From 5cbb32acf9bb2e2c77f347d157bfe1e37e1342f6 Mon Sep 17 00:00:00 2001 From: Niklas Zender Date: Tue, 26 May 2026 11:07:55 +0200 Subject: [PATCH 1/2] chore: update GitHub Action pins Pin listed workflow actions to current upstream default-branch SHAs. --- .github/workflows/publish.yml | 2 +- .github/workflows/python.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 43fa7a05..2da3c5b6 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -34,4 +34,4 @@ jobs: - name: Build package run: hatch build - name: Publish package distributions to PyPI - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 22084a36..18465eed 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -59,7 +59,7 @@ jobs: run: echo PYTHON_TARGET="py${{ matrix.python-version }}" | sed -r "s/\.//" >> $GITHUB_ENV - name: Lint - uses: chartboost/ruff-action@491342200cdd1cf4d5132a30ddc546b3b5bc531b + uses: chartboost/ruff-action@1ec810db51b3ebdd902c812e962d2f7aafe85fcf with: args: check --target-version ${{ env.PYTHON_TARGET }} @@ -76,7 +76,7 @@ jobs: SYNAPSE_POSTGRES: ${{ matrix.database == 'postgres' || ''}} - name: Codecov - Upload coverage - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@ca0a928a4cb3911011e868128a5cd90437c12db1 with: token: ${{secrets.CODECOV_TOKEN}} files: "lcov.info" From 1b9c4d49fa9b30166b530fc5addbcbd34ae362ce Mon Sep 17 00:00:00 2001 From: Niklas Zender Date: Tue, 26 May 2026 11:38:19 +0200 Subject: [PATCH 2/2] chore: update GitHub Action pins Pin all external workflow actions to current upstream default-branch SHAs. --- .github/workflows/publish.yml | 2 +- .github/workflows/python.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 2da3c5b6..3fda7b15 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -23,7 +23,7 @@ jobs: steps: - uses: actions/checkout@v3 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@c8813ba1bc76ebf779b911ad8ffccbf2e449cb48 with: python-version: "3.11" cache: "pip" diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 18465eed..a2e7f7cd 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -30,7 +30,7 @@ jobs: - name: Set up Python ${{ matrix.python-version }} id: setup-python - uses: actions/setup-python@v4 + uses: actions/setup-python@c8813ba1bc76ebf779b911ad8ffccbf2e449cb48 with: python-version: ${{ matrix.python-version }} cache: pip