Skip to content

Commit 37a3bf4

Browse files
hugovkhugovk
committed
Lock GitHub Actions workflows
1 parent 0ada998 commit 37a3bf4

25 files changed

Lines changed: 248 additions & 72 deletions

‎.github/workflows/actions.lock‎

Lines changed: 161 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,161 @@
1+
# This file is machine-generated by `gh actions-lock`.
2+
# Do not edit by hand; run `gh actions-lock` to update.
3+
# Docs: https://gh.io/actions-lockfile
4+
version: 'v0.0.3'
5+
workflows:
6+
'.github/workflows/build.yml':
7+
- 'actions/cache@v6.1.0'
8+
- 'actions/checkout@v7.0.1'
9+
- 'actions/setup-python@v7.0.0'
10+
- 'actions/upload-artifact@v7.0.1'
11+
- 're-actors/alls-green@v1.3.0'
12+
'.github/workflows/cache-cleanup-codeql.yml': []
13+
'.github/workflows/jit.yml':
14+
- 'actions/checkout@v7.0.1'
15+
- 'actions/setup-python@v7.0.0'
16+
'.github/workflows/lint.yml':
17+
- 'actions/checkout@v7.0.1'
18+
- 'j178/prek-action@v3.0.0'
19+
'.github/workflows/mypy.yml':
20+
- 'actions/checkout@v7.0.1'
21+
- 'astral-sh/setup-uv@v10.2.0'
22+
'.github/workflows/new-bugs-announce-notifier.yml':
23+
- 'actions/github-script@v9.0.0'
24+
- 'actions/setup-node@v7.0.0'
25+
'.github/workflows/require-pr-label.yml':
26+
- 'mheap/github-action-required-labels@v5.6.0'
27+
'.github/workflows/reusable-check-c-api-docs.yml':
28+
- 'actions/checkout@v7.0.1'
29+
- 'actions/setup-python@v7.0.0'
30+
'.github/workflows/reusable-check-html-ids.yml':
31+
- 'actions/checkout@v7.0.1'
32+
- 'actions/download-artifact@v8.0.1'
33+
- 'actions/setup-python@v7.0.0'
34+
'.github/workflows/reusable-cifuzz.yml':
35+
- 'actions/upload-artifact@v7.0.1'
36+
- 'github/codeql-action@v4.38.2'
37+
- 'google/oss-fuzz@ed23f8af80ff82b25ca67cd9b101e690b8897b3f'
38+
'.github/workflows/reusable-context.yml':
39+
- 'actions/checkout@v7.0.1'
40+
- 'actions/setup-python@v7.0.0'
41+
'.github/workflows/reusable-docs.yml':
42+
- 'actions/cache@v6.1.0'
43+
- 'actions/checkout@v7.0.1'
44+
- 'actions/setup-python@v7.0.0'
45+
- 'actions/upload-artifact@v7.0.1'
46+
'.github/workflows/reusable-emscripten.yml':
47+
- 'actions/cache@v6.1.0'
48+
- 'actions/checkout@v7.0.1'
49+
- 'actions/setup-node@v7.0.0'
50+
- 'actions/setup-python@v7.0.0'
51+
'.github/workflows/reusable-install.yml':
52+
- 'actions/checkout@v7.0.1'
53+
'.github/workflows/reusable-macos.yml':
54+
- 'actions/checkout@v7.0.1'
55+
'.github/workflows/reusable-san.yml':
56+
- 'actions/cache@v6.1.0'
57+
- 'actions/checkout@v7.0.1'
58+
- 'actions/upload-artifact@v7.0.1'
59+
'.github/workflows/reusable-test-lazy-imports-all.yml':
60+
- 'actions/checkout@v7.0.1'
61+
'.github/workflows/reusable-ubuntu.yml':
62+
- 'actions/cache@v6.1.0'
63+
- 'actions/checkout@v7.0.1'
64+
'.github/workflows/reusable-wasi.yml':
65+
- 'actions/checkout@v7.0.1'
66+
- 'actions/setup-python@v7.0.0'
67+
- 'bytecodealliance/actions@v1.1.3'
68+
- 'bytecodealliance/setup-wasi-sdk-action@v1.0.0'
69+
'.github/workflows/reusable-windows.yml':
70+
- 'actions/checkout@v7.0.1'
71+
'.github/workflows/stale.yml':
