From 7bb27b4e3afbb2dd30e8c7467d6a63cd0ef78b05 Mon Sep 17 00:00:00 2001 From: Oleksander Piskun Date: Mon, 17 Mar 2025 09:51:58 +0200 Subject: [PATCH] (chore): pinned versions of CI actions Signed-off-by: Oleksander Piskun --- .github/workflows/command-compile.yml | 2 +- .github/workflows/lint.yml | 24 ++++++------- .github/workflows/node-build.yml | 2 +- .github/workflows/tests-deploy.yml | 52 +++++++++++++-------------- .github/workflows/tests-special.yml | 10 +++--- .github/workflows/tests.yml | 52 +++++++++++++-------------- 6 files changed, 71 insertions(+), 71 deletions(-) diff --git a/.github/workflows/command-compile.yml b/.github/workflows/command-compile.yml index 709b0519..ea2d4da6 100644 --- a/.github/workflows/command-compile.yml +++ b/.github/workflows/command-compile.yml @@ -94,7 +94,7 @@ jobs: steps: - name: Restore cached git repository - uses: buildjet/cache/save@v4 + uses: buildjet/cache/save@3e70d19e31d6a8030aeddf6ed8dbe601f94d09f4 # v4.0.2 with: path: .git key: git-repo diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 5056fc5a..4096f009 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -21,13 +21,13 @@ jobs: name: info.xml lint steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Download xml appinfo schema run: wget https://raw.githubusercontent.com/nextcloud/appstore/master/nextcloudappstore/api/v1/release/info.xsd - name: Lint appinfo/info.xml - uses: ChristophWurst/xmllint-action@v1.1 + uses: ChristophWurst/xmllint-action@7c54ff113fc0f6d4588a15cb4dfe31b6ecca5212 # v1.2.1 with: xml-file: ./appinfo/info.xml xml-schema-file: ./info.xsd @@ -40,10 +40,10 @@ jobs: php-versions: ["8.1"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Set up php ${{ matrix.php-versions }} - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@4bd44f22a98a19e0950cbad5f31095157cc9621b # v2 with: php-version: ${{ matrix.php-versions }} coverage: none @@ -59,10 +59,10 @@ jobs: php-versions: ["8.1"] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Set up php ${{ matrix.php-versions }} - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@4bd44f22a98a19e0950cbad5f31095157cc9621b # v2 with: php-version: ${{ matrix.php-versions }} coverage: none @@ -81,9 +81,9 @@ jobs: name: php-psalm-analysis steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Set up php ${{ matrix.php-versions }} - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@4bd44f22a98a19e0950cbad5f31095157cc9621b # v2 with: php-version: ${{ matrix.php-versions }} coverage: none @@ -102,7 +102,7 @@ jobs: security-events: write name: security analysis steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: submodules: recursive @@ -114,7 +114,7 @@ jobs: report_file: results.sarif - name: Upload Security Analysis results to GitHub - uses: github/codeql-action/upload-sarif@v2 + uses: github/codeql-action/upload-sarif@6bb031afdd8eb862ea3fc1848194185e076637e5 # v3.28.11 with: sarif_file: results.sarif @@ -123,7 +123,7 @@ jobs: name: eslint steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Install dependencies run: npm ci @@ -136,7 +136,7 @@ jobs: name: stylelint steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Install dependencies run: npm ci diff --git a/.github/workflows/node-build.yml b/.github/workflows/node-build.yml index ca6dbb1d..b54217b1 100644 --- a/.github/workflows/node-build.yml +++ b/.github/workflows/node-build.yml @@ -28,7 +28,7 @@ jobs: run: echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV - name: Checkout - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: ${{ env.APP_NAME }} diff --git a/.github/workflows/tests-deploy.yml b/.github/workflows/tests-deploy.yml index 127bffac..dab05667 100644 --- a/.github/workflows/tests-deploy.yml +++ b/.github/workflows/tests-deploy.yml @@ -113,7 +113,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_container.json path: container.json @@ -121,7 +121,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_container.log path: container.log @@ -129,7 +129,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_nextcloud.log path: data/nextcloud.log @@ -199,7 +199,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_docker_app_docker_container.json path: container.json @@ -207,7 +207,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_docker_app_docker_container.log path: container.log @@ -215,7 +215,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_docker_app_docker_nextcloud.log path: nextcloud.log @@ -289,7 +289,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_http_container.json path: container.json @@ -297,7 +297,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_http_container.log path: container.log @@ -305,7 +305,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_http_nextcloud.log path: nextcloud.log @@ -411,7 +411,7 @@ jobs: - name: Upload HaProxy logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_bridge_haproxy.log path: haproxy.log @@ -419,7 +419,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_bridge_container.json path: container.json @@ -427,7 +427,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_bridge_container.log path: container.log @@ -435,7 +435,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_bridge_nextcloud.log path: nextcloud.log @@ -534,7 +534,7 @@ jobs: - name: Upload HaProxy logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_haproxy.log path: haproxy.log @@ -542,7 +542,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_container.json path: container.json @@ -550,7 +550,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_container.log path: container.log @@ -558,7 +558,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: dsp_https_nextcloud.log path: nextcloud.log @@ -682,7 +682,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_redis_container.json path: container.json @@ -690,7 +690,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_redis_container.log path: container.log @@ -698,7 +698,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_redis_nextcloud.log path: data/nextcloud.log @@ -842,7 +842,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_redis_deploy_options_container.json path: container.json @@ -850,7 +850,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_redis_deploy_options_container.log path: container.log @@ -858,7 +858,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_app_docker_redis_deploy_options_nextcloud.log