🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
tiangolo merged 4 commits into from
Apr 16, 2026
Merged

🔒 Pin GitHub actions by commit SHA #1840

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
41ebc07
🔒 Pin GitHub actions by commit SHA
YuriiMotov Mar 30, 2026
8000a0e
retrigger checks
YuriiMotov Mar 30, 2026
f63626e
Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha
YuriiMotov Apr 3, 2026
63481ae
Pin pre-commit hook by hash
YuriiMotov Apr 3, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/add-to-project.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
name: Add to project
runs-on: ubuntu-latest
steps:
- uses: actions/add-to-project@v1.0.2
- uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
with:
project-url: https://github.com/orgs/fastapi/projects/2
github-token: ${{ secrets.PROJECTS_TOKEN }}
16 changes: 8 additions & 8 deletions .github/workflows/build-docs.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
outputs:
docs: ${{ steps.filter.outputs.docs }}
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
# For pull requests it's not necessary to checkout the code but for the main branch it is
- uses: dorny/paths-filter@v4
- uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
id: filter
with:
filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up Python
uses: actions/setup-python@v6
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version-file: ".python-version"
- name: Setup uv
uses: astral-sh/setup-uv@v7
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
with:
enable-cache: true
cache-dependency-glob: |
pyproject.toml
uv.lock
- name: Install docs extras
run: uv sync --locked --no-dev --group docs
- uses: actions/cache@v5
- uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
with:
key: mkdocs-cards-${{ github.ref }}
path: .cache
- name: Build Docs
run: uv run ./scripts/docs.py build
- uses: actions/upload-artifact@v7
- uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
with:
name: docs-site
path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Decide whether the needed jobs succeeded or failed
uses: re-actors/alls-green@release/v1
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
with:
jobs: ${{ toJSON(needs) }}
allowed-skips: build-docs
10 changes: 5 additions & 5 deletions .github/workflows/deploy-docs.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up Python
uses: actions/setup-python@v6
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version-file: ".python-version"
- name: Setup uv
uses: astral-sh/setup-uv@v7
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
with:
enable-cache: true
cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
run: |
rm -rf ./site
mkdir ./site
- uses: actions/download-artifact@v8
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
path: ./site/
pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
env:
PROJECT_NAME: sqlmodel
BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
uses: cloudflare/wrangler-action@v3
uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
with:
apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/detect-conflicts.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Check if PRs have merge conflicts
uses: eps1lon/actions-label-merge-conflict@v3
uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
with:
dirtyLabel: "conflicts"
repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/issue-manager.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- uses: tiangolo/issue-manager@0.6.0
- uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
with:
token: ${{ secrets.GITHUB_TOKEN }}
config: >
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/labeler.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
pull-requests: write
runs-on: ubuntu-latest
steps:
- uses: actions/labeler@v6
- uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
- run: echo "Done adding labels"
# Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
pull-requests: read
runs-on: ubuntu-latest
steps:
- uses: docker://agilepathway/pull-request-label-checker:latest
- uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
with:
one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
repo_token: ${{ secrets.GITHUB_TOKEN }}
6 changes: 3 additions & 3 deletions .github/workflows/latest-changes.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
latest-changes:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
with:
# To allow latest-changes to commit to the main branch
token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
# Allow debugging with tmate
- name: Setup tmate session
uses: mxschmitt/action-tmate@v3
uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
with:
limit-access-to-actor: true
- uses: tiangolo/latest-changes@0.4.1
- uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
with:
token: ${{ secrets.GITHUB_TOKEN }}
latest_changes_file: docs/release-notes.md
Expand Down
12 changes: 6 additions & 6 deletions .github/workflows/pre-commit.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
name: Checkout PR for own repo
if: env.HAS_SECRETS == 'true'
with:
Expand All@@ -30,19 +30,19 @@ jobs:
# A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
token: ${{ secrets.PRE_COMMIT }}
# pre-commit lite ci needs the default checkout configs to work
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
name: Checkout PR for fork
if: env.HAS_SECRETS == 'false'
with:
# To be able to commit it needs the head branch of the PR, the remote one
ref: ${{ github.event.pull_request.head.sha }}
fetch-depth: 0
- name: Set up Python
uses: actions/setup-python@v6
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version-file: ".python-version"
- name: Setup uv
uses: astral-sh/setup-uv@v7
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
with:
cache-dependency-glob: |
pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
git commit -m "🎨 Auto format"
git push
fi
- uses: pre-commit-ci/lite-action@v1.1.0
- uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
if: env.HAS_SECRETS == 'false'
with:
msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- name: Decide whether the needed jobs succeeded or failed
uses: re-actors/alls-green@release/v1
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
with:
jobs: ${{ toJSON(needs) }}
6 changes: 3 additions & 3 deletions .github/workflows/publish.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up Python
uses: actions/setup-python@v6
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version-file: ".python-version"
- name: Install uv
uses: astral-sh/setup-uv@v7
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
- name: Build distribution
run: uv build
- name: Publish
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/smokeshow.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
smokeshow:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: actions/setup-python@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version-file: ".python-version"
- name: Setup uv
uses: astral-sh/setup-uv@v7
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
with:
cache-dependency-glob: |
pyproject.toml
uv.lock
- run: uv sync --locked --no-dev --group github-actions
- uses: actions/download-artifact@v8
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
name: coverage-html
path: htmlcov
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/test-redistribute.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
env:
GITHUB_CONTEXT: ${{ toJson(github) }}
run: echo "$GITHUB_CONTEXT"
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up Python
uses: actions/setup-python@v6
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version-file: ".python-version"
- name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Decide whether the needed jobs succeeded or failed
uses: re-actors/alls-green@release/v1
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
with:
jobs: ${{ toJSON(needs) }}
22 changes: 11 additions & 11 deletions .github/workflows/test.yml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
UV_PYTHON: ${{ matrix.python-version }}
UV_RESOLUTION: ${{ matrix.uv-resolution }}
steps:
- uses: actions/checkout@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- name: Set up Python
uses: actions/setup-python@v6
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version: ${{ matrix.python-version }}
- name: Setup uv
uses: astral-sh/setup-uv@v7
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
with:
enable-cache: true
cache-dependency-glob: |
pyproject.toml
uv.lock
# Allow debugging with tmate
- name: Setup tmate session
uses: mxschmitt/action-tmate@v3
uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
with:
limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
- name: Store coverage files
uses: actions/upload-artifact@v7
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
with:
name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
- test
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v6
- uses: actions/setup-python@v6
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
- uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
with:
python-version-file: ".python-version"
- name: Setup uv
uses: astral-sh/setup-uv@v7
uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
with:
enable-cache: true
cache-dependency-glob: |
pyproject.toml
uv.lock
- name: Get coverage files
uses: actions/download-artifact@v8
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
with:
pattern: coverage-*
path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
- run: uv run coverage combine coverage
- run: uv run coverage html --title "Coverage for ${{ github.sha }}"
- name: Store coverage HTML
uses: actions/upload-artifact@v7
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
with:
name: coverage-html
path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Decide whether the needed jobs succeeded or failed
uses: re-actors/alls-green@release/v1
uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
with:
jobs: ${{ toJSON(needs) }}
2 changes: 1 addition & 1 deletion .pre-commit-config.yaml
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
rev: v6.0.0
rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
hooks:
- id: check-added-large-files
- id: check-toml
Expand Down
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tiangolo
merged 4 commits into

from

Apr 16, 2026
 Merged


🔒 Pin GitHub actions by commit SHA
#1840
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


4 commits


Select commit
Hold shift + click to select a range
41ebc07

🔒 Pin GitHub actions by commit SHA


YuriiMotov Mar 30, 2026
8000a0e

retrigger checks


YuriiMotov Mar 30, 2026
f63626e

Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha


YuriiMotov Apr 3, 2026
63481ae

Pin pre-commit hook by hash


YuriiMotov Apr 3, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


2 changes: 1 addition & 1 deletion
.github/workflows/add-to-project.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 name: Add to project
 runs-on: ubuntu-latest
 steps:
 - uses: actions/add-to-project@v1.0.2
 - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
 with:
 project-url: https://github.com/orgs/fastapi/projects/2
 github-token: ${{ secrets.PROJECTS_TOKEN }}

16 changes: 8 additions & 8 deletions
.github/workflows/build-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
 outputs:
 docs: ${{ steps.filter.outputs.docs }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 # For pull requests it's not necessary to checkout the code but for the main branch it is
 - uses: dorny/paths-filter@v4
 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
 id: filter
 with:
 filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Install docs extras
 run: uv sync --locked --no-dev --group docs
 - uses: actions/cache@v5
 - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
 with:
 key: mkdocs-cards-${{ github.ref }}
 path: .cache
 - name: Build Docs
 run: uv run ./scripts/docs.py build
 - uses: actions/upload-artifact@v7
 - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: docs-site
 path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}
 allowed-skips: build-docs

10 changes: 5 additions & 5 deletions
.github/workflows/deploy-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
 run: |
 rm -rf ./site
 mkdir ./site
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 path: ./site/
 pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
 env:
 PROJECT_NAME: sqlmodel
 BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
 uses: cloudflare/wrangler-action@v3
 uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
 with:
 apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/detect-conflicts.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Check if PRs have merge conflicts
 uses: eps1lon/actions-label-merge-conflict@v3
 uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
 with:
 dirtyLabel: "conflicts"
 repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/issue-manager.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: tiangolo/issue-manager@0.6.0
 - uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 config: >
Expand Down

4 changes: 2 additions & 2 deletions
.github/workflows/labeler.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
 pull-requests: write
 runs-on: ubuntu-latest
 steps:
 - uses: actions/labeler@v6
 - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
 if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
 - run: echo "Done adding labels"
 # Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
 pull-requests: read
 runs-on: ubuntu-latest
 steps:
 - uses: docker://agilepathway/pull-request-label-checker:latest
 - uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
 with:
 one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
 repo_token: ${{ secrets.GITHUB_TOKEN }}

6 changes: 3 additions & 3 deletions
.github/workflows/latest-changes.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
 latest-changes:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 with:
 # To allow latest-changes to commit to the main branch
 token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
 - uses: tiangolo/latest-changes@0.4.1
 - uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 latest_changes_file: docs/release-notes.md
Expand Down

12 changes: 6 additions & 6 deletions
.github/workflows/pre-commit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for own repo
 if: env.HAS_SECRETS == 'true'
 with:
Expand All@@ -30,19 +30,19 @@ jobs:
 # A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
 token: ${{ secrets.PRE_COMMIT }}
 # pre-commit lite ci needs the default checkout configs to work
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for fork
 if: env.HAS_SECRETS == 'false'
 with:
 # To be able to commit it needs the head branch of the PR, the remote one
 ref: ${{ github.event.pull_request.head.sha }}
 fetch-depth: 0
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
 git commit -m "🎨 Auto format"
 git push
 fi
 - uses: pre-commit-ci/lite-action@v1.1.0
 - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
 if: env.HAS_SECRETS == 'false'
 with:
 msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

6 changes: 3 additions & 3 deletions
.github/workflows/publish.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 - name: Build distribution
 run: uv build
 - name: Publish
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/smokeshow.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
 smokeshow:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - run: uv sync --locked --no-dev --group github-actions
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 name: coverage-html
 path: htmlcov
Expand Down

6 changes: 3 additions & 3 deletions
.github/workflows/test-redistribute.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

