From 0b492d562f139a37e9dce655dd9bb8a1c52958db Mon Sep 17 00:00:00 2001 From: leemour Date: Mon, 26 Oct 2026 15:57:51 +0100 Subject: [PATCH] ci: bring GitHub Actions pins to the latest releases Moves lagging actions to their latest releases, each pinned by full commit SHA with a version comment. Co-Authored-By: Claude Opus 5.5 (1M context) --- .github/workflows/ci.yml | 2 +- .github/workflows/monthly.yml | 4 ++-- .github/workflows/release.yml | 16 ++++++++-------- .github/workflows/standards.yml | 2 +- .github/workflows/ux-install.yml | 2 +- 5 files changed, 13 insertions(+), 13 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6053679..1ae49f8 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -16,7 +16,7 @@ permissions: jobs: ci: - uses: WireCatLabs/cli-base/.github/workflows/node-ci.yml@03341651a008f77abb8172f86d6df652321b4ce5 # v0.31.0 + uses: WireCatLabs/cli-base/.github/workflows/node-ci.yml@a9aa6915309bd4ef415053df8f1af9b127f084cc # v0.61.0 with: pack: ${{ inputs.pack || false }} checks: | diff --git a/.github/workflows/monthly.yml b/.github/workflows/monthly.yml index 8391099..73c0d5c 100644 --- a/.github/workflows/monthly.yml +++ b/.github/workflows/monthly.yml @@ -20,7 +20,7 @@ jobs: contents: read actions: read security-events: write - uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@03341651a008f77abb8172f86d6df652321b4ce5 # v0.31.0 + uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@a9aa6915309bd4ef415053df8f1af9b127f084cc # v0.61.0 with: dependencies: true languages: '["actions","javascript-typescript"]' @@ -33,7 +33,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24 - name: clone the CLIs diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 413b5c8..cf87c69 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -35,7 +35,7 @@ jobs: contents: read actions: read security-events: write - uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@03341651a008f77abb8172f86d6df652321b4ce5 # v0.31.0 + uses: WireCatLabs/cli-base/.github/workflows/release-checks.yml@a9aa6915309bd4ef415053df8f1af9b127f084cc # v0.61.0 with: languages: '["actions","javascript-typescript","python"]' @@ -51,11 +51,11 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24 package-manager-cache: false - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: validated-package - name: Verify validated package integrity @@ -79,7 +79,7 @@ jobs: exit 1 fi - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: package path: wirecat-cli-testing-${{ steps.version.outputs.version }}.tgz @@ -93,11 +93,11 @@ jobs: permissions: contents: read steps: - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24 package-manager-cache: false - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: package # Permit checking an already published version; this job has no publishing permissions. @@ -115,12 +115,12 @@ jobs: env: VERSION: ${{ needs.build.outputs.version }} steps: - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24 registry-url: https://registry.npmjs.org package-manager-cache: false - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: package diff --git a/.github/workflows/standards.yml b/.github/workflows/standards.yml index 9c7b586..5a18c66 100644 --- a/.github/workflows/standards.yml +++ b/.github/workflows/standards.yml @@ -22,7 +22,7 @@ jobs: fetch-depth: 0 persist-credentials: false - uses: pnpm/action-setup@ea17c68df8912ef543352723c149a84f56e3d413 # v6.1.0 - - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: 24 cache: pnpm diff --git a/.github/workflows/ux-install.yml b/.github/workflows/ux-install.yml index 258de45..0888022 100644 --- a/.github/workflows/ux-install.yml +++ b/.github/workflows/ux-install.yml @@ -36,7 +36,7 @@ jobs: run: npm run ux:plan -- .install-tooling - name: Install tarballs and check binaries run: node dist/main.js ux install .install-tooling/run .install-tooling/plan.json - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 if: always() with: name: installs-${{ matrix.os }}-node-${{ matrix.node }}