2323 ahead_count : ${{ steps.diff.outputs.ahead_count }}
2424 steps :
2525 - name : Checkout Dev
26- uses : actions/checkout@v5
26+ uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
2727 with :
2828 ref : Dev
2929 fetch-depth : 0 # we need history and tags
@@ -83,15 +83,15 @@ jobs:
8383 runs-on : ${{ matrix.platform }}
8484 steps :
8585 - name : Checkout Dev
86- uses : actions/checkout@v5
86+ uses : actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0
8787 with :
8888 ref : Dev
8989 fetch-depth : 0
9090 lfs : true
9191
9292 - name : Compute metadata (date, short SHA, compare, changelog)
9393 id : meta
94- uses : actions/github-script@v8
94+ uses : actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
9595 with :
9696 script : |
9797 const short = context.sha.substring(0, 7);
@@ -132,7 +132,7 @@ jobs:
132132
133133 # ---------- Frontend ----------
134134 - name : Setup Node
135- uses : actions/setup-node@v5
135+ uses : actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
136136 with :
137137 node-version : ' 20'
138138 cache : ' npm'
@@ -148,10 +148,10 @@ jobs:
148148
149149 # ---------- Rust & platform deps ----------
150150 - name : Install Rust (stable)
151- uses : dtolnay/rust-toolchain@stable
151+ uses : dtolnay/rust-toolchain@5d458579430fc14a04a08a1e7d3694f545e91ce6 # stable
152152
153153 - name : Setup sccache
154- uses : mozilla-actions/sccache-action@v0.0.9
154+ uses : mozilla-actions/sccache-action@7d986dd989559c6ecdb630a3fd2557667be217ad # v0.0.9
155155
156156 - name : Install Linux deps
157157 if : matrix.platform == 'ubuntu-22.04'
@@ -163,11 +163,11 @@ jobs:
163163
164164 # ---------- Cache ----------
165165 - name : Rust cache
166- uses : Swatinem/rust-cache@v2
166+ uses : Swatinem/rust-cache@f13886b937689c021905a6b90929199931d60db1 # v2.8.1
167167
168168 # ---------- Reset rolling tag (optional but keeps things tidy) ----------
169169 - name : Remove existing 'openvcs-nightly' release & tag (if any)
170- uses : actions/github-script@v8
170+ uses : actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
171171 with :
172172 script : |
173173 const owner = context.repo.owner;
@@ -184,7 +184,7 @@ jobs:
184184
185185 # ---------- Build & publish ----------
186186 - name : Build and publish Nightly prerelease
187- uses : tauri-apps/tauri-action@v0
187+ uses : tauri-apps/tauri-action@19b93bb55601e3e373a93cfb6eb4242e45f5af20 # action-v0.6.0
188188 env :
189189 GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
190190 FRONTEND_SKIP_BUILD : ' 1'
0 commit comments