Skip to content

Commit 2bd71d1

Browse files
chore(deps): pin dependencies (#2202)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent ba2dd1f commit 2bd71d1

27 files changed

Lines changed: 171 additions & 198 deletions

File tree

.github/actions/setup/action.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,21 +5,21 @@ runs:
55
using: "composite"
66
steps:
77
- name: Cache uv .venv
8-
uses: actions/cache@v4
8+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
99
with:
1010
path: /tmp/.uv-cache
1111
key: uv-cache-v1-${{ runner.os }}-${{ hashFiles('**/uv.lock') }}
1212
restore-keys: uv-cache-v1-${{ runner.os }}-
1313

1414
- name: Cache pnpm store
15-
uses: actions/cache@v4
15+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
1616
with:
1717
path: ~/.local/share/pnpm/store
1818
key: pnpm-store-v1-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}
1919
restore-keys: pnpm-store-v1-${{ runner.os }}-
2020

2121
- name: Cache Next.js cache
22-
uses: actions/cache@v4
22+
uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4
2323
with:
2424
path: ${{ github.workspace }}/**/.next/cache
2525
key: nextjs-cache-v1-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }}-${{ hashFiles('**/*.js', '**/*.jsx', '**/*.ts', '**/*.tsx') }}

.github/workflows/build-buildkit.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,12 +25,12 @@ jobs:
2525
runs-on: ubuntu-latest
2626
environment: release
2727
steps:
28-
- uses: actions/checkout@v6
28+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2929

3030
# Docker
31-
- uses: docker/setup-qemu-action@v3
32-
- uses: docker/setup-buildx-action@v3
33-
- uses: docker/login-action@v3
31+
- uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
32+
- uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
33+
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
3434
with:
3535
registry: ghcr.io
3636
username: ${{ github.actor }}
@@ -58,7 +58,7 @@ jobs:
5858
VOLUME /home/oc_user/.local/share/buildkit
5959
EOF
6060
# Build and push the image
61-
- uses: docker/build-push-action@v6
61+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
6262
with:
6363
context: .
6464
push: true

.github/workflows/build-postgres.yaml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -20,12 +20,12 @@ jobs:
2020
runs-on: ubuntu-latest
2121
environment: release
2222
steps:
23-
- uses: actions/checkout@v6
23+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2424

2525
# Docker
26-
- uses: docker/setup-qemu-action@v3
27-
- uses: docker/setup-buildx-action@v3
28-
- uses: docker/login-action@v3
26+
- uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
27+
- uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
28+
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
2929
with:
3030
registry: ghcr.io
3131
username: ${{ github.actor }}
@@ -54,7 +54,7 @@ jobs:
5454
COPY --from=builder /usr/share/postgresql/17/extension/vector* /opt/bitnami/postgresql/share/extension/
5555
EOF
5656
# Build and push the image
57-
- uses: docker/build-push-action@v6
57+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
5858
with:
5959
context: .
6060
push: true

.github/workflows/common.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414
name: Check & test
1515
runs-on: ubuntu-latest
1616
steps:
17-
- uses: actions/checkout@v6
17+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
1818
- uses: ./.github/actions/setup
1919
env:
2020
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/docs-check.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212

1313
steps:
1414
- name: Check docs requirements
15-
uses: actions/github-script@v8
15+
uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8
1616
with:
1717
script: |
1818
if (/\[x\].*no docs needed/i.test(context.payload.pull_request.body || '')) {

.github/workflows/e2e-examples-test.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
env:
3030
AGENTSTACK__HOME: ${{ github.workspace }}/.agentstack
3131
steps:
32-
- uses: actions/checkout@v6
32+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3333
- name: Maximize build space
3434
uses: ./.github/actions/maximize-build-space
3535
with:
@@ -38,14 +38,14 @@ jobs:
3838
swap-size-mb: 1024
3939
remove-dotnet: 'true'
4040
- name: "Set up Lima"
41-
uses: lima-vm/lima-actions/setup@v1
41+
uses: lima-vm/lima-actions/setup@55627e31b78637bf254a8b2a14da8ea7d12564e5 # v1
4242
id: lima-actions-setup
4343
- name: "Cache ~/.cache/lima"
44-
uses: actions/cache@v5
44+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
4545
with:
4646
path: ~/.cache/lima
4747
key: lima-${{ steps.lima-actions-setup.outputs.version }}
48-
- uses: actions/checkout@v6
48+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4949
- uses: ./.github/actions/setup
5050
env:
5151
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/e2e-test.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030
env:
3131
AGENTSTACK__HOME: ${{ github.workspace }}/.agentstack
3232
steps:
33-
- uses: actions/checkout@v6
33+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
3434
- name: Maximize build space
3535
uses: ./.github/actions/maximize-build-space
3636
with:
@@ -39,14 +39,14 @@ jobs:
3939
swap-size-mb: 1024
4040
remove-dotnet: 'true'
4141
- name: "Set up Lima"
42-
uses: lima-vm/lima-actions/setup@v1
42+
uses: lima-vm/lima-actions/setup@55627e31b78637bf254a8b2a14da8ea7d12564e5 # v1
4343
id: lima-actions-setup
4444
- name: "Cache ~/.cache/lima"
45-
uses: actions/cache@v5
45+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
4646
with:
4747
path: ~/.cache/lima
4848
key: lima-${{ steps.lima-actions-setup.outputs.version }}
49-
- uses: actions/checkout@v6
49+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
5050
- uses: ./.github/actions/setup
5151
env:
5252
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/integration-test.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
timeout-minutes: 25
2525
runs-on: ubuntu-latest
2626
steps:
27-
- uses: actions/checkout@v6
27+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2828
- name: Maximize build space
2929
uses: ./.github/actions/maximize-build-space
3030
with:
@@ -33,14 +33,14 @@ jobs:
3333
swap-size-mb: 1024
3434
remove-dotnet: 'true'
3535
- name: "Set up Lima"
36-
uses: lima-vm/lima-actions/setup@v1
36+
uses: lima-vm/lima-actions/setup@55627e31b78637bf254a8b2a14da8ea7d12564e5 # v1
3737
id: lima-actions-setup
3838
- name: "Cache ~/.cache/lima"
39-
uses: actions/cache@v5
39+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
4040
with:
4141
path: ~/.cache/lima
4242
key: lima-${{ steps.lima-actions-setup.outputs.version }}
43-
- uses: actions/checkout@v6
43+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
4444
- uses: ./.github/actions/setup
4545
env:
4646
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/release.yml

