mirror of
				https://github.com/NativeScript/NativeScript.git
				synced 2025-11-01 00:25:37 +08:00 
			
		
		
		
	feat: pin github action dependencies (#10797)
Related https://github.com/NativeScript/nativescript-cli/pull/5880
This commit is contained in:
		
							
								
								
									
										12
									
								
								.github/workflows/apps_automated_android.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										12
									
								
								.github/workflows/apps_automated_android.yml
									
									
									
									
										vendored
									
									
								
							| @ -23,25 +23,25 @@ jobs: | |||||||
|     runs-on: ubuntu-latest |     runs-on: ubuntu-latest | ||||||
|  |  | ||||||
|     steps: |     steps: | ||||||
|       - uses: actions/checkout@v4 |       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 | ||||||
|  |  | ||||||
|  |  | ||||||
|       - uses: actions/setup-node@v4 |       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 | ||||||
|         with: |         with: | ||||||
|           node-version: 23.5.0 |           node-version: 23.5.0 | ||||||
|  |  | ||||||
|       - name: Derive appropriate SHAs for base and head for `nx affected` commands |       - name: Derive appropriate SHAs for base and head for `nx affected` commands | ||||||
|         uses: nrwl/nx-set-shas@v4 |         uses: nrwl/nx-set-shas@826660b82addbef3abff5fa871492ebad618c9e1 # v4.3.3 | ||||||
|         with: |         with: | ||||||
|           main-branch-name: 'main' |           main-branch-name: 'main' | ||||||
|            |            | ||||||
|       - uses: actions/setup-java@v4 |       - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1 | ||||||
|         with: |         with: | ||||||
|           distribution: 'temurin' |           distribution: 'temurin' | ||||||
|           java-version: '21' |           java-version: '21' | ||||||
|  |  | ||||||
|       - name: Install Python |       - name: Install Python | ||||||
|         uses: actions/setup-python@v5 |         uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 | ||||||
|         with: |         with: | ||||||
|           python-version: '3' |           python-version: '3' | ||||||
|  |  | ||||||
| @ -65,7 +65,7 @@ jobs: | |||||||
|           sudo udevadm trigger --name-match=kvm |           sudo udevadm trigger --name-match=kvm | ||||||
|  |  | ||||||
|       - name: Run tests on Android Emulator |       - name: Run tests on Android Emulator | ||||||
|         uses: reactivecircus/android-emulator-runner@v2 |         uses: reactivecircus/android-emulator-runner@1dcd0090116d15e7c562f8db72807de5e036a4ed # v2.34.0 | ||||||
|         with: |         with: | ||||||
|           api-level: 34 |           api-level: 34 | ||||||
|           arch: x86_64 |           arch: x86_64 | ||||||
|  | |||||||
							
								
								
									
										8
									
								
								.github/workflows/apps_automated_ios.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										8
									
								
								.github/workflows/apps_automated_ios.yml
									
									
									
									
										vendored
									
									
								
							| @ -24,17 +24,17 @@ jobs: | |||||||
|     runs-on: warp-macos-15-arm64-6x |     runs-on: warp-macos-15-arm64-6x | ||||||
|  |  | ||||||
|     steps: |     steps: | ||||||
|       - uses: actions/checkout@v4 |       - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0 | ||||||
|  |  | ||||||
|       # - name: ActionDebugger By Warpbuild |       # - name: ActionDebugger By Warpbuild | ||||||
|       #   uses: Warpbuilds/action-debugger@v1.3 |       #   uses: Warpbuilds/action-debugger@v1.3 | ||||||
|  |  | ||||||
|       - uses: actions/setup-node@v4 |       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 | ||||||
|         with: |         with: | ||||||
|           node-version: 23.5.0 |           node-version: 23.5.0 | ||||||
|  |  | ||||||
|       - name: Derive appropriate SHAs for base and head for `nx affected` commands |       - name: Derive appropriate SHAs for base and head for `nx affected` commands | ||||||
|         uses: nrwl/nx-set-shas@v4 |         uses: nrwl/nx-set-shas@826660b82addbef3abff5fa871492ebad618c9e1 # v4.3.3 | ||||||
|         with: |         with: | ||||||
|           main-branch-name: 'main' |           main-branch-name: 'main' | ||||||
|  |  | ||||||
| @ -52,7 +52,7 @@ jobs: | |||||||
|         run: npx nx run-many --target=test --configuration=ci --projects=core |         run: npx nx run-many --target=test --configuration=ci --projects=core | ||||||
|  |  | ||||||
|       - name: Start iOS Simulator |       - name: Start iOS Simulator | ||||||
|         uses: futureware-tech/simulator-action@v4 |         uses: futureware-tech/simulator-action@dab10d813144ef59b48d401cd95da151222ef8cd # v4 | ||||||
|         with: |         with: | ||||||
|           model: 'iPhone 16 Pro' |           model: 'iPhone 16 Pro' | ||||||
|           os_version: '18.4' |           os_version: '18.4' | ||||||
|  | |||||||
							
