From cd18bf926f5c0089b7374e8a764e04e7d3f68ccd Mon Sep 17 00:00:00 2001 From: "P. L. Lim" <2090236+pllim@users.noreply.github.com> Date: Fri, 27 Sep 2024 12:01:49 -0400 Subject: [PATCH] MNT: Use hash for Action workflow versions and update if needed --- .github/workflows/build.yml | 4 ++-- .github/workflows/changelog.yml | 6 +++--- .github/workflows/data.yml | 6 +++--- .github/workflows/label_pull_request.yml | 2 +- .github/workflows/roman_ci.yml | 8 ++++---- .github/workflows/roman_ci_cron.yaml | 6 +++--- .github/workflows/tests_devdeps.yml | 6 +++--- 7 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 72d6cd43b..545d75565 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -11,11 +11,11 @@ jobs: name: check that `requirements-sdp.txt` is populated runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 - if: github.event_name == 'release' run: grep -v '^ *#' requirements-sdp.txt build: - uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@v1 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/publish_pure_python.yml@924441154cf3053034c6513d5e06c69d262fb9a6 # v1.13.0 needs: [ check ] with: upload_to_pypi: ${{ (github.event_name == 'release') && (github.event.action == 'released') }} diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml index ba3140df6..08d9e0229 100644 --- a/.github/workflows/changelog.yml +++ b/.github/workflows/changelog.yml @@ -18,10 +18,10 @@ jobs: if: ${{ !contains(github.event.pull_request.labels.*.name, 'no-changelog-entry-needed') }} runs-on: ubuntu-latest steps: - - uses: actions/setup-python@v5 + - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0 with: python-version: 3 - - uses: actions/checkout@v4 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 with: fetch-depth: 0 - run: pip install . @@ -32,7 +32,7 @@ jobs: if: ${{ !contains(github.event.pull_request.labels.*.name, 'allow-manual-changelog-edit') }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0 with: fetch-depth: 0 - name: prevent direct changes to `CHANGES.rst` (write a towncrier fragment in `changes/` instead; you can override this with the `allow-manual-changelog-edit` label) diff --git a/.github/workflows/data.yml b/.github/workflows/data.yml index 520b61c11..d54607922 100644 --- a/.github/workflows/data.yml +++ b/.github/workflows/data.yml @@ -13,7 +13,7 @@ on: jobs: download_webbpsf_data: - uses: spacetelescope/webbpsf/.github/workflows/download_data.yml@develop + uses: spacetelescope/webbpsf/.github/workflows/download_data.yml@beda656c80a0254e6f80649d9c9c49235634522f # v1.4.0 with: minimal: ${{ github.event_name != 'workflow_dispatch' && true || inputs.webbpsf_minimal }} move_data_cache_path: @@ -21,7 +21,7 @@ jobs: runs-on: ubuntu-latest steps: - name: retrieve cached WebbPSF data - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 with: path: ${{ needs.download_webbpsf_data.outputs.cache_path }} key: ${{ needs.download_webbpsf_data.outputs.cache_key }} @@ -30,7 +30,7 @@ jobs: - run: echo WEBBPSF_PATH=/tmp/data/webbpsf-data/ >> $GITHUB_ENV # save a new cache to the generalized data directory - name: save a single combined data cache - uses: actions/cache/save@v4 + uses: actions/cache/save@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2 with: path: /tmp/data/ key: ${{ needs.download_webbpsf_data.outputs.cache_key }} diff --git a/.github/workflows/label_pull_request.yml b/.github/workflows/label_pull_request.yml index e2dfff99f..b37039402 100644 --- a/.github/workflows/label_pull_request.yml +++ b/.github/workflows/label_pull_request.yml @@ -10,7 +10,7 @@ jobs: triage: runs-on: ubuntu-latest steps: - - uses: actions/labeler@v5 + - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0 if: github.event_name == 'pull_request_target' || github.event_name == 'pull_request' with: repo-token: "${{ secrets.GITHUB_TOKEN }}" diff --git a/.github/workflows/roman_ci.yml b/.github/workflows/roman_ci.yml index 5a9f1c1f8..f1cfd9f1b 100644 --- a/.github/workflows/roman_ci.yml +++ b/.github/workflows/roman_ci.yml @@ -32,16 +32,16 @@ concurrency: jobs: check: - uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@924441154cf3053034c6513d5e06c69d262fb9a6 # v1.13.0 with: envs: | - linux: check-dependencies webbpsf_data_cache: - uses: spacetelescope/webbpsf/.github/workflows/retrieve_cache.yml@develop + uses: spacetelescope/webbpsf/.github/workflows/retrieve_cache.yml@beda656c80a0254e6f80649d9c9c49235634522f # v1.4.0 with: minimal: true latest_crds_contexts: - uses: spacetelescope/crds/.github/workflows/contexts.yml@master + uses: spacetelescope/crds/.github/workflows/contexts.yml@d96060f99a7ca75969f6652b050243592f4ebaeb # 12.0.0 crds_context: needs: [ latest_crds_contexts ] runs-on: ubuntu-latest @@ -51,7 +51,7 @@ jobs: outputs: context: ${{ steps.context.outputs.context }} test: - uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@924441154cf3053034c6513d5e06c69d262fb9a6 # v1.13.0 needs: [ webbpsf_data_cache, crds_context ] secrets: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} diff --git a/.github/workflows/roman_ci_cron.yaml b/.github/workflows/roman_ci_cron.yaml index d509ede99..be76c9cb4 100644 --- a/.github/workflows/roman_ci_cron.yaml +++ b/.github/workflows/roman_ci_cron.yaml @@ -36,12 +36,12 @@ concurrency: jobs: webbpsf_data_cache: if: (github.repository == 'spacetelescope/romancal' && (github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'workflow_dispatch' || contains(github.event.pull_request.labels.*.name, 'run scheduled tests'))) - uses: spacetelescope/webbpsf/.github/workflows/retrieve_cache.yml@develop + uses: spacetelescope/webbpsf/.github/workflows/retrieve_cache.yml@beda656c80a0254e6f80649d9c9c49235634522f # v1.4.0 with: minimal: true latest_crds_contexts: if: (github.repository == 'spacetelescope/romancal' && (github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'workflow_dispatch' || contains(github.event.pull_request.labels.*.name, 'run scheduled tests'))) - uses: spacetelescope/crds/.github/workflows/contexts.yml@master + uses: spacetelescope/crds/.github/workflows/contexts.yml@d96060f99a7ca75969f6652b050243592f4ebaeb # 12.0.0 crds_context: needs: [ latest_crds_contexts ] runs-on: ubuntu-latest @@ -51,7 +51,7 @@ jobs: outputs: context: ${{ steps.context.outputs.context }} test: - uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@924441154cf3053034c6513d5e06c69d262fb9a6 # v1.13.0 needs: [ webbpsf_data_cache, crds_context ] secrets: CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }} diff --git a/.github/workflows/tests_devdeps.yml b/.github/workflows/tests_devdeps.yml index a48106053..1f12da40b 100644 --- a/.github/workflows/tests_devdeps.yml +++ b/.github/workflows/tests_devdeps.yml @@ -37,12 +37,12 @@ concurrency: jobs: webbpsf_data_cache: if: (github.repository == 'spacetelescope/romancal' && (github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'workflow_dispatch' || contains(github.event.pull_request.labels.*.name, 'run devdeps tests'))) - uses: spacetelescope/webbpsf/.github/workflows/retrieve_cache.yml@develop + uses: spacetelescope/webbpsf/.github/workflows/retrieve_cache.yml@beda656c80a0254e6f80649d9c9c49235634522f # v1.4.0 with: minimal: true latest_crds_contexts: if: (github.repository == 'spacetelescope/romancal' && (github.event_name == 'schedule' || github.event_name == 'push' || github.event_name == 'workflow_dispatch' || contains(github.event.pull_request.labels.*.name, 'run devdeps tests'))) - uses: spacetelescope/crds/.github/workflows/contexts.yml@master + uses: spacetelescope/crds/.github/workflows/contexts.yml@d96060f99a7ca75969f6652b050243592f4ebaeb # 12.0.0 crds_context: needs: [ latest_crds_contexts ] runs-on: ubuntu-latest @@ -52,7 +52,7 @@ jobs: outputs: context: ${{ steps.context.outputs.context }} test: - uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@v1 + uses: OpenAstronomy/github-actions-workflows/.github/workflows/tox.yml@924441154cf3053034c6513d5e06c69d262fb9a6 # v1.13.0 needs: [ webbpsf_data_cache, crds_context ] with: setenv: |