From 8555e49c7c03de8a9b5422c467f42ef43a744469 Mon Sep 17 00:00:00 2001 From: Joshua Sing Date: Thu, 18 Dec 2025 23:32:58 +1100 Subject: ci: update and pin github actions --- .github/workflows/android.yml | 2 +- .github/workflows/cifuzz.yml | 2 +- .github/workflows/cmake-config.yml | 4 ++-- .github/workflows/coverity.yml | 2 +- .github/workflows/emscripten.yml | 8 ++++---- .github/workflows/fedora-rawhide.yml | 2 +- .github/workflows/freebsd.yml | 8 ++++---- .github/workflows/linux.yml | 4 ++-- .github/workflows/macos.yml | 2 +- .github/workflows/release.yml | 10 +++++----- .github/workflows/rust-openssl.yml | 2 +- .github/workflows/solaris.yml | 4 ++-- .github/workflows/windows.yml | 6 +++--- 13 files changed, 28 insertions(+), 28 deletions(-) diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml index 7bc59c5..976f2d3 100644 --- a/.github/workflows/android.yml +++ b/.github/workflows/android.yml @@ -25,7 +25,7 @@ jobs: max-nal: 30 steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Run CI script" run: ./scripts/test diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index f994f99..eaa0681 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -26,7 +26,7 @@ jobs: dry-run: false language: c++ - name: Upload Crash - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: failure() && steps.build.outcome == 'success' with: name: artifacts diff --git a/.github/workflows/cmake-config.yml b/.github/workflows/cmake-config.yml index 0988102..0de7b4f 100644 --- a/.github/workflows/cmake-config.yml +++ b/.github/workflows/cmake-config.yml @@ -24,11 +24,11 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup Windows dependencies" if: runner.os == 'Windows' - uses: msys2/setup-msys2@v2 + uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0 with: update: true install: >- diff --git a/.github/workflows/coverity.yml b/.github/workflows/coverity.yml index ae43398..3cc0560 100644 --- a/.github/workflows/coverity.yml +++ b/.github/workflows/coverity.yml @@ -19,7 +19,7 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Install dependencies" run: | diff --git a/.github/workflows/emscripten.yml b/.github/workflows/emscripten.yml index 013480f..2de51e0 100644 --- a/.github/workflows/emscripten.yml +++ b/.github/workflows/emscripten.yml @@ -20,10 +20,10 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup emsdk" - uses: mymindstorm/setup-emsdk@v14 + uses: mymindstorm/setup-emsdk@6ab9eb1bda2574c4ddb79809fc9247783eaf9021 # v14 with: version: "3.1.60" @@ -48,10 +48,10 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup emsdk" - uses: mymindstorm/setup-emsdk@v14 + uses: mymindstorm/setup-emsdk@6ab9eb1bda2574c4ddb79809fc9247783eaf9021 # v14 with: version: "3.1.60" diff --git a/.github/workflows/fedora-rawhide.yml b/.github/workflows/fedora-rawhide.yml index dff4b6a..fbcf055 100644 --- a/.github/workflows/fedora-rawhide.yml +++ b/.github/workflows/fedora-rawhide.yml @@ -23,7 +23,7 @@ jobs: container: image: fedora:rawhide steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: Install dependencies run: | dnf -y install git make clang cmake ninja-build autoconf automake libtool diffutils patch gawk diff --git a/.github/workflows/freebsd.yml b/.github/workflows/freebsd.yml index 850dbe2..fe6c258 100644 --- a/.github/workflows/freebsd.yml +++ b/.github/workflows/freebsd.yml @@ -22,7 +22,7 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup" run: | @@ -31,7 +31,7 @@ jobs: ./autogen.sh - name: "Build on VM" - uses: vmactions/freebsd-vm@v1 + uses: vmactions/freebsd-vm@670398e4236735b8b65805c3da44b7a511fb8b27 # v1.3.0 with: release: "${{ env.FREEBSD_VERSION }}" copyback: false @@ -49,7 +49,7 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup" run: | @@ -58,7 +58,7 @@ jobs: ./autogen.sh - name: "Build on VM" - uses: vmactions/freebsd-vm@v1 + uses: vmactions/freebsd-vm@670398e4236735b8b65805c3da44b7a511fb8b27 # v1.3.0 with: release: "${{ env.FREEBSD_VERSION }}" copyback: false diff --git a/.github/workflows/linux.yml b/.github/workflows/linux.yml index de9d8d3..d901cf9 100644 --- a/.github/workflows/linux.yml +++ b/.github/workflows/linux.yml @@ -44,7 +44,7 @@ jobs: steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Run tests" run: ./scripts/test || (status=$?; cat tests/test-suite.log; exit $status) @@ -66,7 +66,7 @@ jobs: os: ["ubuntu-24.04", "ubuntu-24.04-arm"] steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Run tests" run: ./scripts/test diff --git a/.github/workflows/macos.yml b/.github/workflows/macos.yml index 0c344e5..dad91e3 100644 --- a/.github/workflows/macos.yml +++ b/.github/workflows/macos.yml @@ -28,7 +28,7 @@ jobs: run: brew install automake libtool - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Run tests" run: ./scripts/test diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c135920..a20bf7d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ jobs: upload_url: "${{ steps.create_release.outputs.upload_url }}" steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Generate version changelog" run: .github/scripts/changelog.sh "$VERSION" > release-changelog.txt @@ -29,7 +29,7 @@ jobs: - name: "Create GitHub release" id: create_release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 with: body_path: "${{ github.workspace }}/release-changelog.txt" @@ -43,10 +43,10 @@ jobs: arch: [ "Win32", "x64", "ARM64" ] steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup MSYS2" - uses: msys2/setup-msys2@v2 + uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0 with: update: true install: >- @@ -75,7 +75,7 @@ jobs: run: Compress-Archive -Path local\* "libressl_${{ github.ref_name }}_windows_${{ matrix.arch }}.zip" - name: "Upload release artifact" - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0 with: files: | libressl_${{ github.ref_name }}_windows_${{ matrix.arch }}.zip diff --git a/.github/workflows/rust-openssl.yml b/.github/workflows/rust-openssl.yml index 4ff41c0..ed77dbb 100644 --- a/.github/workflows/rust-openssl.yml +++ b/.github/workflows/rust-openssl.yml @@ -19,7 +19,7 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Build LibreSSL" run: | diff --git a/.github/workflows/solaris.yml b/.github/workflows/solaris.yml index 902e488..a4355d0 100644 --- a/.github/workflows/solaris.yml +++ b/.github/workflows/solaris.yml @@ -19,7 +19,7 @@ jobs: contents: read steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup" run: | @@ -28,7 +28,7 @@ jobs: ./autogen.sh - name: "Build on VM" - uses: vmactions/solaris-vm@v1 + uses: vmactions/solaris-vm@47bea106d03acaf91084e52548ee460556011602 # v1.1.8 with: prepare: | pkg install gcc make diff --git a/.github/workflows/windows.yml b/.github/workflows/windows.yml index 7494a21..3880a7b 100644 --- a/.github/workflows/windows.yml +++ b/.github/workflows/windows.yml @@ -32,10 +32,10 @@ jobs: generator: "Visual Studio 17 2022" steps: - name: "Checkout repository" - uses: actions/checkout@v4 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 - name: "Setup MSYS2" - uses: msys2/setup-msys2@v2 + uses: msys2/setup-msys2@4f806de0a5a7294ffabaff804b38a9b435a73bda # v2.30.0 with: update: true install: >- @@ -64,7 +64,7 @@ jobs: - name: "Upload build artifacts" if: always() - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: "${{ matrix.os }}-${{ matrix.arch }}${{ matrix.shared == 'ON' && '-shared' || '' }}-build-results" path: "build" -- cgit v1.2.3-55-g6feb