8000 Pin all actions to SHA commits · matplotlib/matplotlib@c580370 · GitHub
[go: up one dir, main page]
Skip to content

Commit c580370

Browse files
QuLogicQuLogic
committed
Pin all actions to SHA commits
1 parent 811b090 commit c580370

13 files changed

+43
-43
lines changed

‎.github/workflows/cibuildwheel.yml

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -39,12 +39,12 @@ jobs:
3939
SDIST_NAME: ${{ steps.sdist.outputs.SDIST_NAME }}
4040

4141
steps:
42-
- uses: actions/checkout@v4
42+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4343
with:
4444
fetch-depth: 0
4545
persist-credentials: false
4646

47-
- uses: actions/setup-python@v5
47+
- uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
4848
name: Install Python
4949
with:
5050
python-version: '3.10'
@@ -70,7 +70,7 @@ jobs:
7070
run: twine check dist/*
7171

7272
- name: Upload sdist result
73-
uses: actions/upload-artifact@v4
73+
uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
7474
with:
7575
name: cibw-sdist
7676
path: dist/*.tar.gz
@@ -133,12 +133,12 @@ jobs:
133133
steps:
134134
- name: Set up QEMU
135135
if: matrix.cibw_archs == 'aarch64'
136-
uses: docker/setup-qemu-action@v3
136+
uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
137137
with:
138138
platforms: arm64
139139

140140
- name: Download sdist
141-
uses: actions/download-artifact@v4
141+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
142142
with:
143143
name: cibw-sdist
144144
path: dist/
@@ -202,7 +202,7 @@ jobs:
202202
unset PIP_CONSTRAINT
203203
if: matrix.cibw_archs != 'aarch64' && matrix.os != 'windows-latest'
204204

205-
- uses: actions/upload-artifact@v4
205+
- uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
206206
with:
207207
name: cibw-wheels-${{ runner.os }}-${{ matrix.cibw_archs }}
208208
path: ./wheelhouse/*.whl
@@ -220,7 +220,7 @@ jobs:
220220
contents: read
221221
steps:
222222
- name: Download packages
223-
uses: actions/download-artifact@v4
223+
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
224224
with:
225225
pattern: cibw-*
226226
path: dist

‎.github/workflows/circleci.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
runs-on: ubuntu-latest
2929
name: Post warnings/errors as review
3030
steps:
31-
- uses: actions/checkout@v4
31+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3232
with:
3333
persist-credentials: false
3434

@@ -41,7 +41,7 @@ jobs:
4141
4242
- name: Set up reviewdog
4343
if: "${{ steps.fetch-artifacts.outputs.count != 0 }}"
44-
uses: reviewdog/action-setup@v1
44+
uses: reviewdog/action-setup@3f401fe1d58fe77e10d665ab713057375e39b887 # v1.3.0
4545
with:
4646
reviewdog_version: latest
4747

‎.github/workflows/clean_pr.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,7 +10,7 @@ jobs:
1010
runs-on: ubuntu-latest
1111

1212
steps:
13-
- uses: actions/checkout@v4
13+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1414
with:
1515
fetch-depth: '0'
1616
persist-credentials: false

‎.github/workflows/codeql-analysis.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,12 @@ jobs:
2626

2727
steps:
2828
- name: Checkout repository
29-
uses: actions/checkout@v4
29+
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
3030
with:
3131
persist-credentials: false
3232

3333
- name: Initialize CodeQL
34-
uses: github/codeql-action/init@v3
34+
uses: github/codeql-action/init@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6
3535
with:
3636
languages: ${{ matrix.language }}
3737

@@ -42,4 +42,4 @@ jobs:
4242
pip install --user -v .
4343
4444
- name: Perform CodeQL Analysis
45-
uses: github/codeql-action/analyze@v3
45+
uses: github/codeql-action/analyze@aa578102511db1f4524ed59b8cc2bae4f6e88195 # v3.27.6

‎.github/workflows/cygwin.yml

Lines changed: 5 additions & 5 deletions
< 10000 td data-grid-cell-id="diff-ef0e74b89540ddf3364d3cf302b4313367492eafc22d068b36bd0bbf50f8a6ca-86-86-1" data-selected="false" role="gridcell" style="background-color:var(--bgColor-default);text-align:center" tabindex="-1" valign="top" class="focusable-grid-cell diff-line-number position-relative diff-line-number-neutral left-side">86
Original file line numberDiff line numberDiff line change
@@ -79,12 +79,12 @@ jobs:
7979
- name: Fix line endings
8080
run: git config --global core.autocrlf input
8181

