From cd3ceaf46ec03b25adb3a71191fe9b60f69d0b76 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Tue, 12 May 2026 19:40:55 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .github/actions/setup/action.yml | 4 ++-- .github/workflows/ci.yml | 40 ++++++++++++++++---------------- .github/workflows/publish.yml | 6 ++--- 3 files changed, 25 insertions(+), 25 deletions(-) diff --git a/.github/actions/setup/action.yml b/.github/actions/setup/action.yml index dbbabb4..6689ec3 100644 --- a/.github/actions/setup/action.yml +++ b/.github/actions/setup/action.yml @@ -4,10 +4,10 @@ description: Install pnpm + Node, restore install cache, and run pnpm install -- runs: using: composite steps: - - uses: pnpm/action-setup@v4 + - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version-file: '.nvmrc' cache: 'pnpm' diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 5f82d5d..450f65b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,9 +14,9 @@ jobs: lint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - - uses: actions/cache@v4 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: node_modules/.cache/eslint key: eslint-${{ runner.os }}-${{ hashFiles('eslint.config.mjs', 'pnpm-lock.yaml') }}-${{ github.sha }} @@ -30,7 +30,7 @@ jobs: typecheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - run: pnpm run typecheck @@ -38,7 +38,7 @@ jobs: runs-on: ubuntu-latest needs: [lint, typecheck] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - run: pnpm run build # Guard the editor's published-tarball install footprint. Catches anyone @@ -49,7 +49,7 @@ jobs: # Runs after build because the script imports the built quality dist — # tsx can't evaluate `import.meta.glob` from source. - run: pnpm --filter @templatical/playground run lint:templates - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: dist path: packages/*/dist @@ -60,14 +60,14 @@ jobs: runs-on: ubuntu-latest needs: [build] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: dist path: packages/ - run: pnpm run test:coverage - - uses: codecov/codecov-action@v5 + - uses: codecov/codecov-action@75cd11691c0faa626561e295848008c8a7dddffe # v5 with: token: ${{ secrets.CODECOV_TOKEN }} directory: . @@ -81,13 +81,13 @@ jobs: matrix: shard: [1, 2, 3] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: dist path: packages/ - - uses: actions/cache@v4 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 id: playwright-cache with: path: ~/.cache/ms-playwright @@ -97,7 +97,7 @@ jobs: - run: pnpm exec playwright install-deps chromium if: steps.playwright-cache.outputs.cache-hit == 'true' - run: pnpm exec playwright test --shard=${{ matrix.shard }}/3 - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 if: ${{ !cancelled() }} with: name: blob-report-${{ matrix.shard }} @@ -117,9 +117,9 @@ jobs: runs-on: ubuntu-latest needs: [build] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - - uses: actions/cache@v4 + - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 id: playwright-cache with: path: ~/.cache/ms-playwright @@ -129,7 +129,7 @@ jobs: - run: pnpm exec playwright install-deps chromium if: steps.playwright-cache.outputs.cache-hit == 'true' - run: pnpm run test:e2e:consumer - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 if: failure() with: name: e2e-consumer-report @@ -145,7 +145,7 @@ jobs: runs-on: ubuntu-latest needs: [build] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - run: pnpm run test:webpack-consumer @@ -159,7 +159,7 @@ jobs: runs-on: ubuntu-latest needs: [build] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - run: pnpm run test:turbopack-consumer @@ -168,15 +168,15 @@ jobs: needs: [e2e] if: ${{ !cancelled() && needs.e2e.result != 'skipped' }} steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 - uses: ./.github/actions/setup - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: path: all-blob-reports pattern: blob-report-* merge-multiple: true - run: pnpm exec playwright merge-reports --reporter html ./all-blob-reports - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: playwright-report path: playwright-report/ diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index 5358a6f..7959d46 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -13,11 +13,11 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4 + - uses: pnpm/action-setup@b906affcce14559ad1aafd4ab0e942779e9f58b1 # v4 with: run_install: false - - uses: actions/setup-node@v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version-file: '.nvmrc' cache: 'pnpm'