From 7d0d97d87b9d227f92d0794f61e075efd51565e7 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 11 Jul 2025 23:42:11 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .github/workflows/hyperfine.yml | 2 +- .github/workflows/registry.yml | 14 +++--- .github/workflows/registry_comment.yml | 2 +- .github/workflows/release-fig.yml | 8 ++-- .github/workflows/release-plz.yml | 8 ++-- .github/workflows/release.yml | 66 +++++++++++++------------- .github/workflows/semantic-pr-lint.yml | 2 +- .github/workflows/test-plugins.yml | 14 +++--- .github/workflows/test.yml | 62 ++++++++++++------------ .github/workflows/winget.yml | 2 +- 10 files changed, 90 insertions(+), 90 deletions(-) diff --git a/.github/workflows/hyperfine.yml b/.github/workflows/hyperfine.yml index 63794e06ae..a5a3c84866 100644 --- a/.github/workflows/hyperfine.yml +++ b/.github/workflows/hyperfine.yml @@ -27,7 +27,7 @@ jobs: - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 - run: curl https://mise.run | MISE_INSTALL_PATH="$HOME/bin/mise-release" sh - run: echo "$HOME/bin" >> "$GITHUB_PATH" - id: versions diff --git a/.github/workflows/registry.yml b/.github/workflows/registry.yml index 1ceee7a4c8..f81a87fb6a 100644 --- a/.github/workflows/registry.yml +++ b/.github/workflows/registry.yml @@ -30,15 +30,15 @@ jobs: permissions: pull-requests: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: submodules: true - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: build save-if: false - run: cargo build --all-features - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: mise path: target/debug/mise @@ -60,14 +60,14 @@ jobs: - 6 - 7 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: submodules: true - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: mise path: target/debug - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -78,7 +78,7 @@ jobs: - run: mise -v - run: mise x wait-for-gh-rate-limit -- wait-for-gh-rate-limit - run: mise i - - uses: nick-fields/retry@v3 + - uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 with: timeout_minutes: 30 retry_wait_seconds: 30 diff --git a/.github/workflows/registry_comment.yml b/.github/workflows/registry_comment.yml index 8d64bc413a..cbce9e0940 100644 --- a/.github/workflows/registry_comment.yml +++ b/.github/workflows/registry_comment.yml @@ -18,7 +18,7 @@ jobs: permissions: pull-requests: write steps: - - uses: thollander/actions-comment-pull-request@v3 + - uses: thollander/actions-comment-pull-request@24bffb9b452ba05a4f3f77933840a6a841d1b32b # v3 if: github.event.pull_request.number != null && github.actor != 'jdx' with: comment-tag: "mise-registry-bot" diff --git a/.github/workflows/release-fig.yml b/.github/workflows/release-fig.yml index 432826c36f..0e0a386bbe 100644 --- a/.github/workflows/release-fig.yml +++ b/.github/workflows/release-fig.yml @@ -10,17 +10,17 @@ jobs: ## if github.repository == 'jdx/mise' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 token: ${{ secrets.MY_RELEASE_PLEASE_TOKEN }} - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: build save-if: false - run: mkdir -p "$HOME/bin" && echo "$HOME/bin" >> "$GITHUB_PATH" - run: cargo build --all-features && cp target/debug/mise "$HOME"/bin - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -30,7 +30,7 @@ jobs: - run: mise x -- bun i - run: mise run render:fig - name: Create Autocomplete PR ## Create the autocomplete PR using this action - uses: withfig/push-to-fig-autocomplete-action@v2 + uses: withfig/push-to-fig-autocomplete-action@fb320c27ec12b225b9446373aa30b7d9c0c1eae8 # v2 with: token: ${{ secrets.MY_RELEASE_PLEASE_TOKEN }} autocomplete-spec-name: mise diff --git a/.github/workflows/release-plz.yml b/.github/workflows/release-plz.yml index 8dcb0b2f2d..87f02ba9cc 100644 --- a/.github/workflows/release-plz.yml +++ b/.github/workflows/release-plz.yml @@ -28,23 +28,23 @@ jobs: timeout-minutes: 20 runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 token: ${{ secrets.MY_RELEASE_PLEASE_TOKEN }} submodules: true - - uses: crazy-max/ghaction-import-gpg@v6 + - uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6 with: gpg_private_key: ${{ secrets.MISE_GPG_KEY }} git_user_signingkey: true git_commit_gpgsign: true git_tag_gpgsign: true - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: build - run: mkdir -p "$HOME/bin" && echo "$HOME/bin" >> "$GITHUB_PATH" - run: cargo build --all-features && cp target/debug/mise "$HOME"/bin - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8ea2c676e2..595eaa9654 