82-
- uses: actions/checkout@v4
82+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
8383
with:
8484
fetch-depth: 0
8585
persist-credentials: false
86

87-
- uses: cygwin/cygwin-install-action@v4
87+
- uses: cygwin/cygwin-install-action@006ad0b0946ca6d0a3ea2d4437677fa767392401 # v4
8888
with:
8989
packages: >-
9090
ccache gcc-g++ gdb git graphviz libcairo-devel libffi-devel
@@ -140,21 +140,21 @@ jobs:
140140
# FreeType build fails with bash, succeeds with dash
141141

142142
- name: Cache pip
143-
uses: actions/cache@v4
143+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
144144
with:
145145
path: C:\cygwin\home\runneradmin\.cache\pip
146146
key: Cygwin-py3.${{ matrix.python-minor-version }}-pip-${{ hashFiles('requirements/*/*.txt') }}
147147
restore-keys: ${{ matrix.os }}-py3.${{ matrix.python-minor-version }}-pip-
148148

149149
- name: Cache ccache
150-
uses: actions/cache@v4
150+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
151151
with:
152152
path: C:\cygwin\home\runneradmin\.ccache
153153
key: Cygwin-py3.${{ matrix.python-minor-version }}-ccache-${{ hashFiles('src/*') }}
154154
restore-keys: Cygwin-py3.${{ matrix.python-minor-version }}-ccache-
155155

156156
- name: Cache Matplotlib
157-
uses: actions/cache@v4
157+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
158158
with:
159159
path: |
160160
C:\cygwin\home\runneradmin\.cache\matplotlib

‎.github/workflows/good-first-issue.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
issues: write
1313
steps:
1414
- name: Add comment
15-
uses: peter-evans/create-or-update-comment@v4
15+
uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4.0.0
1616
with:
1717
issue-number: ${{ github.event.issue.number }}
1818
body: |

‎.github/workflows/labeler.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -10,6 +10,6 @@ jobs:
1010
pull-requests: write
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: actions/labeler@v5
13+
- uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0
1414
with:
1515
sync-labels: true

‎.github/workflows/mypy-stubtest.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -12,17 +12,17 @@ jobs:
1212
permissions:
1313
checks: write
1414
steps:
15-
- uses: actions/checkout@v4
15+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1616
with:
1717
persist-credentials: false
1818

1919
- name: Set up Python 3
20-
uses: actions/setup-python@v5
20+
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
2121
with:
2222
python-version: '3.10'
2323

2424
- name: Set up reviewdog
25-
uses: reviewdog/action-setup@v1
25+
uses: reviewdog/action-setup@3f401fe1d58fe77e10d665ab713057375e39b887 # v1.3.9
2626

2727
- name: Install tox
2828
run: python -m pip install tox

‎.github/workflows/pr_welcome.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
permissions:
1010
pull-requests: write
1111
steps:
12-
- uses: actions/first-interaction@v1
12+
- uses: actions/first-interaction@34f15e814fe48ac9312ccf29db4e74fa767cbab7 # v1.3.0
1313
with:
1414
repo-token: ${{ secrets.GITHUB_TOKEN }}
1515
pr-message: >+

‎.github/workflows/reviewdog.yml

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -12,20 +12,20 @@ jobs:
1212
permissions:
1313
checks: write
1414
steps:
15-
- uses: actions/checkout@v4
15+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
1616
with:
1717
persist-credentials: false
1818

1919
- name: Set up Python 3
20-
uses: actions/setup-python@v5
20+
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
2121
with:
2222
python-version: '3.10'
2323

2424
- name: Install flake8
2525
run: pip3 install -r requirements/testing/flake8.txt
2626

2727
- name: Set up reviewdog
28-
uses: reviewdog/action-setup@v1
28+
uses: reviewdog/action-setup@3f401fe1d58fe77e10d665ab713057375e39b887 # v1.3.9
2929

3030
- name: Run flake8
3131
env:
@@ -41,20 +41,20 @@ jobs:
4141
permissions:
4242
checks: write
4343
steps:
44-
- uses: actions/checkout@v4
44+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
4545
with:
4646
persist-credentials: false
4747

4848
- name: Set up Python 3
49-
uses: actions/setup-python@v5
49+
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
5050
with:
5151
python-version: '3.10'
5252

5353
- name: Install mypy
5454
run: pip3 install -r requirements/testing/mypy.txt -r requirements/testing/all.txt
5555

5656
- name: Set up reviewdog
57-
uses: reviewdog/action-setup@v1
57+
uses: reviewdog/action-setup@3f401fe1d58fe77e10d665ab713057375e39b887 # v1.3.9
5858

