From 787f04a5f143ab27b2e79b39206d537751c139f3 Mon Sep 17 00:00:00 2001 From: Aniket Singh Yadav Date: Fri, 1 May 2026 06:59:09 +0000 Subject: [PATCH] pin full commit sha --- .github/workflows/ci.yml | 18 +++++++++--------- .github/workflows/docs.yml | 4 ++-- .github/workflows/publish-pypi.yml | 6 +++--- 3 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index d7f2f875..c9d273d0 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,12 +20,12 @@ jobs: timeout-minutes: 1 steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: typos - uses: crate-ci/typos@v1.46.0 + uses: crate-ci/typos@6ac2ebd1b93eade61faf7e12688ad87a073fea59 # v1.46.0 - - uses: astral-sh/setup-uv@v8.1.0 + - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 - name: dprint run: uv run dprint check @@ -52,9 +52,9 @@ jobs: matrix: py: ["3.11", "3.12", "3.13", "3.14"] steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: astral-sh/setup-uv@v8.1.0 + - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: python-version: ${{ matrix.py }} @@ -69,9 +69,9 @@ jobs: matrix: py: ["3.11", "3.12", "3.13", "3.14"] steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: astral-sh/setup-uv@v8.1.0 + - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: python-version: ${{ matrix.py }} @@ -89,9 +89,9 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] py: ["3.11", "3.12", "3.13", "3.14"] steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - - uses: astral-sh/setup-uv@v8.1.0 + - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: python-version: ${{ matrix.py }} diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index c02d56f0..1215539a 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -23,14 +23,14 @@ jobs: deploy: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Configure Git Credentials run: | git config user.name github-actions[bot] git config user.email 41898282+github-actions[bot]@users.noreply.github.com - - uses: astral-sh/setup-uv@v8.1.0 + - uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 - name: mkdocs gh-deploy run: uv run --only-group=docs mkdocs gh-deploy --force diff --git a/.github/workflows/publish-pypi.yml b/.github/workflows/publish-pypi.yml index c7b2fa72..7912b78e 100644 --- a/.github/workflows/publish-pypi.yml +++ b/.github/workflows/publish-pypi.yml @@ -17,12 +17,12 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: setup uv - uses: astral-sh/setup-uv@v8.1.0 + uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0 with: python-version: "3.14" - name: uv build run: uv build - name: publish to PyPI - uses: pypa/gh-action-pypi-publish@v1.14.0 + uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # v1.14.0