From d6255b4f2dc0c7b4a5ca3f72a61dcb472f6a3e26 Mon Sep 17 00:00:00 2001 From: Tim Meusel Date: Mon, 6 Jul 2026 15:19:49 +0200 Subject: [PATCH] CI: pin external workflows Signed-off-by: Tim Meusel --- .github/workflows/components_update.yml | 6 +++--- .github/workflows/prepare_release.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- .github/workflows/runtime_tests.yml | 4 ++-- 4 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/components_update.yml b/.github/workflows/components_update.yml index 42c6e824..d4087ec6 100644 --- a/.github/workflows/components_update.yml +++ b/.github/workflows/components_update.yml @@ -24,9 +24,9 @@ jobs: if: github.repository_owner == 'OpenVoxProject' steps: - name: Checkout repository - uses: actions/checkout@v7 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Setup Ruby - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1.316.0 with: ruby-version: 'ruby' bundler-cache: true @@ -50,7 +50,7 @@ jobs: - name: Check for gem updates run: bundle exec rake vox:update_gems - name: Create pull Request - uses: peter-evans/create-pull-request@v8 + uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1 with: commit-message: "Update Ruby components" signoff: true diff --git a/.github/workflows/prepare_release.yml b/.github/workflows/prepare_release.yml index 5cb01ae3..967b6e2e 100644 --- a/.github/workflows/prepare_release.yml +++ b/.github/workflows/prepare_release.yml @@ -12,12 +12,12 @@ jobs: version: ${{ steps.version.outputs.value }} steps: - name: Check out repo - uses: actions/checkout@v7 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - name: Setup Ruby - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1.316.0 with: ruby-version: '3.3' bundler-cache: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 91752a8d..83bce287 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -12,12 +12,12 @@ jobs: version: ${{ steps.version.outputs.value }} steps: - name: Check out repo - uses: actions/checkout@v7 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - name: Setup Ruby - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1.316.0 with: ruby-version: '3.3' bundler-cache: true diff --git a/.github/workflows/runtime_tests.yml b/.github/workflows/runtime_tests.yml index 7e049872..17428f8a 100644 --- a/.github/workflows/runtime_tests.yml +++ b/.github/workflows/runtime_tests.yml @@ -19,11 +19,11 @@ jobs: runs-on: ubuntu-24.04 steps: - name: Checkout current PR - uses: actions/checkout@v7 + uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - name: Install Ruby version 4.0 - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@d45b1a4e94b71acab930e56e79c6aa188764e7f9 # v1.316.0 with: ruby-version: 4.0 bundler-cache: true