5959
- name: Run mypy
6060
env:
@@ -72,12 +72,12 @@ jobs:
7272
permissions:
7373
checks: write
7474
steps:
75-
- uses: actions/checkout@v4
75+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
7676
with:
7777
persist-credentials: false
7878

7979
- name: eslint
80-
uses: reviewdog/action-eslint@v1
80+
uses: reviewdog/action-eslint@9b5b0150e399e1f007ee3c27bc156549810a64e3 # v1.33.0
8181
with:
8282
filter_mode: nofilter
8383
github_token: ${{ secrets.GITHUB_TOKEN }}

‎.github/workflows/stale-tidy.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
if: github.repository == 'matplotlib/matplotlib'
1010
runs-on: ubuntu-latest
1111
steps:
12-
- uses: actions/stale@v9
12+
- uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0
1313
with:
1414
repo-token: ${{ secrets.GITHUB_TOKEN }}
1515
operations-per-run: 300

‎.github/workflows/stale.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ jobs:
99
if: github.repository == 'matplotlib/matplotlib'
1010
runs-on: ubuntu-latest
1111
steps:
12-
- uses: actions/stale@v9
12+
- uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9.0.0
1313
with:
1414
repo-token: ${{ secrets.GITHUB_TOKEN }}
1515
operations-per-run: 20

‎.github/workflows/tests.yml

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -111,13 +111,13 @@ jobs:
111111
pyside6-ver: '!=6.5.1'
112112

113113
steps:
114-
- uses: actions/checkout@v4
114+
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
115115
with:
116116
fetch-depth: 0
117117
persist-credentials: false
118118

119119
- name: Set up Python ${{ matrix.python-version }}
120-
uses: actions/setup-python@v5
120+
uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
121121
if: matrix.python-version != '3.13t'
122122
with:
123123
python-version: ${{ matrix.python-version }}
@@ -205,31 +205,31 @@ jobs:
205205
esac
206206
207207
- name: Cache pip
208-
uses: actions/cache@v4
208+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
209209
if: startsWith(runner.os, 'Linux')
210210
with:
211211
path: ~/.cache/pip
212212
key: ${{ matrix.os }}-py${{ matrix.python-version }}-pip-${{ hashFiles('requirements/*/*.txt') }}
213213
restore-keys: |
214214
${{ matrix.os }}-py${{ matrix.python-version }}-pip-
215215
- name: Cache pip
216-
uses: actions/cache@v4
216+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
217217
if: startsWith(runner.os, 'macOS')
218218
with:
219219
path: ~/Library/Caches/pip
220220
key: ${{ matrix.os }}-py${{ matrix.python-version }}-pip-${{ hashFiles('requirements/*/*.txt') }}
221221
restore-keys: |
222222
${{ matrix.os }}-py${{ matrix.python-version }}-pip-
223223
- name: Cache ccache
224-
uses: actions/cache@v4
224+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
225225
with:
226226
path: |
227227
~/.ccache
228228
key: ${{ matrix.os }}-py${{ matrix.python-version }}-ccache-${{ hashFiles('src/*') }}
229229
restore-keys: |
230230
${{ matrix.os }}-py${{ matrix.python-version }}-ccache-
231231
- name: Cache Matplotlib
232-
uses: actions/cache@v4
232+
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
233233
with:
234234
path: |
235235
~/.cache/matplotlib
@@ -410,12 +410,12 @@ jobs:
410410
fi
411411
- name: Upload code coverage
412412
if: ${{ !cancelled() && github.event_name != 'schedule' }}
413-
uses: codecov/codecov-action@v5
413+
uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e # v5.1.1
414414
with:
415415
name: "${{ matrix.python-version }} ${{ matrix.os }} ${{ matrix.name-suffix }}"
416416
token: ${{ secrets.CODECOV_TOKEN }}
417417

418-
- uses: actions/upload-artifact@v4
418+
- uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
419419
if: failure()
420420
with:
421421
name: "${{ matrix.python-version }} ${{ matrix.os }} ${{ matrix.name-suffix }} result images"
@@ -432,7 +432,7 @@ jobs:
432432

433433
steps:
434434
- name: Create issue on failure
435-
uses: imjohnbo/issue-bot@v3
435+
uses: imjohnbo/issue-bot@572eed14422c4d6ca37e870f97e7da209422f5bd # v3.4.4
436436
with:
437437
title: "[TST] Upcoming dependency test failures"
438438
body: |

0 commit comments

Comments
 (0)
0