22 changes: 11 additions & 11 deletions
.github/workflows/test.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
 UV_PYTHON: ${{ matrix.python-version }}
 UV_RESOLUTION: ${{ matrix.uv-resolution }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version: ${{ matrix.python-version }}
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
 COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
 - name: Store coverage files
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
 - test
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Get coverage files
 uses: actions/download-artifact@v8
 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 pattern: coverage-*
 path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
 - run: uv run coverage combine coverage
 - run: uv run coverage html --title "Coverage for ${{ github.sha }}"
 - name: Store coverage HTML
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-html
 path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

2 changes: 1 addition & 1 deletion
.pre-commit-config.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
 rev: v6.0.0
 rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
 hooks:
 - id: check-added-large-files
 - id: check-toml
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tiangolo
merged 4 commits into

from

Apr 16, 2026
 Merged


🔒 Pin GitHub actions by commit SHA
#1840
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


4 commits


Select commit
Hold shift + click to select a range
41ebc07

🔒 Pin GitHub actions by commit SHA


YuriiMotov Mar 30, 2026
8000a0e

retrigger checks


YuriiMotov Mar 30, 2026
f63626e

Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha


YuriiMotov Apr 3, 2026
63481ae

Pin pre-commit hook by hash


YuriiMotov Apr 3, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


2 changes: 1 addition & 1 deletion
.github/workflows/add-to-project.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 name: Add to project
 runs-on: ubuntu-latest
 steps:
 - uses: actions/add-to-project@v1.0.2
 - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
 with:
 project-url: https://github.com/orgs/fastapi/projects/2
 github-token: ${{ secrets.PROJECTS_TOKEN }}

16 changes: 8 additions & 8 deletions
.github/workflows/build-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
 outputs:
 docs: ${{ steps.filter.outputs.docs }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 # For pull requests it's not necessary to checkout the code but for the main branch it is
 - uses: dorny/paths-filter@v4
 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
 id: filter
 with:
 filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Install docs extras
 run: uv sync --locked --no-dev --group docs
 - uses: actions/cache@v5
 - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
 with:
 key: mkdocs-cards-${{ github.ref }}
 path: .cache
 - name: Build Docs
 run: uv run ./scripts/docs.py build
 - uses: actions/upload-artifact@v7
 - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: docs-site
 path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}
 allowed-skips: build-docs

10 changes: 5 additions & 5 deletions
.github/workflows/deploy-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
 run: |
 rm -rf ./site
 mkdir ./site
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 path: ./site/
 pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
 env:
 PROJECT_NAME: sqlmodel
 BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
 uses: cloudflare/wrangler-action@v3
 uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
 with:
 apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/detect-conflicts.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Check if PRs have merge conflicts
 uses: eps1lon/actions-label-merge-conflict@v3
 uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
 with:
 dirtyLabel: "conflicts"
 repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/issue-manager.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: tiangolo/issue-manager@0.6.0
 - uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 config: >
Expand Down

4 changes: 2 additions & 2 deletions
.github/workflows/labeler.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
 pull-requests: write
 runs-on: ubuntu-latest
 steps:
 - uses: actions/labeler@v6
 - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
 if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
 - run: echo "Done adding labels"
 # Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
 pull-requests: read
 runs-on: ubuntu-latest
 steps:
 - uses: docker://agilepathway/pull-request-label-checker:latest
 - uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
 with:
 one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
 repo_token: ${{ secrets.GITHUB_TOKEN }}

6 changes: 3 additions & 3 deletions
.github/workflows/latest-changes.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
 latest-changes:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 with:
 # To allow latest-changes to commit to the main branch
 token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
 - uses: tiangolo/latest-changes@0.4.1
 - uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 latest_changes_file: docs/release-notes.md
Expand Down

12 changes: 6 additions & 6 deletions
.github/workflows/pre-commit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for own repo
 if: env.HAS_SECRETS == 'true'
 with:
Expand All@@ -30,19 +30,19 @@ jobs:
 # A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
 token: ${{ secrets.PRE_COMMIT }}
 # pre-commit lite ci needs the default checkout configs to work
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for fork
 if: env.HAS_SECRETS == 'false'
 with:
 # To be able to commit it needs the head branch of the PR, the remote one
 ref: ${{ github.event.pull_request.head.sha }}
 fetch-depth: 0
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
 git commit -m "🎨 Auto format"
 git push
 fi
 - uses: pre-commit-ci/lite-action@v1.1.0
 - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
 if: env.HAS_SECRETS == 'false'
 with:
 msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

6 changes: 3 additions & 3 deletions
.github/workflows/publish.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 - name: Build distribution
 run: uv build
 - name: Publish
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/smokeshow.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
 smokeshow:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - run: uv sync --locked --no-dev --group github-actions
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 name: coverage-html
 path: htmlcov
Expand Down

6 changes: 3 additions & 3 deletions
.github/workflows/test-redistribute.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

22 changes: 11 additions & 11 deletions
.github/workflows/test.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
 UV_PYTHON: ${{ matrix.python-version }}
 UV_RESOLUTION: ${{ matrix.uv-resolution }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version: ${{ matrix.python-version }}
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
 COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
 - name: Store coverage files
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
 - test
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Get coverage files
 uses: actions/download-artifact@v8
 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 pattern: coverage-*
 path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
 - run: uv run coverage combine coverage
 - run: uv run coverage html --title "Coverage for ${{ github.sha }}"
 - name: Store coverage HTML
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-html
 path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

2 changes: 1 addition & 1 deletion
.pre-commit-config.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
 rev: v6.0.0
 rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
 hooks:
 - id: check-added-large-files
 - id: check-toml
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tiangolo
merged 4 commits into

from

Apr 16, 2026
 Merged


🔒 Pin GitHub actions by commit SHA
#1840
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


