[dev] Pin Github actions to full-commit SHA #310
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
All Submissions:
Changes proposed in this Pull Request:
Closes QAO-40
Contributes to QAO-23
Pins Github actions to full commit SHAs as immutable references.
Skipped all official GitHub actions.
No version update for setup-php action - used the latest commit in the tag that was already used.
Bumped one of the usages of
actions/cache
from v1 to v4 to fix the workflow that was failing because v1 is deprecated.Removes
dcarbone/install-jq-action
action - the ubuntu runner image already comes with jq preinstalledHow to test the changes in this Pull Request:
PHP unit tests workflow should pass in CI
Other information:
Changelog entry
CI workflow updates