Skip to content

Commit b6b3335

Browse files
ci(tools): pin dependencies (#114)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent 104e598 commit b6b3335

22 files changed

+80
-80
lines changed

.github/workflows/automerge.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ jobs:
2020

2121
steps:
2222
- name: Generate token
23-
uses: tibdex/github-app-token@v2
23+
uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2
2424
with:
2525
app_id: ${{ secrets.TOKEN_EXCHANGE_APP }}
2626
installation_retrieval_mode: id
@@ -30,7 +30,7 @@ jobs:
3030
{"contents": "write", "pull_requests": "write", "issues": "write"}
3131
3232
- name: Fetch metadata
33-
uses: dependabot/fetch-metadata@v2
33+
uses: dependabot/fetch-metadata@08eff52bf64351f401fb50d4972fa95b9f2c2d1b # v2
3434
with:
3535
github-token: ${{ secrets.GITHUB_TOKEN }}
3636

.github/workflows/docker.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -35,11 +35,11 @@ jobs:
3535

3636
steps:
3737
- name: Checkout source
38-
uses: actions/checkout@v5
38+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
3939

4040
- name: Docker meta
4141
id: meta
42-
uses: docker/metadata-action@v5
42+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
4343
with:
4444
github-token: ${{ secrets.GITHUB_TOKEN }}
4545
images: |
@@ -51,37 +51,37 @@ jobs:
5151
maintainer=Thomas Boerger <thomas@webhippie.de>
5252
5353
- name: Setup QEMU
54-
uses: docker/setup-qemu-action@v3
54+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
5555

5656
- name: Setup Buildx
5757
id: buildx
58-
uses: docker/setup-buildx-action@v3
58+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
5959

6060
- name: Hub login
61-
uses: docker/login-action@v3
61+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
6262
if: github.event_name != 'pull_request'
6363
with:
6464
username: ${{ secrets.DOCKER_USERNAME }}
6565
password: ${{ secrets.DOCKER_PASSWORD }}
6666

6767
- name: Quay login
68-
uses: docker/login-action@v3
68+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
6969
if: github.event_name != 'pull_request'
7070
with:
7171
registry: quay.io
7272
username: ${{ secrets.QUAY_USERNAME }}
7373
password: ${{ secrets.QUAY_PASSWORD }}
7474

7575
- name: Ghcr login
76-
uses: docker/login-action@v3
76+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
7777
if: github.event_name != 'pull_request'
7878
with:
7979
registry: ghcr.io
8080
username: ${{ github.actor }}
8181
password: ${{ secrets.GITHUB_TOKEN }}
8282

8383
- name: Build image
84-
uses: docker/build-push-action@v6
84+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
8585
with:
8686
builder: ${{ steps.buildx.outputs.name }}
8787
context: latest/
@@ -104,10 +104,10 @@ jobs:
104104

105105
steps:
106106
- name: Checkout source
107-
uses: actions/checkout@v5
107+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
108108

109109
- name: Hub manifest
110-
uses: actionhippie/manifest@v1
110+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
111111
with:
112112
username: ${{ secrets.DOCKER_USERNAME }}
113113
password: ${{ secrets.DOCKER_PASSWORD }}
@@ -117,7 +117,7 @@ jobs:
117117
ignore_missing: true
118118

119119
- name: Quay manifest
120-
uses: actionhippie/manifest@v1
120+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
121121
with:
122122
username: ${{ secrets.QUAY_USERNAME }}
123123
password: ${{ secrets.QUAY_PASSWORD }}
@@ -127,7 +127,7 @@ jobs:
127127
ignore_missing: true
128128

129129
- name: Ghcr manifest
130-
uses: actionhippie/manifest@v1
130+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
131131
with:
132132
username: ${{ github.actor }}
133133
password: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/readme.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,10 +14,10 @@ jobs:
1414

1515
steps:
1616
- name: Checkout source
17-
uses: actions/checkout@v5
17+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
1818

1919
- name: Hub readme
20-
uses: actionhippie/pushrm@v1
20+
uses: actionhippie/pushrm@d4137e5e7261e06ddc57e0efece0fb4f589abb0a # v1
2121
with:
2222
provider: dockerhub
2323
target: webhippie/python
@@ -27,7 +27,7 @@ jobs:
2727
readme: README.md
2828

