Skip to content

Commit de9d2b2

Browse files
renovate-sh-app[bot]ankur22
renovate-sh-app[bot]
authored and
ankur22
committed
chore(deps): pin dependencies
Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
1 parent db59367 commit de9d2b2

File tree

13 files changed

+48
-48
lines changed

13 files changed

+48
-48
lines changed

‎.github/actions/lint/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ runs:
55
using: composite
66
steps:
77
- name: Install Go
8-
uses: actions/setup-go@v5
8+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
99
with:
1010
go-version: 1.25.x
1111
check-latest: true

‎.github/workflows/browser_e2e.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -27,11 +27,11 @@ jobs:
2727
runs-on: ${{ matrix.platform }}
2828
steps:
2929
- name: Checkout code
30-
uses: actions/checkout@v5
30+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
3131
with:
3232
persist-credentials: false
3333
- name: Install Go
34-
uses: actions/setup-go@v5
34+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
3535
with:
3636
go-version: 1.x
3737
- name: Install Go tip

‎.github/workflows/build.yml‎

Lines changed: 25 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
sign_windows_artifacts: ${{ steps.determine_windows_signing.outputs.sign_windows_artifacts }}
3939
steps:
4040
- name: Checkout code
41-
uses: actions/checkout@v5
41+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
4242
with:
4343
fetch-depth: 0
4444
persist-credentials: false
@@ -103,12 +103,12 @@ jobs:
103103
VERSION: ${{ needs.configure.outputs.k6_version }}
104104
steps:
105105
- name: Checkout code
106-
uses: actions/checkout@v5
106+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
107107
with:
108108
fetch-depth: 0
109109
persist-credentials: false
110110
- name: Install Go
111-
uses: actions/setup-go@v5
111+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
112112
with:
113113
go-version: ${{ needs.configure.outputs.go_version }}
114114
check-latest: true
@@ -152,7 +152,7 @@ jobs:
152152
go version
153153
./build-release.sh "dist" "${VERSION}"
154154
- name: Upload artifacts
155-
uses: actions/upload-artifact@v4
155+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
156156
with:
157157
name: binaries
158158
path: dist/
@@ -169,7 +169,7 @@ jobs:
169169
VERSION: ${{ needs.configure.outputs.k6_version }}
170170
steps:
171171
- name: Checkout code
172-
uses: actions/checkout@v5
172+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
173173
with:
174174
fetch-depth: 0
175175
persist-credentials: false
@@ -273,7 +273,7 @@ jobs:
273273
windows_binary_artifact_name: ${{ steps.assign-artifact-names.outputs.windows-binary-artifact-name }}
274274
steps:
275275
- name: Download binaries
276-
uses: actions/download-artifact@v4
276+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
277277
with:
278278
name: binaries
279279
path: dist
@@ -283,15 +283,15 @@ jobs:
283283
Expand-Archive -Path ".\dist\k6-${env:VERSION}-windows-amd64.zip" -DestinationPath .\packaging\
284284
285285
- name: Upload artifact for Windows installer build
286-
uses: actions/upload-artifact@v4
286+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
287287
with:
288288
name: windows-binary
289289
path: 'packaging/k6-${{ env.VERSION }}-windows-amd64/k6.exe'
290290
retention-days: 7
291291
if-no-files-found: error
292292

293293
- name: Get secrets for Azure Trusted Signing
294-
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0
294+
uses: grafana/shared-workflows/actions/get-vault-secrets@a37de51f3d713a30a9e4b21bcdfbd38170020593 # get-vault-secrets/v1.3.0
295295
id: get-signing-secrets
296296
if: needs.configure.outputs.sign_windows_artifacts == 'true'
297297
with:
@@ -302,7 +302,7 @@ jobs:
302302
tenant-id=azure-trusted-signing:tenant-id
303303
304304
- name: Sign Windows binary
305-
uses: grafana/shared-workflows/actions/azure-trusted-signing@azure-trusted-signing/v1.0.0
305+
uses: grafana/shared-workflows/actions/azure-trusted-signing@e86cdb1c0a8cf5df57d3078f285261f7c9577174 # azure-trusted-signing/v1.0.0
306306
id: sign-artifacts
307307
if: needs.configure.outputs.sign_windows_artifacts == 'true'
308308
with:
@@ -314,7 +314,7 @@ jobs:
314314
signed-artifact-name: 'windows-binary-signed'
315315

