From 317c640fc4202ceff4f3d001fb09fc8b8a731614 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 2 Apr 2024 07:55:23 +0100 Subject: [PATCH] chore(deps): pin dependencies (#2252) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/bench_cli.yml | 16 +++++------ .github/workflows/benchmark.yml | 6 ++--- .github/workflows/ja-translation.yaml | 4 +-- .github/workflows/label-issue.yaml | 2 +- .github/workflows/labels.yml | 2 +- .github/workflows/main.yml | 22 +++++++-------- .github/workflows/parser_conformance.yml | 16 +++++------ .github/workflows/publish_container_ci.yaml | 2 +- .github/workflows/pull_request.yml | 30 ++++++++++----------- .github/workflows/pull_request_js.yml | 10 +++---- .github/workflows/release_cli.yml | 24 ++++++++--------- .github/workflows/release_crates.yml | 2 +- .github/workflows/release_js_api.yml | 20 +++++++------- 13 files changed, 78 insertions(+), 78 deletions(-) diff --git a/.github/workflows/bench_cli.yml b/.github/workflows/bench_cli.yml index f8da1d909205..e43c3c4f90c1 100644 --- a/.github/workflows/bench_cli.yml +++ b/.github/workflows/bench_cli.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Get PR SHA id: sha - uses: actions/github-script@v7 + uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7 with: result-encoding: string script: | @@ -29,12 +29,12 @@ jobs: return response.data.head.sha; - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: ref: ${{ steps.sha.outputs.result }} - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: channel: stable cache-target: release @@ -50,7 +50,7 @@ jobs: cp target/release/biome benchmark/target/biome_pr - name: Checkout Main Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: clean: false ref: main @@ -61,17 +61,17 @@ jobs: cp target/release/biome benchmark/target/biome_main - name: Checkout webpack - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: repository: webpack/webpack path: benchmark/target/webpack - name: Checkout prettier - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: repository: prettier/prettier path: benchmark/target/prettier - name: Checkout eslint - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: repository: eslint/eslint path: benchmark/target/eslint @@ -96,7 +96,7 @@ jobs: - name: Write a new comment # Check if the event is not triggered by a fork if: github.event.pull_request.head.repo.full_name == github.repository - uses: peter-evans/create-or-update-comment@v4 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 continue-on-error: true with: issue-number: ${{ github.event.issue.number }} diff --git a/.github/workflows/benchmark.yml b/.github/workflows/benchmark.yml index 7aacf547264c..56acfe412eee 100644 --- a/.github/workflows/benchmark.yml +++ b/.github/workflows/benchmark.yml @@ -33,12 +33,12 @@ jobs: steps: - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: ref: ${{ steps.sha.outputs.result }} - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: channel: stable cache-target: release @@ -49,7 +49,7 @@ jobs: run: cargo codspeed build --features codspeed -p xtask_bench - name: Run the benchmarks - uses: CodSpeedHQ/action@v2 + uses: CodSpeedHQ/action@1dbf41f0ae41cebfe61e084e535aebe533409b4d # v2 timeout-minutes: 30 with: run: cargo codspeed run diff --git a/.github/workflows/ja-translation.yaml b/.github/workflows/ja-translation.yaml index 89aaeae18fb5..c21226200802 100644 --- a/.github/workflows/ja-translation.yaml +++ b/.github/workflows/ja-translation.yaml @@ -13,9 +13,9 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Cache pnpm modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ~/.pnpm-store key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }} diff --git a/.github/workflows/label-issue.yaml b/.github/workflows/label-issue.yaml index 433ec74b0b6f..56f0c1f7e7fe 100644 --- a/.github/workflows/label-issue.yaml +++ b/.github/workflows/label-issue.yaml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Label documentation issues - uses: github/issue-labeler@v3.3 + uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4 with: repo-token: ${{ secrets.GITHUB_TOKEN }} configuration-path: .github/documentation-issue-labeler.yaml diff --git a/.github/workflows/labels.yml b/.github/workflows/labels.yml index 102b7a588c6d..b9cdc5cc52dd 100644 --- a/.github/workflows/labels.yml +++ b/.github/workflows/labels.