Merge pull request #156 from ZeitOnline/renovate/pin-dependencies

MAINT: Pin dependencies
ZeitOnline · Jan 30, 2025 · bcf401b · bcf401b
2 parents 1d29d4b + 7e4bf1f
commit bcf401b
Show file tree

Hide file tree

Showing 3 changed files with 10 additions and 10 deletions.
diff --git a/.github/workflows/docs-trigger-build.yaml b/.github/workflows/docs-trigger-build.yaml
@@ -15,7 +15,7 @@ jobs:
 
     steps:
       - name: Trigger Repository Dispatch in docs
-        uses: peter-evans/[email protected]
+        uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0
         with:
           token: ${{ secrets.PRIVATE_REPO_ACCESS_PAT }}
           repository: ZeitOnline/docs

diff --git a/.github/workflows/release-api-docs.yaml b/.github/workflows/release-api-docs.yaml
@@ -17,16 +17,16 @@ jobs:
       RELEASE_TAG: api-docs-latest
 
     steps:
-      - uses: actions/[email protected]
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Setup Node.js
-        uses: actions/[email protected]
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: '14'
 
       - name: Cache dependencies
         id: cache
-        uses: actions/[email protected]
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ./docs/api/node_modules
           key: modules-${{ hashFiles('docs/api/package-lock.json') }}
@@ -49,7 +49,7 @@ jobs:
           git push origin ${{ env.RELEASE_TAG }}
 
       - name: Release
-        uses: softprops/[email protected]
+        uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
         with:
           tag_name: ${{ env.RELEASE_TAG }}
           files: swagger-api-docs.tar.gz
@@ -63,7 +63,7 @@ jobs:
 
     steps:
       - name: Trigger Repository Dispatch in docs
-        uses: peter-evans/[email protected]
+        uses: peter-evans/repository-dispatch@ff45666b9427631e3450c54a1bcbee4d9ff4d7c0 # v3.0.0
         with:
           token: ${{ secrets.PRIVATE_REPO_ACCESS_PAT }}
           repository: ZeitOnline/docs

diff --git a/.github/workflows/testrunner.yaml b/.github/workflows/testrunner.yaml
@@ -17,23 +17,23 @@ jobs:
       contents: "read"
 
     steps:
-      - uses: actions/[email protected]
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - uses: actions/[email protected]
+      - uses: actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
         with:
           python-version: "3.12"
           cache: "pipenv"
       - run: pip install pipenv
 
-      - uses: actions/[email protected]
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version: "20"
           cache: "npm"
           cache-dependency-path: "docs/api/package-lock.json"
 
       - run: bin/test
 
-      - uses: slackapi/[email protected]
+      - uses: slackapi/slack-github-action@485a9d42d3a73031f12ec201c457e2162c45d02d # v2.0.0
         if: failure() && github.ref_name == 'main'
         with:
           method: chat.postMessage