Skip to content

Commit 15a5029

Browse files
emilyklemilykl
committed
pin all 3rd party actions to commit hashes
1 parent cb4e592 commit 15a5029

File tree

8 files changed

+51
-51
lines changed

8 files changed

+51
-51
lines changed

‎.github/actions/setup-chrome-for-pytest/action.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@ runs:
55
steps:
66
- name: Set up Chrome
77
id: setup-chrome
8-
uses: browser-actions/setup-chrome@v2.1.1
8+
uses: browser-actions/setup-chrome@4f8e94349a351df0f048634f25fec36c3c91eded # v2.1.1
99
with:
1010
install-chromedriver: true
1111
- name: Set BROWSER env var

‎.github/workflows/build-doc.yml‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -10,10 +10,10 @@ jobs:
1010
build-doc:
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: actions/checkout@v6
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1414

1515
- name: Set up uv
16-
uses: astral-sh/setup-uv@v7
16+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
1717
with:
1818
python-version: "3.9"
1919

@@ -50,14 +50,14 @@ jobs:
5050
python check-or-enforce-order.py build/html
5151
5252
- name: Upload HTML docs artifact
53-
uses: actions/upload-artifact@v7
53+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
5454
with:
5555
name: doc-html
5656
path: doc/build/html/
5757

5858
- name: Create GitHub App token
5959
if: github.ref_name == 'doc-prod' && github.event_name == 'push'
60-
uses: actions/create-github-app-token@v2
60+
uses: actions/create-github-app-token@1b10c78c7865c340bc4f6099eb2f838309f1e8c3 # v3.1.1
6161
id: app-token
6262
with:
6363
app-id: ${{ vars.GRAPHING_LIBRARIES_CI_GHAPP_ID }}
@@ -67,7 +67,7 @@ jobs:
6767

6868
- name: Checkout plotly.py-docs (built)
6969
if: github.ref_name == 'doc-prod' && github.event_name == 'push'
70-
uses: actions/checkout@v6
70+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
7171
with:
7272
repository: plotly/plotly.py-docs
7373
ref: built
@@ -88,7 +88,7 @@ jobs:
8888
8989
- name: Checkout plotly.py-docs (built_ipynb)
9090
if: github.ref_name == 'doc-prod' && github.event_name == 'push'
91-
uses: actions/checkout@v6
91+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
9292
with:
9393
repository: plotly/plotly.py-docs
9494
ref: built_ipynb
@@ -107,7 +107,7 @@ jobs:
107107
108108
- name: Checkout graphing-library-docs
109109
if: github.ref_name == 'doc-prod' && github.event_name == 'push'
110-
uses: actions/checkout@v6
110+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
111111
with:
112112
repository: plotly/graphing-library-docs
113113
ref: master
@@ -136,7 +136,7 @@ jobs:
136136
137137
- name: Checkout plotly.py-docs (gh-pages)
138138
if: github.ref_name == 'doc-prod' && github.event_name == 'push'
139-
uses: actions/checkout@v6
139+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
140140
with:
141141
repository: plotly/plotly.py-docs
142142
ref: gh-pages