72+
- 'actions/stale@v11.0.0'
73+
'.github/workflows/tail-call.yml':
74+
- 'actions/checkout@v7.0.1'
75+
- 'actions/setup-python@v7.0.0'
76+
'.github/workflows/verify-ensurepip-wheels.yml':
77+
- 'actions/checkout@v7.0.1'
78+
- 'actions/setup-python@v7.0.0'
79+
'.github/workflows/verify-expat.yml':
80+
- 'actions/checkout@v7.0.1'
81+
dependencies:
82+
'actions/cache@v6.1.0':
83+
ref: 'v6.1.0'
84+
commit: 'sha1-55cc8345863c7cc4c66a329aec7e433d2d1c52a9'
85+
owner_id: 44036562
86+
repo_id: 215566462
87+
'actions/checkout@v7.0.1':
88+
ref: 'v7.0.1'
89+
commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1'
90+
owner_id: 44036562
91+
repo_id: 197814629
92+
'actions/download-artifact@v8.0.1':
93+
ref: 'v8.0.1'
94+
commit: 'sha1-3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c'
95+
owner_id: 44036562
96+
repo_id: 192626254
97+
'actions/github-script@v9.0.0':
98+
ref: 'v9.0.0'
99+
commit: 'sha1-3a2844b7e9c422d3c10d287c895573f7108da1b3'
100+
owner_id: 44036562
101+
repo_id: 205262760
102+
'actions/setup-node@v7.0.0':
103+
ref: 'v7.0.0'
104+
commit: 'sha1-820762786026740c76f36085b0efc47a31fe5020'
105+
owner_id: 44036562
106+
repo_id: 189476904
107+
'actions/setup-python@v7.0.0':
108+
ref: 'v7.0.0'
109+
commit: 'sha1-5fda3b95a4ea91299a34e894583c3862153e4b97'
110+
owner_id: 44036562
111+
repo_id: 192625525
112+
'actions/stale@v11.0.0':
113+
ref: 'v11.0.0'
114+
commit: 'sha1-4391f3da665fdf50b6810c1a66712fb9ba21aa93'
115+
owner_id: 44036562
116+
repo_id: 200437066
117+
'actions/upload-artifact@v7.0.1':
118+
ref: 'v7.0.1'
119+
commit: 'sha1-043fb46d1a93c77aae656e7c1c64a875d1fc6a0a'
120+
owner_id: 44036562
121+
repo_id: 192625955
122+
'astral-sh/setup-uv@v10.2.0':
123+
ref: 'v10.2.0'
124+
commit: 'sha1-c18668ad3cf93ea998bef934396af7bb5c839dc7'
125+
owner_id: 115962839
126+
repo_id: 846733598
127+
'bytecodealliance/actions@v1.1.3':
128+
ref: 'v1.1.3'
129+
commit: 'sha1-9152e710e9f7182e4c29ad218e4f335a7b203613'
130+
owner_id: 54038801
131+
repo_id: 697422232
132+
'bytecodealliance/setup-wasi-sdk-action@v1.0.0':
133+
ref: 'v1.0.0'
134+
commit: 'sha1-77d09f3df1e8da344d8403cf8631af8977938b4c'
135+
owner_id: 54038801
136+
repo_id: 1113975359
137+
'github/codeql-action@v4.38.2':
138+
ref: 'v4.38.2'
139+
commit: 'sha1-2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2'
140+
owner_id: 9919
141+
repo_id: 259445878
142+
'google/oss-fuzz@ed23f8af80ff82b25ca67cd9b101e690b8897b3f':
143+
ref: 'master'
144+
commit: 'sha1-ed23f8af80ff82b25ca67cd9b101e690b8897b3f'
145+
owner_id: 1342004
146+
repo_id: 63809205
147+
'j178/prek-action@v3.0.0':
148+
ref: 'v3.0.0'
149+
commit: 'sha1-4e14d07f9231acabce116ccfca13b13dd9755ece'
150+
owner_id: 10510431
151+
repo_id: 1052387486
152+
'mheap/github-action-required-labels@v5.6.0':
153+
ref: 'v5.6.0'
154+
commit: 'sha1-23e10fde7e062233401931a0eece796cd9bf3177'
155+
owner_id: 59130
156+
repo_id: 272521528
157+
're-actors/alls-green@v1.3.0':
158+
ref: 'v1.3.0'
159+
commit: 'sha1-b5b5b37504aa4183270bd3d855c52a67f212be35'
160+
owner_id: 46427759
161+
repo_id: 434447646

