From 1a89a0b02acbad742f4f8c7331ee7b69716e2b97 Mon Sep 17 00:00:00 2001 From: Adam Setch Date: Thu, 22 Oct 2026 06:38:48 -0400 Subject: [PATCH] chore(ci): add GitHub Actions lockfile --- .github/workflows/actions.lock | 50 ++++++++++++++++++++++++++++++++++ .github/workflows/ci.yml | 14 +++++----- .github/workflows/release.yml | 6 ++-- .github/workflows/zizmor.yml | 4 +-- 4 files changed, 62 insertions(+), 12 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..0a94863 --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,50 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/ci.yml': + - 'actions/checkout@v7.0.1' + - 'actions/upload-artifact@v7.0.2' + - 'voidzero-dev/setup-vp@v1.21.2' + '.github/workflows/release.yml': + - 'actions/checkout@v7.0.1' + - 'googleapis/release-please-action@v5.0.0' + - 'voidzero-dev/setup-vp@v1.21.2' + '.github/workflows/renovate.yml': [] + '.github/workflows/zizmor.yml': + - 'actions/checkout@v7.0.1' + - 'zizmorcore/zizmor-action@v0.6.4' +dependencies: + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/upload-artifact@v7.0.2': + ref: 'v7.0.2' + commit: 'sha1-cf430e030ddbb5b0abf93d22962f4752f3646cd9' + owner_id: 44036562 + repo_id: 192625955 + 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938': + ref: 'v4.37.9' + commit: 'sha1-cdf488f595d80d6e07e03d4674febd5ab45fa938' + owner_id: 9919 + repo_id: 259445878 + 'googleapis/release-please-action@v5.0.0': + ref: 'v5.0.0' + commit: 'sha1-45996ed1f6d02564a971a2fa1b5860e934307cf7' + owner_id: 16785467 + repo_id: 262236530 + 'voidzero-dev/setup-vp@v1.21.2': + ref: 'v1.21.2' + commit: 'sha1-68f39c78aaf39be468cabd2afb09c162574c84af' + owner_id: 149750581 + repo_id: 1133264797 + 'zizmorcore/zizmor-action@v0.6.4': + ref: 'v0.6.4' + commit: 'sha1-cc914d7f3750a2d13d75c7f184a1060aa0e9d482' + owner_id: 210636713 + repo_id: 985558803 + uses: + - 'github/codeql-action@cdf488f595d80d6e07e03d4674febd5ab45fa938' diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 6e4646a..09cc0a1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -26,7 +26,7 @@ jobs: contents: read steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false - name: Build isolated GNOME desktop @@ -46,12 +46,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false - name: Setup Vite+ - uses: voidzero-dev/setup-vp@68f39c78aaf39be468cabd2afb09c162574c84af # v1.21.2 + uses: voidzero-dev/setup-vp@v1.21.2 with: cache: true @@ -69,7 +69,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false sparse-checkout: .github/ @@ -86,12 +86,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false - name: Setup Vite+ - uses: voidzero-dev/setup-vp@68f39c78aaf39be468cabd2afb09c162574c84af # v1.21.2 + uses: voidzero-dev/setup-vp@v1.21.2 with: cache: true @@ -99,7 +99,7 @@ jobs: run: vp run bundle - name: Upload extension bundle - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 + uses: actions/upload-artifact@v7.0.2 with: name: gitify-shell-extension path: dist/*.shell-extension.zip diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8a4cb92..8aba8b9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Run release-please id: release - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0 + uses: googleapis/release-please-action@v5.0.0 publish: name: Attach extension bundle @@ -36,13 +36,13 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: ref: ${{ needs.release-please.outputs.tag_name }} persist-credentials: false - name: Setup Vite+ - uses: voidzero-dev/setup-vp@68f39c78aaf39be468cabd2afb09c162574c84af # v1.21.2 + uses: voidzero-dev/setup-vp@v1.21.2 with: cache: true diff --git a/.github/workflows/zizmor.yml b/.github/workflows/zizmor.yml index aad3684..5120aeb 100644 --- a/.github/workflows/zizmor.yml +++ b/.github/workflows/zizmor.yml @@ -20,9 +20,9 @@ jobs: actions: read # Only needed for private repos. Needed for upload-sarif to read workflow run info. steps: - name: Checkout repository - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: persist-credentials: false - name: Run zizmor 🌈 - uses: zizmorcore/zizmor-action@cc914d7f3750a2d13d75c7f184a1060aa0e9d482 # v0.6.4 + uses: zizmorcore/zizmor-action@v0.6.4