From 92a374340da94e99346763846780227fcde8f5b6 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Wed, 17 Aug 2022 17:22:21 +0000 Subject: [PATCH] Pin dependencies --- .github/workflows/automation.yml | 2 +- .github/workflows/codeql-analysis.yml | 8 ++++---- .github/workflows/commands.yml | 6 +++--- .github/workflows/lint.yml | 22 +++++++++++----------- .github/workflows/repo-stale.yaml | 2 +- 5 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/automation.yml b/.github/workflows/automation.yml index 937300307d..57e5c15379 100644 --- a/.github/workflows/automation.yml +++ b/.github/workflows/automation.yml @@ -14,7 +14,7 @@ jobs: runs-on: ubuntu-latest if: ${{ github.repository == 'jellyfin/jellyfin-web' }} steps: - - uses: eps1lon/actions-label-merge-conflict@v2.0.1 + - uses: eps1lon/actions-label-merge-conflict@b8bf8341285ec9a4567d4318ba474fee998a6919 # tag=v2.0.1 with: dirtyLabel: 'merge conflict' repoToken: ${{ secrets.JF_BOT_TOKEN }} diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index c74a108ee4..b71b37ea87 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -19,13 +19,13 @@ jobs: language: [ 'javascript' ] steps: - name: Checkout repository - uses: actions/checkout@v3 + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3 - name: Initialize CodeQL - uses: github/codeql-action/init@v2 + uses: github/codeql-action/init@2ca79b6fa8d3ec278944088b4aa5f46912db5d63 # tag=v2 with: languages: ${{ matrix.language }} queries: +security-extended - name: Autobuild - uses: github/codeql-action/autobuild@v2 + uses: github/codeql-action/autobuild@2ca79b6fa8d3ec278944088b4aa5f46912db5d63 # tag=v2 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v2 + uses: github/codeql-action/analyze@2ca79b6fa8d3ec278944088b4aa5f46912db5d63 # tag=v2 diff --git a/.github/workflows/commands.yml b/.github/workflows/commands.yml index 5dbd106d15..12effcdfc9 100644 --- a/.github/workflows/commands.yml +++ b/.github/workflows/commands.yml @@ -12,17 +12,17 @@ jobs: runs-on: ubuntu-latest steps: - name: Notify as seen - uses: peter-evans/create-or-update-comment@v2.0.0 + uses: peter-evans/create-or-update-comment@c9fcb64660bc90ec1cc535646af190c992007c32 # tag=v2.0.0 with: token: ${{ secrets.JF_BOT_TOKEN }} comment-id: ${{ github.event.comment.id }} reactions: '+1' - name: Checkout the latest code - uses: actions/checkout@v3.0.2 + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3.0.2 with: token: ${{ secrets.JF_BOT_TOKEN }} fetch-depth: 0 - name: Automatic Rebase - uses: cirrus-actions/rebase@1.7 + uses: cirrus-actions/rebase@6e572f08c244e2f04f9beb85a943eb618218714d # tag=1.7 env: GITHUB_TOKEN: ${{ secrets.JF_BOT_TOKEN }} diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index eedae2adab..dbd6460bac 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -13,10 +13,10 @@ jobs: steps: - name: Check out Git repository - uses: actions/checkout@v3 + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3 - name: Setup node environment - uses: actions/setup-node@v3.4.1 + uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3.4.1 with: node-version: 12 check-latest: true @@ -26,7 +26,7 @@ jobs: run: echo "::set-output name=dir::$(npm config get cache)" - name: Cache node_modules - uses: actions/cache@v3.0.7 + uses: actions/cache@a7c34adf76222e77931dedbf4a45b2e4648ced19 # tag=v3.0.7 id: npm-cache with: path: ${{ steps.npm-cache-dir-path.outputs.dir }} @@ -48,10 +48,10 @@ jobs: steps: - name: Check out Git repository - uses: actions/checkout@v3 + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3 - name: Setup node environment - uses: actions/setup-node@v3.4.1 + uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3.4.1 with: node-version: 12 check-latest: true @@ -61,7 +61,7 @@ jobs: run: echo "::set-output name=dir::$(npm config get cache)" - name: Cache node_modules - uses: actions/cache@v3.0.7 + uses: actions/cache@a7c34adf76222e77931dedbf4a45b2e4648ced19 # tag=v3.0.7 id: npm-cache with: path: ${{ steps.npm-cache-dir-path.outputs.dir }} @@ -70,7 +70,7 @@ jobs: ${{ runner.os }}-npm- - name: Set up stylelint matcher - uses: xt0rted/stylelint-problem-matcher@v1 + uses: xt0rted/stylelint-problem-matcher@34db1b874c0452909f0696aedef70b723870a583 # tag=v1 - name: Install Node.js dependencies run: npm ci --no-audit @@ -86,10 +86,10 @@ jobs: steps: - name: Check out Git repository - uses: actions/checkout@v3 + uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # tag=v3 - name: Setup node environment - uses: actions/setup-node@v3.4.1 + uses: actions/setup-node@2fddd8803e2f5c9604345a0b591c3020ee971a93 # tag=v3.4.1 with: node-version: 12 check-latest: true @@ -99,7 +99,7 @@ jobs: run: echo "::set-output name=dir::$(npm config get cache)" - name: Cache node_modules - uses: actions/cache@v3.0.7 + uses: actions/cache@a7c34adf76222e77931dedbf4a45b2e4648ced19 # tag=v3.0.7 id: npm-cache with: path: ${{ steps.npm-cache-dir-path.outputs.dir }} @@ -108,7 +108,7 @@ jobs: ${{ runner.os }}-npm- - name: Set up stylelint matcher - uses: xt0rted/stylelint-problem-matcher@v1 + uses: xt0rted/stylelint-problem-matcher@34db1b874c0452909f0696aedef70b723870a583 # tag=v1 - name: Install Node.js dependencies run: npm ci --no-audit diff --git a/.github/workflows/repo-stale.yaml b/.github/workflows/repo-stale.yaml index 4074e69f92..1b492a021e 100644 --- a/.github/workflows/repo-stale.yaml +++ b/.github/workflows/repo-stale.yaml @@ -10,7 +10,7 @@ jobs: runs-on: ubuntu-latest if: ${{ contains(github.repository, 'jellyfin/') }} steps: - - uses: actions/stale@v5.1.1 + - uses: actions/stale@9c1b1c6e115ca2af09755448e0dbba24e5061cc8 # tag=v5.1.1 with: repo-token: ${{ secrets.JF_BOT_TOKEN }} days-before-stale: 120