Skip to content

Commit 8122aec

Browse files
davidzhaodavidzhao
authored
chore: pin GHA by commit (#608)
1 parent 035ce5d commit 8122aec

9 files changed

Lines changed: 73 additions & 57 deletions

File tree

‎.github/workflows/build-api.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -26,18 +26,18 @@ jobs:
2626
run:
2727
working-directory: ${{ env.PACKAGE_DIR }}
2828
steps:
29-
- uses: actions/checkout@v4
29+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3030
with:
3131
submodules: true
3232

33-
- uses: actions/setup-python@v4
33+
- uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
3434

3535
- name: Build wheel & sdist
3636
run: |
3737
pip3 install build wheel
3838
python3 -m build --wheel --sdist
3939
40-
- uses: actions/upload-artifact@v4
40+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
4141
with:
4242
name: api-release
4343
path: |
@@ -52,12 +52,12 @@ jobs:
5252
id-token: write
5353
if: startsWith(github.ref, 'refs/tags/api-v') && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork == false)
5454
steps:
55-
- uses: actions/download-artifact@v4
55+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
5656
with:
5757
name: api-release
5858
path: dist
5959

60-
- uses: pypa/gh-action-pypi-publish@release/v1
60+
- uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
6161

6262
docs:
6363
needs: [publish]

‎.github/workflows/build-docs.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ jobs:
3737
runs-on: ubuntu-latest
3838

3939
steps:
40-
- uses: actions/checkout@v4
40+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
4141
with:
4242
submodules: recursive
4343

‎.github/workflows/build-protocol.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -28,15 +28,15 @@ jobs:
2828
run:
2929
working-directory: ${{ env.PACKAGE_DIR }}
3030
steps:
31-
- uses: actions/checkout@v4
31+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
3232
with:
3333
submodules: true
3434
ref: ${{ github.event.pull_request.head.ref }}
3535

36-
- uses: actions/setup-python@v4
36+
- uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
3737

3838
- name: Install Protoc
39-
uses: arduino/setup-protoc@v3
39+
uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3
4040
with:
4141
version: "25.1"
4242
repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -45,7 +45,7 @@ jobs:
4545
run: ./generate_proto.sh
4646

4747
- name: Add changes
48-
uses: EndBug/add-and-commit@v9
48+
uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
4949
with:
5050
add: '["livekit-protocol/"]'
5151
default_author: github_actions
@@ -58,18 +58,18 @@ jobs:
5858
run:
5959
working-directory: ${{ env.PACKAGE_DIR }}
6060
steps:
61-
- uses: actions/checkout@v4
61+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
6262
with:
6363
submodules: true
6464

65-
- uses: actions/setup-python@v4
65+
- uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
6666

6767
- name: Build wheel & sdist
6868
run: |
6969
pip3 install build wheel
7070
python3 -m build --wheel --sdist
7171
72-
- uses: actions/upload-artifact@v4
72+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
7373
with:
7474
name: protocol-release
7575
path: |
@@ -84,12 +84,12 @@ jobs:
8484
id-token: write
8585
if: startsWith(github.ref, 'refs/tags/protocol-v') && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork == false)
8686
steps:
87-
- uses: actions/download-artifact@v4
87+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
8888
with:
8989
name: protocol-release
9090
path: dist
9191

92-
- uses: pypa/gh-action-pypi-publish@release/v1
92+
- uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
9393

9494
docs:
9595
needs: [publish]

‎.github/workflows/build-rtc.yml‎

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -28,15 +28,15 @@ jobs:
2828
run:
2929
working-directory: ${{ env.PACKAGE_DIR }}
3030
steps:
31-
- uses: actions/checkout@v3
31+
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
3232
with:
3333
submodules: true
3434
ref: ${{ github.event.pull_request.head.ref }}
3535

36-
- uses: actions/setup-python@v4
36+
- uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
3737

3838
- name: Install Protoc
39-
uses: arduino/setup-protoc@v3
39+
uses: arduino/setup-protoc@c65c819552d16ad3c9b72d9dfd5ba5237b9c906b # v3
4040
with:
4141
version: "25.1"
4242
repo-token: ${{ secrets.GITHUB_TOKEN }}
@@ -49,7 +49,7 @@ jobs:
4949
run: ./generate_proto.sh
5050

