From 50b18fe3e9a6d050b2b9fa100400b5fe076be80b Mon Sep 17 00:00:00 2001 From: CSRBot Date: Fri, 17 Jul 2026 21:04:49 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .gitea/workflows/artifacthub-metadata.yaml | 2 +- .gitea/workflows/golang-linters.yaml | 2 +- .gitea/workflows/golang-tests.yaml | 2 +- .gitea/workflows/markdown-linters.yaml | 2 +- .gitea/workflows/release.yaml | 4 ++-- .gitea/workflows/update-docker-hub-description.yaml | 4 ++-- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.gitea/workflows/artifacthub-metadata.yaml b/.gitea/workflows/artifacthub-metadata.yaml index aa5f6ee..d2a315f 100644 --- a/.gitea/workflows/artifacthub-metadata.yaml +++ b/.gitea/workflows/artifacthub-metadata.yaml @@ -10,7 +10,7 @@ jobs: name: "Upload artifacthub-repo.yml to OCI registry" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4.4.0 with: registry: ${{ github.server_url }} diff --git a/.gitea/workflows/golang-linters.yaml b/.gitea/workflows/golang-linters.yaml index 5c286d3..6164d8c 100644 --- a/.gitea/workflows/golang-linters.yaml +++ b/.gitea/workflows/golang-linters.yaml @@ -20,7 +20,7 @@ jobs: go: [ stable ] os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ] steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: ${{ matrix.go }} diff --git a/.gitea/workflows/golang-tests.yaml b/.gitea/workflows/golang-tests.yaml index 76043e3..1b94f11 100644 --- a/.gitea/workflows/golang-tests.yaml +++ b/.gitea/workflows/golang-tests.yaml @@ -33,7 +33,7 @@ jobs: go: [ stable ] os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ] steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: ${{ matrix.go }} diff --git a/.gitea/workflows/markdown-linters.yaml b/.gitea/workflows/markdown-linters.yaml index afa91d9..a484b21 100644 --- a/.gitea/workflows/markdown-linters.yaml +++ b/.gitea/workflows/markdown-linters.yaml @@ -13,7 +13,7 @@ jobs: name: "Run markdown linter" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0 with: globs: '**/*.md' diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml index 07f93a7..58d01eb 100644 --- a/.gitea/workflows/release.yaml +++ b/.gitea/workflows/release.yaml @@ -12,7 +12,7 @@ jobs: name: "Release application" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 with: fetch-depth: 0 - name: Install curl @@ -31,7 +31,7 @@ jobs: "https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_${OS}_${ARCH}.deb" dpkg -i syft_${SYFT_VERSION}_${OS}_${ARCH}.deb rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb - - uses: volker-raschek/cosign-installer@v4.1.3-rc3 + - uses: volker-raschek/cosign-installer@7643eed6736a199595ed2a31e9979ec353a88adb # v4.1.3-rc3 with: cosign-release: "v3.1.2" # renovate: datasource=github-tags depName=sigstore/cosign - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0 diff --git a/.gitea/workflows/update-docker-hub-description.yaml b/.gitea/workflows/update-docker-hub-description.yaml index 52cf58d..2727355 100644 --- a/.gitea/workflows/update-docker-hub-description.yaml +++ b/.gitea/workflows/update-docker-hub-description.yaml @@ -10,8 +10,8 @@ jobs: update-description-on-hub-docker-io: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6.0.3 - - uses: peter-evans/dockerhub-description@v5.0.0 + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3 + - uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0 with: username: ${{ secrets.DOCKER_IO_USERNAME }} password: ${{ secrets.DOCKER_IO_PASSWORD }}