diff --git a/.github/workflows/auto-close-missing-issue.yml b/.github/workflows/auto-close-missing-issue.yml index 572f417dbdd..f8d128d534a 100644 --- a/.github/workflows/auto-close-missing-issue.yml +++ b/.github/workflows/auto-close-missing-issue.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Close PRs missing linked issue for over 4 days - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b #v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #v9.0.0 with: script: | const { owner, repo } = context.repo; diff --git a/.github/workflows/check-linked-issue.yml b/.github/workflows/check-linked-issue.yml index 7d4a4701203..b05e602eeee 100644 --- a/.github/workflows/check-linked-issue.yml +++ b/.github/workflows/check-linked-issue.yml @@ -14,7 +14,7 @@ jobs: steps: - name: Check for linked issue id: check - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b #v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #v9.0.0 with: script: | const pr = context.payload.pull_request; @@ -40,7 +40,7 @@ jobs: - name: Apply missing-issue label and comment if: steps.check.outputs.has_linked_issue == 'false' - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b #v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #v9.0.0 with: script: | const { owner, repo } = context.repo; @@ -75,7 +75,7 @@ jobs: - name: Remove missing-issue label and bot comment if issue is now linked if: steps.check.outputs.has_linked_issue == 'true' - uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b #v7 + uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 #v9.0.0 with: script: | const { owner, repo } = context.repo; diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 90b1cfaac8c..6c047ff8765 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,7 +20,7 @@ jobs: minilints: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: fetch-depth: 0 filter: blob:none @@ -38,16 +38,16 @@ jobs: format: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Install Rust toolchain uses: actions-rust-lang/setup-rust-toolchain@46268bd060767258de96ed93c1251119784f2ab6 #v1 - name: Install uv - uses: astral-sh/setup-uv@94527f2e458b27549849d47d273a16bec83a01e9 #v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 #v7 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 #v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #v6.4.0 with: node-version: '20' @@ -57,7 +57,7 @@ jobs: RUSTFLAGS: "--cap-lints warn" - name: Install just - uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b #v3 + uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 #v4.0.0 - name: Run format checks run: just fmt @@ -67,10 +67,10 @@ jobs: runs-on: ubuntu-24.04 name: check (linux) steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Restore cargo cache - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: | ~/.cargo/registry/index @@ -83,7 +83,7 @@ jobs: restore-keys: cargo-${{ runner.os }}- - name: Restore build output cache - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out key: build-Linux-${{ github.event.pull_request.number || 'main' }}-${{ github.run_id }} @@ -96,14 +96,14 @@ jobs: uses: ./.github/actions/setup-anki - name: Install just - uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b #v3 + uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 #v4.0.0 - name: Symlink node_modules run: ln -sf out/node_modules . - name: Restore coverage baseline if: github.event_name == 'pull_request' - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out/coverage key: coverage-baseline-linux-${{ github.sha }} @@ -137,7 +137,7 @@ jobs: - name: Cache coverage baseline if: github.ref_name == 'main' - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out/coverage key: coverage-baseline-linux-${{ github.sha }} @@ -151,7 +151,7 @@ jobs: - name: Upload Playwright report if: failure() - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: playwright-report path: out/e2e-report/ @@ -165,14 +165,14 @@ jobs: - name: Check Rust dependencies if: github.event_name == 'pull_request' id: rust-deps - uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 #v47.0.5 + uses: tj-actions/changed-files@9426d40962ed5378910ee2e21d5f8c6fcbf2dd96 #v47.0.5 with: files: | Cargo.lock **/Cargo.toml .deny.toml - - uses: EmbarkStudios/cargo-deny-action@8f84122a46a358a27cb0625d85ad60ab436a1b87 #v2 + - uses: EmbarkStudios/cargo-deny-action@bb137d7af7e4fb67e5f82a49c4fce4fad40782fe #v2 if: github.event_name != 'pull_request' || steps.rust-deps.outputs.any_changed == 'true' # out/pyenv contains a venv with