From 677c04c421d356feecc886b451c332aeb3f58aad Mon Sep 17 00:00:00 2001 From: Boris Grozev Date: Wed, 15 Apr 2026 16:56:38 -0500 Subject: [PATCH] Pin GitHub Actions to SHA hashes - ci.yml: actions/checkout@v6 -> de0fac2e4500dabe0009e67214ff5f5447ce83dd - ci.yml: actions/setup-node@v6 -> 53b83947a5a98c8d113130e565377fae1a50d02f - ci.yml: actions/upload-artifact@v6 -> b7c566a772e6b6bfb58ed0dc250532a479d7789f - ci.yml: actions/checkout@v6 -> de0fac2e4500dabe0009e67214ff5f5447ce83dd - ci.yml: actions/download-artifact@v7 -> 37930b1c2abaa49bbe596cd826c3c89aef350131 - ci.yml: actions/setup-node@v6 -> 53b83947a5a98c8d113130e565377fae1a50d02f --- .github/workflows/ci.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 71a4addb..73b4c5ef 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -43,8 +43,8 @@ jobs: env: BUILD_GROUP: ${{ matrix.build-group }} steps: - - uses: actions/checkout@v6 - - uses: actions/setup-node@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 with: node-version: '20' architecture: ${{ matrix.arch }} @@ -55,7 +55,7 @@ jobs: - name: Prebuildify run: npm run prebuild-$BUILD_GROUP shell: bash - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6 with: name: prebuilds-${{ matrix.build-group }} path: prebuilds/ @@ -66,8 +66,8 @@ jobs: runs-on: ubuntu-latest needs: build steps: - - uses: actions/checkout@v6 - - uses: actions/download-artifact@v7 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 + - uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7 with: pattern: prebuilds-* path: prebuilds @@ -78,7 +78,7 @@ jobs: version-type: 'patch' env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - - uses: actions/setup-node@v6 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 with: node-version: '24' registry-url: 'https://registry.npmjs.org'