From 0e12829158eaa3630257b9a73532ab6f5024ce28 Mon Sep 17 00:00:00 2001
From: Anton-4 <17049058+Anton-4@users.noreply.github.com>
Date: Tue, 18 Mar 2025 13:29:08 +0100
Subject: [PATCH 1/2] update actions, pin versions

---
 .github/workflows/ci.yml                  | 2 +-
 .github/workflows/ci_nix.yml              | 6 +++---
 .github/workflows/test_latest_release.yml | 2 +-
 3 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7382b3bf..3c697828 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -14,7 +14,7 @@ jobs:
       matrix:
         operating-system: [ubuntu-22.04, ubuntu-24.04, ubuntu-24.04-arm]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Does init() in platform/src/lib.rs contain all roc_fx functions? (Imperfect check)
         run: cat platform/src/lib.rs | grep -oP 'roc_fx_[^(\s]*' | sort | uniq -u | grep -q . && exit 1 || exit 0
diff --git a/.github/workflows/ci_nix.yml b/.github/workflows/ci_nix.yml
index 0402807e..6f7fee2a 100644
--- a/.github/workflows/ci_nix.yml
+++ b/.github/workflows/ci_nix.yml
@@ -16,14 +16,14 @@ jobs:
         os: [macos-13, macos-14, ubuntu-22.04, ubuntu-24.04-arm]
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       # install nix
-      - uses: cachix/install-nix-action@v23
+      - uses: cachix/install-nix-action@02a151ada4993995686f9ed4f1be7cfbb229e56f
         with:
           nix_path: nixpkgs=channel:nixos-unstable
 
-      - uses: cachix/cachix-action@v12
+      - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad
         with:
           name: enigmaticsunrise
           authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"
diff --git a/.github/workflows/test_latest_release.yml b/.github/workflows/test_latest_release.yml
index 49e0beef..64b1c4cb 100644
--- a/.github/workflows/test_latest_release.yml
+++ b/.github/workflows/test_latest_release.yml
@@ -10,7 +10,7 @@ jobs:
   test-latest-release:
     runs-on: [ubuntu-22.04]
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: remove everything except some ci scripts
         run: |

From 731c6d53864dc4bc7184e3de7af84af5b08b9eb2 Mon Sep 17 00:00:00 2001
From: Anton-4 <17049058+Anton-4@users.noreply.github.com>
Date: Tue, 18 Mar 2025 13:31:42 +0100
Subject: [PATCH 2/2] added comments

---
 .github/workflows/ci_nix.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci_nix.yml b/.github/workflows/ci_nix.yml
index 6f7fee2a..41386752 100644
--- a/.github/workflows/ci_nix.yml
+++ b/.github/workflows/ci_nix.yml
@@ -19,11 +19,11 @@ jobs:
       - uses: actions/checkout@v4
 
       # install nix
-      - uses: cachix/install-nix-action@02a151ada4993995686f9ed4f1be7cfbb229e56f
+      - uses: cachix/install-nix-action@02a151ada4993995686f9ed4f1be7cfbb229e56f # commit for v31
         with:
           nix_path: nixpkgs=channel:nixos-unstable
 
-      - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad
+      - uses: cachix/cachix-action@0fc020193b5a1fa3ac4575aa3a7d3aa6a35435ad # commit for v16
         with:
           name: enigmaticsunrise
           authToken: "${{ secrets.CACHIX_AUTH_TOKEN }}"