‎.github/workflows/build.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464
run: |
6565
apt update && apt install git -yq
6666
git config --global --add safe.directory "$GITHUB_WORKSPACE"
67-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
67+
- uses: actions/checkout@v7.0.1
6868
with:
6969
fetch-depth: 1
7070
persist-credentials: false
@@ -101,10 +101,10 @@ jobs:
101101
needs: build-context
102102
if: needs.build-context.outputs.run-tests == 'true'
103103
steps:
104-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
104+
- uses: actions/checkout@v7.0.1
105105
with:
106106
persist-credentials: false
107-
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
107+
- uses: actions/setup-python@v7.0.0
108108
with:
109109
python-version: '3.x'
110110
- name: Runner image version
@@ -280,7 +280,7 @@ jobs:
280280
SSLLIB_DIR: ${{ github.workspace }}/multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}
281281
LD_LIBRARY_PATH: ${{ github.workspace }}/multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}/lib
282282
steps:
283-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
283+
- uses: actions/checkout@v7.0.1
284284
with:
285285
persist-credentials: false
286286
- name: Runner image version
@@ -291,7 +291,7 @@ jobs:
291291
run: sudo ./.github/workflows/posix-deps-apt.sh
292292
- name: 'Restore SSL library build'
293293
id: cache-ssl-lib
294-
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
294+
uses: actions/cache@v6.1.0
295295
with:
296296
path: ./multissl/${{ matrix.ssllib.name }}/${{ matrix.ssllib.version }}
297297
key: ${{ matrix.os }}-multissl-${{ matrix.ssllib.name }}-${{ matrix.ssllib.version }}
@@ -339,7 +339,7 @@ jobs:
339339

340340
runs-on: ${{ matrix.runs-on }}
341341
steps:
342-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
342+
- uses: actions/checkout@v7.0.1
343343
with:
344344
persist-credentials: false
345345
- name: Build and test
@@ -360,7 +360,7 @@ jobs:
360360
- false
361361
- true
362362
steps:
363-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
363+
- uses: actions/checkout@v7.0.1
364364
with:
365365
persist-credentials: false
366366

@@ -391,7 +391,7 @@ jobs:
391391
OPENSSL_VER: 3.5.9
392392
PYTHONSTRICTEXTENSIONBUILD: 1
393393
steps:
394-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
394+
- uses: actions/checkout@v7.0.1
395395
with:
396396
persist-credentials: false
397397
- name: Register gcc problem matcher
@@ -405,7 +405,7 @@ jobs:
405405
echo "LD_LIBRARY_PATH=${GITHUB_WORKSPACE}/multissl/openssl/${OPENSSL_VER}/lib" >> "$GITHUB_ENV"
406406
- name: 'Restore OpenSSL build'
407407
id: cache-openssl
408-
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
408+
uses: actions/cache@v6.1.0
409409
with:
410410
path: ./multissl/openssl/${{ env.OPENSSL_VER }}
411411
key: ${{ runner.os }}-multissl-openssl-${{ env.OPENSSL_VER }}
@@ -452,7 +452,7 @@ jobs:
452452
./python -m venv "$VENV_LOC" && "$VENV_PYTHON" -m pip install -r "${GITHUB_WORKSPACE}/Tools/requirements-hypothesis.txt"
453453
- name: 'Restore Hypothesis database'
454454
id: cache-hypothesis-database
455-
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
455+
uses: actions/cache@v6.1.0
456456
with:
457457
path: ${{ env.CPYTHON_BUILDDIR }}/.hypothesis/
458458
key: hypothesis-database-${{ github.head_ref || github.run_id }}
@@ -479,7 +479,7 @@ jobs:
479479
-x test_subprocess \
480480
-x test_signal \
481481
-x test_sysconfig
482-
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
482+
- uses: actions/upload-artifact@v7.0.1
483483
if: always()
484484
with:
485485
name: hypothesis-example-db
@@ -528,7 +528,7 @@ jobs:
528528
needs: build-context
529529
if: needs.build-context.outputs.run-ubuntu == 'true'
530530
steps:
531-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
531+
- uses: actions/checkout@v7.0.1
532532
with:
533533
persist-credentials: false
534534
- name: Runner image version
@@ -630,7 +630,7 @@ jobs:
630630