4 commits


Select commit
Hold shift + click to select a range
41ebc07

🔒 Pin GitHub actions by commit SHA


YuriiMotov Mar 30, 2026
8000a0e

retrigger checks


YuriiMotov Mar 30, 2026
f63626e

Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha


YuriiMotov Apr 3, 2026
63481ae

Pin pre-commit hook by hash


YuriiMotov Apr 3, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


2 changes: 1 addition & 1 deletion
.github/workflows/add-to-project.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 name: Add to project
 runs-on: ubuntu-latest
 steps:
 - uses: actions/add-to-project@v1.0.2
 - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
 with:
 project-url: https://github.com/orgs/fastapi/projects/2
 github-token: ${{ secrets.PROJECTS_TOKEN }}

16 changes: 8 additions & 8 deletions
.github/workflows/build-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
 outputs:
 docs: ${{ steps.filter.outputs.docs }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 # For pull requests it's not necessary to checkout the code but for the main branch it is
 - uses: dorny/paths-filter@v4
 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
 id: filter
 with:
 filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Install docs extras
 run: uv sync --locked --no-dev --group docs
 - uses: actions/cache@v5
 - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
 with:
 key: mkdocs-cards-${{ github.ref }}
 path: .cache
 - name: Build Docs
 run: uv run ./scripts/docs.py build
 - uses: actions/upload-artifact@v7
 - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: docs-site
 path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}
 allowed-skips: build-docs

10 changes: 5 additions & 5 deletions
.github/workflows/deploy-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
 run: |
 rm -rf ./site
 mkdir ./site
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 path: ./site/
 pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
 env:
 PROJECT_NAME: sqlmodel
 BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
 uses: cloudflare/wrangler-action@v3
 uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
 with:
 apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/detect-conflicts.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Check if PRs have merge conflicts
 uses: eps1lon/actions-label-merge-conflict@v3
 uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
 with:
 dirtyLabel: "conflicts"
 repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/issue-manager.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: tiangolo/issue-manager@0.6.0
 - uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 config: >
Expand Down

4 changes: 2 additions & 2 deletions
.github/workflows/labeler.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
 pull-requests: write
 runs-on: ubuntu-latest
 steps:
 - uses: actions/labeler@v6
 - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
 if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
 - run: echo "Done adding labels"
 # Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
 pull-requests: read
 runs-on: ubuntu-latest
 steps:
 - uses: docker://agilepathway/pull-request-label-checker:latest
 - uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
 with:
 one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
 repo_token: ${{ secrets.GITHUB_TOKEN }}

6 changes: 3 additions & 3 deletions
.github/workflows/latest-changes.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
 latest-changes:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 with:
 # To allow latest-changes to commit to the main branch
 token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
 - uses: tiangolo/latest-changes@0.4.1
 - uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 latest_changes_file: docs/release-notes.md
Expand Down

12 changes: 6 additions & 6 deletions
.github/workflows/pre-commit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for own repo
 if: env.HAS_SECRETS == 'true'
 with:
Expand All@@ -30,19 +30,19 @@ jobs:
 # A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
 token: ${{ secrets.PRE_COMMIT }}
 # pre-commit lite ci needs the default checkout configs to work
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for fork
 if: env.HAS_SECRETS == 'false'
 with:
 # To be able to commit it needs the head branch of the PR, the remote one
 ref: ${{ github.event.pull_request.head.sha }}
 fetch-depth: 0
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
 git commit -m "🎨 Auto format"
 git push
 fi
 - uses: pre-commit-ci/lite-action@v1.1.0
 - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
 if: env.HAS_SECRETS == 'false'
 with:
 msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

6 changes: 3 additions & 3 deletions
.github/workflows/publish.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 - name: Build distribution
 run: uv build
 - name: Publish
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/smokeshow.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
 smokeshow:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - run: uv sync --locked --no-dev --group github-actions
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 name: coverage-html
 path: htmlcov
Expand Down

6 changes: 3 additions & 3 deletions
.github/workflows/test-redistribute.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

22 changes: 11 additions & 11 deletions
.github/workflows/test.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
 UV_PYTHON: ${{ matrix.python-version }}
 UV_RESOLUTION: ${{ matrix.uv-resolution }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version: ${{ matrix.python-version }}
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
 COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
 - name: Store coverage files
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
 - test
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Get coverage files
 uses: actions/download-artifact@v8
 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 pattern: coverage-*
 path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
 - run: uv run coverage combine coverage
 - run: uv run coverage html --title "Coverage for ${{ github.sha }}"
 - name: Store coverage HTML
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-html
 path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

2 changes: 1 addition & 1 deletion
.pre-commit-config.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
 rev: v6.0.0
 rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
 hooks:
 - id: check-added-large-files
 - id: check-toml
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tiangolo
merged 4 commits into

from

Apr 16, 2026
 Merged


🔒 Pin GitHub actions by commit SHA
#1840
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


4 commits


Select commit
Hold shift + click to select a range
41ebc07

🔒 Pin GitHub actions by commit SHA


YuriiMotov Mar 30, 2026
8000a0e

retrigger checks


YuriiMotov Mar 30, 2026
f63626e

Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha


YuriiMotov Apr 3, 2026
63481ae

Pin pre-commit hook by hash


YuriiMotov Apr 3, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


2 changes: 1 addition & 1 deletion
.github/workflows/add-to-project.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 name: Add to project
 runs-on: ubuntu-latest
 steps:
 - uses: actions/add-to-project@v1.0.2
 - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
 with:
 project-url: https://github.com/orgs/fastapi/projects/2
 github-token: ${{ secrets.PROJECTS_TOKEN }}

