diff --git a/.github/workflows/ci-knip.yml b/.github/workflows/ci-knip.yml index 687bc4d..d548148 100644 --- a/.github/workflows/ci-knip.yml +++ b/.github/workflows/ci-knip.yml @@ -25,13 +25,13 @@ jobs: if: github.event.pull_request.head.repo.full_name == github.repository steps: - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: ref: ${{ github.head_ref }} token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }} - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@f32588d80ce35d57905264f7fa473b0f6e297c0a # main - name: Run Knip Linter run: pnpm knip diff --git a/.github/workflows/ci-labeler.yml b/.github/workflows/ci-labeler.yml index eb60a6a..860253b 100644 --- a/.github/workflows/ci-labeler.yml +++ b/.github/workflows/ci-labeler.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Label PRs - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1 + uses: actions/labeler@b8dd2d9be0f68b860e7dae5dae7d772984eacd6d # v6.2.0 with: repo-token: "${{ secrets.STUDIOCMS_SERVICE_TOKEN }}" configuration-path: .github/labeler.yml diff --git a/.github/workflows/ci-pr-snapshots.yml b/.github/workflows/ci-pr-snapshots.yml index 46e9234..db8bb4e 100644 --- a/.github/workflows/ci-pr-snapshots.yml +++ b/.github/workflows/ci-pr-snapshots.yml @@ -24,7 +24,7 @@ jobs: issues: write pull-requests: write secrets: inherit - uses: withstudiocms/automations/.github/workflows/preview.yml@274ff117aae1034c6b4d37f545268c96a7604077 # main + uses: withstudiocms/automations/.github/workflows/preview.yml@f32588d80ce35d57905264f7fa473b0f6e297c0a # main with: build-cmd: "pnpm ci:build" @@ -37,6 +37,6 @@ jobs: issues: write pull-requests: write secrets: inherit - uses: withstudiocms/automations/.github/workflows/preview-pr.yml@274ff117aae1034c6b4d37f545268c96a7604077 # main + uses: withstudiocms/automations/.github/workflows/preview-pr.yml@f32588d80ce35d57905264f7fa473b0f6e297c0a # main with: build-cmd: "pnpm ci:build" diff --git a/.github/workflows/ci-push-main.yml b/.github/workflows/ci-push-main.yml index 3b0c682..794e7fd 100644 --- a/.github/workflows/ci-push-main.yml +++ b/.github/workflows/ci-push-main.yml @@ -30,19 +30,19 @@ jobs: NODE_OPTIONS: "--max_old_space_size=4096" steps: - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: ref: ${{ github.head_ref }} token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }} - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@f32588d80ce35d57905264f7fa473b0f6e297c0a # main - name: Format code run: pnpm run lint:fix - name: Commit changes - uses: stefanzweifel/git-auto-commit-action@04702edda442b2e678b25b537cec683a1493fcb9 # v7.1.0 + uses: stefanzweifel/git-auto-commit-action@d0b01107b5db882071f96de5dd4b54961ea93f4c # v7.2.1 with: commit_message: "[ci] lint" branch: ${{ github.head_ref }} @@ -55,10 +55,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - name: Run Todo Issue Bot - uses: juulsn/todo-issue@main + uses: juulsn/todo-issue@c27fbdb0a33572f73dbdb683aa8b1382bea8289e # main with: excludePattern: "^(node_modules/)" autoAssign: false @@ -68,7 +68,7 @@ jobs: mergebot: name: Merge Bot if: ${{ github.repository_owner == 'withstudiocms' && github.event_name != 'workflow_dispatch' && github.event.commits[0].message != '[ci] lint' }} - uses: withstudiocms/automations/.github/workflows/mergebot.yml@main + uses: withstudiocms/automations/.github/workflows/mergebot.yml@f32588d80ce35d57905264f7fa473b0f6e297c0a # main secrets: DISCORD_WEBHOOK: ${{ secrets.DISCORD_WEBHOOK_MERGEBOT }} @@ -80,7 +80,7 @@ jobs: issues: write pull-requests: write secrets: inherit - uses: withstudiocms/automations/.github/workflows/preview.yml@274ff117aae1034c6b4d37f545268c96a7604077 # main + uses: withstudiocms/automations/.github/workflows/preview.yml@f32588d80ce35d57905264f7fa473b0f6e297c0a # main with: build-cmd: "pnpm ci:build" @@ -90,18 +90,18 @@ jobs: steps: - name: Setup Apollo Git Bot id: bot-token - uses: actions/create-github-app-token@f8d387b68d61c58ab83c6c016672934102569859 # v3.0.0 + uses: actions/create-github-app-token@64ab729a6294000f5aa4a4bc0b73d1f32bc45510 # v3.3.0 with: app-id: ${{ secrets.STUDIOCMS_GIT_BOT_APP_ID }} private-key: ${{ secrets.STUDIOCMS_GIT_BOT_PRIVATE_KEY }} - name: Checkout Repo - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@f32588d80ce35d57905264f7fa473b0f6e297c0a # main - name: Run Build run: pnpm ci:prepublish @@ -114,7 +114,7 @@ jobs: - name: Run Changeset Release id: changesets - uses: changesets/action@6a0a831ff30acef54f2c6aa1cbbc1096b066edaf # v1.7.0 + uses: changesets/action@a45c4d594aa4e2c509dc14a9f2b3b67ba3780d0d # v1.9.0 with: # If USE_GITHUB_BOT is true we don't want Changesets to do anything user related setupGitUser: false @@ -149,7 +149,7 @@ jobs: - name: Initiate Release Bot if: ${{ steps.changesets.outputs.published == 'true' }} - uses: withstudiocms/automations/.github/actions/releasebot@main + uses: withstudiocms/automations/.github/actions/releasebot@f32588d80ce35d57905264f7fa473b0f6e297c0a # main with: repository: ${{ github.repository }} CWD: ${{ github.workspace }} diff --git a/.github/workflows/ci-renovate.yml b/.github/workflows/ci-renovate.yml index f24f90c..17ce613 100644 --- a/.github/workflows/ci-renovate.yml +++ b/.github/workflows/ci-renovate.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Update PR - uses: mscharley/dependency-changesets-action@f456a98d34595a68d4b9412368a57533be0584ad # v1.2.3 + uses: mscharley/dependency-changesets-action@874dac2372a085cb94f750e8bdf5b1173a838a75 # v1.2.5 with: token: ${{ secrets.STUDIOCMS_SERVICE_TOKEN }} use-conventional-commits: true diff --git a/.github/workflows/ci-testing.yml b/.github/workflows/ci-testing.yml index bf3d8d1..d96f332 100644 --- a/.github/workflows/ci-testing.yml +++ b/.github/workflows/ci-testing.yml @@ -29,7 +29,7 @@ jobs: cmd: ["cfetch"] steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false @@ -47,7 +47,7 @@ jobs: cmd: ["cfetch"] steps: - name: Checkout code - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false @@ -63,10 +63,10 @@ jobs: NODE_OPTIONS: "--max_old_space_size=4096" steps: - name: Check out code using Git - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@f32588d80ce35d57905264f7fa473b0f6e297c0a # main - name: Build package run: pnpm build @@ -81,10 +81,10 @@ jobs: NODE_OPTIONS: "--max_old_space_size=4096" steps: - name: Check out code using Git - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - name: Install Tools & Dependencies - uses: withstudiocms/automations/.github/actions/install@main + uses: withstudiocms/automations/.github/actions/install@f32588d80ce35d57905264f7fa473b0f6e297c0a # main - name: Build package run: pnpm build @@ -93,7 +93,7 @@ jobs: run: pnpm ci:test - name: Upload HTML report - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: vitest-report path: html diff --git a/.github/workflows/coauthor.yml b/.github/workflows/coauthor.yml index d3bfc95..f3813ff 100644 --- a/.github/workflows/coauthor.yml +++ b/.github/workflows/coauthor.yml @@ -14,5 +14,5 @@ jobs: if: ${{ github.event.issue.pull_request }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 - uses: kevinzunigacuellar/coauthor-action@292b32bdbffc663431a2a37b3bfa597d83a74905 # v0.1.3 \ No newline at end of file