Skip to content

Commit 017a268

Browse files
committed
Update GitHub Actions used in docs.yml
- Updates to latest versions for all actions - Pin actions not maintained by GitHub under `github.com/action` to exact commit hashes. This is good practice for security, since tags can be moved and then arbitray new code may execute. Since updating commit hashes is slightly more hassle, the trade-off made here is to trust GitHub, but not third-party actions. This should also solve the warnings about Node.js 16 actions being deprecated that is currently visible on the log page when docs.yml is executed.
1 parent 1ba1b9c commit 017a268

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

.github/workflows/docs.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,15 @@ jobs:
99
if: "github.repository == 'OpenMathLib/OpenBLAS'"
1010
runs-on: ubuntu-latest
1111
steps:
12-
- uses: actions/checkout@v2
13-
- uses: actions/setup-python@v2
12+
- uses: actions/checkout@v4
13+
- uses: actions/setup-python@v5
1414
with:
1515
python-version: "3.10"
1616
- run: pip install mkdocs mkdocs-material
1717
# mkdocs gh-deploy command only builds to the top-level, hence building then deploying ourselves
1818
- run: mkdocs build
1919
- name: Deploy docs
20-
uses: peaceiris/actions-gh-pages@v3
20+
uses: peaceiris/actions-gh-pages@4f9cc6602d3f66b9c108549d475ec49e8ef4d45e # v4.0.0
2121
if: ${{ github.ref == 'refs/heads/develop' }}
2222
with:
2323
github_token: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)