From 73bff455fb625a2afd536a0bab163d875c9fa70a Mon Sep 17 00:00:00 2001 From: rgarcia <72655+rgarcia@users.noreply.github.com> Date: Fri, 13 Nov 2026 21:33:35 +0000 Subject: [PATCH] Restore generator-emitted action pins under actions.lock --- .github/workflows/actions.lock | 40 ++++++++++++++-------------- .github/workflows/ci.yml | 20 +++++++------- .github/workflows/publish-npm.yml | 6 ++--- .github/workflows/release-doctor.yml | 2 +- .github/workflows/release-please.yml | 6 ++--- .github/workflows/stlc-promote.yml | 4 +-- .github/workflows/stlc-sync.yml | 2 +- 7 files changed, 40 insertions(+), 40 deletions(-) diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock index 4751f8d..53c7814 100644 --- a/.github/workflows/actions.lock +++ b/.github/workflows/actions.lock @@ -4,54 +4,54 @@ version: 'v0.0.3' workflows: '.github/workflows/ci.yml': - - 'actions/checkout@v6.0.2' - - 'actions/github-script@v8.0.0' - - 'actions/setup-node@v4.4.0' - - 'pnpm/action-setup@v4.3.0' + - 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' + - 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd' + - 'actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020' + - 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' '.github/workflows/publish-npm.yml': - - 'actions/checkout@v6.0.2' - - 'actions/setup-node@v3.9.1' - - 'pnpm/action-setup@v4.3.0' + - 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' + - 'actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610' + - 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' '.github/workflows/release-doctor.yml': - - 'actions/checkout@v6.0.2' + - 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' '.github/workflows/release-please.yml': - - 'actions/create-github-app-token@v1.12.0' - - 'actions/setup-node@v4.4.0' - - 'pnpm/action-setup@v4.3.0' + - 'actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547' + - 'actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020' + - 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1' '.github/workflows/semgrep.yml': [] '.github/workflows/stlc-promote.yml': - - 'actions/checkout@v6.0.2' - - 'actions/create-github-app-token@v1.12.0' + - 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' + - 'actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547' '.github/workflows/stlc-sync.yml': - - 'actions/checkout@v6.0.2' + - 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd' '.github/workflows/vuln-remediation.yml': [] dependencies: - 'actions/checkout@v6.0.2': + 'actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd': ref: 'v6.0.2' commit: 'sha1-de0fac2e4500dabe0009e67214ff5f5447ce83dd' owner_id: 44036562 repo_id: 197814629 - 'actions/create-github-app-token@v1.12.0': + 'actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547': ref: 'v1.12.0' commit: 'sha1-d72941d797fd3113feb6b93fd0dec494b13a2547' owner_id: 44036562 repo_id: 642580244 - 'actions/github-script@v8.0.0': + 'actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd': ref: 'v8.0.0' commit: 'sha1-ed597411d8f924073f98dfc5c65a23a2325f34cd' owner_id: 44036562 repo_id: 205262760 - 'actions/setup-node@v3.9.1': + 'actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610': ref: 'v3.9.1' commit: 'sha1-3235b876344d2a9aa001b8d1453c930bba69e610' owner_id: 44036562 repo_id: 189476904 - 'actions/setup-node@v4.4.0': + 'actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020': ref: 'v4.4.0' commit: 'sha1-49933ea5288caeca8642d1e84afbd3f7d6820020' owner_id: 44036562 repo_id: 189476904 - 'pnpm/action-setup@v4.3.0': + 'pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1': ref: 'v4.3.0' commit: 'sha1-b906affcce14559ad1aafd4ab0e942779e9f58b1' owner_id: 21320719 diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2a76d36..2bbddc5 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -21,15 +21,15 @@ jobs: runs-on: ${{ startsWith(github.repository, 'stainless-sdks/') && 'depot-ubuntu-24.04' || 'ubuntu-latest' }} if: (github.event_name == 'push' || github.event.pull_request.head.repo.fork) && (github.event_name != 'push' || github.event.head_commit.message != 'codegen metadata') steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Node - uses: actions/setup-node@v4.4.