From 57a12ce0abb3b9746bada2a8de33b5851a0392f5 Mon Sep 17 00:00:00 2001
From: Tilman Vatteroth <git@tilmanvatteroth.de>
Date: Sun, 20 Apr 2025 19:26:35 +0200
Subject: [PATCH] ci: unpin actions
some of the hashes dont exist anymore. but i'm too lazy to look for the new hashes. So i let renovate update them later.
Signed-off-by: Tilman Vatteroth <git@tilmanvatteroth.de>
---
.github/workflows/cleanup-cache.yml | 2 +-
.github/workflows/docker.yml | 12 ++++++------
.github/workflows/docs-netlify-deploy.yml | 2 +-
.github/workflows/e2e-tests.yml | 10 +++++-----
.github/workflows/lint.yml | 2 +-
.github/workflows/reuse.yml | 2 +-
.github/workflows/scorecard.yml | 2 +-
.github/workflows/static-analysis.yml | 4 ++--
.github/workflows/test-and-build.yml | 2 +-
9 files changed, 19 insertions(+), 19 deletions(-)
diff --git a/.github/workflows/cleanup-cache.yml b/.github/workflows/cleanup-cache.yml
index 84ee4517e..0588e9037 100644
--- a/.github/workflows/cleanup-cache.yml
+++ b/.github/workflows/cleanup-cache.yml
@@ -13,7 +13,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check out code
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4
+ uses: actions/checkout@v4.2.2 # v4
- name: Cleanup
run: |
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index b9be25176..13c8da78c 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -25,11 +25,11 @@ jobs:
matrix:
component: [ 'backend', 'frontend' ]
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ - uses: actions/checkout@v4.2.2 # v4.2.2
- name: Generate Docker metadata for ${{ matrix.component }}
id: meta-data
- uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1
+ uses: docker/metadata-action@v5.7.0 # v5.5.1
with:
images: ghcr.io/${{ github.repository_owner }}/${{ github.event.repository.name }}/${{ matrix.component }}
tags: |
@@ -39,20 +39,20 @@ jobs:
type=semver,pattern={{major}}
- name: Set up QEMU
- uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
+ uses: docker/setup-qemu-action@v3.6.0 # v3.2.0
- name: Set up Docker Buildx
- uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
+ uses: docker/setup-buildx-action@v3.10.0 # v3.6.1
- name: Login to GHCR
- uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
+ uses: docker/login-action@v3.4.0 # v3.3.0
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push
- uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0
+ uses: docker/build-push-action@v6.15.0 # v6.7.0
with:
push: true
file: ${{ matrix.component}}/docker/Dockerfile
diff --git a/.github/workflows/docs-netlify-deploy.yml b/.github/workflows/docs-netlify-deploy.yml
index 921994cc4..c35a57d4a 100644
--- a/.github/workflows/docs-netlify-deploy.yml
+++ b/.github/workflows/docs-netlify-deploy.yml
@@ -28,7 +28,7 @@ jobs:
name: Deploys to netlify
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
- name: Set up NodeJS
uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml
index a89303d86..6c90e1da6 100644
--- a/.github/workflows/e2e-tests.yml
+++ b/.github/workflows/e2e-tests.yml
@@ -28,7 +28,7 @@ jobs:
if: "(github.event_name == 'pull_request_target') == github.event.pull_request.head.repo.fork"
runs-on: ubuntu-latest
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ - uses: actions/checkout@v4.2.2 # v4.2.2
with:
fetch-depth: 0
- name: Setup node
@@ -69,7 +69,7 @@ jobs:
ports:
- 3306:3306
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ - uses: actions/checkout@v4.2.2 # v4.2.2
with:
fetch-depth: 0
- name: Setup node
@@ -100,7 +100,7 @@ jobs:
ports:
- 5432:5432
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ - uses: actions/checkout@v4.2.2 # v4.2.2
with:
fetch-depth: 0
- name: Setup node
@@ -123,7 +123,7 @@ jobs:
name: Build test build of frontend
steps:
- name: Check out repo
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
with:
ref: ${{ env.HEAD_COMMIT_HASH }}
@@ -168,7 +168,7 @@ jobs:
run: apt-get update && apt-get install -y jq zstd screen curl
- name: Check out repo
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
with:
ref: ${{ env.HEAD_COMMIT_HASH }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 84ad3895f..a411bdd03 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -25,7 +25,7 @@ jobs:
if: "(github.event_name == 'pull_request_target') == github.event.pull_request.head.repo.fork"
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
- name: Setup node
uses: ./.github/actions/setup-node
diff --git a/.github/workflows/reuse.yml b/.github/workflows/reuse.yml
index a14389a13..c47cfbcb9 100644
--- a/.github/workflows/reuse.yml
+++ b/.github/workflows/reuse.yml
@@ -16,7 +16,7 @@ jobs:
container:
image: fsfe/reuse:4.0.3@sha256:7e0ca22c55f73947d9ebc77deacc79357deff0c6abc63acdd87222f633718919
steps:
- - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ - uses: actions/checkout@v4.2.2 # v4.2.2
- name: Run linter
run: reuse lint
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index 2723f69e9..109700b3c 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -29,7 +29,7 @@ jobs:
steps:
- name: "Checkout code"
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
with:
persist-credentials: false
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index a313bfa2b..9b3432f50 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -23,7 +23,7 @@ jobs:
name: Njsscan code scanning
steps:
- name: Checkout the code
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
- name: Scan with njsscan
id: njsscan
uses: ajinabraham/njsscan-action@c7b65a3590ade829628b2b3c87b34ac0ce666a79 # master
@@ -46,7 +46,7 @@ jobs:
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
- name: Initialize CodeQL
uses: github/codeql-action/init@f779452ac5af1c261dce0346a8f964149f49322b # v3.26.13
diff --git a/.github/workflows/test-and-build.yml b/.github/workflows/test-and-build.yml
index aea72d6d4..d71803410 100644
--- a/.github/workflows/test-and-build.yml
+++ b/.github/workflows/test-and-build.yml
@@ -32,7 +32,7 @@ jobs:
name: Test and build with NodeJS ${{ matrix.node }}
steps:
- name: Checkout repository
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+ uses: actions/checkout@v4.2.2 # v4.2.2
- name: Setup node
uses: ./.github/actions/setup-node