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -22,18 +22,18 @@ jobs:
2222
- form
2323
- canvas
2424
steps:
25-
- uses: actions/checkout@v6
25+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2626
- id: version
2727
run: |
2828
echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
2929
echo "latestTag=$([[ ${GITHUB_REF#refs/tags/v} =~ [a-zA-Z] ]] && echo prerelease || echo latest)" >> $GITHUB_OUTPUT
30-
- uses: docker/setup-buildx-action@v3
31-
- uses: docker/login-action@v3
30+
- uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
31+
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
3232
with:
3333
registry: ghcr.io
3434
username: ${{ github.actor }}
3535
password: ${{ secrets.GITHUB_TOKEN }}
36-
- uses: docker/build-push-action@v6
36+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
3737
with:
3838
context: .
3939
file: ./agents/${{ matrix.agent }}/Dockerfile
@@ -58,7 +58,7 @@ jobs:
5858
docker kill tmp-agent
5959
AGENT_MANIFEST=$(echo "$response" | base64 -w 0)
6060
echo "content=$AGENT_MANIFEST" >> $GITHUB_OUTPUT
61-
- uses: docker/build-push-action@v6
61+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
6262
with:
6363
context: .
6464
file: ./agents/${{ matrix.agent }}/Dockerfile
@@ -83,7 +83,7 @@ jobs:
8383
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
8484
HELM_EXPERIMENTAL_OCI: "1"
8585
steps:
86-
- uses: actions/checkout@v6
86+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
8787
- id: version
8888
run: |
8989
echo "version=${GITHUB_REF#refs/tags/v}" >> $GITHUB_OUTPUT
@@ -110,16 +110,16 @@ jobs:
110110
# `sudo usermod -aG kvm $(whoami)` does not take an effect on GHA
111111
sudo chown $(whoami) /dev/kvm
112112
- run: mise run common:check:version
113-
- uses: docker/setup-qemu-action@v3
114-
- uses: docker/setup-buildx-action@v3
115-
- uses: docker/login-action@v3
113+
- uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3
114+
- uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
115+
- uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
116116
with:
117117
registry: ghcr.io
118118
username: ${{ github.actor }}
119119
password: ${{ secrets.GITHUB_TOKEN }}
120120

121121
- run: mise run 'agentstack-server:build:*'
122-
- uses: docker/build-push-action@v6
122+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
123123
with:
124124
context: ./apps/agentstack-server
125125
push: true
@@ -131,7 +131,7 @@ jobs:
131131
cache-from: type=registry,ref=ghcr.io/${{ github.repository }}/agentstack-server:cache
132132
cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/agentstack-server:cache,mode=max
133133

134-
- uses: docker/build-push-action@v6
134+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
135135
with:
136136
context: ./apps/supergateway
137137
file: ./apps/supergateway/Dockerfile
@@ -146,7 +146,7 @@ jobs:
146146
run: |
147147
KEYCLOAK_VERSION=$(grep -oP 'FROM quay.io/keycloak/keycloak:\K[0-9.]+' ./apps/keycloak-theme/Dockerfile)
148148
echo "version=$KEYCLOAK_VERSION" >> $GITHUB_OUTPUT
149-
- uses: docker/build-push-action@v6
149+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
150150
with:
151151
context: ./apps/keycloak-theme
152152
file: ./apps/keycloak-theme/Dockerfile
@@ -159,7 +159,7 @@ jobs:
159159
cache-to: type=registry,ref=ghcr.io/${{ github.repository }}/keycloak-themed:cache,mode=max
160160

161161
- run: mise run 'agentstack-ui:build:*'
162-
- uses: docker/build-push-action@v6
162+
- uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
163163
with:
164164
context: .
165165
file: ./apps/agentstack-ui/Dockerfile

.github/workflows/sdk-py-test.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -23,12 +23,12 @@ jobs:
2323
- "3.11"
2424
- "3.13"
2525
steps:
26-
- uses: actions/checkout@v6
26+
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
2727
- name: "Set up Lima"
28-
uses: lima-vm/lima-actions/setup@v1
28+
uses: lima-vm/lima-actions/setup@55627e31b78637bf254a8b2a14da8ea7d12564e5 # v1
2929
id: lima-actions-setup
3030
- name: "Cache ~/.cache/lima"
31-
uses: actions/cache@v5
31+
uses: actions/cache@cdf6c1fa76f9f475f3d7449005a359c84ca0f306 # v5
3232
with:
3333
path: ~/.cache/lima
3434
key: lima-${{ steps.lima-actions-setup.outputs.version }}

0 commit comments

Comments
 (0)