5151
- name: Add changes
52-
uses: EndBug/add-and-commit@v9
52+
uses: EndBug/add-and-commit@a94899bca583c204427a224a7af87c02f9b325d5 # v9
5353
with:
5454
add: '["livekit-rtc/"]'
5555
default_author: github_actions
@@ -75,11 +75,11 @@ jobs:
7575
run:
7676
working-directory: ${{ env.PACKAGE_DIR }}
7777
steps:
78-
- uses: actions/checkout@v4
78+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
7979
with:
8080
submodules: true
8181

82-
- uses: actions/setup-python@v5
82+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
8383
id: setup-python
8484
with:
8585
python-version: "3.11"
@@ -89,7 +89,7 @@ jobs:
8989
env:
9090
CIBW_ARCHS: ${{ matrix.archs }}
9191

92-
- uses: actions/upload-artifact@v4
92+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
9393
with:
9494
name: rtc-release-${{ matrix.os }}
9595
path: livekit-rtc/dist/*.whl
@@ -101,7 +101,7 @@ jobs:
101101
run:
102102
working-directory: ${{ env.PACKAGE_DIR }}
103103
steps:
104-
- uses: actions/checkout@v4
104+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
105105
with:
106106
submodules: true
107107

@@ -110,7 +110,7 @@ jobs:
110110
pip3 install build
111111
python3 -m build --sdist
112112
113-
- uses: actions/upload-artifact@v4
113+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
114114
with:
115115
name: rtc-release-sdist
116116
path: livekit-rtc/dist/*.tar.gz
@@ -180,13 +180,13 @@ jobs:
180180
id-token: write
181181
if: startsWith(github.ref, 'refs/tags/rtc-v') && (github.event_name != 'pull_request' || github.event.pull_request.head.repo.fork == false)
182182
steps:
183-
- uses: actions/download-artifact@v4
183+
- uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
184184
with:
185185
pattern: rtc-release-*
186186
path: dist
187187
merge-multiple: true
188188

189-
- uses: pypa/gh-action-pypi-publish@release/v1
189+
- uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
190190

191191
docs:
192192
needs: [publish]

‎.github/workflows/check-types.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -13,17 +13,17 @@ jobs:
1313
runs-on: ubuntu-latest
1414

1515
steps:
16-
- uses: actions/checkout@v4
16+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
1717
with:
1818
submodules: recursive
1919

2020
- name: Set up Python 3.9
21-
uses: actions/setup-python@v2
21+
uses: actions/setup-python@e9aba2c848f5ebd159c070c61ea2c4e2b122355e # v2
2222
with:
2323
python-version: 3.9
2424

2525
- name: Install uv
26-
uses: astral-sh/setup-uv@v5
26+
uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
2727
with:
2828
enable-cache: true
2929
cache-dependency-glob: "uv.lock"

‎.github/workflows/publish.yml‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ jobs:
4747
if: github.event_name == 'workflow_dispatch'
4848
runs-on: ubuntu-latest
4949
steps:
50-
- uses: actions/checkout@v4
50+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
5151
with:
5252
ref: ${{ inputs.branch }}
5353
submodules: true
@@ -66,7 +66,7 @@ jobs:
6666
fi
6767
6868
- name: Set up Python
69-
uses: actions/setup-python@v5
69+
uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
7070
with:
7171
python-version: "3.10"
7272

@@ -182,7 +182,7 @@ jobs:
182182
needs: detect
183183
runs-on: ubuntu-latest
184184
steps:
185-
- uses: actions/checkout@v4
185+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
186186
with:
187187
ref: ${{ github.event.pull_request.merge_commit_sha }}
188188

@@ -217,11 +217,11 @@ jobs:
217217
run:
218218
working-directory: ./livekit-rtc
219219
steps:
220-
- uses: actions/checkout@v4
220+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
221221
with:
222222
submodules: true
223223

224-
- uses: actions/setup-python@v5
224+
- uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5
225225
id: setup-python
226226
with:
227227
python-version: "3.11"
@@ -231,7 +231,7 @@ jobs:
231231
env:
232232
CIBW_ARCHS: ${{ matrix.archs }}
233233