‎.github/workflows/build-package.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -10,17 +10,17 @@ jobs:
1010
name: plotly.js dev build
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: actions/checkout@v6
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1414
- name: Set up Python
15-
uses: actions/setup-python@v6
15+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1616
with:
1717
python-version: "3.12"
1818
- name: Set up Node
19-
uses: actions/setup-node@v6
19+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2020
with:
2121
node-version: "22"
2222
- name: Set up uv
23-
uses: astral-sh/setup-uv@v7
23+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
2424
- name: Install dependencies
2525
run: |
2626
uv venv
@@ -40,7 +40,7 @@ jobs:
4040
uv sync --extra dev_build
4141
python -m build --sdist --wheel -o dist
4242
- name: Upload dist artifacts
43-
uses: actions/upload-artifact@v7
43+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
4444
with:
4545
name: plotlyjs-dev-build-dist
4646
path: dist/
@@ -50,17 +50,17 @@ jobs:
5050
name: Full prod build
5151
runs-on: ubuntu-latest
5252
steps:
53-
- uses: actions/checkout@v6
53+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
5454
- name: Set up Python
55-
uses: actions/setup-python@v6
55+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
5656
with:
5757
python-version: "3.12"
5858
- name: Set up Node
59-
uses: actions/setup-node@v6
59+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
6060
with:
6161
node-version: "22"
6262
- name: Set up uv
63-
uses: astral-sh/setup-uv@v7
63+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
6464
- name: PyPI Build
6565
run: |
6666
uv venv
@@ -77,7 +77,7 @@ jobs:
7777
run: |
7878
tar czf output.tgz output
7979
- name: Upload output artifact
80-
uses: actions/upload-artifact@v7
80+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
8181
with:
8282
name: full-build-output
8383
path: output.tgz

‎.github/workflows/check-formatting.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -10,13 +10,13 @@ jobs:
1010
name: Run ruff check
1111
runs-on: ubuntu-latest
1212
steps:
13-
- uses: actions/checkout@v6
13+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1414
- name: Set up Python
15-
uses: actions/setup-python@v6
15+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1616
with:
1717
python-version: "3.12"
1818
- name: Set up uv
19-
uses: astral-sh/setup-uv@v7
19+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
2020
- name: Install dependencies
2121
run: |
2222
uv venv

‎.github/workflows/check-js-build.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,9 @@ jobs:
66
name: Check JS version number and build artifacts
77
runs-on: ubuntu-latest
88
steps:
9-
- uses: actions/checkout@v6
9+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1010
- name: Set up Python
11-
uses: actions/setup-python@v6
11+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1212
with:
1313
python-version: "3.x"
1414

@@ -25,12 +25,12 @@ jobs:
2525
echo "✅ Version number $JSPROJECT_VERSION in $PKGJSON_PATH matches version number $PYPROJECT_VERSION in $PYPROJECT_PATH"
2626
fi
2727
- name: Install Node
28-
uses: actions/setup-node@v6
28+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2929
with:
3030
node-version: '22'
3131

3232
- name: Set up uv
33-
uses: astral-sh/setup-uv@v7
33+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
3434

3535
- name: Copy current files to a temporary directory
3636
run: |
@@ -62,7 +62,7 @@ jobs:
6262
fi
6363
6464
- name: Store the build artifacts from plotly/labextension
65-
uses: actions/upload-artifact@v7
65+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
6666
if: failure()
6767
with:
6868
name: labextension

‎.github/workflows/run-percy.yml‎

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -15,21 +15,21 @@ jobs:
1515
PERCY_PROJECT: plotly/plotly.py
1616
PERCY_TOKEN: ${{ secrets.PERCY_PYTHON_TOKEN_V0 }}
1717
steps:
18-
- uses: actions/checkout@v6
18+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1919
- name: Set up Python
20-
uses: actions/setup-python@v6
20+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2121
with:
2222
python-version: "3.11"
2323
- name: Set up Node
24-
uses: actions/setup-node@v6
24+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2525
with:
2626
node-version: "22"
2727
- name: Set up Chrome
28-
uses: browser-actions/setup-chrome@v2.1.1
28+
uses: browser-actions/setup-chrome@4f8e94349a351df0f048634f25fec36c3c91eded # v2.1.1
2929
with:
3030
install-chromedriver: true
3131
- name: Set up uv
32-
uses: astral-sh/setup-uv@v7
32+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
3333
- name: Install requirements
3434
run: |
3535
uv venv

