diff --git a/.github/actions/install-concordia/action.yml b/.github/actions/install-concordia/action.yml index 41cd1cd7..ecc05e77 100644 --- a/.github/actions/install-concordia/action.yml +++ b/.github/actions/install-concordia/action.yml @@ -26,13 +26,13 @@ runs: - name: Set up Python ${{ inputs.python-version }} id: setup-python - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f with: python-version: ${{ inputs.python-version }} - name: Restore Concordia installation id: restore - uses: actions/cache/restore@ab5e6d0c87105b4c9c2047343972218f562e4319 + uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: venv key: install-concordia-${{ steps.os-info.outputs.name }}-${{ steps.os-info.outputs.version }}-py${{ steps.setup-python.outputs.python-version }}-${{ hashFiles('setup.py') }} @@ -49,7 +49,7 @@ runs: - name: Save Concordia installation if: steps.restore.outputs.cache-hit != 'true' - uses: actions/cache/save@ab5e6d0c87105b4c9c2047343972218f562e4319 + uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 with: path: venv key: ${{ steps.restore.outputs.cache-primary-key }} diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index d1ec1a81..460f9335 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -28,11 +28,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/init@4fa2a7953630fd2f3fb380f21be14ede0169dd4f with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -46,7 +46,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/autobuild@4fa2a7953630fd2f3fb380f21be14ede0169dd4f # ℹī¸ Command-line programs to run using the OS shell. # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun @@ -59,4 +59,4 @@ jobs: # ./location_of_script_within_repo/buildscript.sh - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/analyze@4fa2a7953630fd2f3fb380f21be14ede0169dd4f diff --git a/.github/workflows/pylint-concordia.yml b/.github/workflows/pylint-concordia.yml index 2b7b263e..61e258d1 100644 --- a/.github/workflows/pylint-concordia.yml +++ b/.github/workflows/pylint-concordia.yml @@ -34,7 +34,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install Concordia uses: ./.github/actions/install-concordia diff --git a/.github/workflows/pylint-examples.yml b/.github/workflows/pylint-examples.yml index 84de8d57..a0fbe16d 100644 --- a/.github/workflows/pylint-examples.yml +++ b/.github/workflows/pylint-examples.yml @@ -38,7 +38,7 @@ jobs: timeout-minutes: 5 steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install examples uses: ./.github/actions/install-examples diff --git a/.github/workflows/pypi-publish.yml b/.github/workflows/pypi-publish.yml index 8274924b..68526628 100644 --- a/.github/workflows/pypi-publish.yml +++ b/.github/workflows/pypi-publish.yml @@ -29,7 +29,7 @@ jobs: timeout-minutes: 20 steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Update Python setup run: | pip install --upgrade pip @@ -39,7 +39,7 @@ jobs: - name: Build distribution run: python setup.py sdist bdist_wheel - name: Save artifact - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 + uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b with: name: dist path: ./dist @@ -53,12 +53,12 @@ jobs: timeout-minutes: 60 steps: - name: Load artifact - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: name: dist path: ./dist - name: Set up Python - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f with: python-version: '3.11' - name: Install Python dependencies @@ -86,18 +86,18 @@ jobs: timeout-minutes: 10 steps: - name: Load artifact - uses: actions/download-artifact@65a9edc5881444af0b9093a5e628f2fe47ea3b2e + uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 with: name: dist path: ./dist - name: Publish to TestPyPI if: github.event_name == 'release' || inputs.upload_to_test_pypi - uses: pypa/gh-action-pypi-publish@e53eb8b103ffcb59469888563dc324e3c8ba6f06 + uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 with: repository-url: https://test.pypi.org/legacy/ verbose: true - name: Publish to PyPI if: github.event_name == 'release' || inputs.upload_to_pypi - uses: pypa/gh-action-pypi-publish@e53eb8b103ffcb59469888563dc324e3c8ba6f06 + uses: pypa/gh-action-pypi-publish@ec4db0b4ddc65acdf4bff5fa45ac92d78b56bdf0 with: verbose: true diff --git a/.github/workflows/pypi-test.yml b/.github/workflows/pypi-test.yml index dd32eb2f..2b4c072d 100644 --- a/.github/workflows/pypi-test.yml +++ b/.github/workflows/pypi-test.yml @@ -50,7 +50,7 @@ jobs: steps: - name: Set up Python ${{ matrix.python_version }} - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f with: python-version: ${{ matrix.python-version }} diff --git a/.github/workflows/pytype-concordia.yml b/.github/workflows/pytype-concordia.yml index 8519b35d..82179919 100644 --- a/.github/workflows/pytype-concordia.yml +++ b/.github/workflows/pytype-concordia.yml @@ -34,7 +34,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install Concordia uses: ./.github/actions/install-concordia diff --git a/.github/workflows/pytype-examples.yml b/.github/workflows/pytype-examples.yml index 8271047b..d2b37c73 100644 --- a/.github/workflows/pytype-examples.yml +++ b/.github/workflows/pytype-examples.yml @@ -38,7 +38,7 @@ jobs: timeout-minutes: 30 steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install examples uses: ./.github/actions/install-examples diff --git a/.github/workflows/scorecards-analysis.yml b/.github/workflows/scorecards-analysis.yml index eeba9353..8fd636fc 100644 --- a/.github/workflows/scorecards-analysis.yml +++ b/.github/workflows/scorecards-analysis.yml @@ -25,12 +25,12 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 with: persist-credentials: false - name: "Run analysis" - uses: ossf/scorecard-action@0864cf19026789058feabb7e87baa5f140aac736 + uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 with: results_file: results.sarif results_format: sarif @@ -49,7 +49,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 + uses: actions/upload-artifact@0b2256b8c012f0828dc542b3febcab082c67f72b with: name: SARIF file path: results.sarif @@ -57,6 +57,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 + uses: github/codeql-action/upload-sarif@4fa2a7953630fd2f3fb380f21be14ede0169dd4f with: sarif_file: results.sarif diff --git a/.github/workflows/sdist-test.yml b/.github/workflows/sdist-test.yml index ceca7cb6..07198484 100644 --- a/.github/workflows/sdist-test.yml +++ b/.github/workflows/sdist-test.yml @@ -15,13 +15,13 @@ jobs: steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Build source distribution run: python setup.py sdist - name: Set up Python - uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c + uses: actions/setup-python@39cd14951b08e74b54015e9e001cdefcf80e669f with: python-version: '3.11' diff --git a/.github/workflows/test-concordia.yml b/.github/workflows/test-concordia.yml index b0e4850f..8a4ab21e 100644 --- a/.github/workflows/test-concordia.yml +++ b/.github/workflows/test-concordia.yml @@ -44,7 +44,7 @@ jobs: - '3.11' steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install Concordia uses: ./.github/actions/install-concordia with: diff --git a/.github/workflows/test-examples.yml b/.github/workflows/test-examples.yml index 8eeb6383..f6bbd9ed 100644 --- a/.github/workflows/test-examples.yml +++ b/.github/workflows/test-examples.yml @@ -38,7 +38,7 @@ jobs: timeout-minutes: 90 steps: - name: Checkout Concordia - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 - name: Install examples uses: ./.github/actions/install-examples