Skip to content

Commit 5e059be

Browse files
committed
update actions versions
1 parent bae6ee8 commit 5e059be

File tree

3 files changed

+13
-21
lines changed

3 files changed

+13
-21
lines changed

.github/workflows/lock.yaml

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,23 +3,19 @@ name: 'Lock threads'
33
# two weeks. This does not close open issues, only humans may do that.
44
# We find that it is easier to respond to new issues with fresh examples
55
# rather than continuing discussions on old issues.
6-
76
on:
87
schedule:
98
- cron: '0 0 * * *'
10-
119
permissions:
1210
issues: write
1311
pull-requests: write
14-
1512
concurrency:
1613
group: lock
17-
1814
jobs:
1915
lock:
2016
runs-on: ubuntu-latest
2117
steps:
22-
- uses: dessant/lock-threads@be8aa5be94131386884a6da4189effda9b14aa21
18+
- uses: dessant/lock-threads@7de207be1d3ce97a9abe6ff1306222982d1ca9f9
2319
with:
2420
issue-inactive-days: 14
2521
pr-inactive-days: 14

.github/workflows/publish.yaml

Lines changed: 9 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,8 @@ jobs:
99
outputs:
1010
hash: ${{ steps.hash.outputs.hash }}
1111
steps:
12-
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
13-
- uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
12+
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
13+
- uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
1414
with:
1515
python-version: '3.x'
1616
cache: pip
@@ -23,17 +23,17 @@ jobs:
2323
- name: generate hash
2424
id: hash
2525
run: cd dist && echo "hash=$(sha256sum * | base64 -w0)" >> $GITHUB_OUTPUT
26-
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce
26+
- uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32
2727
with:
28+
name: dist
2829
path: ./dist
2930
provenance:
3031
needs: [build]
3132
permissions:
3233
actions: read
3334
id-token: write
3435
contents: write
35-
# Can't pin with hash due to how this workflow works.
36-
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@v1.9.0
36+
uses: slsa-framework/slsa-github-generator/.github/workflows/generator_generic_slsa3.yml@07e64b653f10a80b6510f4568f685f8b7b9ea830
3737
with:
3838
base64-subjects: ${{ needs.build.outputs.hash }}
3939
create-release:
@@ -47,9 +47,8 @@ jobs:
4747
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
4848
- name: create release
4949
run: >
50-
gh release create --draft --repo ${{ github.repository }}
51-
${{ github.ref_name }}
52-
*.intoto.jsonl/* artifact/*
50+
gh release create --draft --repo ${{ github.repository }} ${{ github.ref_name }} *.intoto.jsonl/* artifact/*
51+
5352
env:
5453
GH_TOKEN: ${{ github.token }}
5554
publish-pypi:
@@ -62,10 +61,7 @@ jobs:
6261
id-token: write
6362
steps:
6463
- uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a
65-
- uses: pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e
64+
- uses: pypa/gh-action-pypi-publish@f946db0f765b9ae754e44bfd5ae5b8b91cfb37ef
6665
with:
6766
repository-url: https://test.pypi.org/legacy/
68-
packages-dir: artifact/
69-
- uses: pypa/gh-action-pypi-publish@b7f401de30cb6434a1e19f805ff006643653240e
70-
with:
71-
packages-dir: artifact/
67+
- uses: pypa/gh-action-pypi-publish@f946db0f765b9ae754e44bfd5ae5b8b91cfb37ef

.github/workflows/tests.yaml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -33,14 +33,14 @@ jobs:
3333
- {name: 'Development Versions', python: '3.8', os: ubuntu-latest, tox: py38-dev}
3434
- {name: Typing, python: '3.12', os: ubuntu-latest, tox: typing}
3535
steps:
36-
- uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744
37-
- uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1
36+
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
37+
- uses: actions/setup-python@0a5c61591373683505ea898e09a3ea4f39ef2b9c
3838
with:
3939
python-version: ${{ matrix.python }}
4040
cache: 'pip'
4141
cache-dependency-path: requirements*/*.txt
4242
- name: cache mypy
43-
uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8
43+
uses: actions/cache@13aacd865c20de90d75de3b17ebe84f7a17d57d2
4444
with:
4545
path: ./.mypy_cache
4646
key: mypy|${{ matrix.python }}|${{ hashFiles('pyproject.toml') }}

0 commit comments

Comments
 (0)