From b72c4a76da3b76833d55a209a2f11b503017265a Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Thu, 26 Mar 2026 16:54:29 +0100 Subject: [PATCH] chore(deps): pin dependencies (#1953) --- .github/workflows/ci.yml | 32 +++++++++++++-------------- .github/workflows/code-references.yml | 4 ++-- .github/workflows/codeql-analysis.yml | 8 +++---- .github/workflows/semantic.yml | 2 +- 4 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 03a3f9b4b..af96bdefc 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,10 +13,10 @@ jobs: build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Enable Corepack run: corepack enable - - uses: actions/setup-node@v6 + - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 with: node-version: 24.14.0 cache: 'yarn' @@ -25,7 +25,7 @@ jobs: - name: Build run: yarn run build - name: Upload workspace - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 with: name: workspace path: . @@ -35,11 +35,11 @@ jobs: runs-on: ubuntu-latest needs: build steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Enable Corepack run: corepack enable - name: Download workspace - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: name: workspace path: . @@ -54,7 +54,7 @@ jobs: JEST_JUNIT_OUTPUT_DIR: ./coverage/junit/ run: yarn test:unit --coverage - name: Store junit results - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 with: name: junit path: coverage/junit @@ -63,11 +63,11 @@ jobs: runs-on: ubuntu-latest needs: build steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Enable Corepack run: corepack enable - name: Download workspace - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: name: workspace path: . @@ -81,7 +81,7 @@ jobs: run: yarn run test:mashup - name: Store mashup artifacts if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 with: name: mashup path: ./test/mashup @@ -91,7 +91,7 @@ jobs: run: yarn run test:rendering - name: Store rendering artifacts if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 with: name: rendering path: ./test/rendering @@ -100,11 +100,11 @@ jobs: runs-on: ubuntu-latest needs: build steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 - name: Enable Corepack run: corepack enable - name: Download workspace - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8 with: name: workspace path: . @@ -121,13 +121,13 @@ jobs: run: .github/scripts/nebula_create.sh generated/hello-mashup none true true true false - name: Store barchart screenshots if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 with: name: barchart-screenshots path: generated/barchart/screenshots - name: Store mashup artifacts if: always() - uses: actions/upload-artifact@v7 + uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f # v7 with: name: mashup-artifacts path: test/mashup/__artifacts__ @@ -139,13 +139,13 @@ jobs: working-directory: . steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: fetch-depth: 0 - name: Enable Corepack run: corepack enable - name: Set up Node.js - uses: actions/setup-node@v6 + uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 with: node-version: 24.14.0 cache: 'yarn' diff --git a/.github/workflows/code-references.yml b/.github/workflows/code-references.yml index 1d3544c5c..ac1438f00 100644 --- a/.github/workflows/code-references.yml +++ b/.github/workflows/code-references.yml @@ -13,11 +13,11 @@ jobs: name: LaunchDarkly Code References runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: fetch-depth: 11 - name: LaunchDarkly Code References - uses: launchdarkly/find-code-references@v2 + uses: launchdarkly/find-code-references@89a7d362d1d4b3725fe0fe0ccd0dc69e3bdcba58 # v2 with: accessToken: ${{ secrets.LD_ACCESS_TOKEN }} projKey: QCS diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index f33b0a23b..22036f8b6 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -38,11 +38,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@38697555549f1db7851b81482ff19f1fa5c4fedc # v4 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -53,7 +53,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v4 + uses: github/codeql-action/autobuild@38697555549f1db7851b81482ff19f1fa5c4fedc # v4 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -67,4 +67,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@38697555549f1db7851b81482ff19f1fa5c4fedc # v4 diff --git a/.github/workflows/semantic.yml b/.github/workflows/semantic.yml index fce12ffea..926f610a9 100644 --- a/.github/workflows/semantic.yml +++ b/.github/workflows/semantic.yml @@ -12,6 +12,6 @@ jobs: name: Validate PR title runs-on: ubuntu-latest steps: - - uses: amannn/action-semantic-pull-request@v6 + - uses: amannn/action-semantic-pull-request@48f256284bd46cdaab1048c3721360e808335d50 # v6 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}