stdlib-js
diff --git a/‎.github/.keepalive
Lines changed: 1 addition & 0 deletions b/‎.github/.keepalive
Lines changed: 1 addition & 0 deletions
diff --git a/‎.github/workflows/benchmark.yml
Lines changed: 4 additions & 2 deletions b/‎.github/workflows/benchmark.yml
Lines changed: 4 additions & 2 deletions
diff --git a/‎.github/workflows/cancel.yml
Lines changed: 2 additions & 1 deletion b/‎.github/workflows/cancel.yml
Lines changed: 2 additions & 1 deletion
diff --git a/‎.github/workflows/close_pull_requests.yml
Lines changed: 23 additions & 13 deletions b/‎.github/workflows/close_pull_requests.yml
Lines changed: 23 additions & 13 deletions
diff --git a/‎.github/workflows/examples.yml
Lines changed: 6 additions & 4 deletions b/‎.github/workflows/examples.yml
Lines changed: 6 additions & 4 deletions
diff --git a/‎.github/workflows/npm_downloads.yml
Lines changed: 8 additions & 4 deletions b/‎.github/workflows/npm_downloads.yml
Lines changed: 8 additions & 4 deletions
diff --git a/‎.github/workflows/productionize.yml
Lines changed: 28 additions & 14 deletions b/‎.github/workflows/productionize.yml
Lines changed: 28 additions & 14 deletions
diff --git a/‎.github/workflows/publish.yml
Lines changed: 10 additions & 5 deletions b/‎.github/workflows/publish.yml
Lines changed: 10 additions & 5 deletions
diff --git a/‎.github/workflows/test.yml
Lines changed: 6 additions & 3 deletions b/‎.github/workflows/test.yml
Lines changed: 6 additions & 3 deletions
@@ -0,0 +1 @@
+2023-10-01T02:32:45.179Z
@@ -41,11 +41,13 @@ jobs:
 
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
 
@@ -44,7 +44,8 @@ jobs:
 
       # Cancel existing workflow runs:
       - name: 'Cancel existing workflow runs'
-        uses: styfle/cancel-workflow-action@0.11.0
+        # Pin action to full length commit SHA corresponding to v0.11.0
+        uses: styfle/cancel-workflow-action@b173b6ec0100793626c2d9e6b90435061f4fc3e5
         with:
           workflow_id: >-
             benchmark.yml,
 
@@ -26,19 +26,29 @@ on:
 
 # Workflow jobs:
 jobs:
+
+  # Define job to close all pull requests:
   run:
+
+    # Define the type of virtual host machine on which to run the job:
     runs-on: ubuntu-latest
+
+    # Define the sequence of job steps...
     steps:
-    - uses: superbrothers/close-pull-request@v3
-      with:
-        comment: |
-          Thank you for submitting a pull request. :raised_hands:
-          
-          We greatly appreciate your willingness to submit a contribution. However, we are not accepting pull requests against this repository, as all development happens on the [main project repository](https://github.com/stdlib-js/stdlib).
-          
-          We kindly request that you submit this pull request against the [respective directory](https://github.com/stdlib-js/stdlib/tree/develop/lib/node_modules/%40stdlib/assert/is-multi-slice) of the main repository where we’ll review and provide feedback. If this is your first stdlib contribution, be sure to read the [contributing guide](https://github.com/stdlib-js/stdlib/blob/develop/CONTRIBUTING.md) which provides guidelines and instructions for submitting contributions.
-          
-          Thank you again, and we look forward to receiving your contribution! :smiley:
-          
-          Best,
-          The stdlib team
+
+      # Close pull request
+      - name: 'Close pull request'
+        # Pin action to full length commit SHA corresponding to v3.1.2
+        uses: superbrothers/close-pull-request@9c18513d320d7b2c7185fb93396d0c664d5d8448
+        with:
+          comment: |
+            Thank you for submitting a pull request. :raised_hands:
+            
+            We greatly appreciate your willingness to submit a contribution. However, we are not accepting pull requests against this repository, as all development happens on the [main project repository](https://github.com/stdlib-js/stdlib).
+            
+            We kindly request that you submit this pull request against the [respective directory](https://github.com/stdlib-js/stdlib/tree/develop/lib/node_modules/%40stdlib/assert/is-multi-slice) of the main repository where we’ll review and provide feedback. If this is your first stdlib contribution, be sure to read the [contributing guide](https://github.com/stdlib-js/stdlib/blob/develop/CONTRIBUTING.md) which provides guidelines and instructions for submitting contributions.
+            
+            Thank you again, and we look forward to receiving your contribution! :smiley:
+            
+            Best,
+            The stdlib team
@@ -39,13 +39,15 @@ jobs:
     # Define the sequence of job steps...
     steps:
 
-      # Checkout the repository:
-      - name: 'Checkout the repository'
-        uses: actions/checkout@v3
+      # Checkout repository:
+      - name: 'Checkout repository'
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
 
@@ -45,12 +45,14 @@ jobs:
     steps:
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
         timeout-minutes: 10
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -84,7 +86,8 @@ jobs:
 