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest if: github.repository_owner == 'biomejs' steps: - - uses: actions/labeler@v5 + - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5 with: repo-token: "${{ secrets.GITHUB_TOKEN }}" sync-labels: true diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index c101dab6b782..39001f7b958c 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -20,15 +20,15 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Support longpaths run: git config core.longpaths true - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: components: rustfmt bins: taplo-cli @@ -43,11 +43,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: components: clippy cache-base: main @@ -61,11 +61,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: channel: nightly cache: false @@ -85,11 +85,11 @@ jobs: - os: macos-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: bins: cargo-nextest cache-base: main @@ -111,13 +111,13 @@ jobs: if: matrix.os == 'windows-latest' run: git config --system core.longpaths true - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: submodules: recursive - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: cache-target: release cache-base: main diff --git a/.github/workflows/parser_conformance.yml b/.github/workflows/parser_conformance.yml index cf2940fa1cf3..144a242262c1 100644 --- a/.github/workflows/parser_conformance.yml +++ b/.github/workflows/parser_conformance.yml @@ -25,13 +25,13 @@ jobs: steps: - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Support longpaths run: git config core.longpaths true - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: submodules: recursive @@ -39,7 +39,7 @@ jobs: uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: cache-target: release cache-base: main @@ -52,7 +52,7 @@ jobs: run: cargo coverage --json > new_results.json - name: Checkout main Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 with: clean: false ref: main @@ -77,11 +77,11 @@ jobs: - name: Get the PR number if: github.event_name == 'pull_request' id: pr-number - uses: kkak10/pr-number-action@v1.3 + uses: kkak10/pr-number-action@8f5358941366822cd0825e04dfe68437f2f5f15b # v1.3 - name: Find Previous Comment if: github.event_name == 'pull_request' - uses: peter-evans/find-comment@v3.0.0 + uses: peter-evans/find-comment@d5fe37641ad8451bdd80312415672ba26c86575e # v3.0.0 id: previous-comment with: issue-number: ${{ steps.pr-number.outputs.pr }} @@ -89,7 +89,7 @@ jobs: - name: Update existing comment if: github.event_name == 'pull_request' && steps.previous-comment.outputs.comment-id - uses: peter-evans/create-or-update-comment@v4 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 continue-on-error: true with: comment-id: ${{ steps.previous-comment.outputs.comment-id }} @@ -99,7 +99,7 @@ jobs: - name: Write a new comment if: github.event_name == 'pull_request' && !steps.previous-comment.outputs.comment-id - uses: peter-evans/create-or-update-comment@v4 + uses: peter-evans/create-or-update-comment@71345be0265236311c031f5c7866368bd1eff043 # v4 continue-on-error: true with: issue-number: ${{ steps.pr-number.outputs.pr }} diff --git a/.github/workflows/publish_container_ci.yaml b/.github/workflows/publish_container_ci.yaml index d6ed87c441d5..6d29bcd469e3 100644 --- a/.github/workflows/publish_container_ci.yaml +++ b/.github/workflows/publish_container_ci.yaml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Login to GitHub Container Registry - uses: docker/login-action@v3 + uses: docker/login-action@e92390c5fb421da1463c202d546fed0ec5c39f20 # v3 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml index f44ecf23589a..c2d20ad52fe6 100644 --- a/.github/workflows/pull_request.yml +++ b/.github/workflows/pull_request.yml @@ -28,11 +28,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: components: rustfmt bins: taplo-cli @@ -47,11 +47,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: components: clippy cache-base: main @@ -63,7 +63,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain @@ -83,11 +83,11 @@ jobs: - os: ubuntu-latest steps: - name: Checkout PR branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: bins: cargo-nextest cache-base: main @@ -114,22 +114,22 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: cache-target: release cache-base: main - name: Build main binary run: cargo build -p biome_cli --release - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 20 - name: Cache pnpm modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ~/.pnpm-store key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }} @@ -158,11 +158,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: cache-base: main - name: Run doc command @@ -173,11 +173,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: cache-base: main - name: Run the grammar codegen diff --git a/.github/workflows/pull_request_js.yml b/.github/workflows/pull_request_js.yml index 046c016bcbab..8aa88e0351da 100644 --- a/.github/workflows/pull_request_js.yml +++ b/.github/workflows/pull_request_js.yml @@ -26,11 +26,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Cache pnpm modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ~/.pnpm-store key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }} @@ -47,11 +47,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout PR Branch - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Free