631631
steps:
632632
- name: Check whether the needed jobs succeeded or failed
633-
uses: re-actors/alls-green@b5b5b37504aa4183270bd3d855c52a67f212be35
633+
uses: re-actors/alls-green@v1.3.0
634634
with:
635635
allowed-failures: >-
636636
build-android,

‎.github/workflows/jit.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,7 @@ jobs:
3232
runs-on: ubuntu-26.04
3333
timeout-minutes: 60
3434
steps:
35-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
35+
- uses: actions/checkout@v7.0.1
3636
with:
3737
persist-credentials: false
3838
- name: Install dependencies
@@ -72,10 +72,10 @@ jobs:
7272
architecture: ARM64
7373
runner: windows-11-arm
7474
steps:
75-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
75+
- uses: actions/checkout@v7.0.1
7676
with:
7777
persist-credentials: false
78-
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
78+
- uses: actions/setup-python@v7.0.0
7979
with:
8080
python-version: '3.11'
8181
# PCbuild downloads LLVM automatically:
@@ -98,10 +98,10 @@ jobs:
9898
- true
9999
- false
100100
steps:
101-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
101+
- uses: actions/checkout@v7.0.1
102102
with:
103103
persist-credentials: false
104-
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
104+
- uses: actions/setup-python@v7.0.0
105105
with:
106106
python-version: '3.11'
107107
- name: Install LLVM
@@ -141,10 +141,10 @@ jobs:
141141
- target: aarch64-unknown-linux-gnu/gcc
142142
runner: ubuntu-26.04-arm
143143
steps:
144-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
144+
- uses: actions/checkout@v7.0.1
145145
with:
146146
persist-credentials: false
147-
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
147+
- uses: actions/setup-python@v7.0.0
148148
with:
149149
python-version: '3.11'
150150
- name: Install dependencies
@@ -182,10 +182,10 @@ jobs:
182182
use_clang: true
183183
run_tests: false
184184
steps:
185-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
185+
- uses: actions/checkout@v7.0.1
186186
with:
187187
persist-credentials: false
188-
- uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0
188+
- uses: actions/setup-python@v7.0.0
189189
with:
190190
python-version: '3.11'
191191
- name: Install dependencies

‎.github/workflows/lint.yml‎

Lines changed: 17 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,22 @@ jobs:
1919
timeout-minutes: 10
2020

2121
steps:
22-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
22+
- uses: actions/checkout@v7.0.1
2323
with:
2424
persist-credentials: false
25-
- uses: j178/prek-action@4e14d07f9231acabce116ccfca13b13dd9755ece # v3.0.0
25+
- uses: j178/prek-action@v3.0.0
26+
27+
# Fails when .github/workflows/actions.lock is out of sync with the
28+
# workflows or a locked pin no longer verifies upstream.
29+
lockfile:
30+
runs-on: ubuntu-slim
31+
timeout-minutes: 10
32+
env:
33+
GH_TOKEN: ${{ github.token }}
34+
35+
steps:
36+
- uses: actions/checkout@v7.0.1
37+
with:
38+
persist-credentials: false
39+
- run: gh extension install github/gh-actions-lock --pin v0.4.1
40+
- run: gh actions-lock --verify

‎.github/workflows/mypy.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -66,10 +66,10 @@ jobs:
6666
"Tools/peg_generator",
6767
]
6868
steps:
69-
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
69+
- uses: actions/checkout@v7.0.1
7070
with:
7171
persist-credentials: false
72-
- uses: astral-sh/setup-uv@c18668ad3cf93ea998bef934396af7bb5c839dc7 # v10.2.0
72+
- uses: astral-sh/setup-uv@v10.2.0
7373
with:
7474
python-version: "3.15"
7575
activate-environment: true

‎.github/workflows/new-bugs-announce-notifier.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,12 +15,12 @@ jobs:
1515
issues: read
1616
timeout-minutes: 10
1717
steps:
18-
- uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
18+
- uses: actions/setup-node@v7.0.0
1919
with:
2020
node-version: 20
2121
- run: npm install mailgun.js form-data
2222
- name: Send notification
23-
uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
23+
uses: actions/github-script@v9.0.0
2424
env:
2525
MAILGUN_API_KEY: ${{ secrets.MAILGUN_PYTHON_ORG_MAILGUN_KEY }}
2626
with:

0 commit comments

Comments
 (0)