Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Use hashes as GitHub action identifiers #880

Merged
merged 1 commit into from
Oct 17, 2023
Merged

Use hashes as GitHub action identifiers #880

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
40 changes: 20 additions & 20 deletions .github/workflows/build.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,13 +14,13 @@ jobs:
name: "lint on ${{ matrix.os }} "
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Identify week number
shell: bash
run: |
date +'%V' > week-number.txt
date +'week-number=%V' >> $GITHUB_ENV
- uses: actions/setup-python@v4
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
id: setup-python
with:
python-version: "3.10"
Expand All @@ -33,7 +33,7 @@ jobs:
week-number.txt
- name: Restore cache
id: restore-cache
uses: actions/cache@v3
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
with:
path: |
.tox/
Expand Down Expand Up @@ -71,13 +71,13 @@ jobs:
name: "test py${{ matrix.python-version }} on ${{ matrix.os }}"
runs-on: ${{ matrix.os }}
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Identify week number
shell: bash
run: |
date +'%V' > week-number.txt
date +'week-number=%V' >> $GITHUB_ENV
- uses: actions/setup-python@v4
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
id: setup-python
with:
python-version: ${{ matrix.python-version }}
Expand All @@ -90,7 +90,7 @@ jobs:
week-number.txt
- name: Restore cache
id: restore-cache
uses: actions/cache@v3
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
with:
path: |
.tox
Expand All @@ -116,13 +116,13 @@ jobs:
docs:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Identify week number
shell: bash
run: |
date +'%V' > week-number.txt
date +'week-number=%V' >> $GITHUB_ENV
- uses: actions/setup-python@v4
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
id: setup-python
with:
python-version: "3.10"
Expand All @@ -135,7 +135,7 @@ jobs:
week-number.txt
- name: Restore cache
id: restore-cache
uses: actions/cache@v3
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
with:
path: |
.tox
Expand All @@ -157,13 +157,13 @@ jobs:
test-package-metadata:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Identify week number
shell: bash
run: |
date +'%V' > week-number.txt
date +'week-number=%V' >> $GITHUB_ENV
- uses: actions/setup-python@v4
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
id: setup-python
with:
python-version: "3.10"
Expand All @@ -176,7 +176,7 @@ jobs:
week-number.txt
- name: Restore cache
id: restore-cache
uses: actions/cache@v3
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
with:
path: |
.tox
Expand All @@ -199,13 +199,13 @@ jobs:
runs-on: ubuntu-latest
name: "mindeps"
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Identify week number
shell: bash
run: |
date +'%V' > week-number.txt
date +'week-number=%V' >> $GITHUB_ENV
- uses: actions/setup-python@v4
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
id: setup-python
with:
python-version: "3.7"
Expand All @@ -218,7 +218,7 @@ jobs:
week-number.txt
- name: Restore cache
id: restore-cache
uses: actions/cache@v3
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
with:
path: |
.tox
Expand All @@ -244,13 +244,13 @@ jobs:
runs-on: ubuntu-latest
name: "sdk-main"
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Identify week number
shell: bash
run: |
date +'%V' > week-number.txt
date +'week-number=%V' >> $GITHUB_ENV
- uses: actions/setup-python@v4
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
id: setup-python
with:
python-version: ${{ matrix.python-version }}
Expand All @@ -263,7 +263,7 @@ jobs:
week-number.txt
- name: Restore cache
id: restore-cache
uses: actions/cache@v3
uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
with:
path: |
.tox
Expand All @@ -286,10 +286,10 @@ jobs:
name: "test on py3.7, using old virtualenv"
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Identify week number
run: date +'%V' > week-number.txt
- uses: actions/setup-python@v4
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
with:
python-version: "3.7"
cache: "pip"
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/docs.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,9 +8,9 @@ jobs:
name: Build Docs
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- name: Setup Python
uses: actions/setup-python@v4
uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
with:
python-version: 3.11
- name: Install CLI
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/has_changelog.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ jobs:
)
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
with: # do a deep fetch to allow merge-base and diff
fetch-depth: 0
- name: check PR adds a news file
Expand Down
10 changes: 5 additions & 5 deletions .github/workflows/publish_to_pypi.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
with:
python-version: "3.11"

Expand All @@ -19,7 +19,7 @@ jobs:
- name: Build Dists
run: python -m build .

- uses: actions/upload-artifact@v3
- uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
with:
name: packages
path: dist/*
Expand All @@ -32,10 +32,10 @@ jobs:
id-token: write

steps:
- uses: actions/download-artifact@v3
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
with:
name: packages
path: dist

- name: Publish to PyPI
uses: pypa/gh-action-pypi-publish@release/v1
uses: pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e # v1.8.10
10 changes: 5 additions & 5 deletions .github/workflows/publish_to_test_pypi.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,8 +9,8 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
- uses: actions/setup-python@v4
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
- uses: actions/setup-python@65d7f2d534ac1bc67fcd62888c5f4f3d2cb2b236 # v4.7.1
with:
python-version: "3.11"

Expand All @@ -22,7 +22,7 @@ jobs:
- name: Build Dists
run: python -m build .

- uses: actions/upload-artifact@v3
- uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
with:
name: packages
path: dist/*
Expand All @@ -35,12 +35,12 @@ jobs:
id-token: write

steps:
- uses: actions/download-artifact@v3
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3.0.2
with:
name: packages
path: dist

- name: Publish to TestPyPI
uses: pypa/gh-action-pypi-publish@release/v1
uses: pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e # v1.8.10
with:
repository-url: https://test.pypi.org/legacy/
Loading