From 2e5fc6989dab08e76d036ca596b6ea2f79980a92 Mon Sep 17 00:00:00 2001 From: Adam Leskis Date: Thu, 12 Nov 2026 10:12:15 +0000 Subject: [PATCH] Add lockfile to pin all gha dependencies --- .../actions/setup-sdk-environment/action.yml | 2 +- .github/workflows/actions.lock | 59 +++++++++++++++++++ .github/workflows/appinspect.yml | 6 +- .github/workflows/cd.yml | 18 +++--- .github/workflows/lint.yml | 4 +- .github/workflows/test.yml | 6 +- 6 files changed, 77 insertions(+), 18 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/actions/setup-sdk-environment/action.yml b/.github/actions/setup-sdk-environment/action.yml index 30d8df447..55f89d2dd 100644 --- a/.github/actions/setup-sdk-environment/action.yml +++ b/.github/actions/setup-sdk-environment/action.yml @@ -10,7 +10,7 @@ inputs: runs: using: composite steps: - - uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 + - uses: astral-sh/setup-uv@v8.0.0 with: version: 0.11.6 python-version: 3.13 diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 000000000..f1385af63 --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,59 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/appinspect.yml': + - 'actions/checkout@v7.0.1' + - 'astral-sh/setup-uv@v8.0.0' + '.github/workflows/cd.yml': + - 'actions/checkout@v7.0.1' + - 'actions/download-artifact@v8.0.1' + - 'actions/upload-artifact@v7.0.1' + - 'astral-sh/setup-uv@v8.0.0' + - 'pypa/gh-action-pypi-publish@v1.14.1' + '.github/workflows/lint.yml': + - 'actions/checkout@v7.0.1' + - 'astral-sh/setup-uv@v8.0.0' + '.github/workflows/test.yml': + - 'actions/cache@v6.1.0' + - 'actions/checkout@v7.0.1' + - 'astral-sh/setup-uv@v8.0.0' +dependencies: + 'actions/cache@v6.1.0': + ref: 'v6.1.0' + commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9' + owner_id: 44036562 + repo_id: 215566462 + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'actions/download-artifact@v8.0.1': + ref: 'v8.0.1' + commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c' + owner_id: 44036562 + repo_id: 192626254 + 'actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405': + ref: 'v6.2.0' + commit: 'sha1-a309ff8b426b58ec0e2a45f0f869d46889d02405' + owner_id: 44036562 + repo_id: 192625525 + 'actions/upload-artifact@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a' + owner_id: 44036562 + repo_id: 192625955 + 'astral-sh/setup-uv@v8.0.0': + ref: 'v8.0.0' + commit: 'sha1-cec208311dfd045dd5311c1add060b2062131d57' + owner_id: 115962839 + repo_id: 846733598 + 'pypa/gh-action-pypi-publish@v1.14.1': + ref: 'v1.14.1' + commit: 'sha1-ba38be9e461d3875417946c167d0b5f3d385a247' + owner_id: 647025 + repo_id: 178055147 + uses: + - 'actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405' diff --git a/.github/workflows/appinspect.yml b/.github/workflows/appinspect.yml index e1e303486..8a36d53f9 100644 --- a/.github/workflows/appinspect.yml +++ b/.github/workflows/appinspect.yml @@ -16,12 +16,12 @@ jobs: name: Run AppInspect runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/setup-sdk-environment + - uses: $/.github/actions/setup-sdk-environment with: deps-group: lint - name: Run AppInspect - uses: ./.github/actions/run-appinspect + uses: $/.github/actions/run-appinspect continue-on-error: ${{ github.event_name == 'pull_request' }} diff --git a/.github/workflows/cd.yml b/.github/workflows/cd.yml index 0c9a9504b..27445c843 100644 --- a/.github/workflows/cd.yml +++ b/.github/workflows/cd.yml @@ -21,10 +21,10 @@ jobs: outputs: version: ${{ steps.get-version.outputs.version }} steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/setup-sdk-environment + - uses: $/.github/actions/setup-sdk-environment with: deps-group: release - name: Set pre-release version @@ -52,16 +52,16 @@ jobs: run: uv build - name: Run AppInspect if: startsWith(github.ref, 'refs/tags/') == true - uses: ./.github/actions/run-appinspect + uses: $/.github/actions/run-appinspect - name: Upload distributables - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + uses: actions/upload-artifact@v7.0.1 with: name: splunk-sdk-${{ steps.get-version.outputs.version }} path: dist/ - name: Generate API reference run: make docs-zip - name: Upload docs artifact - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a + uses: actions/upload-artifact@v7.0.1 with: name: python-sdk-docs path: docs/_build/splunk-sdk-python-docs.zip @@ -78,12 +78,12 @@ jobs: url: https://test.pypi.org/project/splunk-sdk/ steps: - name: Download distributables - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c + uses: actions/download-artifact@v8.0.1 with: name: splunk-sdk-${{ needs.build-distributables.outputs.version }} path: dist/ - name: Publish packages to Test PyPI - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 + uses: pypa/gh-action-pypi-publish@v1.14.1 with: repository-url: https://test.pypi.org/legacy/ @@ -99,11 +99,11 @@ jobs: url: https://pypi.org/project/splunk-sdk/ steps: - name: Download distributables - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c + uses: actions/download-artifact@v8.0.1 with: name: splunk-sdk-${{ needs.build-distributables.outputs.version }} path: dist/ - name: Publish packages to PyPI - uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 + uses: pypa/gh-action-pypi-publish@v1.14.1 with: repository-url: https://upload.pypi.org/legacy/ diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 0d341bdd0..0fe2ea38e 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,10 +16,10 @@ jobs: name: Run linters runs-on: ubuntu-latest steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/setup-sdk-environment + - uses: $/.github/actions/setup-sdk-environment with: deps-group: lint - name: Verify uv.lock is up-to-date diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index b53fc605e..67a85373a 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -19,10 +19,10 @@ jobs: matrix: splunk-version: [latest] steps: - - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 + - uses: actions/checkout@v7.0.1 with: persist-credentials: false - - uses: ./.github/actions/setup-sdk-environment + - uses: $/.github/actions/setup-sdk-environment with: deps-group: test - name: Download Splunk MCP Server App @@ -52,7 +52,7 @@ jobs: echo "internal_ai_base_url=$INTERNAL_AI_BASE_URL" >> .env - name: Restore pytest cache if: ${{ github.ref != 'refs/heads/master' && github.ref != 'refs/heads/develop' }} - uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 + uses: actions/cache@v6.1.0 with: path: .pytest_cache key: pytest-cache-${{ runner.os }}-${{ github.ref_name }}-${{ github.sha }}