‎.github/workflows/run-pytest.yml‎

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -14,13 +14,13 @@ jobs:
1414
matrix:
1515
python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
1616
steps:
17-
- uses: actions/checkout@v6
17+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1818
- name: Set up Python
19-
uses: actions/setup-python@v6
19+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
2020
with:
2121
python-version: ${{ matrix.python-version }}
2222
- name: Set up uv
23-
uses: astral-sh/setup-uv@v7
23+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
2424
- name: Install dependencies
2525
run: |
2626
uv venv
@@ -41,15 +41,15 @@ jobs:
4141
matrix:
4242
python-version: ["3.8", "3.9", "3.10", "3.11", "3.12", "3.13"]
4343
steps:
44-
- uses: actions/checkout@v6
44+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
4545
- name: Set up Python
46-
uses: actions/setup-python@v6
46+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
4747
with:
4848
python-version: ${{ matrix.python-version }}
4949
- name: Set up Chrome for Pytest
5050
uses: ./.github/actions/setup-chrome-for-pytest
5151
- name: Set up uv
52-
uses: astral-sh/setup-uv@v7
52+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
5353
- name: Install dependencies
5454
run: |
5555
uv venv
@@ -85,15 +85,15 @@ jobs:
8585
name: Optional tests, Pandas 1 (Python 3.9, Pandas 1.2.4)
8686
runs-on: ubuntu-latest
8787
steps:
88-
- uses: actions/checkout@v6
88+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
8989
- name: Set up Python
90-
uses: actions/setup-python@v6
90+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
9191
with:
9292
python-version: "3.9"
9393
- name: Set up Chrome for browser tests
9494
uses: ./.github/actions/setup-chrome-for-pytest
9595
- name: Set up uv
96-
uses: astral-sh/setup-uv@v7
96+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
9797
- name: Install dependencies
9898
run: |
9999
uv venv
@@ -129,17 +129,17 @@ jobs:
129129
name: Optional tests (Kaleido only), Kaleido v0 (Python 3.12, Kaleido v0.2.1)
130130
runs-on: ubuntu-latest
131131
steps:
132-
- uses: actions/checkout@v6
132+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
133133
- name: Set up Python
134-
uses: actions/setup-python@v6
134+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
135135
with:
136136
python-version: "3.12"
137137
- name: Set up Chrome
138-
uses: browser-actions/setup-chrome@v2.1.1
138+
uses: browser-actions/setup-chrome@4f8e94349a351df0f048634f25fec36c3c91eded # v2.1.1
139139
with:
140140
install-chromedriver: true
141141
- name: Set up uv
142-
uses: astral-sh/setup-uv@v7
142+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
143143
- name: Install dependencies
144144
run: |
145145
uv venv

‎.github/workflows/test-release.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -9,21 +9,21 @@ jobs:
99
runs-on: ubuntu-latest
1010

1111
steps:
12-
- uses: actions/checkout@v6
12+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
1313
with:
1414
persist-credentials: false
1515
- name: Set up Python
16-
uses: actions/setup-python@v6
16+
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
1717
with:
1818
python-version: "3.x"
1919

2020
- name: Install Node
21-
uses: actions/setup-node@v6
21+
uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
2222
with:
2323
node-version: '22'
2424

2525
- name: Set up uv
26-
uses: astral-sh/setup-uv@v7
26+
uses: astral-sh/setup-uv@cec208311dfd045dd5311c1add060b2062131d57 # v8.0.0
2727

2828
- name: Install npm dependencies
2929
run: |
@@ -43,7 +43,7 @@ jobs:
4343
- name: Build a binary wheel and a source tarball
4444
run: python3 -m build
4545
- name: Store the distribution packages
46-
uses: actions/upload-artifact@v7
46+
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
4747
with:
4848
name: python-package-distributions
4949
path: dist/
@@ -63,7 +63,7 @@ jobs:
6363

6464
steps:
6565
- name: Download all the dists
66-
uses: actions/download-artifact@v7
66+
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
6767
with:
6868
name: python-package-distributions
6969
path: dist/

0 commit comments

Comments
 (0)