16 changes: 8 additions & 8 deletions
.github/workflows/build-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
 outputs:
 docs: ${{ steps.filter.outputs.docs }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 # For pull requests it's not necessary to checkout the code but for the main branch it is
 - uses: dorny/paths-filter@v4
 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
 id: filter
 with:
 filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Install docs extras
 run: uv sync --locked --no-dev --group docs
 - uses: actions/cache@v5
 - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
 with:
 key: mkdocs-cards-${{ github.ref }}
 path: .cache
 - name: Build Docs
 run: uv run ./scripts/docs.py build
 - uses: actions/upload-artifact@v7
 - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: docs-site
 path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}
 allowed-skips: build-docs

10 changes: 5 additions & 5 deletions
.github/workflows/deploy-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
 run: |
 rm -rf ./site
 mkdir ./site
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 path: ./site/
 pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
 env:
 PROJECT_NAME: sqlmodel
 BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
 uses: cloudflare/wrangler-action@v3
 uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
 with:
 apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/detect-conflicts.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Check if PRs have merge conflicts
 uses: eps1lon/actions-label-merge-conflict@v3
 uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
 with:
 dirtyLabel: "conflicts"
 repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/issue-manager.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: tiangolo/issue-manager@0.6.0
 - uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 config: >
Expand Down

4 changes: 2 additions & 2 deletions
.github/workflows/labeler.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
 pull-requests: write
 runs-on: ubuntu-latest
 steps:
 - uses: actions/labeler@v6
 - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
 if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
 - run: echo "Done adding labels"
 # Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
 pull-requests: read
 runs-on: ubuntu-latest
 steps:
 - uses: docker://agilepathway/pull-request-label-checker:latest
 - uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
 with:
 one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
 repo_token: ${{ secrets.GITHUB_TOKEN }}

6 changes: 3 additions & 3 deletions
.github/workflows/latest-changes.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
 latest-changes:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 with:
 # To allow latest-changes to commit to the main branch
 token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
 - uses: tiangolo/latest-changes@0.4.1
 - uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 latest_changes_file: docs/release-notes.md
Expand Down

12 changes: 6 additions & 6 deletions
.github/workflows/pre-commit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for own repo
 if: env.HAS_SECRETS == 'true'
 with:
Expand All@@ -30,19 +30,19 @@ jobs:
 # A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
 token: ${{ secrets.PRE_COMMIT }}
 # pre-commit lite ci needs the default checkout configs to work
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for fork
 if: env.HAS_SECRETS == 'false'
 with:
 # To be able to commit it needs the head branch of the PR, the remote one
 ref: ${{ github.event.pull_request.head.sha }}
 fetch-depth: 0
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
 git commit -m "🎨 Auto format"
 git push
 fi
 - uses: pre-commit-ci/lite-action@v1.1.0
 - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
 if: env.HAS_SECRETS == 'false'
 with:
 msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

6 changes: 3 additions & 3 deletions
.github/workflows/publish.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 - name: Build distribution
 run: uv build
 - name: Publish
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/smokeshow.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
 smokeshow:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - run: uv sync --locked --no-dev --group github-actions
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 name: coverage-html
 path: htmlcov
Expand Down

6 changes: 3 additions & 3 deletions
.github/workflows/test-redistribute.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

22 changes: 11 additions & 11 deletions
.github/workflows/test.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
 UV_PYTHON: ${{ matrix.python-version }}
 UV_RESOLUTION: ${{ matrix.uv-resolution }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version: ${{ matrix.python-version }}
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
 COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
 - name: Store coverage files
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
 - test
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Get coverage files
 uses: actions/download-artifact@v8
 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 pattern: coverage-*
 path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
 - run: uv run coverage combine coverage
 - run: uv run coverage html --title "Coverage for ${{ github.sha }}"
 - name: Store coverage HTML
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-html
 path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

2 changes: 1 addition & 1 deletion
.pre-commit-config.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
 rev: v6.0.0
 rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
 hooks:
 - id: check-added-large-files
 - id: check-toml
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tiangolo
merged 4 commits into

from

Apr 16, 2026
 Merged


🔒 Pin GitHub actions by commit SHA
#1840
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


4 commits


Select commit
Hold shift + click to select a range
41ebc07

🔒 Pin GitHub actions by commit SHA


YuriiMotov Mar 30, 2026
8000a0e

retrigger checks


YuriiMotov Mar 30, 2026
f63626e

Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha


YuriiMotov Apr 3, 2026
63481ae

Pin pre-commit hook by hash


YuriiMotov Apr 3, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


2 changes: 1 addition & 1 deletion
.github/workflows/add-to-project.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 name: Add to project
 runs-on: ubuntu-latest
 steps:
 - uses: actions/add-to-project@v1.0.2
 - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
 with:
 project-url: https://github.com/orgs/fastapi/projects/2
 github-token: ${{ secrets.PROJECTS_TOKEN }}

16 changes: 8 additions & 8 deletions
.github/workflows/build-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
 outputs:
 docs: ${{ steps.filter.outputs.docs }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 # For pull requests it's not necessary to checkout the code but for the main branch it is
 - uses: dorny/paths-filter@v4
 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
 id: filter
 with:
 filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Install docs extras
 run: uv sync --locked --no-dev --group docs
 - uses: actions/cache@v5
 - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
 with:
 key: mkdocs-cards-${{ github.ref }}
 path: .cache
 - name: Build Docs
 run: uv run ./scripts/docs.py build
 - uses: actions/upload-artifact@v7
 - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: docs-site
 path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}
 allowed-skips: build-docs

10 changes: 5 additions & 5 deletions
.github/workflows/deploy-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
 run: |
 rm -rf ./site
 mkdir ./site
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 path: ./site/
 pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
 env:
 PROJECT_NAME: sqlmodel
 BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
 uses: cloudflare/wrangler-action@v3
 uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
 with:
 apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/detect-conflicts.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Check if PRs have merge conflicts
 uses: eps1lon/actions-label-merge-conflict@v3
 uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
 with:
 dirtyLabel: "conflicts"
 repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/issue-manager.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: tiangolo/issue-manager@0.6.0
 - uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 config: >
Expand Down

