From a251027102ae1531858cdd0a01465a4a74cadbd8 Mon Sep 17 00:00:00 2001 From: "minder-by-stacklok[bot]" <165083860+github-actions[bot]@users.noreply.github.com> Date: Mon, 17 Jun 2024 15:36:12 +0000 Subject: [PATCH] Replace unpinned actions with pinned action --- .github/workflows/commit_artifacts.yml | 26 +++++++++++----------- .github/workflows/compiler-playground.yml | 6 ++--- .github/workflows/compiler-rust.yml | 14 ++++++------ .github/workflows/compiler-typescript.yml | 26 +++++++++++----------- .github/workflows/devtools_check_repro.yml | 2 +- .github/workflows/fuzz_tests.yml | 4 ++-- .github/workflows/stale.yml | 2 +- 7 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.github/workflows/commit_artifacts.yml b/.github/workflows/commit_artifacts.yml index 09d14b30baf4d..ff0e9a1caff49 100644 --- a/.github/workflows/commit_artifacts.yml +++ b/.github/workflows/commit_artifacts.yml @@ -17,7 +17,7 @@ jobs: current_version_modern: ${{ steps.get_current_version.outputs.current_version_modern }} current_version_rn: ${{ steps.get_current_version.outputs.current_version_rn }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: ref: builds/facebook-www - name: "Get last version string for www" @@ -30,7 +30,7 @@ jobs: echo "Last modern version is $VERSION_MODERN" echo "last_version_classic=$VERSION_CLASSIC" >> "$GITHUB_OUTPUT" echo "last_version_modern=$VERSION_MODERN" >> "$GITHUB_OUTPUT" - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: ref: builds/facebook-fbsource - name: "Get last version string for rn" @@ -40,14 +40,14 @@ jobs: VERSION_NATIVE_FB=$( [ -f ./compiled-rn/VERSION_NATIVE_FB ] && cat ./compiled-rn/VERSION_NATIVE_FB || echo '' ) echo "Last rn version is $VERSION_NATIVE_FB" echo "last_version_rn=$VERSION_NATIVE_FB" >> "$GITHUB_OUTPUT" - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - name: "Check branches" id: check_branches run: | echo "www_branch_count=$(git ls-remote --heads origin "refs/heads/meta-www" | wc -l)" >> "$GITHUB_OUTPUT" echo "fbsource_branch_count=$(git ls-remote --heads origin "refs/heads/meta-fbsource" | wc -l)" >> "$GITHUB_OUTPUT" - name: Download and unzip artifacts - uses: actions/github-script@v6 + uses: actions/github-script@00f12e3e20659f42342b1c0226afda7f7c042325 # v6 env: CIRCLECI_TOKEN: ${{secrets.CIRCLECI_TOKEN_DIFFTRAIN}} with: @@ -211,11 +211,11 @@ jobs: echo "current_version_classic=$VERSION_CLASSIC" >> "$GITHUB_OUTPUT" echo "current_version_modern=$VERSION_MODERN" >> "$GITHUB_OUTPUT" echo "current_version_rn=$VERSION_NATIVE_FB" >> "$GITHUB_OUTPUT" - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3 with: name: compiled path: compiled/ - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3 with: name: compiled-rn path: compiled-rn/ @@ -225,12 +225,12 @@ jobs: if: ${{ (github.ref == 'refs/heads/main' && needs.download_artifacts.outputs.www_branch_count == '0') || github.ref == 'refs/heads/meta-www' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: ref: builds/facebook-www - name: Ensure clean directory run: rm -rf compiled - - uses: actions/download-artifact@v3 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3 with: name: compiled path: compiled/ @@ -292,7 +292,7 @@ jobs: git status -u - name: Commit changes to branch if: steps.check_should_commit.outputs.should_commit == 'true' - uses: stefanzweifel/git-auto-commit-action@v4 + uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a # v4 with: commit_message: | ${{ github.event.head_commit.message }} @@ -308,12 +308,12 @@ jobs: if: ${{ (github.ref == 'refs/heads/main' && needs.download_artifacts.outputs.fbsource_branch_count == '0') || github.ref == 'refs/heads/meta-fbsource' }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 with: ref: builds/facebook-fbsource - name: Ensure clean directory run: rm -rf compiled-rn - - uses: actions/download-artifact@v3 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3 with: name: compiled-rn path: compiled-rn/ @@ -362,7 +362,7 @@ jobs: git add . - name: Signing files if: steps.check_should_commit.outputs.should_commit == 'true' - uses: actions/github-script@v6 + uses: actions/github-script@00f12e3e20659f42342b1c0226afda7f7c042325 # v6 with: script: | // TODO: Move this to a script file. @@ -450,7 +450,7 @@ jobs: git status - name: Commit changes to branch if: steps.check_should_commit.outputs.should_commit == 'true' - uses: stefanzweifel/git-auto-commit-action@v4 + uses: stefanzweifel/git-auto-commit-action@3ea6ae190baf489ba007f7c92608f33ce20ef04a # v4 with: commit_message: | ${{ github.event.head_commit.message }} diff --git a/.github/workflows/compiler-playground.yml b/.github/workflows/compiler-playground.yml index 5d97a2bff4cef..a9ded26e308e2 100644 --- a/.github/workflows/compiler-playground.yml +++ b/.github/workflows/compiler-playground.yml @@ -17,14 +17,14 @@ jobs: name: Test playground runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18.x cache: "yarn" cache-dependency-path: compiler/yarn.lock - name: Restore cached node_modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 id: node_modules with: path: "**/node_modules" diff --git