diff --git a/.github/workflows/ci-knip.yml b/.github/workflows/ci-knip.yml index 687bc4d..2f17cc5 100644 --- a/.github/workflows/ci-knip.yml +++ b/.github/workflows/ci-knip.yml @@ -25,13 +25,13 @@ jobs: if: github.event.pull_request.head.repo.full_name == github.repository steps: - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.head_ref }} token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }} - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@274ff117aae1034c6b4d37f545268c96a7604077 # main - name: Run Knip Linter run: pnpm knip diff --git a/.github/workflows/ci-labeler.yml b/.github/workflows/ci-labeler.yml index eb60a6a..c0b04f3 100644 --- a/.github/workflows/ci-labeler.yml +++ b/.github/workflows/ci-labeler.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Label PRs - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1 + uses: actions/labeler@f27b608878404679385c85cfa523b85ccb86e213 # v6.1.0 with: repo-token: "${{ secrets.STUDIOCMS_SERVICE_TOKEN }}" configuration-path: .github/labeler.yml diff --git a/.github/workflows/ci-push-main.yml b/.github/workflows/ci-push-main.yml index 3b0c682..4f29c71 100644 --- a/.github/workflows/ci-push-main.yml +++ b/.github/workflows/ci-push-main.yml @@ -30,13 +30,13 @@ jobs: NODE_OPTIONS: "--max_old_space_size=4096" steps: - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: ref: ${{ github.head_ref }} token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }} - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@274ff117aae1034c6b4d37f545268c96a7604077 # main - name: Format code run: pnpm run lint:fix @@ -55,10 +55,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Run Todo Issue Bot - uses: juulsn/todo-issue@main + uses: juulsn/todo-issue@c27fbdb0a33572f73dbdb683aa8b1382bea8289e # main with: excludePattern: "^(node_modules/)" autoAssign: false @@ -68,7 +68,7 @@ jobs: mergebot: name: Merge Bot if: ${{ github.repository_owner == 'withstudiocms' && github.event_name != 'workflow_dispatch' && github.event.commits[0].message != '[ci] lint' }} - uses: withstudiocms/automations/.github/workflows/mergebot.yml@main + uses: withstudiocms/automations/.github/workflows/mergebot.yml@274ff117aae1034c6b4d37f545268c96a7604077 # main secrets: DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK_MERGEBOT }} @@ -90,18 +90,18 @@ jobs: steps: - name: Setup Apollo Git Bot id: bot-token - uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0 + uses: actions/create-github-app-token@bcd2ba49218906704ab6c1aa796996da409d3eb1 # v3.2.0 with: app-id: ${{ secrets.STUDIOCMS_GIT_BOT_APP_ID }} private-key: ${{ secrets.STUDIOCMS_GIT_BOT_PRIVATE_KEY }} - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: persist-credentials: false - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@274ff117aae1034c6b4d37f545268c96a7604077 # main - name: Run Build run: pnpm ci:prepublish @@ -114,7 +114,7 @@ jobs: - name: Run Changeset Release id: changesets - uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0 + uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 with: # If USE_GITHUB_BOT is true we don't want Changesets to do anything user related setupGitUser: false @@ -149,7 +149,7 @@ jobs: - name: Initiate Release Bot if: ${{ steps.changesets.outputs.published == 'true' }} - uses: withstudiocms/automations/.github/actions/releasebot@main + uses: withstudiocms/automations/.github/actions/releasebot@274ff117aae1034c6b4d37f545268c96a7604077 # main with: repository: ${{ github.repository }} CWD: ${{ github.workspace }} diff --git a/.github/workflows/ci-renovate.yml b/.github/workflows/ci-renovate.yml index f24f90c..0fab710 100644 --- a/.github/workflows/ci-renovate.yml +++ b/.github/workflows/ci-renovate.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Update PR - uses: mscharley/dependency-changesets-action@f456a98d34595a68d4b9412368a57533be0584ad # v1.2.3 + uses: mscharley/dependency-changesets-action@f96232368519695969bea8a8cfff7cca32b1e56a # v1.2.4 with: token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }} use-conventional-commits: true diff --git a/.github/workflows/ci-testing.yml b/.github/workflows/ci-testing.yml index bf3d8d1..a4dc286 100644 --- a/.github/workflows/ci-testing.yml +++ b/.github/workflows/ci-testing.yml @@ -29,7 +29,7 @@ jobs: cmd: ["cfetch"] steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: persist-credentials: false @@ -47,7 +47,7 @@ jobs: cmd: ["cfetch"] steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: persist-credentials: false @@ -63,10 +63,10 @@ jobs: NODE_OPTIONS: "--max_old_space_size=4096" steps: - name: Check out code using Git - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@274ff117aae1034c6b4d37f545268c96a7604077 # main - name: Build package run: pnpm build @@ -81,10 +81,10 @@ jobs: NODE_OPTIONS: "--max_old_space_size=4096" steps: - name: Check out code using Git - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@274ff117aae1034c6b4d37f545268c96a7604077 # main - name: Build package run: pnpm build @@ -93,7 +93,7 @@ jobs: run: pnpm ci:test - name: Upload HTML report - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: vitest-report path: html diff --git a/.github/workflows/coauthor.yml b/.github/workflows/coauthor.yml index d3bfc95..0c14005 100644 --- a/.github/workflows/coauthor.yml +++ b/.github/workflows/coauthor.yml @@ -14,5 +14,5 @@ jobs: if: ${{ github.event.issue.pull_request }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - uses: kevinzunigacuellar/coauthor-action@292b32bdbffc663431a2a37b3bfa597d83a74905 # v0.1.3 \ No newline at end of file