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -63,16 +63,16 @@ jobs: runs-on: macos-latest steps: - if: matrix.os == 'macos' - uses: apple-actions/import-codesign-certs@v5 + uses: apple-actions/import-codesign-certs@65cfbc37e1464d733524cb555b724878f278b8c3 # v5 with: p12-file-base64: ${{ secrets.APPLE_DEVELOPER_ID_APPLICATION_CERTS_P12 }} p12-password: ${{ secrets.APPLE_DEVELOPER_ID_APPLICATION_CERTS_P12_PASS }} - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: submodules: true - name: cache crates id: cache-crates - uses: actions/cache@v4 + uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: path: ~/.cargo/registry/cache key: cargo-registry-${{ hashFiles('**/Cargo.lock') }} @@ -80,15 +80,15 @@ jobs: - if: matrix.runs-on != 'ubuntu-latest' run: rustup target add ${{matrix.target}} - if: matrix.runs-on == 'ubuntu-latest' - uses: taiki-e/install-action@v2 + uses: taiki-e/install-action@aa4fe33785fb40e67b1b3a8e0d0a3a333e269e32 # v2 with: { tool: cross } - name: build-tarball - uses: nick-fields/retry@v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 with: timeout_minutes: 20 max_attempts: 3 command: scripts/build-tarball.sh ${{matrix.target}} - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: tarball-${{matrix.target}} path: | @@ -96,7 +96,7 @@ jobs: dist/mise-*.tar.gz dist/mise-*.tar.zst if-no-files-found: error - - uses: taiki-e/install-action@v2 + - uses: taiki-e/install-action@aa4fe33785fb40e67b1b3a8e0d0a3a333e269e32 # v2 with: { tool: cargo-cache } - if: steps.cache-crates.outputs.cache-hit != 'true' run: cargo cache --autoclean @@ -113,16 +113,16 @@ jobs: - arch: x64 target: x86_64-pc-windows-msvc steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - run: rustup target add ${{matrix.target}} - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: key: ${{matrix.arch}} - run: scripts/build-tarball.ps1 ${{matrix.target}} env: OS: windows ARCH: ${{matrix.arch}} - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: tarball-${{matrix.target}} path: dist/*.zip @@ -138,7 +138,7 @@ jobs: matrix: tranche: [0, 1, 2, 3, 4, 5, 6, 7] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - name: Install zsh/fish/direnv/fd run: sudo apt-get update; sudo apt-get install zsh fish direnv fd-find - name: Install fd-find @@ -146,11 +146,11 @@ jobs: mkdir -p "$HOME/.local/bin" ln -s "$(which fdfind)" "$HOME/.local/bin/fd" echo "$HOME/.local/bin" >> "$GITHUB_PATH" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-x86_64-unknown-linux-gnu path: dist - - uses: taiki-e/install-action@v2 + - uses: taiki-e/install-action@aa4fe33785fb40e67b1b3a8e0d0a3a333e269e32 # v2 with: tool: usage-cli - run: tar -C "$HOME" -xvf "dist/mise-$(./scripts/get-version.sh)-linux-x64.tar.zst" @@ -159,7 +159,7 @@ jobs: - run: mise x wait-for-gh-rate-limit -- wait-for-gh-rate-limit - run: mise i - name: Run e2e tests - uses: nick-fields/retry@v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 env: TEST_TRANCHE: ${{matrix.tranche}} TEST_TRANCHE_COUNT: 8 @@ -174,20 +174,20 @@ jobs: timeout-minutes: 10 container: ghcr.io/jdx/mise:rpm steps: - - uses: actions/checkout@v4 - - uses: crazy-max/ghaction-import-gpg@v6 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6 with: gpg_private_key: ${{ secrets.MISE_GPG_KEY }} - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-x86_64-unknown-linux-gnu path: dist - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-aarch64-unknown-linux-gnu path: dist - run: scripts/build-rpm.sh - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: rpm path: dist/rpmrepo @@ -198,20 +198,20 @@ jobs: container: ghcr.io/jdx/mise:deb timeout-minutes: 10 steps: - - uses: actions/checkout@v4 - - uses: crazy-max/ghaction-import-gpg@v6 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6 with: gpg_private_key: ${{ secrets.MISE_GPG_KEY }} - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-x86_64-unknown-linux-gnu path: dist - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-aarch64-unknown-linux-gnu path: dist - run: scripts/build-deb.sh - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: deb path: dist/deb @@ -227,15 +227,15 @@ jobs: - e2e-linux - build-tarball-windows steps: - - uses: actions/checkout@v4 - - uses: crazy-max/ghaction-import-gpg@v6 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6 with: gpg_private_key: ${{ secrets.MISE_GPG_KEY }} git_user_signingkey: true git_commit_gpgsign: true - name: cache zipsign id: cache-zipsign - uses: actions/cache@v4 + uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: path: ~/.cargo/bin/zipsign key: cargo-zipsign @@ -249,14 +249,14 @@ jobs: mkdir -p "$HOME/.local/bin" ln -s "$(which fdfind)" "$HOME/.local/bin/fd" echo "$HOME/.local/bin" >> "$GITHUB_PATH" - - uses: actions/setup-node@v4 + - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 with: node-version: "22.x" registry-url: "https://registry.npmjs.org" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: { path: artifacts } - run: ls -R artifacts - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: path: artifacts pattern: | @@ -267,7 +267,7 @@ jobs: merge-multiple: true - run: echo "${{ secrets.MINISIGN_KEY }}" >minisign.key - run: ls -R artifacts - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-x86_64-unknown-linux-gnu path: dist @@ -280,7 +280,7 @@ jobs: CLOUDFLARE_SECRET_ACCESS_KEY: ${{ secrets.CLOUDFLARE_SECRET_ACCESS_KEY }} NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }} - name: GitHub Release Assets - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2 if: startsWith(github.event.ref, 'refs/tags/v') with: fail_on_unmatched_files: true @@ -296,7 +296,7 @@ jobs: if: startsWith(github.event.ref, 'refs/tags/v') && endsWith(github.event.ref, '0') steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - name: Bump APKBUILD run: sudo -Eu packager ./scripts/release-alpine.sh env: diff --git a/.github/workflows/semantic-pr-lint.yml b/.github/workflows/semantic-pr-lint.yml index d7f770bb65..3657dc99f9 100644 --- a/.github/workflows/semantic-pr-lint.yml +++ b/.github/workflows/semantic-pr-lint.yml @@ -14,6 +14,6 @@ jobs: permissions: pull-requests: read steps: - - uses: amannn/action-semantic-pull-request@v5 + - uses: amannn/action-semantic-pull-request@0723387faaf9b38adef4775cd42cfd5155ed6017 # v5 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/test-plugins.yml b/.github/workflows/test-plugins.yml index 36ab863ff4..9c7fbac583 100644 --- a/.github/workflows/test-plugins.yml +++ b/.github/workflows/test-plugins.yml @@ -26,14 +26,14 @@ jobs: || github.repository == 'jdx/mise' runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 - name: Rust Cache - uses: Swatinem/rust-cache@v2 + uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: build save-if: false - run: scripts/build-tarball.sh x86_64-unknown-linux-gnu - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: tarball-x86_64-unknown-linux-gnu path: | @@ -96,7 +96,7 @@ jobs: steps: - name: apt-get run: sudo apt-get update; sudo apt-get install zsh fish direnv re2c libcurl4-openssl-dev libgd-dev libonig-dev autoconf bison build-essential curl gettext git libgd-dev libcurl4-openssl-dev libedit-dev libicu-dev libjpeg-dev libmysqlclient-dev libonig-dev libpng-dev libpq-dev libreadline-dev libsqlite3-dev libssl-dev libxml2-dev libzip-dev openssl pkg-config re2c zlib1g-dev - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-x86_64-unknown-linux-gnu path: dist @@ -106,7 +106,7 @@ jobs: - run: echo "$HOME/mise/bin" >> "$GITHUB_PATH" - run: mise -v - name: ${{matrix.command}} - uses: nick-fields/retry@v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 with: timeout_minutes: 20 max_attempts: 3 @@ -175,14 +175,14 @@ jobs: steps: - name: Install zsh/fish/direnv run: sudo apt-get update; sudo apt-get install zsh fish direnv - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: tarball-x86_64-unknown-linux-gnu path: dist - run: tar -C "$HOME" -xvJf dist/mise-*-linux-x64.tar.xz - run: echo "$HOME/mise/bin" >> "$GITHUB_PATH" - name: mise install ${{matrix.plugins}}@latest - uses: nick-fields/retry@v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 with: timeout_minutes: 20 max_attempts: 3 diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 42404c66ed..65e2ed0394 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -28,21 +28,21 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 60 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: submodules: true - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: build - run: | cargo build --all-features echo "$PWD/target/debug" >> "$GITHUB_PATH" - run: mise -v - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: mise-ubuntu-latest path: target/debug/mise - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -55,21 +55,21 @@ jobs: runs-on: macos-latest timeout-minutes: 60 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: submodules: true - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: build - run: | cargo build --all-features echo "$PWD/target/debug" >> "$GITHUB_PATH" - run: mise -v - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: mise-macos-latest path: target/debug/mise - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -85,10 +85,10 @@ jobs: MISE_DATA_DIR: ~/.local/share/mise MISE_CACHE_DIR: ~/.cache/mise steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: submodules: true - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: build - shell: pwsh @@ -96,11 +96,11 @@ jobs: cargo build Add-Content $env:GITHUB_PATH "$env:GITHUB_WORKSPACE\target\debug" - run: mise -v - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4 with: name: mise-windows-latest path: target/debug/mise.exe - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -120,24 +120,24 @@ jobs: contents: write needs: [build-ubuntu, build-macos] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: repository: ${{ github.event.pull_request.head.repo.full_name }} ref: ${{ github.head_ref }} submodules: true - - uses: taiki-e/install-action@v2 + - uses: taiki-e/install-action@aa4fe33785fb40e67b1b3a8e0d0a3a333e269e32 # v2 with: tool: cargo-deny,cargo-msrv,cargo-machete - run: rustup component add llvm-tools-preview - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: unit - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: mise-${{ matrix.os }} path: target/debug - run: echo "$PWD/target/debug" >> "$GITHUB_PATH" && chmod +x target/debug/mise - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -157,18 +157,18 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 10 steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: repository: ${{ github.event.pull_request.head.repo.full_name }} ref: ${{ github.head_ref }} - run: rustup default nightly - - uses: Swatinem/rust-cache@v2 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: nightly - run: | cargo build --all-features echo "$PWD/target/debug" >> "$GITHUB_PATH" - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -188,7 +188,7 @@ jobs: matrix: tranche: [0, 1, 2, 3, 4, 5, 6, 7] steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: fetch-depth: 0 - name: Install build and test dependencies @@ -207,11 +207,11 @@ jobs: mkdir -p "$HOME/.local/bin" ln -s "$(which fdfind)" "$HOME/.local/bin/fd" echo "$HOME/.local/bin" >> "$GITHUB_PATH" - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: mise-ubuntu-latest path: target/debug - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -220,7 +220,7 @@ jobs: - run: echo "$PWD/target/debug" >> "$GITHUB_PATH" && chmod +x target/debug/mise - run: mise x wait-for-gh-rate-limit -- wait-for-gh-rate-limit - name: Test w/ coverage - uses: nick-fields/retry@v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 env: TEST_TRANCHE: ${{matrix.tranche}} TEST_TRANCHE_COUNT: 8 @@ -237,12 +237,12 @@ jobs: MISE_DATA_DIR: ~/.local/share/mise MISE_CACHE_DIR: ~/.cache/mise steps: - - uses: actions/checkout@v4 - - uses: Swatinem/rust-cache@v2 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: Swatinem/rust-cache@98c8021b550208e191a6a3145459bfc9fb29c4c0 # v2 with: shared-key: unit - name: cargo test - uses: nick-fields/retry@v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 with: timeout_minutes: 30 retry_wait_seconds: 30 @@ -256,14 +256,14 @@ jobs: MISE_DATA_DIR: ~/.local/share/mise MISE_CACHE_DIR: ~/.cache/mise steps: - - uses: actions/checkout@v4 - - uses: actions/download-artifact@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 + - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4 with: name: mise-windows-latest path: target/debug - run: ls target\debug - run: Add-Content $env:GITHUB_PATH "$env:GITHUB_WORKSPACE\target\debug" - - uses: actions/cache@v4 + - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4 with: key: ${{ runner.os }}-${{ runner.arch }}-mise-tools-${{ hashFiles('mise.lock') }} path: | @@ -272,7 +272,7 @@ jobs: - run: mise x wait-for-gh-rate-limit -- wait-for-gh-rate-limit - run: mise install - name: e2e - uses: nick-fields/retry@v3 + uses: nick-fields/retry@ce71cc2ab81d554ebbe88c79ab5975992d79ba08 # v3 with: timeout_minutes: 30 retry_wait_seconds: 30 diff --git a/.github/workflows/winget.yml b/.github/workflows/winget.yml index ee6d77f960..6ba8cf2d73 100644 --- a/.github/workflows/winget.yml +++ b/.github/workflows/winget.yml @@ -7,7 +7,7 @@ jobs: publish: runs-on: windows-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: repository: jdx/winget-pkgs token: ${{ secrets.RTX_GITHUB_BOT_TOKEN }}