       # Upload the download data:
       - name: 'Upload data'
-        uses: actions/upload-artifact@v3
+        # Pin action to full length commit SHA corresponding to v3.1.3
+        uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
         with:
           # Define a name for the uploaded artifact (ensuring a unique name for each job):
           name: npm_downloads
@@ -99,7 +102,8 @@ jobs:
 
       # Send data to events server:
       - name: 'Post data'
-        uses: distributhor/workflow-webhook@v3
+        # Pin action to full length commit SHA corresponding to v3.0.3:
+        uses: distributhor/workflow-webhook@48a40b380ce4593b6a6676528cd005986ae56629
         env:
           webhook_url: ${{ secrets.STDLIB_NPM_DOWNLOADS_URL }}
           webhook_secret: ${{ secrets.STDLIB_WEBHOOK_SECRET }}
 
@@ -61,13 +61,15 @@ jobs:
     steps:
       # Checkout main branch of repository:
       - name: 'Checkout main branch'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
         with:
           ref: main
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -132,15 +134,17 @@ jobs:
       # Checkout the repository:
       - name: 'Checkout repository'
         if: ${{ github.event.inputs.require-passing-tests == 'true' }}
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
         with:
           # Use the `production` branch:
           ref: production
 
       # Install Node.js:
       - name: 'Install Node.js'
         if: ${{ github.event.inputs.require-passing-tests == 'true' }}
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -184,7 +188,8 @@ jobs:
     steps:
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
 
       # Configure git:
       - name: 'Configure git'
@@ -251,7 +256,8 @@ jobs:
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -334,7 +340,8 @@ jobs:
 
       # Send status to Slack channel if job fails:
       - name: 'Send status to Slack channel in case of failure'
-        uses: act10ns/slack@v2
+        # Pin action to full length commit SHA corresponding to v2.0.0
+        uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f
         with:
           status: ${{ job.status }}
           steps: ${{ toJson(steps) }}
@@ -357,7 +364,8 @@ jobs:
     steps:
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
 
       # Configure git:
       - name: 'Configure git'
@@ -416,7 +424,8 @@ jobs:
 
       # Install Node.js
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -505,7 +514,8 @@ jobs:
 
       # Send status to Slack channel if job fails:
       - name: 'Send status to Slack channel in case of failure'
-        uses: act10ns/slack@v2
+        # Pin action to full length commit SHA corresponding to v2.0.0
+        uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f
         with:
           status: ${{ job.status }}
           steps: ${{ toJson(steps) }}
@@ -528,7 +538,8 @@ jobs:
     steps:
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
 
       # Configure git:
       - name: 'Configure git'
@@ -595,7 +606,8 @@ jobs:
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -682,7 +694,8 @@ jobs:
 
       # Send status to Slack channel if job fails:
       - name: 'Send status to Slack channel in case of failure'
-        uses: act10ns/slack@v2
+        # Pin action to full length commit SHA corresponding to v2.0.0
+        uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f
         with:
           status: ${{ job.status }}
           steps: ${{ toJson(steps) }}
@@ -706,7 +719,8 @@ jobs:
 
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
         with:
           fetch-depth: 2
 
 
@@ -61,11 +61,13 @@ jobs:
 
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -197,7 +199,8 @@ jobs:
 
       # Publish package to npm:
       - name: 'Publish package to npm'
-        uses: JS-DevTools/npm-publish@v2
+        # Pin action to full length commit SHA corresponding to v2.2.2
+        uses: JS-DevTools/npm-publish@fe72237be0920f7a0cafd6a966c9b929c9466e9b
         with:
           token: ${{ secrets.NPM_TOKEN }}
           access: public
@@ -209,7 +212,8 @@ jobs:
 
       # Send status to Slack channel if job fails:
       - name: 'Send status to Slack channel in case of failure'
-        uses: act10ns/slack@v2
+        # Pin action to full length commit SHA corresponding to v2.0.0
+        uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f
         with:
           status: ${{ job.status }}
           steps: ${{ toJson(steps) }}
@@ -230,7 +234,8 @@ jobs:
 
       # Cancel any running or queued workflow runs:
       - name: 'Cancel running or queued workflow runs'
-        uses: styfle/cancel-workflow-action@0.11.0
+        # Pin action to full length commit SHA corresponding to v0.11.0
+        uses: styfle/cancel-workflow-action@b173b6ec0100793626c2d9e6b90435061f4fc3e5
         with:
           workflow_id: >-
             benchmark.yml,
 
@@ -58,11 +58,13 @@ jobs:
 
       # Checkout the repository:
       - name: 'Checkout repository'
-        uses: actions/checkout@v3
+        # Pin action to full length commit SHA corresponding to v4.1.0
+        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608
 
       # Install Node.js:
       - name: 'Install Node.js'
-        uses: actions/setup-node@v3
+        # Pin action to full length commit SHA corresponding to v3.8.1
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d
         with:
           node-version: 16
         timeout-minutes: 5
@@ -89,7 +91,8 @@ jobs:
 
       # Send status to Slack channel if job fails:
       - name: 'Send status to Slack channel in case of failure'
-        uses: act10ns/slack@v2
+        # Pin action to full length commit SHA corresponding to v2.0.0
+        uses: act10ns/slack@ed1309ab9862e57e9e583e51c7889486b9a00b0f
         with:
           status: ${{ job.status }}
           steps: ${{ toJson(steps) }}