea4f90c45773b623bea8c8e75f6c82b208c3cf94ea4f9v4
         with:
           path: ~/.cache/vcpkg
           key: x64-linux-gcc-{{ '${{ hashFiles(\'vcpkg.json\') }}' }}
@@ -286,7 +286,7 @@ jobs:
       - name: Generate a bot token with BOT_APP_ID
         id: bot_token
         if: vars.BOT_APP_ID && env.BOT_PRIVATE_KEY != null
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@78e5f2ddc08efcb88fbbee6cfa3fed770ba550c378e5f2ddc08efcb88fbbee6cfa3fed770ba550c3v1
         env:
           BOT_PRIVATE_KEY: {{ '${{ secrets.BOT_PRIVATE_KEY }}' }}
         with:
@@ -302,12 +302,12 @@ jobs:
           echo "# :warning: GITHUB_TOKEN is used" >> $GITHUB_STEP_SUMMARY
           echo "The GITHUB_TOKEN is used instead of a bot token or PAT that will not emit the released publish event for triggering a released workflow." >> $GITHUB_STEP_SUMMARY
 
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11b4ffde65f46336ab88eb53be808477a3936bae11v4
         with:
           fetch-depth: 0
           token: {{ '${{ steps.bot_token.outputs.token || secrets.PAT || secrets.GITHUB_TOKEN }}' }}
 
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8v4
         with:
           node-version: 20
 

diff --git a/...te/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/renovate.yml.jinja b/...te/[% if repo_host_type == 'github.com' %].github[% endif %]/workflows/renovate.yml.jinja
@@ -27,7 +27,7 @@ jobs:
       - id: generate-token
         name: Generate a token with GitHub App if App ID exists
         if: vars.BOT_APP_ID
-        uses: actions/create-github-app-token@v1
+        uses: actions/create-github-app-token@78e5f2ddc08efcb88fbbee6cfa3fed770ba550c378e5f2ddc08efcb88fbbee6cfa3fed770ba550c3v1
         with:
           app-id: {{ '${{ vars.BOT_APP_ID }}' }}
           private-key: {{ '${{ secrets.BOT_PRIVATE_KEY }}' }}