File tree Expand file tree Collapse file tree 5 files changed +18
-18
lines changed Expand file tree Collapse file tree 5 files changed +18
-18
lines changed Original file line number Diff line number Diff line change @@ -14,11 +14,11 @@ jobs:
14
14
dist :
15
15
runs-on : ubuntu-latest
16
16
steps :
17
- - uses : actions/checkout@v4
17
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
18
18
with :
19
19
fetch-depth : 0
20
20
21
- - uses : hynek/build-and-inspect-python-package@v2
21
+ - uses : hynek/build-and-inspect-python-package@b5076c307dc91924a82ad150cdd1533b444d3310 # v2.12.0
22
22
23
23
publish :
24
24
needs : [dist]
@@ -31,14 +31,14 @@ jobs:
31
31
if : github.event_name == 'release' && github.event.action == 'published'
32
32
33
33
steps :
34
- - uses : actions/download-artifact@v4
34
+ - uses : actions/download-artifact@b14cf4c92620c250e1c074ab0a5800e37df86765 # v4.2.0
35
35
with :
36
36
name : Packages
37
37
path : dist
38
38
39
39
- name : Generate artifact attestation for sdist and wheel
40
- uses : actions/attest-build-provenance@v2.2.3
40
+ uses : actions/attest-build-provenance@c074443f1aee8d4aeeae555aebba3282517141b2 # v2.2.3
41
41
with :
42
42
subject-path : " dist/*"
43
43
44
- - uses : pypa/gh-action-pypi-publish@release/v1
44
+ - uses : pypa/gh-action-pypi-publish@76f52bc884231f62b9a034ebfe128415bbaabdfc # v1.12.4
Original file line number Diff line number Diff line change @@ -21,16 +21,16 @@ jobs:
21
21
name : Format
22
22
runs-on : ubuntu-latest
23
23
steps :
24
- - uses : actions/checkout@v4
24
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
25
25
with :
26
26
fetch-depth : 0
27
- - uses : actions/setup-python@v5
27
+ - uses : actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
28
28
with :
29
29
python-version : " 3.x"
30
- - uses : pre-commit/action@v3.0.1
30
+ - uses : pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1
31
31
with :
32
32
extra_args : --hook-stage manual --all-files
33
- - uses : prefix-dev/setup-pixi@v0.8.3
33
+ - uses : prefix-dev/setup-pixi@92815284c57faa15cd896c4d5cfb2d59f32dc43d # v0.8.3
34
34
with :
35
35
pixi-version : v0.42.1
36
36
cache : true
@@ -52,11 +52,11 @@ jobs:
52
52
runs-on : [ubuntu-latest]
53
53
54
54
steps :
55
- - uses : actions/checkout@v4
55
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
56
56
with :
57
57
fetch-depth : 0
58
58
59
- - uses : prefix-dev/setup-pixi@v0.8.3
59
+ - uses : prefix-dev/setup-pixi@92815284c57faa15cd896c4d5cfb2d59f32dc43d # v0.8.3
60
60
with :
61
61
pixi-version : v0.42.1
62
62
cache : true
66
66
run : pixi run -e ${{ matrix.environment }} tests-ci
67
67
68
68
- name : Upload coverage report
69
- uses : codecov/codecov-action@v5.4.0
69
+ uses : codecov/codecov-action@0565863a31f2c772f9f0395002a31e3f06189574 # v5.4.0
70
70
with :
71
71
token : ${{ secrets.CODECOV_TOKEN }}
Original file line number Diff line number Diff line change 13
13
steps :
14
14
- name : Dependabot metadata
15
15
id : metadata
16
- uses : dependabot/fetch-metadata@v2
16
+ uses : dependabot/fetch-metadata@d7267f607e9d3fb96fc2fbe83e0af444713e90b7 # v2.3.0
17
17
with :
18
18
github-token : " ${{ secrets.GITHUB_TOKEN }}"
19
19
- name : Enable auto-merge for Dependabot PRs
Original file line number Diff line number Diff line change 6
6
docs-build :
7
7
runs-on : ubuntu-latest
8
8
steps :
9
- - uses : actions/checkout@v4
9
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
10
10
- uses : prefix-dev/setup-pixi@v0.8.3
11
11
with :
12
12
pixi-version : v0.42.1
15
15
- name : Build Docs
16
16
run : pixi run -e docs docs
17
17
- name : Upload Artifact
18
- uses : actions/upload-artifact@v4
18
+ uses : actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
19
19
with :
20
20
name : docs-build
21
21
path : docs/build/
Original file line number Diff line number Diff line change 14
14
environment :
15
15
name : docs-deploy
16
16
steps :
17
- - uses : actions/checkout@v4
17
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
18
18
- name : Download Artifact
19
- uses : dawidd6/action-download-artifact@v9
19
+ uses : dawidd6/action-download-artifact@07ab29fd4a977ae4d2b275087cf67563dfdf0295 # v9
20
20
with :
21
21
workflow : docs-build.yml
22
22
name : docs-build
26
26
# See
27
27
# https://github.com/JamesIves/github-pages-deploy-action/tree/dev#using-an-ssh-deploy-key-
28
28
- name : Deploy
29
- uses : JamesIves/github-pages-deploy-action@v4
29
+ uses : JamesIves/github-pages-deploy-action@6c2d9db40f9296374acc17b90404b6e8864128c8 # v4.7.3
30
30
with :
31
31
folder : docs/build/
32
32
ssh-key : ${{ secrets.DEPLOY_KEY }}
You can’t perform that action at this time.
0 commit comments