Disk Space uses: ./.github/actions/free-disk-space - name: Cache pnpm modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ~/.pnpm-store key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }} @@ -59,7 +59,7 @@ jobs: ${{ runner.os }}- - uses: pnpm/action-setup@v3 - name: Install toolchain - uses: moonrepo/setup-rust@v1 + uses: moonrepo/setup-rust@b8edcc56aab474d90c7cf0bb8beeaf8334c15e9f # v1 with: cache-base: main - name: Install wasm-pack diff --git a/.github/workflows/release_cli.yml b/.github/workflows/release_cli.yml index 4395b9813b93..212a794ee24b 100644 --- a/.github/workflows/release_cli.yml +++ b/.github/workflows/release_cli.yml @@ -19,7 +19,7 @@ jobs: nightly: ${{ env.nightly }} version_changed: ${{ steps.version.outputs.changed }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Check nightly status id: nightly @@ -27,7 +27,7 @@ jobs: run: echo "nightly=true" >> $GITHUB_ENV - name: Check version changes - uses: EndBug/version-check@v2 + uses: EndBug/version-check@53c9309fefac91a21f852d5ca69f33878280d2f5 # v2 if: env.nightly != 'true' id: version with: @@ -88,10 +88,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 20 @@ -144,7 +144,7 @@ jobs: # Upload the CLI binary as a build artifact - name: Upload CLI artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4 with: name: cli path: ./dist/biome-* @@ -156,7 +156,7 @@ jobs: needs: check steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Install wasm-pack run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh @@ -169,7 +169,7 @@ jobs: run: wasm-pack build --out-dir ../../packages/@biomejs/wasm-web --target web --release --scope biomedev crates/biome_wasm - name: Upload WASM artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4 with: name: wasm path: | @@ -189,20 +189,20 @@ jobs: contents: write id-token: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Download CLI artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4 with: name: cli - name: Download WASM artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4 with: name: wasm path: packages/@biomejs - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 20 registry-url: 'https://registry.npmjs.org' @@ -228,7 +228,7 @@ jobs: run: | bash scripts/print-changelog.sh ${{ needs.build.outputs.version }} >| ${{ github.workspace }}/RELEASE_NOTES - name: Create GitHub release and tag - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@9d7c94cfd0a1f3ed45544c887983e9fa900f0564 # v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: diff --git a/.github/workflows/release_crates.yml b/.github/workflows/release_crates.yml index 1f46a08deaec..21096d017c22 100644 --- a/.github/workflows/release_crates.yml +++ b/.github/workflows/release_crates.yml @@ -17,7 +17,7 @@ jobs: environment: crate-publish steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Login to crate.io run: cargo login ${{ secrets.CRATES_IO_TOKEN }} - name: Publish crates to crates.io diff --git a/.github/workflows/release_js_api.yml b/.github/workflows/release_js_api.yml index 5e3900979660..e09eb45eeeed 100644 --- a/.github/workflows/release_js_api.yml +++ b/.github/workflows/release_js_api.yml @@ -19,7 +19,7 @@ jobs: nightly: ${{ env.nightly }} version_changed: ${{ steps.version.outputs.changed }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Check nightly status id: nightly @@ -27,7 +27,7 @@ jobs: run: echo "nightly=true" >> $GITHUB_ENV - name: Check version changes - uses: EndBug/version-check@v2 + uses: EndBug/version-check@53c9309fefac91a21f852d5ca69f33878280d2f5 # v2 if: env.nightly != 'true' id: version with: @@ -58,10 +58,10 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 20 @@ -69,7 +69,7 @@ jobs: run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh - name: Cache pnpm modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: ~/.pnpm-store key: ${{ runner.os }}-${{ hashFiles('**/pnpm-lock.yaml') }} @@ -102,7 +102,7 @@ jobs: pnpm --filter @biomejs/js-api run build - name: Upload JS API artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4 with: name: js-api path: | @@ -118,16 +118,16 @@ jobs: contents: write id-token: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4 - name: Download package artifact - uses: actions/download-artifact@v4 + uses: actions/download-artifact@c850b930e6ba138125429b7e5c93fc707a7f8427 # v4 with: name: js-api path: packages/@biomejs/js-api/dist - name: Install Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 20 registry-url: 'https://registry.npmjs.org' @@ -151,7 +151,7 @@ jobs: run: | bash scripts/print-changelog.sh ${{ needs.build.outputs.version }} >| ${{ github.workspace }}/RELEASE_NOTES - name: Create GitHub release and tag - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@9d7c94cfd0a1f3ed45544c887983e9fa900f0564 # v2 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: