From 04f8128c548e230552cbc2ced2e2730be8ed8f9c Mon Sep 17 00:00:00 2001 From: Luca Forstner Date: Mon, 23 Mar 2026 22:48:47 +0100 Subject: [PATCH 1/2] chore: Pin github actions to commit This PR pins all GitHub actions in this repository to a specific git SHA. It was created automatically. --- .github/workflows/openapi-spec-watch.yml | 4 ++-- .github/workflows/release.yml | 10 +++++----- .github/workflows/test.yml | 4 ++-- 3 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/openapi-spec-watch.yml b/.github/workflows/openapi-spec-watch.yml index 82daead..b38a416 100644 --- a/.github/workflows/openapi-spec-watch.yml +++ b/.github/workflows/openapi-spec-watch.yml @@ -12,10 +12,10 @@ jobs: contents: write steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 - name: Set up Python run: uv python install 3.12 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 19b8076..c8cfdb3 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -9,10 +9,10 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Install uv - uses: astral-sh/setup-uv@v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 # v7.6.0 - name: Install dependencies run: uv sync --all-extras --dev @@ -28,7 +28,7 @@ jobs: id-token: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 with: fetch-depth: 0 @@ -52,7 +52,7 @@ jobs: fi - name: Set up Python - uses: actions/setup-python@v5 + uses: actions/setup-python@a26af69be951a213d495a4c3e4e4022e16d87065 # v5.6.0 with: python-version: "3.12" @@ -65,7 +65,7 @@ jobs: uses: pypa/gh-action-pypi-publish@release/v1 - name: Create GitHub Release - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 with: generate_release_notes: true files: | diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 0ffa1d2..356611b 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -13,10 +13,10 @@ jobs: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1 - name: Install uv - uses: astral-sh/setup-uv@v5 + uses: astral-sh/setup-uv@d4b2f3b6ecc6e67c4457f6d3e41ec42d3d0fcb86 # v5.4.2 with: enable-cache: true From 207f9e809bc9db2d30a550b583d53e190db4b4f8 Mon Sep 17 00:00:00 2001 From: Luca Forstner Date: Mon, 23 Mar 2026 23:03:24 +0100 Subject: [PATCH 2/2] chore: Pin github actions to commit This PR pins all GitHub actions in this repository to a specific git SHA. It was created automatically. --- .github/workflows/release.yml | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index c8cfdb3..cb95b46 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -62,8 +62,7 @@ jobs: python -m build - name: Publish to PyPI - uses: pypa/gh-action-pypi-publish@release/v1 - + uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e # release/v1 - name: Create GitHub Release uses: softprops/action-gh-release@153bb8e04406b158c6c84fc1615b65b24149a1fe # v2.6.1 with: