From 7dd35db1aca6d7c4e42f71a51dacadf3fafb6910 Mon Sep 17 00:00:00 2001 From: Steve Dodier-Lazaro Date: Thu, 11 Jun 2026 10:18:14 +0200 Subject: [PATCH] CI: Fix last unpinned action versions --- .github/actions/setup-node-and-install/action.yml | 6 +++--- .github/workflows/generate-sandboxes.yml | 2 +- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/actions/setup-node-and-install/action.yml b/.github/actions/setup-node-and-install/action.yml index 754d7dcba690..fb7fd0a25248 100644 --- a/.github/actions/setup-node-and-install/action.yml +++ b/.github/actions/setup-node-and-install/action.yml @@ -11,7 +11,7 @@ runs: using: 'composite' steps: - name: Setup Node.js - uses: actions/setup-node@v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version-file: '.nvmrc' @@ -23,7 +23,7 @@ runs: # runner-internal token that bypasses `permissions:`, so splitting is the only # reliable way to prevent pull_request_target runs from poisoning the shared cache. - name: Restore cached dependencies - uses: actions/cache/restore@v4 + uses: actions/cache/restore@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: | ~/.yarn/berry/cache @@ -45,7 +45,7 @@ runs: - name: Save cached dependencies if: github.event_name != 'pull_request_target' - uses: actions/cache/save@v4 + uses: actions/cache/save@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 with: path: | ~/.yarn/berry/cache diff --git a/.github/workflows/generate-sandboxes.yml b/.github/workflows/generate-sandboxes.yml index 5a7a2feca4ef..431edb241922 100644 --- a/.github/workflows/generate-sandboxes.yml +++ b/.github/workflows/generate-sandboxes.yml @@ -76,7 +76,7 @@ jobs: ref: ${{ matrix.branch }} persist-credentials: false - - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #6.4.0 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version-file: '.nvmrc'