absolute Python paths that break @@ -187,7 +187,7 @@ jobs: - name: Save build output cache if: always() - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out key: build-Linux-${{ github.event.pull_request.number || 'main' }}-${{ github.run_id }} @@ -201,12 +201,12 @@ jobs: runs-on: macos-latest name: check (macos) steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: submodules: true - name: Restore cargo cache - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: | ~/.cargo/registry/index @@ -219,7 +219,7 @@ jobs: restore-keys: cargo-macOS- - name: Restore build output cache - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out key: build-macOS-${{ github.event.pull_request.number || 'main' }}-${{ github.run_id }} @@ -232,7 +232,7 @@ jobs: uses: ./.github/actions/setup-anki - name: Install just - uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b #v3 + uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 #v4.0.0 - name: Symlink node_modules run: ln -sf out/node_modules . @@ -253,7 +253,7 @@ jobs: - name: Save build output cache if: always() - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out key: build-macOS-${{ github.event.pull_request.number || 'main' }}-${{ github.run_id }} @@ -273,7 +273,7 @@ jobs: TEMP: D:\tmp TMP: D:\tmp steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: submodules: true @@ -282,7 +282,7 @@ jobs: run: mkdir -p /d/cargo-home /d/tmp - name: Restore cargo cache - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: | D:\cargo-home\registry\index @@ -295,7 +295,7 @@ jobs: restore-keys: cargo-Windows- - name: Restore build output cache - uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out key: build-Windows-${{ github.event.pull_request.number || 'main' }}-${{ github.run_id }} @@ -308,7 +308,7 @@ jobs: uses: ./.github/actions/setup-anki - name: Install just - uses: extractions/setup-just@f8a3cce218d9f83db3a2ecd90e41ac3de6cdfd9b #v3 + uses: extractions/setup-just@53165ef7e734c5c07cb06b3c8e7b647c5aa16db3 #v4.0.0 - name: Build, lint, and test run: | @@ -326,7 +326,7 @@ jobs: - name: Save build output cache if: always() - uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 #v4 + uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 #v6.1.0 with: path: out key: build-Windows-${{ github.event.pull_request.number || 'main' }}-${{ github.run_id }} diff --git a/.github/workflows/docs-site.yml b/.github/workflows/docs-site.yml index a5758e6c257..758439db212 100644 --- a/.github/workflows/docs-site.yml +++ b/.github/workflows/docs-site.yml @@ -19,13 +19,13 @@ jobs: validate: runs-on: ubuntu-24.04 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Install uv - uses: astral-sh/setup-uv@94527f2e458b27549849d47d273a16bec83a01e9 #v7 + uses: astral-sh/setup-uv@37802adc94f370d6bfd71619e3f0bf239e1f3b78 #v7 - name: Setup Node.js - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 #v4 + uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #v6.4.0 with: node-version: "22.15.0" diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml index 129c6ede1ed..8d0312a1f1f 100644 --- a/.github/workflows/prepare-release.yml +++ b/.github/workflows/prepare-release.yml @@ -30,7 +30,7 @@ jobs: prepare: runs-on: ubuntu-latest steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: submodules: true fetch-depth: 0 diff --git a/.github/workflows/publish-audio-package.yml b/.github/workflows/publish-audio-package.yml index ef94f79fd6d..aae97261ecc 100644 --- a/.github/workflows/publish-audio-package.yml +++ b/.github/workflows/publish-audio-package.yml @@ -63,7 +63,7 @@ jobs: runs-on: ${{ matrix.runner }} environment: ${{ matrix.needs_signing && inputs.sign-macos == true && 'release' || '' }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 - name: Setup build environment uses: ./.github/actions/setup-anki @@ -93,7 +93,7 @@ jobs: rm -f "$RUNNER_TEMP/certificate.p12" "$RUNNER_TEMP/AuthKey.p8" - name: Upload wheel - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: ${{ matrix.artifact }} path: out/wheels/anki_audio-*.whl @@ -112,7 +112,7 @@ jobs: id-token: write steps: - name: Download all wheels - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: pattern: wheel-* path: dist @@ -138,7 +138,7 @@ jobs: id-token: write steps: - name: Download all wheels - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: pattern: wheel-* path: dist diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 015f54b1275..8e2a86cbd17 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -58,7 +58,7 @@ jobs: release_name: ${{ steps.validate.outputs.release_name }} is_prerelease: ${{ steps.validate.outputs.is_prerelease }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} fetch-depth: 0 @@ -160,7 +160,7 @@ jobs: timeout-minutes: 90 environment: ${{ inputs.sign == true && 'release' || '' }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} @@ -191,13 +191,13 @@ jobs: security delete-keychain "$KEYCHAIN_PATH" 2>/dev/null || true rm -f "$RUNNER_TEMP/certificate.p12" "$RUNNER_TEMP/AuthKey.p8" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 if: always() with: name: logs-installer-macos path: out/installer/logs/ - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: installer-macos path: out/installer/dist/ @@ -205,7 +205,7 @@ jobs: - name: Build wheels run: ./ninja wheels:anki - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: wheels-macos path: out/wheels/anki-*.whl @@ -216,7 +216,7 @@ jobs: timeout-minutes: 90 environment: ${{ inputs.sign == true && 'release' || '' }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} @@ -247,13 +247,13 @@ jobs: security delete-keychain "$KEYCHAIN_PATH" 2>/dev/null || true rm -f "$RUNNER_TEMP/certificate.p12" "$RUNNER_TEMP/AuthKey.p8" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 if: always() with: name: logs-installer-macos-intel path: out/installer/logs/ - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: installer-macos-intel path: out/installer/dist/ @@ -261,7 +261,7 @@ jobs: - name: Build wheels run: ./ninja wheels:anki - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: wheels-macos-intel path: out/wheels/anki-*.whl @@ -272,7 +272,7 @@ jobs: timeout-minutes: 90 environment: ${{ inputs.sign == true && 'release' || '' }} steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} @@ -282,7 +282,7 @@ jobs: - name: Build app run: tools\ninja installer:build - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 if: always() with: name: logs-installer-windows @@ -290,13 +290,13 @@ jobs: - name: Azure login if: inputs.sign == true - uses: azure/login@2dd0bbf4064d5a1812889dc200bb8eed2597f82a #v3 + uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 #v3 with: creds: '{"clientId":"${{ secrets.AZURE_CLIENT_ID }}","clientSecret":"${{ secrets.AZURE_CLIENT_SECRET }}","subscriptionId":"${{ secrets.AZURE_SUBSCRIPTION_ID }}","tenantId":"${{ secrets.AZURE_TENANT_ID }}"}' - name: Sign app binary if: inputs.sign == true - uses: azure/artifact-signing-action@b443cf8ea4124818d2ea9f043cba29fc3ec47b16 #v1 + uses: azure/artifact-signing-action@c7ab2a863ab5f9a846ddb8265964877ef296ee82 #v2.0.0 with: endpoint: https://eus.codesigning.azure.net/ signing-account-name: anki-signing @@ -326,7 +326,7 @@ jobs: - name: Sign MSI if: inputs.sign == true - uses: azure/artifact-signing-action@b443cf8ea4124818d2ea9f043cba29fc3ec47b16 #v1 + uses: azure/artifact-signing-action@c7ab2a863ab5f9a846ddb8265964877ef296ee82 #v2.0.0 with: endpoint: https://eus.codesigning.azure.net/ signing-account-name: anki-signing @@ -349,7 +349,7 @@ jobs: } Write-Host "MSI signed successfully: $($sig.SignerCertificate.Subject)" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: installer-windows path: out/installer/dist/ @@ -357,7 +357,7 @@ jobs: - name: Build wheels run: tools\ninja wheels:anki - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: wheels-windows path: out/wheels/anki-*.whl @@ -369,7 +369,7 @@ jobs: runs-on: windows-11-arm timeout-minutes: 90 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} @@ -379,13 +379,13 @@ jobs: - name: Build app run: tools\ninja installer:build - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 if: always() with: name: logs-installer-windows-arm-build path: out/installer/logs/ - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: build-windows-arm path: | @@ -395,7 +395,7 @@ jobs: - name: Build wheels run: tools\ninja wheels:anki - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: wheels-windows-arm path: out/wheels/anki-*.whl @@ -406,20 +406,20 @@ jobs: timeout-minutes: 15 environment: ${{ inputs.sign == true && 'release' || '' }} steps: - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: name: build-windows-arm path: out/installer/ - name: Azure login if: inputs.sign == true - uses: azure/login@2dd0bbf4064d5a1812889dc200bb8eed2597f82a #v3 + uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 #v3 with: creds: '{"clientId":"${{ secrets.AZURE_CLIENT_ID }}","clientSecret":"${{ secrets.AZURE_CLIENT_SECRET }}","subscriptionId":"${{ secrets.AZURE_SUBSCRIPTION_ID }}","tenantId":"${{ secrets.AZURE_TENANT_ID }}"}' - name: Sign app binary if: inputs.sign == true - uses: azure/artifact-signing-action@b443cf8ea4124818d2ea9f043cba29fc3ec47b16 #v1 + uses: azure/artifact-signing-action@c7ab2a863ab5f9a846ddb8265964877ef296ee82 #v2.0.0 with: endpoint: https://eus.codesigning.azure.net/ signing-account-name: anki-signing @@ -440,7 +440,7 @@ jobs: } Write-Host "Anki.exe signed successfully: $($sig.SignerCertificate.Subject)" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: signed-build-windows-arm path: out/installer/ @@ -450,14 +450,14 @@ jobs: runs-on: windows-11-arm timeout-minutes: 30 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} - name: Setup build environment uses: ./.github/actions/setup-anki - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: name: signed-build-windows-arm path: out/installer/ @@ -467,13 +467,13 @@ jobs: tools\ninja pyenv out\pyenv\scripts\python.exe qt\tools\build_installer.py --version ${{ needs.prepare.outputs.pep440_version }} package - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 if: always() with: name: logs-installer-windows-arm-package path: out/installer/logs/ - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: unsigned-installer-windows-arm path: out/installer/dist/ @@ -484,20 +484,20 @@ jobs: timeout-minutes: 15 environment: ${{ inputs.sign == true && 'release' || '' }} steps: - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: name: unsigned-installer-windows-arm path: dist/ - name: Azure login if: inputs.sign == true - uses: azure/login@2dd0bbf4064d5a1812889dc200bb8eed2597f82a #v3 + uses: azure/login@532459ea530d8321f2fb9bb10d1e0bcf23869a43 #v3 with: creds: '{"clientId":"${{ secrets.AZURE_CLIENT_ID }}","clientSecret":"${{ secrets.AZURE_CLIENT_SECRET }}","subscriptionId":"${{ secrets.AZURE_SUBSCRIPTION_ID }}","tenantId":"${{ secrets.AZURE_TENANT_ID }}"}' - name: Sign MSI if: inputs.sign == true - uses: azure/artifact-signing-action@b443cf8ea4124818d2ea9f043cba29fc3ec47b16 #v1 + uses: azure/artifact-signing-action@c7ab2a863ab5f9a846ddb8265964877ef296ee82 #v2.0.0 with: endpoint: https://eus.codesigning.azure.net/ signing-account-name: anki-signing @@ -520,7 +520,7 @@ jobs: } Write-Host "MSI signed successfully: $($sig.SignerCertificate.Subject)" - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: installer-windows-arm path: dist/ @@ -533,7 +533,7 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 90 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} @@ -566,13 +566,13 @@ jobs: - name: Build installer run: ./tools/build-installer - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 if: always() with: name: logs-installer-linux-x86 path: out/installer/logs/ - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: installer-linux-x86 path: out/installer/dist/ @@ -581,7 +581,7 @@ jobs: - name: Build wheels run: ./ninja wheels - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: wheels-linux-x86 path: out/wheels/*.whl @@ -591,7 +591,7 @@ jobs: runs-on: ubuntu-22.04 timeout-minutes: 90 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} @@ -603,7 +603,7 @@ jobs: sudo apt-get install --yes --no-install-recommends libc6-dev-arm64-cross gcc-aarch64-linux-gnu ./tools/build-arm-lin - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: wheels-linux-arm path: out/wheels/anki-*.whl @@ -617,7 +617,7 @@ jobs: runs-on: ubuntu-24.04-arm timeout-minutes: 90 steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} @@ -633,13 +633,13 @@ jobs: - name: Build installer run: ./tools/build-installer - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 if: always() with: name: logs-installer-linux-arm path: out/installer/logs/ - - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a #v7.0.1 with: name: installer-linux-arm path: out/installer/dist/ @@ -661,11 +661,11 @@ jobs: runs-on: ubuntu-latest environment: release steps: - - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 #v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #v7.0.0 with: ref: ${{ github.sha }} - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: pattern: installer-* path: dist @@ -714,7 +714,7 @@ jobs: permissions: id-token: write steps: - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: pattern: wheels-* path: wheels @@ -742,7 +742,7 @@ jobs: permissions: id-token: write steps: - - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 #v4 + - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c #v8.0.1 with: pattern: wheels-* path: wheels