feat: pin github action dependencies (#10797)

Related https://github.com/NativeScript/nativescript-cli/pull/5880
This commit is contained in:
Ulises Gascón
2025-09-09 23:20:47 +02:00
committed by GitHub
parent c044063502
commit 194b2b1358
7 changed files with 16 additions and 16 deletions

View File

@ -23,25 +23,25 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
- uses: actions/setup-node@v4 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with: with:
node-version: 23.5.0 node-version: 23.5.0
- name: Derive appropriate SHAs for base and head for `nx affected` commands - name: Derive appropriate SHAs for base and head for `nx affected` commands
uses: nrwl/nx-set-shas@v4 uses: nrwl/nx-set-shas@826660b82addbef3abff5fa871492ebad618c9e1 # v4.3.3
with: with:
main-branch-name: 'main' main-branch-name: 'main'
- uses: actions/setup-java@v4 - uses: actions/setup-java@c5195efecf7bdfc987ee8bae7a71cb8b11521c00 # v4.7.1
with: with:
distribution: 'temurin' distribution: 'temurin'
java-version: '21' java-version: '21'
- name: Install Python - name: Install Python
uses: actions/setup-python@v5 uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0
with: with:
python-version: '3' python-version: '3'
@ -65,7 +65,7 @@ jobs:
sudo udevadm trigger --name-match=kvm sudo udevadm trigger --name-match=kvm
- name: Run tests on Android Emulator - name: Run tests on Android Emulator
uses: reactivecircus/android-emulator-runner@v2 uses: reactivecircus/android-emulator-runner@1dcd0090116d15e7c562f8db72807de5e036a4ed # v2.34.0
with: with:
api-level: 34 api-level: 34
arch: x86_64 arch: x86_64

View File

@ -24,17 +24,17 @@ jobs:
runs-on: warp-macos-15-arm64-6x runs-on: warp-macos-15-arm64-6x
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
# - name: ActionDebugger By Warpbuild # - name: ActionDebugger By Warpbuild
# uses: Warpbuilds/action-debugger@v1.3 # uses: Warpbuilds/action-debugger@v1.3
- uses: actions/setup-node@v4 - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
with: with:
node-version: 23.5.0 node-version: 23.5.0
- name: Derive appropriate SHAs for base and head for `nx affected` commands - name: Derive appropriate SHAs for base and head for `nx affected` commands
uses: nrwl/nx-set-shas@v4 uses: nrwl/nx-set-shas@826660b82addbef3abff5fa871492ebad618c9e1 # v4.3.3
with: with:
main-branch-name: 'main' main-branch-name: 'main'
@ -52,7 +52,7 @@ jobs:
run: npx nx run-many --target=test --configuration=ci --projects=core run: npx nx run-many --target=test --configuration=ci --projects=core
- name: Start iOS Simulator - name: Start iOS Simulator
uses: futureware-tech/simulator-action@v4 uses: futureware-tech/simulator-action@dab10d813144ef59b48d401cd95da151222ef8cd # v4
with: with:
model: 'iPhone 16 Pro' model: 'iPhone 16 Pro'
os_version: '18.4' os_version: '18.4'

View File

@ -19,13 +19,13 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
- name: Setup - name: Setup
run: npm run setup run: npm run setup
- name: Derive appropriate SHAs for base and head for `nx affected` commands - name: Derive appropriate SHAs for base and head for `nx affected` commands
uses: nrwl/nx-set-shas@v4 uses: nrwl/nx-set-shas@826660b82addbef3abff5fa871492ebad618c9e1 # v4.3.3
with: with:
main-branch-name: 'main' main-branch-name: 'main'

View File

@ -18,7 +18,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
- name: Setup - name: Setup
run: npm install run: npm install

View File

@ -21,7 +21,7 @@ jobs:
- name: Todo - name: Todo
run: | run: |
echo "TODO: implement action" echo "TODO: implement action"
# - uses: actions/checkout@v2 # - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
# #
# - name: Setup # - name: Setup
# run: npm install # run: npm install

View File

@ -17,7 +17,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@ee0669bd1cc54295c223e0bb666b733df41de1c5 # v2.7.0
- name: Setup - name: Setup
run: npm install run: npm install

View File

@ -73,6 +73,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard (optional). # Upload the results to GitHub's code scanning dashboard (optional).
# Commenting out will disable upload of results to your repo's Code Scanning dashboard # Commenting out will disable upload of results to your repo's Code Scanning dashboard
- name: "Upload to code-scanning" - name: "Upload to code-scanning"
uses: github/codeql-action/upload-sarif@v3 uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3.30.0
with: with:
sarif_file: results.sarif sarif_file: results.sarif