								
								
									
										4
									
								
								.github/workflows/npm_release_core.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										4
									
								
								.github/workflows/npm_release_core.yml
									
									
									
									
										vendored
									
									
								
							| @ -19,13 +19,13 @@ jobs: | |||||||
|     runs-on: ubuntu-latest |     runs-on: ubuntu-latest | ||||||
|  |  | ||||||
|     steps: |     steps: | ||||||
|       - uses: actions/checkout@v2 |       - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 | ||||||
|  |  | ||||||
|       - name: Setup |       - name: Setup | ||||||
|         run: npm run setup |         run: npm run setup | ||||||
|  |  | ||||||
|       - name: Derive appropriate SHAs for base and head for `nx affected` commands |       - name: Derive appropriate SHAs for base and head for `nx affected` commands | ||||||
|         uses: nrwl/nx-set-shas@v4 |         uses: nrwl/nx-set-shas@826660b82addbef3abff5fa871492ebad618c9e1 # v4.3.3 | ||||||
|         with: |         with: | ||||||
|           main-branch-name: 'main' |           main-branch-name: 'main' | ||||||
|  |  | ||||||
|  | |||||||
							
								
								
									
										2
									
								
								.github/workflows/npm_release_tns_core.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								.github/workflows/npm_release_tns_core.yml
									
									
									
									
										vendored
									
									
								
							| @ -18,7 +18,7 @@ jobs: | |||||||
|     runs-on: ubuntu-latest |     runs-on: ubuntu-latest | ||||||
|  |  | ||||||
|     steps: |     steps: | ||||||
|       - uses: actions/checkout@v2 |       - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 | ||||||
|  |  | ||||||
|       - name: Setup |       - name: Setup | ||||||
|         run: npm install |         run: npm install | ||||||
|  | |||||||
							
								
								
									
										2
									
								
								.github/workflows/npm_release_types.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								.github/workflows/npm_release_types.yml
									
									
									
									
										vendored
									
									
								
							| @ -21,7 +21,7 @@ jobs: | |||||||
|       - name: Todo |       - name: Todo | ||||||
|         run: | |         run: | | ||||||
|           echo "TODO: implement action" |           echo "TODO: implement action" | ||||||
| #      - uses: actions/checkout@v2 | #      - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 | ||||||
| # | # | ||||||
| #      - name: Setup | #      - name: Setup | ||||||
| #        run: npm install | #        run: npm install | ||||||
|  | |||||||
							
								
								
									
										2
									
								
								.github/workflows/npm_release_webpack.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								.github/workflows/npm_release_webpack.yml
									
									
									
									
										vendored
									
									
								
							| @ -17,7 +17,7 @@ jobs: | |||||||
|     runs-on: ubuntu-latest |     runs-on: ubuntu-latest | ||||||
|  |  | ||||||
|     steps: |     steps: | ||||||
|       - uses: actions/checkout@v2 |       - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0 | ||||||
|  |  | ||||||
|       - name: Setup |       - name: Setup | ||||||
|         run: npm install |         run: npm install | ||||||
|  | |||||||
							
								
								
									
										2
									
								
								.github/workflows/ossf-scorecard.yml
									
									
									
									
										vendored
									
									
								
							
							
						
						
									
										2
									
								
								.github/workflows/ossf-scorecard.yml
									
									
									
									
										vendored
									
									
								
							| @ -73,6 +73,6 @@ jobs: | |||||||
|       # Upload the results to GitHub's code scanning dashboard (optional). |       # Upload the results to GitHub's code scanning dashboard (optional). | ||||||
|       # Commenting out will disable upload of results to your repo's Code Scanning dashboard |       # Commenting out will disable upload of results to your repo's Code Scanning dashboard | ||||||
|       - name: "Upload to code-scanning" |       - name: "Upload to code-scanning" | ||||||
|         uses: github/codeql-action/upload-sarif@v3 |         uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0 | ||||||
|         with: |         with: | ||||||
|           sarif_file: results.sarif |           sarif_file: results.sarif | ||||||
|  | |||||||
		Reference in New Issue
	
	Block a user
	 Ulises Gascón
					Ulises Gascón