2929
- name: Quay readme
30-
uses: actionhippie/pushrm@v1
30+
uses: actionhippie/pushrm@d4137e5e7261e06ddc57e0efece0fb4f589abb0a # v1
3131
with:
3232
provider: quay
3333
target: quay.io/webhippie/python

.github/workflows/v3.10.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,11 @@ jobs:
3838

3939
steps:
4040
- name: Checkout source
41-
uses: actions/checkout@v5
41+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
4242

4343
- name: Docker meta
4444
id: meta
45-
uses: docker/metadata-action@v5
45+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
4646
with:
4747
github-token: ${{ secrets.GITHUB_TOKEN }}
4848
images: |
@@ -54,37 +54,37 @@ jobs:
5454
maintainer=Thomas Boerger <thomas@webhippie.de>
5555
5656
- name: Setup QEMU
57-
uses: docker/setup-qemu-action@v3
57+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
5858

5959
- name: Setup Buildx
6060
id: buildx
61-
uses: docker/setup-buildx-action@v3
61+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
6262

6363
- name: Hub login
64-
uses: docker/login-action@v3
64+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
6565
if: github.event_name != 'pull_request'
6666
with:
6767
username: ${{ secrets.DOCKER_USERNAME }}
6868
password: ${{ secrets.DOCKER_PASSWORD }}
6969

7070
- name: Quay login
71-
uses: docker/login-action@v3
71+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
7272
if: github.event_name != 'pull_request'
7373
with:
7474
registry: quay.io
7575
username: ${{ secrets.QUAY_USERNAME }}
7676
password: ${{ secrets.QUAY_PASSWORD }}
7777

7878
- name: Ghcr login
79-
uses: docker/login-action@v3
79+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
8080
if: github.event_name != 'pull_request'
8181
with:
8282
registry: ghcr.io
8383
username: ${{ github.actor }}
8484
password: ${{ secrets.GITHUB_TOKEN }}
8585

8686
- name: Build image
87-
uses: docker/build-push-action@v6
87+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
8888
with:
8989
builder: ${{ steps.buildx.outputs.name }}
9090
context: v3.10/
@@ -107,10 +107,10 @@ jobs:
107107

108108
steps:
109109
- name: Checkout source
110-
uses: actions/checkout@v5
110+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
111111

112112
- name: Hub manifest
113-
uses: actionhippie/manifest@v1
113+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
114114
with:
115115
username: ${{ secrets.DOCKER_USERNAME }}
116116
password: ${{ secrets.DOCKER_PASSWORD }}
@@ -120,7 +120,7 @@ jobs:
120120
ignore_missing: true
121121

122122
- name: Quay manifest
123-
uses: actionhippie/manifest@v1
123+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
124124
with:
125125
username: ${{ secrets.QUAY_USERNAME }}
126126
password: ${{ secrets.QUAY_PASSWORD }}
@@ -130,7 +130,7 @@ jobs:
130130
ignore_missing: true
131131

132132
- name: Ghcr manifest
133-
uses: actionhippie/manifest@v1
133+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
134134
with:
135135
username: ${{ github.actor }}
136136
password: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/v3.11.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,11 @@ jobs:
3838

3939
steps:
4040
- name: Checkout source
41-
uses: actions/checkout@v5
41+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
4242

4343
- name: Docker meta
4444
id: meta
45-
uses: docker/metadata-action@v5
45+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
4646
with:
4747
github-token: ${{ secrets.GITHUB_TOKEN }}
4848
images: |
@@ -54,37 +54,37 @@ jobs:
5454
maintainer=Thomas Boerger <thomas@webhippie.de>
5555
5656
- name: Setup QEMU
57-
uses: docker/setup-qemu-action@v3
57+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
5858

5959
- name: Setup Buildx
6060
id: buildx
61-
uses: docker/setup-buildx-action@v3
61+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
6262

6363
- name: Hub login
64-
uses: docker/login-action@v3
64+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
6565
if: github.event_name != 'pull_request'
6666
with:
6767
username: ${{ secrets.DOCKER_USERNAME }}
6868
password: ${{ secrets.DOCKER_PASSWORD }}
6969

7070
- name: Quay login
71-
uses: docker/login-action@v3
71+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
7272
if: github.event_name != 'pull_request'
7373
with:
7474
registry: quay.io
7575
username: ${{ secrets.QUAY_USERNAME }}
7676
password: ${{ secrets.QUAY_PASSWORD }}
7777