234-
- uses: actions/upload-artifact@v4
234+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
235235
with:
236236
name: dist-rtc-${{ matrix.os }}
237237
path: livekit-rtc/dist/*.whl
@@ -245,7 +245,7 @@ jobs:
245245
run:
246246
working-directory: ./livekit-rtc
247247
steps:
248-
- uses: actions/checkout@v4
248+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
249249
with:
250250
submodules: true
251251

@@ -254,7 +254,7 @@ jobs:
254254
pip3 install build
255255
python3 -m build --sdist
256256
257-
- uses: actions/upload-artifact@v4
257+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
258258
with:
259259
name: dist-rtc-sdist
260260
path: livekit-rtc/dist/*.tar.gz
@@ -269,7 +269,7 @@ jobs:
269269
id-token: write
270270
steps:
271271
- name: Download build artifacts
272-
uses: actions/download-artifact@v4
272+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
273273
with:
274274
pattern: dist-rtc-*
275275
path: dist
@@ -279,7 +279,7 @@ jobs:
279279
run: ls -la dist/
280280

281281
- name: Publish to PyPI
282-
uses: pypa/gh-action-pypi-publish@release/v1
282+
uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
283283

284284
# ── API build ────────────────────────────────────────────────
285285
build-api:
@@ -291,18 +291,18 @@ jobs:
291291
run:
292292
working-directory: ./livekit-api
293293
steps:
294-
- uses: actions/checkout@v4
294+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
295295
with:
296296
submodules: true
297297

298-
- uses: actions/setup-python@v4
298+
- uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
299299

300300
- name: Build wheel & sdist
301301
run: |
302302
pip3 install build wheel
303303
python3 -m build --wheel --sdist
304304
305-
- uses: actions/upload-artifact@v4
305+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
306306
with:
307307
name: dist-api
308308
path: |
@@ -319,7 +319,7 @@ jobs:
319319
id-token: write
320320
steps:
321321
- name: Download build artifact
322-
uses: actions/download-artifact@v4
322+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
323323
with:
324324
name: dist-api
325325
path: dist/
@@ -328,7 +328,7 @@ jobs:
328328
run: ls -la dist/
329329

330330
- name: Publish to PyPI
331-
uses: pypa/gh-action-pypi-publish@release/v1
331+
uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
332332

333333
# ── Protocol build ───────────────────────────────────────────
334334
build-protocol:
@@ -340,18 +340,18 @@ jobs:
340340
run:
341341
working-directory: ./livekit-protocol
342342
steps:
343-
- uses: actions/checkout@v4
343+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
344344
with:
345345
submodules: true
346346

347-
- uses: actions/setup-python@v4
347+
- uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
348348

349349
- name: Build wheel & sdist
350350
run: |
351351
pip3 install build wheel
352352
python3 -m build --wheel --sdist
353353
354-
- uses: actions/upload-artifact@v4
354+
- uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4
355355
with:
356356
name: dist-protocol
357357
path: |
@@ -368,7 +368,7 @@ jobs:
368368
id-token: write
369369
steps:
370370
- name: Download build artifact
371-
uses: actions/download-artifact@v4
371+
uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4
372372
with:
373373
name: dist-protocol
374374
path: dist/
@@ -377,7 +377,7 @@ jobs:
377377
run: ls -la dist/
378378

379379
- name: Publish to PyPI
380-
uses: pypa/gh-action-pypi-publish@release/v1
380+
uses: pypa/gh-action-pypi-publish@cef221092ed1bacb1cc03d23a2d87d1d172e277b # release/v1
381381

382382
# ── Docs ─────────────────────────────────────────────────────
383383
docs-rtc:

‎.github/workflows/ruff.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -4,13 +4,13 @@ jobs:
44
build:
55
runs-on: ubuntu-latest
66
steps:
7-
- uses: actions/checkout@v4
8-
- uses: actions/setup-python@v4
7+
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
8+
- uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4
99
with:
1010
python-version: "3.9"
1111

1212
- name: Install uv
13-
uses: astral-sh/setup-uv@v5
13+
uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5
1414
with:
1515
enable-cache: true
1616
cache-dependency-glob: "uv.lock"

0 commit comments

Comments
 (0)