From 4dca0afe5b338e23bcd72c8b9ad3b9fd2747e2c6 Mon Sep 17 00:00:00 2001 From: Johannes Eschrig Date: Thu, 19 Mar 2026 11:30:19 +0100 Subject: [PATCH 1/2] comment version tags on digests --- .github/workflows/release.yml | 7 +++---- .github/workflows/test.yml | 7 +++---- 2 files changed, 6 insertions(+), 8 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fa3bcec..0f287c0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -31,9 +31,8 @@ jobs: runs-on: ubuntu-latest environment: npm steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: 24 registry-url: https://registry.npmjs.org/ @@ -63,6 +62,6 @@ jobs: - name: Create a GitHub release if: ${{ github.event.inputs.dry-run != 'true' }} - uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1 + uses: ncipollo/release-action@b7eabc95ff50cbeeedec83973935c8f306dfcd0b # v1.20.0 with: tag: 'v${{ steps.get-version.outputs.version }}' diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index de6c00f..98f1320 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -18,9 +18,8 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - - - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: ${{ matrix.version }} @@ -31,7 +30,7 @@ jobs: - name: Sonar Scan if: matrix.version == 22 - uses: SonarSource/sonarqube-scan-action@b9f37f9de00914b9db556335bd46019dbafed98d + uses: SonarSource/sonarqube-scan-action@b9f37f9de00914b9db556335bd46019dbafed98d # v3.0.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} From 99082e4e52804a913ef7644499c78f88c578b10d Mon Sep 17 00:00:00 2001 From: Johannes Eschrig Date: Thu, 19 Mar 2026 12:22:38 +0100 Subject: [PATCH 2/2] fix sonar version --- .github/workflows/test.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 98f1320..4b4ced0 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -30,7 +30,7 @@ jobs: - name: Sonar Scan if: matrix.version == 22 - uses: SonarSource/sonarqube-scan-action@b9f37f9de00914b9db556335bd46019dbafed98d # v3.0.0 + uses: SonarSource/sonarqube-scan-action@26c51824c8330b026f261a3205f94958d4b1bc5c # v4.2.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}