4 changes: 2 additions & 2 deletions
.github/workflows/labeler.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
 pull-requests: write
 runs-on: ubuntu-latest
 steps:
 - uses: actions/labeler@v6
 - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
 if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
 - run: echo "Done adding labels"
 # Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
 pull-requests: read
 runs-on: ubuntu-latest
 steps:
 - uses: docker://agilepathway/pull-request-label-checker:latest
 - uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
 with:
 one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
 repo_token: ${{ secrets.GITHUB_TOKEN }}

6 changes: 3 additions & 3 deletions
.github/workflows/latest-changes.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
 latest-changes:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 with:
 # To allow latest-changes to commit to the main branch
 token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
 - uses: tiangolo/latest-changes@0.4.1
 - uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 latest_changes_file: docs/release-notes.md
Expand Down

12 changes: 6 additions & 6 deletions
.github/workflows/pre-commit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for own repo
 if: env.HAS_SECRETS == 'true'
 with:
Expand All@@ -30,19 +30,19 @@ jobs:
 # A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
 token: ${{ secrets.PRE_COMMIT }}
 # pre-commit lite ci needs the default checkout configs to work
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for fork
 if: env.HAS_SECRETS == 'false'
 with:
 # To be able to commit it needs the head branch of the PR, the remote one
 ref: ${{ github.event.pull_request.head.sha }}
 fetch-depth: 0
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
 git commit -m "🎨 Auto format"
 git push
 fi
 - uses: pre-commit-ci/lite-action@v1.1.0
 - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
 if: env.HAS_SECRETS == 'false'
 with:
 msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

6 changes: 3 additions & 3 deletions
.github/workflows/publish.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 - name: Build distribution
 run: uv build
 - name: Publish
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/smokeshow.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
 smokeshow:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - run: uv sync --locked --no-dev --group github-actions
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 name: coverage-html
 path: htmlcov
Expand Down

6 changes: 3 additions & 3 deletions
.github/workflows/test-redistribute.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

22 changes: 11 additions & 11 deletions
.github/workflows/test.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
 UV_PYTHON: ${{ matrix.python-version }}
 UV_RESOLUTION: ${{ matrix.uv-resolution }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version: ${{ matrix.python-version }}
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
 COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
 - name: Store coverage files
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
 - test
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Get coverage files
 uses: actions/download-artifact@v8
 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 pattern: coverage-*
 path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
 - run: uv run coverage combine coverage
 - run: uv run coverage html --title "Coverage for ${{ github.sha }}"
 - name: Store coverage HTML
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-html
 path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

2 changes: 1 addition & 1 deletion
.pre-commit-config.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
 rev: v6.0.0
 rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
 hooks:
 - id: check-added-large-files
 - id: check-toml
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tiangolo
merged 4 commits into

from

Apr 16, 2026
 Merged


🔒 Pin GitHub actions by commit SHA
#1840
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


4 commits


Select commit
Hold shift + click to select a range
41ebc07

🔒 Pin GitHub actions by commit SHA


YuriiMotov Mar 30, 2026
8000a0e

retrigger checks


YuriiMotov Mar 30, 2026
f63626e

Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha


YuriiMotov Apr 3, 2026
63481ae

Pin pre-commit hook by hash


YuriiMotov Apr 3, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


2 changes: 1 addition & 1 deletion
.github/workflows/add-to-project.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 name: Add to project
 runs-on: ubuntu-latest
 steps:
 - uses: actions/add-to-project@v1.0.2
 - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
 with:
 project-url: https://github.com/orgs/fastapi/projects/2
 github-token: ${{ secrets.PROJECTS_TOKEN }}

16 changes: 8 additions & 8 deletions
.github/workflows/build-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
 outputs:
 docs: ${{ steps.filter.outputs.docs }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 # For pull requests it's not necessary to checkout the code but for the main branch it is
 - uses: dorny/paths-filter@v4
 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
 id: filter
 with:
 filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Install docs extras
 run: uv sync --locked --no-dev --group docs
 - uses: actions/cache@v5
 - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
 with:
 key: mkdocs-cards-${{ github.ref }}
 path: .cache
 - name: Build Docs
 run: uv run ./scripts/docs.py build
 - uses: actions/upload-artifact@v7
 - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: docs-site
 path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}
 allowed-skips: build-docs

10 changes: 5 additions & 5 deletions
.github/workflows/deploy-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
 run: |
 rm -rf ./site
 mkdir ./site
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 path: ./site/
 pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
 env:
 PROJECT_NAME: sqlmodel
 BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
 uses: cloudflare/wrangler-action@v3
 uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
 with:
 apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/detect-conflicts.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Check if PRs have merge conflicts
 uses: eps1lon/actions-label-merge-conflict@v3
 uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
 with:
 dirtyLabel: "conflicts"
 repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/issue-manager.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: tiangolo/issue-manager@0.6.0
 - uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 config: >
Expand Down

4 changes: 2 additions & 2 deletions
.github/workflows/labeler.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
 pull-requests: write
 runs-on: ubuntu-latest
 steps:
 - uses: actions/labeler@v6
 - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
 if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
 - run: echo "Done adding labels"
 # Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
 pull-requests: read
 runs-on: ubuntu-latest
 steps:
 - uses: docker://agilepathway/pull-request-label-checker:latest
 - uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
 with:
 one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
 repo_token: ${{ secrets.GITHUB_TOKEN }}

6 changes: 3 additions & 3 deletions
.github/workflows/latest-changes.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
 latest-changes:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 with:
 # To allow latest-changes to commit to the main branch
 token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
 - uses: tiangolo/latest-changes@0.4.1
 - uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 latest_changes_file: docs/release-notes.md
Expand Down

