diff --git a/.github/actions/build-cc-book/action.yml b/.github/actions/build-cc-book/action.yml index a5d1f31e182..c16919ef959 100644 --- a/.github/actions/build-cc-book/action.yml +++ b/.github/actions/build-cc-book/action.yml @@ -6,7 +6,7 @@ runs: steps: - name: Install mdBook tools - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: | mdbook diff --git a/.github/actions/make/action.yml b/.github/actions/make/action.yml index 49d9d1daf06..e085a9fce6e 100644 --- a/.github/actions/make/action.yml +++ b/.github/actions/make/action.yml @@ -35,7 +35,7 @@ runs: using: composite steps: - name: setup fd - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: fd-find - name: Set MAKE @@ -147,7 +147,7 @@ runs: - name: Upload artifact if it doesn't exist for this workflow run if: steps.download.outputs.found_in_this_run != 'true' - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: ${{ steps.compute-key.outputs.key }} path: artifact.tar.gz diff --git a/.github/actions/setup-and-cache-rust/action.yml b/.github/actions/setup-and-cache-rust/action.yml index b23f66cee40..e900623fc34 100644 --- a/.github/actions/setup-and-cache-rust/action.yml +++ b/.github/actions/setup-and-cache-rust/action.yml @@ -32,7 +32,7 @@ runs: run: | perl -0777 -pi -e 's/^targets = \[.*?\]//ms' rust-toolchain.toml - name: - uses: actions-rust-lang/setup-rust-toolchain@v1.17.0 + uses: actions-rust-lang/setup-rust-toolchain@166cdcfd11aee3cb47222f9ddb555ce30ddb9659 # v1.17.0 with: toolchain: ${{ inputs.toolchain }} target: ${{ inputs.target }} @@ -45,12 +45,12 @@ runs: run: | ./scripts/uninstall_inactive_rust_toolchains.sh - name: Cleanup on post - uses: gacts/run-and-post-run@v1 + uses: gacts/run-and-post-run@598d7a875d5620e0457490555b5e18e46082aa47 # v1.4.4 with: post: | sh ./scripts/clean.sh - name: Cache build artifacts - uses: actions/cache@v6.1.0 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: | ~/.cargo/registry/index/ diff --git a/.github/actions/setup-wasm-bindgen/action.yml b/.github/actions/setup-wasm-bindgen/action.yml index efe9080b0f4..6a2440d7670 100644 --- a/.github/actions/setup-wasm-bindgen/action.yml +++ b/.github/actions/setup-wasm-bindgen/action.yml @@ -14,6 +14,6 @@ runs: echo "wasm_bindgen_version=$version" >> "$GITHUB_OUTPUT" - name: Install wasm-bindgen-cli - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: wasm-bindgen-cli@${{ steps.cargo_metadata.outputs.wasm_bindgen_version }} diff --git a/.github/actions/sonatype/release/action.yml b/.github/actions/sonatype/release/action.yml index ebc2ae97fb5..06aef6219b5 100644 --- a/.github/actions/sonatype/release/action.yml +++ b/.github/actions/sonatype/release/action.yml @@ -22,19 +22,16 @@ runs: using: composite steps: - name: set up jdk 25 - uses: actions/setup-java@v5.4.0 + uses: actions/setup-java@03ad4de0992f5dab5e18fcb136590ce7c4a0ac95 # v5.6.0 with: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - - name: release artifact shell: bash working-directory: crypto-ffi/bindings diff --git a/.github/workflows/benchmark-jvm-publish.yml b/.github/workflows/benchmark-jvm-publish.yml index d75bbe62db3..cc985dcb44c 100644 --- a/.github/workflows/benchmark-jvm-publish.yml +++ b/.github/workflows/benchmark-jvm-publish.yml @@ -17,13 +17,13 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download benchmark result - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: benchmark-jvm-results path: crypto-ffi/bindings/jvm/build/reports/jmh - name: Publish benchmark result - uses: benchmark-action/github-action-benchmark@v1 + uses: benchmark-action/github-action-benchmark@52576c92bccf6ac60c8223ec7eb2565637cae9ba # v1.22.1 with: name: "JVM Benchmarks" tool: 'jmh' diff --git a/.github/workflows/benchmark-jvm.yml b/.github/workflows/benchmark-jvm.yml index 9abff183c12..5995c0f67ed 100644 --- a/.github/workflows/benchmark-jvm.yml +++ b/.github/workflows/benchmark-jvm.yml @@ -80,11 +80,9 @@ jobs: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - name: download linux library uses: ./.github/actions/make @@ -116,7 +114,7 @@ jobs: run: make jvm-bench - name: Upload benchmark result - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: benchmark-jvm-results path: crypto-ffi/bindings/jvm/build/reports/jmh/results.json diff --git a/.github/workflows/benchmark-ts-browser-publish.yml b/.github/workflows/benchmark-ts-browser-publish.yml index c21b08ec52b..c8e32927f4c 100644 --- a/.github/workflows/benchmark-ts-browser-publish.yml +++ b/.github/workflows/benchmark-ts-browser-publish.yml @@ -17,12 +17,12 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download benchmark result - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: benchmark-ts-browser-results - name: Publish benchmark result - uses: benchmark-action/github-action-benchmark@v1 + uses: benchmark-action/github-action-benchmark@52576c92bccf6ac60c8223ec7eb2565637cae9ba # v1.22.1 with: name: "Browser Benchmarks" tool: 'customBiggerIsBetter' diff --git a/.github/workflows/benchmark-ts-browser.yml b/.github/workflows/benchmark-ts-browser.yml index e19685d9a42..fd3ecdba60b 100644 --- a/.github/workflows/benchmark-ts-browser.yml +++ b/.github/workflows/benchmark-ts-browser.yml @@ -75,7 +75,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest @@ -106,7 +106,7 @@ jobs: run: jq -s add crypto-ffi/bindings/js/benches_result/*.json > benches_result.json - name: Upload benchmark result - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: benchmark-ts-browser-results path: benches_result.json diff --git a/.github/workflows/benchmark-ts-native-publish.yml b/.github/workflows/benchmark-ts-native-publish.yml index c297af9db85..c9c41d78706 100644 --- a/.github/workflows/benchmark-ts-native-publish.yml +++ b/.github/workflows/benchmark-ts-native-publish.yml @@ -17,12 +17,12 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Download benchmark result - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: name: benchmark-ts-native-results - name: Publish benchmark result - uses: benchmark-action/github-action-benchmark@v1 + uses: benchmark-action/github-action-benchmark@52576c92bccf6ac60c8223ec7eb2565637cae9ba # v1.22.1 with: name: "TS Native Benchmarks" tool: 'customBiggerIsBetter' diff --git a/.github/workflows/benchmark-ts-native.yml b/.github/workflows/benchmark-ts-native.yml index 06c0b8a74ae..ecef5416acb 100644 --- a/.github/workflows/benchmark-ts-native.yml +++ b/.github/workflows/benchmark-ts-native.yml @@ -75,7 +75,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest @@ -94,7 +94,7 @@ jobs: run: jq -s add crypto-ffi/bindings/js/benches_result/*.json > benches_result.json - name: Upload benchmark result - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: benchmark-ts-native-results path: benches_result.json diff --git a/.github/workflows/build-android.yml b/.github/workflows/build-android.yml index 8d0424f4198..1243bae2f8f 100644 --- a/.github/workflows/build-android.yml +++ b/.github/workflows/build-android.yml @@ -24,7 +24,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: setup android sdk - uses: android-actions/setup-android@v4 + uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 with: # Don't download unnecessary packages. # We only need sdkmanager for the next step. diff --git a/.github/workflows/check-ts.yml b/.github/workflows/check-ts.yml index bb939dd3519..6c49ecece79 100644 --- a/.github/workflows/check-ts.yml +++ b/.github/workflows/check-ts.yml @@ -16,7 +16,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest diff --git a/.github/workflows/deny.yml b/.github/workflows/deny.yml index b390f58c75b..1a80fe1ff64 100644 --- a/.github/workflows/deny.yml +++ b/.github/workflows/deny.yml @@ -23,7 +23,7 @@ jobs: - uses: ./.github/actions/setup-and-cache-rust with: rustflags: '' - - uses: taiki-e/install-action@v2 + - uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: cargo-deny@0.19 - name: "check licenses / supply chain" diff --git a/.github/workflows/deploy-docs.yml b/.github/workflows/deploy-docs.yml index 6c737b5ca86..b880a009543 100644 --- a/.github/workflows/deploy-docs.yml +++ b/.github/workflows/deploy-docs.yml @@ -21,7 +21,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: download pre-rendered docs - uses: actions/download-artifact@v8 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 with: pattern: '{cc-book,typescript,swift,kotlin,rust}' path: "./target/doc/${{ env.GIT_TAG }}" diff --git a/.github/workflows/docs-cc-book.yml b/.github/workflows/docs-cc-book.yml index 2b30949d182..7bc810d34ae 100644 --- a/.github/workflows/docs-cc-book.yml +++ b/.github/workflows/docs-cc-book.yml @@ -14,7 +14,7 @@ jobs: - uses: ./.github/actions/build-cc-book - - uses: actions/upload-artifact@v7.0.1 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: cc-book path: cc-book/book diff --git a/.github/workflows/docs-jvm.yml b/.github/workflows/docs-jvm.yml index 19e191b52a4..0ff2f8f6117 100644 --- a/.github/workflows/docs-jvm.yml +++ b/.github/workflows/docs-jvm.yml @@ -20,11 +20,9 @@ jobs: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - name: download linux library uses: ./.github/actions/make/jvm @@ -48,7 +46,7 @@ jobs: artifact-generation: ${{ vars.ARTIFACT_GENERATION }} - name: upload kotlin docs - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: kotlin path: target/kotlin/doc/html diff --git a/.github/workflows/docs-swift.yml b/.github/workflows/docs-swift.yml index 8953c29e7e8..77cc913788e 100644 --- a/.github/workflows/docs-swift.yml +++ b/.github/workflows/docs-swift.yml @@ -39,18 +39,18 @@ jobs: artifact-generation: ${{ vars.ARTIFACT_GENERATION }} - name: setup Xcode - uses: maxim-lobanov/setup-xcode@v1 + uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0 with: xcode-version: '26.3.0' - name: Set up Ruby environment - uses: ruby/setup-ruby@v1 + uses: ruby/setup-ruby@95ef2b042f9d7a56d8268cba8559e2842e2ad01b # v1.321.0 with: ruby-version: '3.3' - name: install jazzy run: gem install jazzy - - uses: swift-actions/setup-swift@v3 + - uses: swift-actions/setup-swift@364295d9c23900ce04d4e5cc708387921b4e50f9 # v3.0.0-beta.1 with: swift-version: "6.0" @@ -63,7 +63,7 @@ jobs: --build-tool-arguments -project,WireCoreCrypto.xcodeproj,-scheme,WireCoreCrypto,-configuration,Release \ -o ../../../../target/swift/doc - - uses: actions/upload-artifact@v7.0.1 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: swift path: target/swift/doc diff --git a/.github/workflows/docs-ts.yml b/.github/workflows/docs-ts.yml index 205e6e7acd4..1402cf9864c 100644 --- a/.github/workflows/docs-ts.yml +++ b/.github/workflows/docs-ts.yml @@ -17,7 +17,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: setup bun - uses: oven-sh/setup-bun@v2 + uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest @@ -36,7 +36,7 @@ jobs: - name: make ts docs run: make docs-ts - - uses: actions/upload-artifact@v7.0.1 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: typescript path: target/typescript/doc diff --git a/.github/workflows/interop.yml b/.github/workflows/interop.yml index f7ffe8e7160..2d08392ebd4 100644 --- a/.github/workflows/interop.yml +++ b/.github/workflows/interop.yml @@ -21,14 +21,12 @@ jobs: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - name: setup android sdk - uses: android-actions/setup-android@v4 + uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 with: # Don't download unnecessary packages. # We only need sdkmanager for the next step. @@ -42,10 +40,10 @@ jobs: echo ANDROID_NDK_ROOT=$ANDROID_NDK_HOME >> $GITHUB_ENV - name: setup Xcode - uses: maxim-lobanov/setup-xcode@v1 + uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0 with: xcode-version: '26.6.0' - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest - name: Install chrome-headless-shell diff --git a/.github/workflows/kotlin-check.yml b/.github/workflows/kotlin-check.yml index 6276ec8d845..f39803696cb 100644 --- a/.github/workflows/kotlin-check.yml +++ b/.github/workflows/kotlin-check.yml @@ -25,11 +25,9 @@ jobs: chmod a+x ktlint echo "$PWD" >> $GITHUB_PATH - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - name: download linux library uses: ./.github/actions/make/jvm diff --git a/.github/workflows/markdown.yml b/.github/workflows/markdown.yml index 3179af4053c..269540edf99 100644 --- a/.github/workflows/markdown.yml +++ b/.github/workflows/markdown.yml @@ -12,7 +12,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: setup fd - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: fd-find - name: install mdformat diff --git a/.github/workflows/package-android.yml b/.github/workflows/package-android.yml index 3d87b7f53bd..6db48424dc6 100644 --- a/.github/workflows/package-android.yml +++ b/.github/workflows/package-android.yml @@ -19,13 +19,12 @@ jobs: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 + - name: setup android sdk - uses: android-actions/setup-android@v4 + uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 - name: install ndk and set up environment run: | ndk_version=$(cat crypto-ffi/bindings/android/ndk.version) diff --git a/.github/workflows/package-ios.yml b/.github/workflows/package-ios.yml index fce7ae2b418..cb3d691c9a8 100644 --- a/.github/workflows/package-ios.yml +++ b/.github/workflows/package-ios.yml @@ -40,7 +40,7 @@ jobs: artifact-generation: ${{ vars.ARTIFACT_GENERATION }} - name: setup Xcode - uses: maxim-lobanov/setup-xcode@v1 + uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0 with: xcode-version: '26.6.0' diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index f2af7116080..141cd39462c 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -201,7 +201,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest - name: build ts @@ -214,7 +214,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest - name: build ts @@ -227,7 +227,7 @@ jobs: runs-on: macos-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest - name: build ts @@ -299,7 +299,7 @@ jobs: - uses: ./.github/actions/setup-and-cache-rust - run: cargo doc --all --no-deps --locked - - uses: actions/upload-artifact@v7.0.1 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 with: name: rust path: target/doc diff --git a/.github/workflows/prepare-publish-android.yml b/.github/workflows/prepare-publish-android.yml index 36494bb292a..e081e9f5e69 100644 --- a/.github/workflows/prepare-publish-android.yml +++ b/.github/workflows/prepare-publish-android.yml @@ -39,15 +39,12 @@ jobs: distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - - name: setup android sdk - uses: android-actions/setup-android@v4 + uses: android-actions/setup-android@40fd30fb8d7440372e1316f5d1809ec01dcd3699 # v4.0.1 - name: download android package uses: ./.github/actions/make/android/package diff --git a/.github/workflows/prepare-publish-jvm.yml b/.github/workflows/prepare-publish-jvm.yml index 70351943d68..02a7686aa67 100644 --- a/.github/workflows/prepare-publish-jvm.yml +++ b/.github/workflows/prepare-publish-jvm.yml @@ -39,13 +39,10 @@ jobs: distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - - name: download jvm bindings uses: ./.github/actions/make/bindings-kotlin-jvm with: diff --git a/.github/workflows/prepare-publish-kmp.yml b/.github/workflows/prepare-publish-kmp.yml index 68d0526a359..ef7e663ca7f 100644 --- a/.github/workflows/prepare-publish-kmp.yml +++ b/.github/workflows/prepare-publish-kmp.yml @@ -39,13 +39,10 @@ jobs: distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - - name: download ffi library uses: ./.github/actions/make/ffi-library with: diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml index d4f659afb43..d85d8e40ed5 100644 --- a/.github/workflows/publish-npm.yml +++ b/.github/workflows/publish-npm.yml @@ -30,7 +30,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest diff --git a/.github/workflows/test-android.yml b/.github/workflows/test-android.yml index a42069aa9ad..6750ceb3cd7 100644 --- a/.github/workflows/test-android.yml +++ b/.github/workflows/test-android.yml @@ -21,11 +21,10 @@ jobs: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 + - name: enable kvm group perms run: | echo 'KERNEL=="kvm", GROUP="kvm", MODE="0666", OPTIONS+="static_node=kvm"' | sudo tee /etc/udev/rules.d/99-kvm4all.rules diff --git a/.github/workflows/test-e2ei.yml b/.github/workflows/test-e2ei.yml index be7f3f152dc..01cbdd8d928 100644 --- a/.github/workflows/test-e2ei.yml +++ b/.github/workflows/test-e2ei.yml @@ -28,9 +28,8 @@ jobs: - keycloak steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: actions-rust-lang/setup-rust-toolchain@v1.17.0 + - uses: ./.github/actions/setup-and-cache-rust with: rustflags: '' - toolchain: 'stable' - uses: taiki-e/install-action@nextest - run: TEST_IDP=${{ matrix.idp }} sh scripts/run-e2ei-tests.sh diff --git a/.github/workflows/test-ios.yml b/.github/workflows/test-ios.yml index 8dd8a609a1f..0ab51124a76 100644 --- a/.github/workflows/test-ios.yml +++ b/.github/workflows/test-ios.yml @@ -19,14 +19,14 @@ jobs: runs-on: self-hosted steps: - name: Cleanup on post - uses: gacts/run-and-post-run@v1 + uses: gacts/run-and-post-run@598d7a875d5620e0457490555b5e18e46082aa47 # v1.4.4 with: post: | sh ./scripts/clean.sh - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: setup Xcode - uses: maxim-lobanov/setup-xcode@v1 + uses: maxim-lobanov/setup-xcode@ed7a3b1fda3918c0306d1b724322adc0b8cc0a90 # v1.7.0 with: xcode-version: '26.6.0' diff --git a/.github/workflows/test-jvm.yml b/.github/workflows/test-jvm.yml index 33077620dca..62f308045c9 100644 --- a/.github/workflows/test-jvm.yml +++ b/.github/workflows/test-jvm.yml @@ -21,11 +21,9 @@ jobs: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - name: download linux library uses: ./.github/actions/make/jvm diff --git a/.github/workflows/test-kmp.yml b/.github/workflows/test-kmp.yml index bb7302d5503..d28ae1ef140 100644 --- a/.github/workflows/test-kmp.yml +++ b/.github/workflows/test-kmp.yml @@ -24,11 +24,9 @@ jobs: java-version: 25 distribution: adopt - name: gradle setup - uses: gradle/actions/setup-gradle@v6.2.0 + uses: gradle/actions/setup-gradle@3f131e8634966bd73d06cc69884922b02e6faf92 # v6.2.0 with: cache-provider: basic - - name: validate gradle wrapper - uses: gradle/actions/wrapper-validation@v6.2.0 - name: download ffi library uses: ./.github/actions/make/ffi-library diff --git a/.github/workflows/test-ts-browser.yml b/.github/workflows/test-ts-browser.yml index cab4992fa45..35e3fcece6d 100644 --- a/.github/workflows/test-ts-browser.yml +++ b/.github/workflows/test-ts-browser.yml @@ -20,7 +20,7 @@ jobs: id: setup-chrome with: chrome-version: stable - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest diff --git a/.github/workflows/test-ts-native.yml b/.github/workflows/test-ts-native.yml index 31943879006..e21de78c9cc 100644 --- a/.github/workflows/test-ts-native.yml +++ b/.github/workflows/test-ts-native.yml @@ -15,7 +15,7 @@ jobs: steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: oven-sh/setup-bun@v2 + - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0 with: bun-version: latest diff --git a/.github/workflows/toml.yml b/.github/workflows/toml.yml index 3a5b990d523..a44b17d06bd 100644 --- a/.github/workflows/toml.yml +++ b/.github/workflows/toml.yml @@ -11,9 +11,9 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - - uses: uncenter/setup-taplo@v2 + - uses: uncenter/setup-taplo@b18c8c8302695fe63d6853bc004006215ac52b91 # v2 - name: setup fd - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@41049aa56687c35e0afa74eed4f09cec4f9afabf # v2.85.2 with: tool: fd-find - run: fd --glob --hidden '*.toml' -X taplo fmt --check