Pin GitHub action versions (#805)

This also cleans up unnecessary env and LFS configs.

Author: 72636c

.changeset/spicy-gifts-smash.md

@@ -0,0 +1,5 @@
+---
+"skuba": patch
+---
+
+template/oss-npm-package: Pin GitHub action versions

.github/workflows/codeql-analysis.yml

@@ -3,11 +3,10 @@
 #
 # You may wish to alter this file to override the set of languages analyzed,
 # or to provide custom queries or build logic.
-name: 'CodeQL'
+name: CodeQL
 
 on:
   push:
-    branches: [beta, main, master]
   pull_request:
   schedule:
     - cron: '0 22 * * 0'
@@ -22,7 +21,7 @@ jobs:
       matrix:
         # Override automatic language detection by changing the below list
         # Supported options are ['csharp', 'cpp', 'go', 'java', 'javascript', 'python']
-        language: ['javascript']
+        language: [javascript]
         # Learn more...
         # https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/configuring-code-scanning#overriding-automatic-language-detection
 

.github/workflows/release.yml

@@ -10,17 +10,14 @@ jobs:
   release:
     name: Publish & Deploy
     runs-on: ubuntu-latest
-    env:
-      CI: true
     steps:
       - name: Check out repo
-        uses: actions/checkout@master
+        uses: actions/checkout@v3
         with:
           fetch-depth: 0
-          lfs: true
 
       - name: Set up Node.js 16.x
-        uses: actions/setup-node@master
+        uses: actions/setup-node@v2
         with:
           node-version: 16.x
 

.github/workflows/validate.yml

@@ -19,16 +19,12 @@ jobs:
   core:
     name: Lint & Test
     runs-on: ubuntu-latest
-    env:
-      CI: true
     steps:
       - name: Check out repo
-        uses: actions/checkout@master
-        with:
-          lfs: true
+        uses: actions/checkout@v3
 
       - name: Set up Node.js 16.x
-        uses: actions/setup-node@master
+        uses: actions/setup-node@v2
         with:
           node-version: 16.x
 
@@ -52,8 +48,6 @@ jobs:
   template:
     name: Integrate
     runs-on: ubuntu-latest
-    env:
-      CI: true
     strategy:
       matrix:
         template:
@@ -66,12 +60,10 @@ jobs:
           - private-npm-package
     steps:
       - name: Check out repo
-        uses: actions/checkout@master
-        with:
-          lfs: true
+        uses: actions/checkout@v3
 
       - name: Set up Node.js 16.x
-        uses: actions/setup-node@master
+        uses: actions/setup-node@v2
         with:
           node-version: 16.x
 

template/oss-npm-package/.github/workflows/release.yml

@@ -10,17 +10,14 @@ jobs:
   release:
     name: Publish & Deploy
     runs-on: ubuntu-latest
-    env:
-      CI: true
     steps:
       - name: Check out repo
-        uses: actions/checkout@master
+        uses: actions/checkout@v3
         with:
           fetch-depth: 0
-          lfs: true
 
       - name: Set up Node.js 16.x
-        uses: actions/setup-node@master
+        uses: actions/setup-node@v2
         with:
           node-version: 16.x
 

template/oss-npm-package/.github/workflows/validate.yml

@@ -8,16 +8,12 @@ jobs:
   validate:
     name: Lint & Test
     runs-on: ubuntu-latest
-    env:
-      CI: true
     steps:
       - name: Check out repo
-        uses: actions/checkout@master
-        with:
-          lfs: true
+        uses: actions/checkout@v3
 
       - name: Set up Node.js 16.x
-        uses: actions/setup-node@master
+        uses: actions/setup-node@v2
         with:
           node-version: 16.x