From d3c69cff7d4697475856e57f3f3b568807d4efca Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 3 Nov 2026 08:19:21 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/build.yml | 6 +++--- .github/workflows/format.yml | 6 +++--- .github/workflows/pages.yml | 10 +++++----- .github/workflows/release.yml | 14 +++++++------- .github/workflows/tests.yml | 6 +++--- 5 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 77572e0..d96d144 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -29,11 +29,11 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: false - - uses: actions/setup-python@v7 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7 with: python-version: '3.12' @@ -59,7 +59,7 @@ jobs: -s astar -H lmcut | tee /tmp/plan.txt grep -q "Valid: True" /tmp/plan.txt - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: distributions path: dist/ diff --git a/.github/workflows/format.yml b/.github/workflows/format.yml index 0b85781..f52aa2e 100644 --- a/.github/workflows/format.yml +++ b/.github/workflows/format.yml @@ -22,12 +22,12 @@ jobs: # `github.head_ref` is empty on a push event, so the old `ref:` here was # a no-op that read as if it did something. This workflow only ever runs # on main; check that out and say so. - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: ref: main - name: Set up Python - uses: actions/setup-python@v7 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7 with: python-version: '3.14' @@ -48,7 +48,7 @@ jobs: run: python tools/build_web.py - name: Commit changes - uses: stefanzweifel/git-auto-commit-action@v7 + uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7 with: commit_message: Apply formatting changes branch: main diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml index 8eeb5aa..908a6c0 100644 --- a/.github/workflows/pages.yml +++ b/.github/workflows/pages.yml @@ -25,11 +25,11 @@ jobs: bundle: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: false - - uses: actions/setup-python@v7 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7 with: python-version: "3.12" @@ -44,9 +44,9 @@ jobs: exit 1 fi - - uses: actions/configure-pages@v6 + - uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6 - - uses: actions/upload-pages-artifact@v5 + - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5 with: path: web @@ -58,4 +58,4 @@ jobs: url: ${{ steps.deployment.outputs.page_url }} steps: - id: deployment - uses: actions/deploy-pages@v5 + uses: actions/deploy-pages@368f82528645a54fb793d4d04e342629a3f51346 # v5 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index abae49b..b620710 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -50,12 +50,12 @@ jobs: outputs: version: ${{ steps.version.outputs.version }} steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: false fetch-depth: 0 - - uses: actions/setup-python@v7 + - uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7 with: python-version: '3.12' @@ -138,7 +138,7 @@ jobs: PY cat release-notes.md - - uses: actions/upload-artifact@v7 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7 with: name: distributions path: | @@ -158,12 +158,12 @@ jobs: permissions: id-token: write # mint the OIDC token PyPI verifies; no secrets involved steps: - - uses: actions/download-artifact@v8 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: distributions - name: Publish - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@7245906fb61fa33a13554f9d5fb856fe61758086 # release/v1 with: repository-url: >- ${{ github.event.inputs.target == 'testpypi' @@ -196,12 +196,12 @@ jobs: permissions: contents: write # create the tag, the release, and attach the artifacts steps: - - uses: actions/download-artifact@v8 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8 with: name: distributions - name: Create the release - uses: softprops/action-gh-release@v3 + uses: softprops/action-gh-release@efb35369e0ad2afab669f228072c1b0d510eae64 # v3 with: # Named rather than inherited from the ref, so the dispatch path # creates `v` at this commit. The release API creates the diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml index 0811216..bc1e04f 100644 --- a/.github/workflows/tests.yml +++ b/.github/workflows/tests.yml @@ -45,11 +45,11 @@ jobs: MPLBACKEND: Agg steps: - - uses: actions/checkout@v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: submodules: recursive - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v7 + uses: actions/setup-python@6d4fd22b20465ccc0f7354476588e8df7c9ca0e0 # v7 with: python-version: ${{ matrix.python-version }} - name: Install package (${{ matrix.extras }} extras) @@ -64,6 +64,6 @@ jobs: run: | pytest --cov=jupyddl --cov-report=xml - name: Upload coverage to Codecov - uses: codecov/codecov-action@v7 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7 with: name: codecov-umbrella