316316
- name: Download signed Windows binary
317-
uses: actions/download-artifact@v4
317+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
318318
if: needs.configure.outputs.sign_windows_artifacts == 'true'
319319
with:
320320
name: ${{ steps.sign-artifacts.outputs.artifact-name }}
@@ -327,7 +327,7 @@ jobs:
327327
Compress-Archive -Path ".\packaging\*" -DestinationPath ".\dist\k6-${env:VERSION}-windows-amd64.zip" -Force
328328
329329
- name: Upload signed artifacts
330-
uses: actions/upload-artifact@v4
330+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
331331
if: needs.configure.outputs.sign_windows_artifacts == 'true'
332332
with:
333333
name: binaries-signed
@@ -358,7 +358,7 @@ jobs:
358358
VERSION: ${{ needs.configure.outputs.k6_version }}
359359
steps:
360360
- name: Checkout code
361-
uses: actions/checkout@v5
361+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
362362
with:
363363
persist-credentials: false
364364
- name: Install pandoc
@@ -371,7 +371,7 @@ jobs:
371371
Expand-Archive -Path .\wix311-binaries.zip -DestinationPath .\wix311\
372372
echo "$pwd\wix311" | Out-File -FilePath $env:GITHUB_PATH -Append
373373
- name: Download Windows binary
374-
uses: actions/download-artifact@v5
374+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
375375
with:
376376
name: ${{ needs.sign-binaries.outputs.windows_binary_artifact_name }}
377377
path: packaging
@@ -389,7 +389,7 @@ jobs:
389389
run: move "packaging\k6.msi" "packaging\k6-${env:VERSION}-windows-amd64.msi"
390390

391391
- name: Upload Windows installer
392-
uses: actions/upload-artifact@v4
392+
uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
393393
with:
394394
name: binaries-windows
395395
path: |
@@ -418,14 +418,14 @@ jobs:
418418
needs: [configure, package]
419419
steps:
420420
- name: Download Windows artifacts
421-
uses: actions/download-artifact@v4
421+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
422422
if: needs.configure.outputs.sign_windows_artifacts == 'true'
423423
with:
424424
name: binaries-windows
425425
path: packaging
426426

427427
- name: Get secrets for Azure Trusted Signing
428-
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0
428+
uses: grafana/shared-workflows/actions/get-vault-secrets@a37de51f3d713a30a9e4b21bcdfbd38170020593 # get-vault-secrets/v1.3.0
429429
id: get-signing-secrets
430430
if: needs.configure.outputs.sign_windows_artifacts == 'true'
431431
with:
@@ -436,7 +436,7 @@ jobs:
436436
tenant-id=azure-trusted-signing:tenant-id
437437
438438
- name: Sign Windows installer
439-
uses: grafana/shared-workflows/actions/azure-trusted-signing@azure-trusted-signing/v1.0.0
439+
uses: grafana/shared-workflows/actions/azure-trusted-signing@e86cdb1c0a8cf5df57d3078f285261f7c9577174 # azure-trusted-signing/v1.0.0
440440
id: sign-artifacts
441441
if: needs.configure.outputs.sign_windows_artifacts == 'true'
442442
with:
@@ -465,16 +465,16 @@ jobs:
465465
contents: write
466466
steps:
467467
- name: Checkout code
468-
uses: actions/checkout@v5
468+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
469469
with:
470470
persist-credentials: false
471471
- name: Download binaries
472-
uses: actions/download-artifact@v5
472+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
473473
with:
474474
name: ${{ needs.sign-binaries.outputs.binary_artifact_name }}
475475
path: dist
476476
- name: Download Windows binaries
477-
uses: actions/download-artifact@v5
477+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
478478
with:
479479
name: ${{ needs.sign-packages.outputs.artifact_name }}
480480
path: dist
@@ -511,16 +511,16 @@ jobs:
511511
id-token: write # Required for Vault
512512
steps:
513513
- name: Checkout code
514-
uses: actions/checkout@v5
514+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
515515
with:
516516
persist-credentials: false
517517
- name: Download binaries
518-
uses: actions/download-artifact@v5
518+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
519519
with:
520520
name: ${{ needs.sign-binaries.outputs.binary_artifact_name }}
521521
path: dist
522522
- name: Download Windows binaries
523-
uses: actions/download-artifact@v5
523+
uses: actions/download-artifact@634f93cb2916e3fdff6788551b99b062d0335ce0 # v5
524524
with:
525525
name: ${{ needs.sign-packages.outputs.artifact_name }}
526526
path: dist
@@ -530,15 +530,15 @@ jobs:
530530
mv "dist/k6-$VERSION-windows-amd64.msi" "dist/k6-$VERSION-amd64.msi"
531531
mv "dist/k6-$VERSION-linux-amd64.rpm" "dist/k6-$VERSION-amd64.rpm"
532532
mv "dist/k6-$VERSION-linux-amd64.deb" "dist/k6-$VERSION-amd64.deb"
533-
- uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0
533+
- uses: grafana/shared-workflows/actions/get-vault-secrets@a37de51f3d713a30a9e4b21bcdfbd38170020593 # get-vault-secrets/v1.3.0
534534
with:
535535
repo_secrets: |
536536
IAM_ROLE_ARN=deploy:packager-iam-role
537537
AWS_CF_DISTRIBUTION=cloudfront:AWS_CF_DISTRIBUTION
538538
PGP_SIGN_KEY_PASSPHRASE=pgp:PGP_SIGN_KEY_PASSPHRASE
539539
PGP_SIGN_KEY=pgp:PGP_SIGN_KEY
540540
S3_BUCKET=s3:AWS_S3_BUCKET
541-
- uses: grafana/shared-workflows/actions/aws-auth@aws-auth/v1.0.2
541+
- uses: grafana/shared-workflows/actions/aws-auth@954bcbdf6e64fe612210885b47df771d9d20447b # aws-auth/v1.0.2
542542
with:
543543
aws-region: "us-east-2"
544544
role-arn: ${{ env.IAM_ROLE_ARN }}