12 changes: 6 additions & 6 deletions
.github/workflows/pre-commit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for own repo
 if: env.HAS_SECRETS == 'true'
 with:
Expand All@@ -30,19 +30,19 @@ jobs:
 # A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
 token: ${{ secrets.PRE_COMMIT }}
 # pre-commit lite ci needs the default checkout configs to work
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for fork
 if: env.HAS_SECRETS == 'false'
 with:
 # To be able to commit it needs the head branch of the PR, the remote one
 ref: ${{ github.event.pull_request.head.sha }}
 fetch-depth: 0
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
 git commit -m "🎨 Auto format"
 git push
 fi
 - uses: pre-commit-ci/lite-action@v1.1.0
 - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
 if: env.HAS_SECRETS == 'false'
 with:
 msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

6 changes: 3 additions & 3 deletions
.github/workflows/publish.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 - name: Build distribution
 run: uv build
 - name: Publish
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/smokeshow.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
 smokeshow:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - run: uv sync --locked --no-dev --group github-actions
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 name: coverage-html
 path: htmlcov
Expand Down

6 changes: 3 additions & 3 deletions
.github/workflows/test-redistribute.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

22 changes: 11 additions & 11 deletions
.github/workflows/test.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
 UV_PYTHON: ${{ matrix.python-version }}
 UV_RESOLUTION: ${{ matrix.uv-resolution }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version: ${{ matrix.python-version }}
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
 COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
 - name: Store coverage files
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
 - test
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Get coverage files
 uses: actions/download-artifact@v8
 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 pattern: coverage-*
 path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
 - run: uv run coverage combine coverage
 - run: uv run coverage html --title "Coverage for ${{ github.sha }}"
 - name: Store coverage HTML
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-html
 path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

2 changes: 1 addition & 1 deletion
.pre-commit-config.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
 rev: v6.0.0
 rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
 hooks:
 - id: check-added-large-files
 - id: check-toml
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
🔒 Pin GitHub actions by commit SHA#1840

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

tiangolo
merged 4 commits into

from

Apr 16, 2026
 Merged


🔒 Pin GitHub actions by commit SHA
#1840
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


4 commits


Select commit
Hold shift + click to select a range
41ebc07

🔒 Pin GitHub actions by commit SHA


YuriiMotov Mar 30, 2026
8000a0e

retrigger checks


YuriiMotov Mar 30, 2026
f63626e

Merge remote-tracking branch 'upstream/main' into pin-actions-by-sha


YuriiMotov Apr 3, 2026
63481ae

Pin pre-commit hook by hash


YuriiMotov Apr 3, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


2 changes: 1 addition & 1 deletion
.github/workflows/add-to-project.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 name: Add to project
 runs-on: ubuntu-latest
 steps:
 - uses: actions/add-to-project@v1.0.2
 - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2
 with:
 project-url: https://github.com/orgs/fastapi/projects/2
 github-token: ${{ secrets.PROJECTS_TOKEN }}

16 changes: 8 additions & 8 deletions
.github/workflows/build-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,9 +18,9 @@ jobs:
 outputs:
 docs: ${{ steps.filter.outputs.docs }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 # For pull requests it's not necessary to checkout the code but for the main branch it is
 - uses: dorny/paths-filter@v4
 - uses: dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
 id: filter
 with:
 filters: |
Expand All@@ -46,27 +46,27 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Install docs extras
 run: uv sync --locked --no-dev --group docs
 - uses: actions/cache@v5
 - uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5.0.4
 with:
 key: mkdocs-cards-${{ github.ref }}
 path: .cache
 - name: Build Docs
 run: uv run ./scripts/docs.py build
 - uses: actions/upload-artifact@v7
 - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: docs-site
 path: ./site/**
Expand All@@ -80,7 +80,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}
 allowed-skips: build-docs

10 changes: 5 additions & 5 deletions
.github/workflows/deploy-docs.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,13 +20,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
Expand All@@ -45,7 +45,7 @@ jobs:
 run: |
 rm -rf ./site
 mkdir ./site
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 path: ./site/
 pattern: docs-site
Expand All@@ -59,7 +59,7 @@ jobs:
 env:
 PROJECT_NAME: sqlmodel
 BRANCH: ${{ ( github.event.workflow_run.head_repository.full_name == github.repository && github.event.workflow_run.head_branch == 'main' && 'main' ) || ( github.event.workflow_run.head_sha ) }}
 uses: cloudflare/wrangler-action@v3
 uses: cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3.14.1
 with:
 apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }}
 accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/detect-conflicts.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,7 +12,7 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Check if PRs have merge conflicts
 uses: eps1lon/actions-label-merge-conflict@v3
 uses: eps1lon/actions-label-merge-conflict@1df065ebe6e3310545d4f4c4e862e43bdca146f0 # v3.0.3
 with:
 dirtyLabel: "conflicts"
 repoToken: "${{ secrets.GITHUB_TOKEN }}"
Expand Down

2 changes: 1 addition & 1 deletion
.github/workflows/issue-manager.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -27,7 +27,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: tiangolo/issue-manager@0.6.0
 - uses: tiangolo/issue-manager@2fb3484ec9279485df8659e8ec73de262431737d # 0.6.0
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 config: >
Expand Down

4 changes: 2 additions & 2 deletions
.github/workflows/labeler.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -16,7 +16,7 @@ jobs:
 pull-requests: write
 runs-on: ubuntu-latest
 steps:
 - uses: actions/labeler@v6
 - uses: actions/labeler@634933edcd8ababfe52f92936142cc22ac488b1b # v6.0.1
 if: ${{ github.event.action != 'labeled' && github.event.action != 'unlabeled' }}
 - run: echo "Done adding labels"
 # Run this after labeler applied labels
Expand All@@ -27,7 +27,7 @@ jobs:
 pull-requests: read
 runs-on: ubuntu-latest
 steps:
 - uses: docker://agilepathway/pull-request-label-checker:latest
 - uses: agilepathway/label-checker@c3d16ad512e7cea5961df85ff2486bb774caf3c5 # v1.6.65
 with:
 one_of: breaking,security,feature,bug,refactor,upgrade,docs,lang-all,internal
 repo_token: ${{ secrets.GITHUB_TOKEN }}