a/.github/workflows/compiler-rust.yml b/.github/workflows/compiler-rust.yml index e492de11e0e33..0564b4dd744df 100644 --- a/.github/workflows/compiler-rust.yml +++ b/.github/workflows/compiler-rust.yml @@ -38,8 +38,8 @@ jobs: # os: windows-latest runs-on: ${{ matrix.target.os }} steps: - - uses: actions/checkout@v4 - - uses: Swatinem/rust-cache@v2 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: Swatinem/rust-cache@11d1987849787746b1ba13dcbb74080ec08e5947 # v2 - name: cargo test run: cargo test --manifest-path=Cargo.toml --locked ${{ matrix.target.features && '--features' }} ${{ matrix.target.features }} @@ -47,15 +47,15 @@ jobs: name: Rust Lint runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions-rs/toolchain@v1 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: actions-rs/toolchain@63eb9591781c46a70274cb3ebdf190fce92702e8 # v1 with: # NOTE: use `rustup run ` in commands below # with this exact same toolchain value toolchain: nightly-2023-08-01 override: true components: rustfmt, clippy - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@11d1987849787746b1ba13dcbb74080ec08e5947 # v2 - name: rustfmt run: grep -r --include "*.rs" --files-without-match "@generated" crates | xargs rustup run nightly-2023-08-01 rustfmt --check --config="skip_children=true" # - name: cargo clippy @@ -66,7 +66,7 @@ jobs: runs-on: ubuntu-latest # TODO: build on more platforms, deploy, etc steps: - - uses: actions/checkout@v4 - - uses: Swatinem/rust-cache@v2 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: Swatinem/rust-cache@11d1987849787746b1ba13dcbb74080ec08e5947 # v2 - name: cargo build run: cargo build --release diff --git a/.github/workflows/compiler-typescript.yml b/.github/workflows/compiler-typescript.yml index 4b4a668c724e1..e169266787e1d 100644 --- a/.github/workflows/compiler-typescript.yml +++ b/.github/workflows/compiler-typescript.yml @@ -19,7 +19,7 @@ jobs: outputs: matrix: ${{ steps.set-matrix.outputs.matrix }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 - id: set-matrix run: echo "matrix=$(find packages -mindepth 1 -maxdepth 1 -type d | sed 's!packages/!!g' | tr '\n' ',' | sed s/.$// | jq -Rsc '. / "," - [""]')" >> $GITHUB_OUTPUT @@ -28,14 +28,14 @@ jobs: name: Run prettier runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18.x cache: "yarn" cache-dependency-path: compiler/yarn.lock - name: Restore cached node_modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: "**/node_modules" key: ${{ runner.arch }}-${{ runner.os }}-modules-${{ hashFiles('compiler/**/yarn.lock') }} @@ -47,14 +47,14 @@ jobs: name: Lint babel-plugin-react-compiler runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18.x cache: "yarn" cache-dependency-path: compiler/yarn.lock - name: Restore cached node_modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 with: path: "**/node_modules" key: ${{ runner.arch }}-${{ runner.os }}-modules-${{ hashFiles('compiler/**/yarn.lock') }} @@ -66,14 +66,14 @@ jobs: name: Jest babel-plugin-react-compiler runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18.x cache: "yarn" cache-dependency-path: compiler/yarn.lock - name: Restore cached node_modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 id: node_modules with: path: "**/node_modules" @@ -90,14 +90,14 @@ jobs: matrix: workspace_name: ${{ fromJSON(needs.discover_yarn_workspaces.outputs.matrix) }} steps: - - uses: actions/checkout@v4 - - uses: actions/setup-node@v4 + - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version: 18.x cache: "yarn" cache-dependency-path: compiler/yarn.lock - name: Restore cached node_modules - uses: actions/cache@v4 + uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4 id: node_modules with: path: "**/node_modules" diff --git a/.github/workflows/devtools_check_repro.yml b/.github/workflows/devtools_check_repro.yml index e0335e905939e..747ff61038649 100644 --- a/.github/workflows/devtools_check_repro.yml +++ b/.github/workflows/devtools_check_repro.yml @@ -9,7 +9,7 @@ jobs: check-repro: runs-on: ubuntu-latest steps: - - uses: actions/github-script@v3 + - uses: actions/github-script@ffc2c79a5b2490bd33e0a41c1de74b877714d736 # v3 with: github-token: ${{ secrets.GITHUB_TOKEN }} script: | diff --git a/.github/workflows/fuzz_tests.yml b/.github/workflows/fuzz_tests.yml index 492dd7dc4c81d..1038233d6d755 100644 --- a/.github/workflows/fuzz_tests.yml +++ b/.github/workflows/fuzz_tests.yml @@ -16,8 +16,8 @@ jobs: env: TZ: "/usr/share/zoneinfo/America/Los_Angeles" steps: - - uses: actions/checkout@v4.1.0 - - uses: actions/setup-node@v4 + - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0 + - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4 with: node-version-file: '.nvmrc' cache: 'yarn' diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml index 86928739a4ea4..d3243db576e00 100644 --- a/.github/workflows/stale.yml +++ b/.github/workflows/stale.yml @@ -9,7 +9,7 @@ jobs: stale: runs-on: ubuntu-latest steps: - - uses: actions/stale@v9 + - uses: actions/stale@28ca1036281a5e5922ead5184a1bbf96e5fc984e # v9 with: # --- Issues & PRs --- # Number of days of inactivity before an issue or PR becomes stale