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ jobs:
1515

1616
steps:
1717
- name: Checkout repo
18-
uses: actions/checkout@v5
18+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
1919
with:
2020
persist-credentials: false
2121

‎.github/workflows/issue-auto-assign.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -17,7 +17,7 @@ jobs:
1717
# as we need to run only on issues, it filter out prs.
1818
if: ${{ !github.event.issue.pull_request }}
1919
steps:
20-
- uses: actions/github-script@v7
20+
- uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
2121
with:
2222
script: |
2323
const assignees = ['ankur22', 'codebien', 'inancgumus', 'joanlopez', 'mstoykov', 'oleiade'];

‎.github/workflows/lint.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -16,12 +16,12 @@ jobs:
1616
runs-on: ubuntu-latest
1717
steps:
1818
- name: Checkout code
19-
uses: actions/checkout@v5
19+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
2020
with:
2121
persist-credentials: false
2222
fetch-depth: 0
2323
- name: Install Go
24-
uses: actions/setup-go@v5
24+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
2525
with:
2626
go-version: 1.25.x
2727
check-latest: true
@@ -39,7 +39,7 @@ jobs:
3939
runs-on: ubuntu-latest
4040
steps:
4141
- name: Checkout code
42-
uses: actions/checkout@v5
42+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
4343
with:
4444
persist-credentials: false
4545
fetch-depth: 0

‎.github/workflows/packager.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
packages: write
2323
steps:
2424
- name: Checkout code
25-
uses: actions/checkout@v5
25+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
2626
with:
2727
persist-credentials: false
2828
- name: Build

‎.github/workflows/tc39.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,11 +22,11 @@ jobs:
2222
runs-on: ubuntu-latest
2323
steps:
2424
- name: Checkout code
25-
uses: actions/checkout@v5
25+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
2626
with:
2727
persist-credentials: false
2828
- name: Install Go
29-
uses: actions/setup-go@v5
29+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
3030
with:
3131
go-version: 1.25.x
3232
check-latest: true

‎.github/workflows/test.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
runs-on: ${{ matrix.platform }}
2424
steps:
2525
- name: Checkout code
26-
uses: actions/checkout@v5
26+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
2727
with:
2828
fetch-depth: 0
2929
persist-credentials: false
@@ -32,7 +32,7 @@ jobs:
3232
run: |
3333
echo "Running tests on '${GITHUB_REF}' with '$(git describe --tags --always --long --dirty)' checked out..."
3434
- name: Install Go
35-
uses: actions/setup-go@v5
35+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
3636
with:
3737
go-version: ${{ matrix.go-version }}
3838
check-latest: true
@@ -67,7 +67,7 @@ jobs:
6767
continue-on-error: true
6868
steps:
6969
- name: Checkout code
70-
uses: actions/checkout@v5
70+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
7171
with:
7272
persist-credentials: false
7373
- name: Download Go tip
@@ -114,11 +114,11 @@ jobs:
114114
runs-on: ${{ matrix.platform }}
115115
steps:
116116
- name: Checkout code
117-
uses: actions/checkout@v5
117+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
118118
with:
119119
persist-credentials: false
120120
- name: Install Go
121-
uses: actions/setup-go@v5
121+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
122122
with:
123123
go-version: ${{ matrix.go-version }}
124124
check-latest: true

‎.github/workflows/wpt.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,11 +15,11 @@ jobs:
1515
runs-on: ubuntu-latest
1616
steps:
1717
- name: Checkout code
18-
uses: actions/checkout@v5
18+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
1919
with:
2020
persist-credentials: false
2121
- name: Install Go
22-
uses: actions/setup-go@v5
22+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5
2323
with:
2424
go-version: 1.25.x
2525
check-latest: true

0 commit comments

Comments
 (0)