Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/codex.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -25,7 +25,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 60
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6

- name: Setup project
uses: generoi/github-actions/setup@v2
Expand All@@ -41,7 +41,7 @@ jobs:
uses: generoi/github-actions/setup-ddev@v1

- name: Download database artifact
uses: dawidd6/action-download-artifact@8305c0f1062bb0d184d09ef4493ecb9288447732 # v20
uses: dawidd6/action-download-artifact@d63b86af1b34672e53c440b1b83979861906bad7 # v24
with:
workflow: sync-db.yml
name: sanitized-db
Expand DownExpand Up@@ -96,7 +96,7 @@ jobs:

- name: Upload artifacts
if: always()
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
with:
name: codex-artifacts
path: artifacts/
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/composer-update-tests.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -19,7 +19,7 @@ jobs:
name: Run composer-update tests
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@v7

# The PHP helper tests run the real helpers and bootstrap composer/semver
# into a temp vendor dir. jq, git and bash are preinstalled on the runner.
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/deploy.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -43,7 +43,7 @@ jobs:
environment: ${{ inputs.environment }}
steps:
- name: Checkout Repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Start SSH agent
uses: generoi/github-actions/ssh-agent@v1
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/e2e.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -18,10 +18,10 @@ jobs:
timeout-minutes: 30
steps:
- name: Checkout Repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Setup Node
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6
uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v6
with:
node-version-file: .nvmrc
cache: 'npm'
Expand DownExpand Up@@ -60,7 +60,7 @@ jobs:

- name: Upload test results
if: always()
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7.0.0
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
with:
name: e2e-test-results
path: test-results/
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/sync-db.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -25,7 +25,7 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6

- uses: generoi/github-actions/ssh-agent@v1
with:
Expand DownExpand Up@@ -72,7 +72,7 @@ jobs:
-pass env:DB_ARTIFACT_KEY

- name: Upload sanitized DB artifact
uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
with:
name: sanitized-db
path: .github/fixtures/sanitized-db.sql.gz.enc
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/test.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -47,7 +47,7 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Checkout Repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

- name: Setup project
uses: generoi/github-actions/setup@v2
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/vulnerability-scan.yml
Original file line numberDiff line numberDiff line change
Expand Up@@ -107,7 +107,7 @@ jobs:
# night. Spread the scans with distinct cron minutes in the calling repos
# instead — scheduling costs nothing. See README for the current offsets.
- name: Checkout Repository
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

# Deliberately not generoi/github-actions/setup: this job audits the lock
# file and never touches vendor/ or node_modules. The shared action would
Expand DownExpand Up@@ -300,7 +300,7 @@ jobs:

- name: Composer download cache
if: failure() && inputs.auto_update && steps.scan.outputs.packages != ''
uses: actions/cache@668228422ae6a00e4ad889ee87cd7109ec5666a7 # v5
uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v5
with:
path: ${{ steps.composer-cache.outputs.dir }}
key: ${{ runner.os }}-composer-php${{ env.PHP_VERSION }}-${{ hashFiles('**/composer.lock') }}
Expand Down