7878
- name: Ghcr login
79-
uses: docker/login-action@v3
79+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
8080
if: github.event_name != 'pull_request'
8181
with:
8282
registry: ghcr.io
8383
username: ${{ github.actor }}
8484
password: ${{ secrets.GITHUB_TOKEN }}
8585

8686
- name: Build image
87-
uses: docker/build-push-action@v6
87+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
8888
with:
8989
builder: ${{ steps.buildx.outputs.name }}
9090
context: v3.11/
@@ -107,10 +107,10 @@ jobs:
107107

108108
steps:
109109
- name: Checkout source
110-
uses: actions/checkout@v5
110+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
111111

112112
- name: Hub manifest
113-
uses: actionhippie/manifest@v1
113+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
114114
with:
115115
username: ${{ secrets.DOCKER_USERNAME }}
116116
password: ${{ secrets.DOCKER_PASSWORD }}
@@ -120,7 +120,7 @@ jobs:
120120
ignore_missing: true
121121

122122
- name: Quay manifest
123-
uses: actionhippie/manifest@v1
123+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
124124
with:
125125
username: ${{ secrets.QUAY_USERNAME }}
126126
password: ${{ secrets.QUAY_PASSWORD }}
@@ -130,7 +130,7 @@ jobs:
130130
ignore_missing: true
131131

132132
- name: Ghcr manifest
133-
uses: actionhippie/manifest@v1
133+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
134134
with:
135135
username: ${{ github.actor }}
136136
password: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/v3.12.yml

Lines changed: 12 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -38,11 +38,11 @@ jobs:
3838

3939
steps:
4040
- name: Checkout source
41-
uses: actions/checkout@v5
41+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
4242

4343
- name: Docker meta
4444
id: meta
45-
uses: docker/metadata-action@v5
45+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
4646
with:
4747
github-token: ${{ secrets.GITHUB_TOKEN }}
4848
images: |
@@ -54,37 +54,37 @@ jobs:
5454
maintainer=Thomas Boerger <thomas@webhippie.de>
5555
5656
- name: Setup QEMU
57-
uses: docker/setup-qemu-action@v3
57+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
5858

5959
- name: Setup Buildx
6060
id: buildx
61-
uses: docker/setup-buildx-action@v3
61+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
6262

6363
- name: Hub login
64-
uses: docker/login-action@v3
64+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
6565
if: github.event_name != 'pull_request'
6666
with:
6767
username: ${{ secrets.DOCKER_USERNAME }}
6868
password: ${{ secrets.DOCKER_PASSWORD }}
6969

7070
- name: Quay login
71-
uses: docker/login-action@v3
71+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
7272
if: github.event_name != 'pull_request'
7373
with:
7474
registry: quay.io
7575
username: ${{ secrets.QUAY_USERNAME }}
7676
password: ${{ secrets.QUAY_PASSWORD }}
7777

7878
- name: Ghcr login
79-
uses: docker/login-action@v3
79+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3
8080
if: github.event_name != 'pull_request'
8181
with:
8282
registry: ghcr.io
8383
username: ${{ github.actor }}
8484
password: ${{ secrets.GITHUB_TOKEN }}
8585

8686
- name: Build image
87-
uses: docker/build-push-action@v6
87+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
8888
with:
8989
builder: ${{ steps.buildx.outputs.name }}
9090
context: v3.12/
@@ -107,10 +107,10 @@ jobs:
107107

108108
steps:
109109
- name: Checkout source
110-
uses: actions/checkout@v5
110+
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
111111

112112
- name: Hub manifest
113-
uses: actionhippie/manifest@v1
113+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
114114
with:
115115
username: ${{ secrets.DOCKER_USERNAME }}
116116
password: ${{ secrets.DOCKER_PASSWORD }}
@@ -120,7 +120,7 @@ jobs:
120120
ignore_missing: true
121121

122122
- name: Quay manifest
123-
uses: actionhippie/manifest@v1
123+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
124124
with:
125125
username: ${{ secrets.QUAY_USERNAME }}
126126
password: ${{ secrets.QUAY_PASSWORD }}
@@ -130,7 +130,7 @@ jobs:
130130
ignore_missing: true
131131

132132
- name: Ghcr manifest
133-
uses: actionhippie/manifest@v1
133+
uses: actionhippie/manifest@6e645218a2939c5ec0f239ed80e5b7ff903b9cc2 # v1
134134
with:
135135
username: ${{ github.actor }}
136136
password: ${{ secrets.GITHUB_TOKEN }}

0 commit comments

Comments
 (0)