path: data/nextcloud.log @@ -962,7 +962,7 @@ jobs: - name: Upload Container info if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_network_host_container.json path: container.json @@ -970,7 +970,7 @@ jobs: - name: Upload Container logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_network_host_container.log path: container.log @@ -978,7 +978,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: nc_host_network_host_nextcloud.log path: data/nextcloud.log diff --git a/.github/workflows/tests-special.yml b/.github/workflows/tests-special.yml index 387d7c6c..470707d9 100644 --- a/.github/workflows/tests-special.yml +++ b/.github/workflows/tests-special.yml @@ -41,7 +41,7 @@ jobs: options: --health-cmd pg_isready --health-interval 5s --health-timeout 2s --health-retries 5 steps: - - uses: actions/setup-python@v4 + - uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 with: python-version: '3.11' @@ -49,14 +49,14 @@ jobs: run: echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV - name: Checkout server - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: submodules: true repository: nextcloud/server ref: 'master' - name: Checkout AppAPI - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: apps/${{ env.APP_NAME }} @@ -95,7 +95,7 @@ jobs: run: PHP_CLI_SERVER_WORKERS=2 php -S 127.0.0.1:8080 & - name: Checkout NcPyApi - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: nc_py_api repository: cloud-py-api/nc_py_api @@ -121,7 +121,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: install_no_init.log path: data/nextcloud.log diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 44784c08..7fe99ba9 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -43,7 +43,7 @@ jobs: options: --health-cmd pg_isready --health-interval 5s --health-timeout 2s --health-retries 5 steps: - - uses: actions/setup-python@v4 + - uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 with: python-version: '3.11' @@ -51,26 +51,26 @@ jobs: run: echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV - name: Checkout server - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: submodules: true repository: nextcloud/server ref: master - name: Checkout Notifications - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: repository: nextcloud/notifications ref: master path: apps/notifications - name: Checkout AppAPI - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: apps/${{ env.APP_NAME }} - name: Checkout Notes - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: repository: nextcloud/notes ref: "main" @@ -115,7 +115,7 @@ jobs: run: PHP_CLI_SERVER_WORKERS=2 php -S 127.0.0.1:8080 & - name: Checkout NcPyApi - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: nc_py_api repository: cloud-py-api/nc_py_api @@ -141,7 +141,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: pgsql_nc_py_api_nextcloud.log path: data/nextcloud.log @@ -161,7 +161,7 @@ jobs: options: --health-cmd="mysqladmin ping" --health-interval 5s --health-timeout 2s --health-retries 5 steps: - - uses: actions/setup-python@v4 + - uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 with: python-version: '3.10' @@ -169,21 +169,21 @@ jobs: run: echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV - name: Checkout server - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: submodules: true repository: nextcloud/server ref: master - name: Checkout Notifications - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: repository: nextcloud/notifications ref: master path: apps/notifications - name: Checkout AppAPI - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: apps/${{ env.APP_NAME }} @@ -228,7 +228,7 @@ jobs: run: PHP_CLI_SERVER_WORKERS=2 php -S 127.0.0.1:8080 & - name: Checkout NcPyApi - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: nc_py_api repository: cloud-py-api/nc_py_api @@ -254,7 +254,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: mysql_nc_py_api_nextcloud.log path: data/nextcloud.log @@ -274,7 +274,7 @@ jobs: options: --health-cmd="mysqladmin ping" --health-interval 5s --health-timeout 2s --health-retries 5 steps: - - uses: actions/setup-python@v4 + - uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 with: python-version: '3.10' @@ -282,21 +282,21 @@ jobs: run: echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV - name: Checkout server - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: submodules: true repository: nextcloud/server ref: master - name: Checkout Notifications - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: repository: nextcloud/notifications ref: master path: apps/notifications - name: Checkout AppAPI - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: apps/${{ env.APP_NAME }} @@ -344,7 +344,7 @@ jobs: run: PHP_CLI_SERVER_WORKERS=2 php -S 127.0.0.1:8080 & - name: Checkout NcPyApi - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: nc_py_api repository: cloud-py-api/nc_py_api @@ -370,7 +370,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: apcu_mysql_nc_py_api_nextcloud.log path: data/nextcloud.log @@ -395,7 +395,7 @@ jobs: - 1521:1521/tcp steps: - - uses: actions/setup-python@v4 + - uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 with: python-version: '3.11' @@ -403,26 +403,26 @@ jobs: run: echo "APP_NAME=${GITHUB_REPOSITORY##*/}" >> $GITHUB_ENV - name: Checkout server - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: submodules: true repository: nextcloud/server ref: master - name: Checkout Notifications - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: repository: nextcloud/notifications ref: master path: apps/notifications - name: Checkout AppAPI - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: apps/${{ env.APP_NAME }} - name: Set up php - uses: shivammathur/setup-php@v2 + uses: shivammathur/setup-php@4bd44f22a98a19e0950cbad5f31095157cc9621b # v2 with: php-version: '8.3' extensions: bz2, ctype, curl, dom, fileinfo, gd, iconv, intl, json, libxml, mbstring, \ @@ -455,7 +455,7 @@ jobs: run: PHP_CLI_SERVER_WORKERS=2 php -S 127.0.0.1:8080 & - name: Checkout NcPyApi - uses: actions/checkout@v4 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 with: path: nc_py_api repository: cloud-py-api/nc_py_api @@ -481,7 +481,7 @@ jobs: - name: Upload NC logs if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1 with: name: oci_nc_py_api_nextcloud.log path: data/nextcloud.log