about summary refs log tree commit diff
path: root/.github/workflows/periodic-merge-24h.yml
diff options
context:
space:
mode:
authorVictor Engmark <victor@engmark.name>2023-11-28 16:28:58 +1300
committerJörg Thalheim <Mic92@users.noreply.github.com>2023-11-29 09:51:22 +0100
commit4177297b141a3a8a8985dcb7dfb53550b95d3e8f (patch)
tree4eedabde0d840433b038c9897f8c2a15c3751e58 /.github/workflows/periodic-merge-24h.yml
parent789f7281f096e9f9b42dbfd567d25a931f3fc14a (diff)
downloadnixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.gz
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.bz2
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.lz
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.xz
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.tar.zst
nixlib-4177297b141a3a8a8985dcb7dfb53550b95d3e8f.zip
ci: pin third party actions
For reproducibility.

Command:

```shell
for file in .github/workflows/*.y*ml; do
    npx pin-github-action --comment=' {ref}' "$file"
done
```

Then had to manually replace all the versions with accurate specifiers
(for example, "v4" → "v4.1.1" in case of `actions/checkout`).
Diffstat (limited to '.github/workflows/periodic-merge-24h.yml')
-rw-r--r--.github/workflows/periodic-merge-24h.yml6
1 files changed, 3 insertions, 3 deletions
diff --git a/.github/workflows/periodic-merge-24h.yml b/.github/workflows/periodic-merge-24h.yml
index f56b3a0a5594..308d9057859e 100644
--- a/.github/workflows/periodic-merge-24h.yml
+++ b/.github/workflows/periodic-merge-24h.yml
@@ -44,10 +44,10 @@ jobs:
             into: staging-23.11
     name: ${{ matrix.pairs.from }} → ${{ matrix.pairs.into }}
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
       - name: ${{ matrix.pairs.from }} → ${{ matrix.pairs.into }}
-        uses: devmasx/merge-branch@1.4.0
+        uses: devmasx/merge-branch@854d3ac71ed1e9deb668e0074781b81fdd6e771f # 1.4.0
         with:
           type: now
           from_branch: ${{ matrix.pairs.from }}
@@ -55,7 +55,7 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Comment on failure
-        uses: peter-evans/create-or-update-comment@v3
+        uses: peter-evans/create-or-update-comment@23ff15729ef2fc348714a3bb66d2f655ca9066f2 # v3.1.0
         if: ${{ failure() }}
         with:
           issue-number: 105153