chore(deps): pin dependencies (#2877)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
grpc-ecosystem · Sep 8, 2022 · a6a5ee5 · a6a5ee5
1 parent 7741273
commit a6a5ee5
Show file tree

Hide file tree

Showing 4 changed files with 31 additions and 31 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -11,27 +11,27 @@ jobs:
  os: [ubuntu-latest, macos-latest, windows-latest]
  runs-on: ${{ matrix.os }}
  steps:
- - uses: actions/setup-go@v3
+ - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3
  with:
  go-version: ${{ matrix.go-version }}
- - uses: actions/checkout@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
  - run: go build ./...
  test:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/setup-go@v3
+ - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3
  with:
  check-latest: true
- - uses: actions/checkout@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
  - run: go test ./...
  node_test:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
- - uses: actions/setup-node@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+ - uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3
  with:
  node-version: 10
- - uses: actions/setup-go@v3
+ - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3
  with:
  check-latest: true
  - run: >
@@ -48,7 +48,7 @@ jobs:
  password: ${{ secrets.GITHUB_TOKEN }}
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
  - run: make install
  - run: make clean
  - run: make generate
@@ -63,8 +63,8 @@ jobs:
  password: ${{ secrets.GITHUB_TOKEN }}
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
- - uses: actions/cache@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+ - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
  with:
  path: /home/vscode/.cache/_grpc_gateway_bazel
  key: v1-bazel-cache-${{ hashFiles('repositories.bzl') }}
@@ -93,17 +93,17 @@ jobs:
  gorelease:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
- - uses: actions/setup-go@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+ - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3
  with:
  go-version: 1.18
  check-latest: true
  - run: go run golang.org/x/exp/cmd/gorelease@latest -base=v2.11.3
  proto_lint:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
- - uses: actions/setup-go@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+ - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3
  with:
  check-latest: true
  - run: make install
@@ -116,8 +116,8 @@ jobs:
  pull-requests: read # for golangci/golangci-lint-action to fetch pull requests
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
- - uses: golangci/golangci-lint-action@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+ - uses: golangci/golangci-lint-action@537aa1903e5d359d0b27dbc19ddd22c5087f3fbc # tag=v3
  with:
  version: v1.45
  args: --enable goimports
@@ -139,7 +139,7 @@ jobs:
  dry-run: false
  language: go
  - name: Upload Crash
- uses: actions/upload-artifact@v3
+ uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # tag=v3
  if: failure() && steps.build.outcome == 'success'
  with:
  name: artifacts

diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
@@ -11,8 +11,8 @@ jobs:
  proto_push:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
- - uses: actions/setup-go@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+ - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3
  with:
  check-latest: true
  - run: make install

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -13,13 +13,13 @@ jobs:
  permissions:
  contents: write
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
  with:
  fetch-depth: 0
- - uses: actions/setup-go@v3
+ - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # tag=v3
  with:
  check-latest: true
- - uses: goreleaser/goreleaser-action@v3
+ - uses: goreleaser/goreleaser-action@ff11ca24a9b39f2d36796d1fbd7a4e39c182630a # tag=v3
  id: run-goreleaser
  with:
  args: release --rm-dist
@@ -40,17 +40,17 @@ jobs:
  actions: read # To read the workflow path.
  id-token: write # To sign the provenance.
  contents: write # To add assets to a release.
- uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.2.0
+ uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@bdd89e60dc5387d8f819bebc702987956bcd4913 # tag=v1.2.0
  with:
  base64-subjects: "${{ needs.goreleaser.outputs.hashes }}"
  upload-assets: true # upload to a new release
 
  push_bsr_plugins:
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
- - uses: docker/setup-buildx-action@v2
- - uses: docker/login-action@v2
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
+ - uses: docker/setup-buildx-action@dc7b9719a96d48369863986a06765841d7ea23f6 # tag=v2
+ - uses: docker/login-action@49ed152c8eca782a232dede0303416e8f356c37b # tag=v2
  with:
  registry: plugins.buf.build
  username: grpcgatewaybot
@@ -61,7 +61,7 @@ jobs:
  - name: Set grpc-version
  run: echo ::set-output name=version::$(go list -m -f '{{.Version}}' google.golang.org/grpc)
  id: grpc-version
- - uses: docker/build-push-action@v3
+ - uses: docker/build-push-action@c84f38281176d4c9cdb1626ffafcd6b3911b5d94 # tag=v3
  with:
  push: true
  tags: plugins.buf.build/grpc-ecosystem/grpc-gateway:${{ github.ref_name }}-1
@@ -71,7 +71,7 @@ jobs:
  RELEASE_VERSION=${{ github.ref_name }}
  GO_PROTOBUF_RELEASE_VERSION=${{ steps.protobuf-version.outputs.version }}
  GO_GRPC_RELEASE_VERSION=${{ steps.grpc-version.outputs.version }}
- - uses: docker/build-push-action@v3
+ - uses: docker/build-push-action@c84f38281176d4c9cdb1626ffafcd6b3911b5d94 # tag=v3
  with:
  push: true
  tags: plugins.buf.build/grpc-ecosystem/openapiv2:${{ github.ref_name }}-1

diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml
@@ -15,11 +15,11 @@ jobs:
  password: ${{ secrets.GITHUB_TOKEN }}
  runs-on: ubuntu-latest
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
  with:
  fetch-depth: 0
  token: ${{ secrets.GH_PUSH_TOKEN }}
- - uses: actions/cache@v3
+ - uses: actions/cache@fd5de65bc895cf536527842281bea11763fefd77 # tag=v3
  with:
  path: /home/vscode/.cache/_grpc_gateway_bazel
  key: v1-bazel-cache-${{ hashFiles('repositories.bzl') }}
@@ -57,7 +57,7 @@ jobs:
  # git conflicts
  - update_repositoriesbzl
  steps:
- - uses: actions/checkout@v3
+ - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3
  with:
  fetch-depth: 0
  token: ${{ secrets.GH_PUSH_TOKEN }}