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '24' - name: Set up pnpm - uses: pnpm/action-setup@v4.3.0 + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 with: version: '10.30.1' @@ -48,15 +48,15 @@ jobs: contents: read id-token: write steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Node - uses: actions/setup-node@v4.4.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '24' - name: Set up pnpm - uses: pnpm/action-setup@v4.3.0 + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 with: version: '10.30.1' @@ -71,7 +71,7 @@ jobs: github.repository == 'stainless-sdks/hypeman-typescript' && !startsWith(github.ref, 'refs/heads/stl/') id: github-oidc - uses: actions/github-script@v8.0.0 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: script: core.setOutput('github_token', await core.getIDToken()); @@ -90,15 +90,15 @@ jobs: runs-on: ${{ startsWith(github.repository, 'stainless-sdks/') && 'depot-ubuntu-24.04' || 'ubuntu-latest' }} if: github.event_name == 'push' || github.event.pull_request.head.repo.fork steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Node - uses: actions/setup-node@v4.4.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: node-version: '24' - name: Set up pnpm - uses: pnpm/action-setup@v4.3.0 + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 with: version: '10.30.1' diff --git a/.github/workflows/publish-npm.yml b/.github/workflows/publish-npm.yml index fc20342..99eacbf 100644 --- a/.github/workflows/publish-npm.yml +++ b/.github/workflows/publish-npm.yml @@ -17,15 +17,15 @@ jobs: id-token: write steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Node - uses: actions/setup-node@v3.9.1 + uses: actions/setup-node@3235b876344d2a9aa001b8d1453c930bba69e610 # v3.9.1 with: node-version: '24' - name: Set up pnpm - uses: pnpm/action-setup@v4.3.0 + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 - name: Install dependencies run: | diff --git a/.github/workflows/release-doctor.yml b/.github/workflows/release-doctor.yml index f9a7e1f..8a423b6 100644 --- a/.github/workflows/release-doctor.yml +++ b/.github/workflows/release-doctor.yml @@ -12,7 +12,7 @@ jobs: if: github.repository == 'kernel/hypeman-ts' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch' || startsWith(github.head_ref, 'release-please') || github.head_ref == 'next') steps: - - uses: actions/checkout@v6.0.2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Check release environment run: | diff --git a/.github/workflows/release-please.yml b/.github/workflows/release-please.yml index c26073c..f126e9c 100644 --- a/.github/workflows/release-please.yml +++ b/.github/workflows/release-please.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Mint release token id: release-token - uses: actions/create-github-app-token@v1.12.0 + uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1 with: app-id: ${{ secrets.ADMIN_APP_ID }} private-key: ${{ secrets.ADMIN_APP_PRIVATE_KEY }} @@ -36,12 +36,12 @@ jobs: permission-workflows: write - name: Set up Node - uses: actions/setup-node@v4.4.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: '18.20.2' - name: Set up pnpm - uses: pnpm/action-setup@v4.3.0 + uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4.3.0 with: version: '9.11.0' run_install: false diff --git a/.github/workflows/stlc-promote.yml b/.github/workflows/stlc-promote.yml index da739eb..b507392 100644 --- a/.github/workflows/stlc-promote.yml +++ b/.github/workflows/stlc-promote.yml @@ -21,14 +21,14 @@ jobs: cancel-in-progress: true steps: - name: Check out staging - uses: actions/checkout@v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 persist-credentials: false - name: Mint production token id: production-token - uses: actions/create-github-app-token@v1.12.0 + uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1 with: app-id: ${{ secrets.ADMIN_APP_ID }} private-key: ${{ secrets.ADMIN_APP_PRIVATE_KEY }} diff --git a/.github/workflows/stlc-sync.yml b/.github/workflows/stlc-sync.yml index 23f7ed3..fbdc92b 100644 --- a/.github/workflows/stlc-sync.yml +++ b/.github/workflows/stlc-sync.yml @@ -27,7 +27,7 @@ jobs: cancel-in-progress: true steps: - name: Check out staging - uses: actions/checkout@v6.0.2 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0