From 11ac80fee2a7c0791ac700856f3e83c30d918de0 Mon Sep 17 00:00:00 2001 From: PPawlowski Date: Mon, 24 Mar 2025 23:17:19 +0100 Subject: [PATCH 1/2] Bump reusable workflow version to v0.39.0 --- .github/workflows/publish.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index a82821c..44773d6 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -10,7 +10,7 @@ on: jobs: build: - uses: 'flowfuse/github-actions-workflows/.github/workflows/build_node_package.yml@v0.37.0' + uses: 'flowfuse/github-actions-workflows/.github/workflows/build_node_package.yml@v0.39.0' with: node: '[ {"version": "18", "tests": false, "lint": true}, @@ -21,7 +21,7 @@ jobs: ( github.event_name == 'push' && github.ref == 'refs/heads/main' ) || ( github.event_name == 'workflow_dispatch' && github.ref == 'refs/heads/main' ) needs: build - uses: 'flowfuse/github-actions-workflows/.github/workflows/publish_node_package.yml@v0.37.0' + uses: 'flowfuse/github-actions-workflows/.github/workflows/publish_node_package.yml@v0.39.0' with: package_name: node-red-dashboard-2-ui-flowviewer publish_package: true From fdc30f6b7c3df904d8b45f06c738728081ea463d Mon Sep 17 00:00:00 2001 From: PPawlowski Date: Mon, 24 Mar 2025 23:17:34 +0100 Subject: [PATCH 2/2] Pin actions to commit hash --- .github/workflows/release.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 28efee2..c1700e9 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -9,10 +9,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0 with: node-version: 18 @@ -25,6 +25,6 @@ jobs: npm run test - name: Publish package - uses: JS-DevTools/npm-publish@v3 + uses: JS-DevTools/npm-publish@19c28f1ef146469e409470805ea4279d47c3d35c # v3.1.1 with: token: ${{ secrets.NPM_PUBLISH_TOKEN }}