6 changes: 3 additions & 3 deletions
.github/workflows/latest-changes.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -20,17 +20,17 @@ jobs:
 latest-changes:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 with:
 # To allow latest-changes to commit to the main branch
 token: ${{ secrets.SQLMODEL_LATEST_CHANGES }}
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
 - uses: tiangolo/latest-changes@0.4.1
 - uses: tiangolo/latest-changes@c9d329cb147f0ddf4fb631214e3f838ff17ccbbd # 0.4.1
 with:
 token: ${{ secrets.GITHUB_TOKEN }}
 latest_changes_file: docs/release-notes.md
Expand Down

12 changes: 6 additions & 6 deletions
.github/workflows/pre-commit.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -18,7 +18,7 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for own repo
 if: env.HAS_SECRETS == 'true'
 with:
Expand All@@ -30,19 +30,19 @@ jobs:
 # A token other than the default GITHUB_TOKEN is needed to be able to trigger CI
 token: ${{ secrets.PRE_COMMIT }}
 # pre-commit lite ci needs the default checkout configs to work
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 name: Checkout PR for fork
 if: env.HAS_SECRETS == 'false'
 with:
 # To be able to commit it needs the head branch of the PR, the remote one
 ref: ${{ github.event.pull_request.head.sha }}
 fetch-depth: 0
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
Expand All@@ -65,7 +65,7 @@ jobs:
 git commit -m "🎨 Auto format"
 git push
 fi
 - uses: pre-commit-ci/lite-action@v1.1.0
 - uses: pre-commit-ci/lite-action@5d6cc0eb514c891a40562a58a8e71576c5c7fb43 # v1.1.0
 if: env.HAS_SECRETS == 'false'
 with:
 msg: 🎨 Auto format
Expand All@@ -85,6 +85,6 @@ jobs:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

6 changes: 3 additions & 3 deletions
.github/workflows/publish.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -22,13 +22,13 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 - name: Build distribution
 run: uv build
 - name: Publish
Expand Down

8 changes: 4 additions & 4 deletions
.github/workflows/smokeshow.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -12,18 +12,18 @@ jobs:
 smokeshow:
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - run: uv sync --locked --no-dev --group github-actions
 - uses: actions/download-artifact@v8
 - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 name: coverage-html
 path: htmlcov
Expand Down

6 changes: 3 additions & 3 deletions
.github/workflows/test-redistribute.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -17,9 +17,9 @@ jobs:
 env:
 GITHUB_CONTEXT: ${{ toJson(github) }}
 run: echo "$GITHUB_CONTEXT"
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Install build dependencies
Expand DownExpand Up@@ -51,6 +51,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

22 changes: 11 additions & 11 deletions
.github/workflows/test.yml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -51,21 +51,21 @@ jobs:
 UV_PYTHON: ${{ matrix.python-version }}
 UV_RESOLUTION: ${{ matrix.uv-resolution }}
 steps:
 - uses: actions/checkout@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - name: Set up Python
 uses: actions/setup-python@v6
 uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version: ${{ matrix.python-version }}
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 # Allow debugging with tmate
 - name: Setup tmate session
 uses: mxschmitt/action-tmate@v3
 uses: mxschmitt/action-tmate@c0afd6f790e3a5564914980036ebf83216678101 # v3.23
 if: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.debug_enabled == 'true' }}
 with:
 limit-access-to-actor: true
Expand All@@ -78,7 +78,7 @@ jobs:
 COVERAGE_FILE: coverage/.coverage.${{ runner.os }}-py${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 CONTEXT: ${{ runner.os }}-py${{ matrix.python-version }}
 - name: Store coverage files
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.pydantic-version }}
 path: coverage
Expand All@@ -89,19 +89,19 @@ jobs:
 - test
 runs-on: ubuntu-latest
 steps:
 - uses: actions/checkout@v6
 - uses: actions/setup-python@v6
 - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
 with:
 python-version-file: ".python-version"
 - name: Setup uv
 uses: astral-sh/setup-uv@v7
 uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0
 with:
 enable-cache: true
 cache-dependency-glob: |
 pyproject.toml
 uv.lock
 - name: Get coverage files
 uses: actions/download-artifact@v8
 uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
 with:
 pattern: coverage-*
 path: coverage
Expand All@@ -112,7 +112,7 @@ jobs:
 - run: uv run coverage combine coverage
 - run: uv run coverage html --title "Coverage for ${{ github.sha }}"
 - name: Store coverage HTML
 uses: actions/upload-artifact@v7
 uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
 with:
 name: coverage-html
 path: htmlcov
Expand All@@ -127,6 +127,6 @@ jobs:
 runs-on: ubuntu-latest
 steps:
 - name: Decide whether the needed jobs succeeded or failed
 uses: re-actors/alls-green@release/v1
 uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
 with:
 jobs: ${{ toJSON(needs) }}

2 changes: 1 addition & 1 deletion
.pre-commit-config.yaml

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -2,7 +2,7 @@
# See https://pre-commit.com/hooks.html for more hooks
repos:
 - repo: https://github.com/pre-commit/pre-commit-hooks
 rev: v6.0.0
 rev: 3e8a8703264a2f4a69428a0aa4dcb512790b2c8c # v6.0.0
 hooks:
 - id: check-added-large-files
 - id: check-toml
Expand Down
Loading