From de462e4b0472dcf5e1be78483c9ab7e79d6b522e Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 23 Dec 2024 11:17:51 -0800 Subject: [PATCH] chore(deps): pin dependencies (#661) * chore(deps): pin dependencies * chore: add specific gha tags * chore: add specific gha tags --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Alice Jones <21381891+Pactionly@users.noreply.github.com> --- .github/workflows/apply-prod.yml | 6 +++--- .github/workflows/codeql-analysis.yml | 8 ++++---- .github/workflows/lint.yaml | 2 +- .github/workflows/publish-techdocs-to-s3.yaml | 14 +++++++------- .github/workflows/pull-request.yaml | 10 +++++----- .github/workflows/release.yml | 8 ++++---- .github/workflows/test.yaml | 4 ++-- 7 files changed, 26 insertions(+), 26 deletions(-) diff --git a/.github/workflows/apply-prod.yml b/.github/workflows/apply-prod.yml index d91dfc84..832f9590 100644 --- a/.github/workflows/apply-prod.yml +++ b/.github/workflows/apply-prod.yml @@ -26,7 +26,7 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'push' || contains(fromJSON('["Pactionly", "gesparza3"]'), github.actor) steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Generate tag id: tag @@ -52,7 +52,7 @@ jobs: needs: build steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Terragrunt run: | wget https://github.com/gruntwork-io/terragrunt/releases/download/v0.45.11/terragrunt_linux_amd64 @@ -79,7 +79,7 @@ jobs: needs: [build, plan] steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Terragrunt run: | wget https://github.com/gruntwork-io/terragrunt/releases/download/v0.45.11/terragrunt_linux_amd64 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index efe21e3e..7adc37cb 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -36,11 +36,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v3 + uses: github/codeql-action/init@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0 with: languages: ${{ matrix.language }} @@ -52,7 +52,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v3 + uses: github/codeql-action/autobuild@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -66,4 +66,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v3 + uses: github/codeql-action/analyze@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0 diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index b1ea74a9..ea66ce4c 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -12,7 +12,7 @@ jobs: with: node-version: 22 - name: Checkout Code - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Run Linter run: | diff --git a/.github/workflows/publish-techdocs-to-s3.yaml b/.github/workflows/publish-techdocs-to-s3.yaml index 8fa8561b..87170a1b 100644 --- a/.github/workflows/publish-techdocs-to-s3.yaml +++ b/.github/workflows/publish-techdocs-to-s3.yaml @@ -18,7 +18,7 @@ jobs: mkdocs-present: ${{ steps.check-mkdocs.outputs.mkdocs-exists }} steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Check if catalog exists id: check-catalog @@ -61,10 +61,10 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Cache Node.js modules - uses: actions/cache@v4 + uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 with: path: | $(npm config get prefix)/lib/node_modules @@ -72,17 +72,17 @@ jobs: restore-keys: | ${{ runner.os }}-node- - - uses: actions/setup-node@v4 + - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 - name: Cache Python packages - uses: actions/cache@v4 + uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0 with: path: ~/.cache/pip key: ${{ runner.os }}-pip-${{ hashFiles('**/*.txt', '**/*.pip') }} restore-keys: | ${{ runner.os }}-pip- - - uses: actions/setup-python@v5 + - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0 with: python-version: '3.9' @@ -135,7 +135,7 @@ jobs: cmd: yq '.kind' template.yaml - name: Configure AWS Credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2 with: aws-region: us-east-1 role-session-name: publish-docs diff --git a/.github/workflows/pull-request.yaml b/.github/workflows/pull-request.yaml index fe0af441..1eb7d4fc 100644 --- a/.github/workflows/pull-request.yaml +++ b/.github/workflows/pull-request.yaml @@ -20,7 +20,7 @@ jobs: name: Pipeline Setup runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Generate tag id: tag @@ -42,7 +42,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Terraform fmt check run: terraform fmt -check -recursive @@ -52,7 +52,7 @@ jobs: needs: build steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Terragrunt run: | wget https://github.com/gruntwork-io/terragrunt/releases/download/v0.45.11/terragrunt_linux_amd64 @@ -73,7 +73,7 @@ jobs: needs: build steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Terragrunt run: | wget https://github.com/gruntwork-io/terragrunt/releases/download/v0.45.11/terragrunt_linux_amd64 @@ -93,7 +93,7 @@ jobs: ARM_USE_OIDC: true TF_VAR_gratibot_image: "${{ env.IMAGE_PATH }}:${{ needs.build.outputs.docker_tag }}" - - uses: liatrio/terraform-change-pr-commenter@v1.7.1 + - uses: liatrio/terraform-change-pr-commenter@3ec253eeac8850d78939ea4914963931ec3d5dc2 # v1.7.1 with: json-file: infra/terragrunt/nonprod/gratibot/plan.json expand-comment: 'true' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 97512534..859d277d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: if: github.event_name == 'push' || contains(fromJSON('["Pactionly", "gesparza3"]'), github.actor) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Generate tag id: tag @@ -56,7 +56,7 @@ jobs: needs: build steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Terragrunt run: | wget https://github.com/gruntwork-io/terragrunt/releases/download/v0.45.11/terragrunt_linux_amd64 @@ -79,10 +79,10 @@ jobs: needs: apply steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Node - uses: actions/setup-node@v4 + uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0 with: node-version: 22 diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 7585069d..d077ee1b 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -16,9 +16,9 @@ jobs: with: node-version: 22 - name: Checkout Code - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Test & publish - uses: paambaati/codeclimate-action@v9.0.0 + uses: paambaati/codeclimate-action@f429536ee076d758a24705203199548125a28ca7 # v9.0.0 env: CC_TEST_REPORTER_ID: ${{ secrets.code_climate_reporter_id }} with: