From c34ebefee3a3b6075a2486ba30a0a3bbe8b1df14 Mon Sep 17 00:00:00 2001 From: Niklas Zender Date: Tue, 26 May 2026 11:08:08 +0200 Subject: [PATCH 1/2] chore: update GitHub Action pins Pin listed workflow actions to current upstream default-branch SHAs. --- .github/workflows/publish.yml | 2 +- .github/workflows/python.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index ff8a5a9..c7d25a5 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -34,4 +34,4 @@ jobs: - name: Build package run: hatch build - name: Publish package distributions to PyPI - uses: pypa/gh-action-pypi-publish@release/v1 + uses: pypa/gh-action-pypi-publish@ba38be9e461d3875417946c167d0b5f3d385a247 diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index 8ea7a2c..d27439a 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -49,7 +49,7 @@ jobs: run: echo PYTHON_TARGET="py${{ matrix.python-version }}" | sed -r "s/\.//" >> $GITHUB_ENV - name: Lint - uses: chartboost/ruff-action@491342200cdd1cf4d5132a30ddc546b3b5bc531b + uses: chartboost/ruff-action@1ec810db51b3ebdd902c812e962d2f7aafe85fcf with: args: check --target-version ${{ env.PYTHON_TARGET }} @@ -57,7 +57,7 @@ jobs: run: hatch test -p -c - name: Codecov - Upload coverage - uses: codecov/codecov-action@v4 + uses: codecov/codecov-action@ca0a928a4cb3911011e868128a5cd90437c12db1 with: token: ${{secrets.CODECOV_TOKEN}} files: "lcov.info" From 6826944cfa379f5aa7dff711911572390ef62e68 Mon Sep 17 00:00:00 2001 From: Niklas Zender Date: Tue, 26 May 2026 11:38:36 +0200 Subject: [PATCH 2/2] chore: update GitHub Action pins Pin all external workflow actions to current upstream default-branch SHAs. --- .github/workflows/publish.yml | 2 +- .github/workflows/python.yml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index c7d25a5..08890f5 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -23,7 +23,7 @@ jobs: steps: - uses: actions/checkout@v3 - name: Set up Python - uses: actions/setup-python@v4 + uses: actions/setup-python@c8813ba1bc76ebf779b911ad8ffccbf2e449cb48 with: python-version: '3.11' cache: 'pip' diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml index d27439a..0809793 100644 --- a/.github/workflows/python.yml +++ b/.github/workflows/python.yml @@ -29,7 +29,7 @@ jobs: - uses: actions/checkout@v4 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v4 + uses: actions/setup-python@c8813ba1bc76ebf779b911ad8ffccbf2e449cb48 with: python-version: ${{ matrix.python-version }} cache: pip @@ -40,7 +40,7 @@ jobs: python -m pip install hatch - name: Formatting - uses: famedly/black@stable + uses: famedly/black@6af7d1109693c4ad3af08ecbc34649c232b47a6d with: options: "--check --verbose"