From 8f43575a198b298d92941c5067719ffb00ebacd9 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Sun, 22 Jun 2025 17:46:37 +0200 Subject: [PATCH] chore(deps): pin dependencies (#3439) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> --- .github/workflows/ci.yml | 4 +- .github/workflows/crowdin-ci.yml | 4 +- .github/workflows/docker-ci.yml | 6 +-- .github/workflows/docker-publish-latest.yml | 10 ++-- .github/workflows/docker-publish-main.yml | 12 ++--- .github/workflows/docker-publish-released.yml | 10 ++-- .github/workflows/lock-threads.yml | 2 +- .github/workflows/publish.yml | 52 +++++++++---------- .github/workflows/translations.yml | 6 +-- 9 files changed, 53 insertions(+), 53 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ef8a29904..aac2b4297 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -21,13 +21,13 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive - name: Setup .NET Core - uses: actions/setup-dotnet@v4.3.1 + uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 with: dotnet-version: ${{ env.DOTNET_SDK_VERSION }} diff --git a/.github/workflows/crowdin-ci.yml b/.github/workflows/crowdin-ci.yml index 36b797f84..cfb5913bb 100644 --- a/.github/workflows/crowdin-ci.yml +++ b/.github/workflows/crowdin-ci.yml @@ -14,13 +14,13 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive - name: Upload latest strings for translation on Crowdin - uses: crowdin/github-action@v2.7.1 + uses: crowdin/github-action@f214c8723025f41fc55b2ad26e67b60b80b1885d # v2.7.1 with: crowdin_branch_name: main config: '.github/crowdin.yml' diff --git a/.github/workflows/docker-ci.yml b/.github/workflows/docker-ci.yml index 8401b0e66..cc12084a7 100644 --- a/.github/workflows/docker-ci.yml +++ b/.github/workflows/docker-ci.yml @@ -19,16 +19,16 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3.11.1 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Build ${{ matrix.configuration }} Docker image from ${{ matrix.file }} - uses: docker/build-push-action@v6.18.0 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: build-args: CONFIGURATION=${{ matrix.configuration }} context: . diff --git a/.github/workflows/docker-publish-latest.yml b/.github/workflows/docker-publish-latest.yml index 58bff068a..02967e622 100644 --- a/.github/workflows/docker-publish-latest.yml +++ b/.github/workflows/docker-publish-latest.yml @@ -18,23 +18,23 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3.11.1 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Login to ghcr.io - uses: docker/login-action@v3.4.0 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Login to DockerHub - uses: docker/login-action@v3.4.0 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -50,7 +50,7 @@ jobs: echo "DH_REPOSITORY=$(echo ${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }} | tr '[:upper:]' '[:lower:]')" >> "$GITHUB_ENV" - name: Build and publish Docker image from Dockerfile.Service - uses: docker/build-push-action@v6.18.0 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . file: Dockerfile.Service diff --git a/.github/workflows/docker-publish-main.yml b/.github/workflows/docker-publish-main.yml index b3d443843..b5611732b 100644 --- a/.github/workflows/docker-publish-main.yml +++ b/.github/workflows/docker-publish-main.yml @@ -19,23 +19,23 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3.11.1 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Login to ghcr.io - uses: docker/login-action@v3.4.0 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Login to DockerHub - uses: docker/login-action@v3.4.0 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -50,7 +50,7 @@ jobs: echo "DH_REPOSITORY=$(echo ${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }} | tr '[:upper:]' '[:lower:]')" >> "$GITHUB_ENV" - name: Build and publish Docker image from Dockerfile - uses: docker/build-push-action@v6.18.0 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . platforms: ${{ env.PLATFORMS }} @@ -69,7 +69,7 @@ jobs: push: true - name: Update DockerHub repository description - uses: peter-evans/dockerhub-description@v4.0.2 + uses: peter-evans/dockerhub-description@432a30c9e07499fd01da9f8a49f0faf9e0ca5b77 # v4.0.2 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/docker-publish-released.yml b/.github/workflows/docker-publish-released.yml index c747ac883..a017a05a7 100644 --- a/.github/workflows/docker-publish-released.yml +++ b/.github/workflows/docker-publish-released.yml @@ -19,23 +19,23 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3.11.1 + uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1 - name: Login to ghcr.io - uses: docker/login-action@v3.4.0 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Login to DockerHub - uses: docker/login-action@v3.4.0 + uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} @@ -51,7 +51,7 @@ jobs: echo "DH_REPOSITORY=$(echo ${{ secrets.DOCKERHUB_USERNAME }}/${{ github.event.repository.name }} | tr '[:upper:]' '[:lower:]')" >> "$GITHUB_ENV" - name: Build and publish Docker image from Dockerfile - uses: docker/build-push-action@v6.18.0 + uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0 with: context: . platforms: ${{ env.PLATFORMS }} diff --git a/.github/workflows/lock-threads.yml b/.github/workflows/lock-threads.yml index 888df0f08..d197f950a 100644 --- a/.github/workflows/lock-threads.yml +++ b/.github/workflows/lock-threads.yml @@ -18,7 +18,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Lock inactive threads - uses: dessant/lock-threads@v5.0.1 + uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5.0.1 with: discussion-inactive-days: 90 issue-inactive-days: 60 diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml index b17fa8d21..fb844191a 100644 --- a/.github/workflows/publish.yml +++ b/.github/workflows/publish.yml @@ -19,13 +19,13 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive - name: Setup Node.js with npm - uses: actions/setup-node@v4.4.0 + uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0 with: check-latest: true node-version: ${{ env.NODE_JS_VERSION }} @@ -43,7 +43,7 @@ jobs: run: npm run-script deploy --no-progress --prefix ASF-ui - name: Upload ASF-ui - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: if-no-files-found: error name: ASF-ui @@ -81,12 +81,12 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false - name: Setup .NET Core - uses: actions/setup-dotnet@v4.3.1 + uses: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9 # v4.3.1 with: dotnet-version: ${{ env.DOTNET_SDK_VERSION }} @@ -94,7 +94,7 @@ jobs: run: dotnet --info - name: Download previously built ASF-ui - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: ASF-ui path: ASF-ui/dist @@ -361,12 +361,12 @@ jobs: - name: Generate artifact attestation for ASF-${{ matrix.variant }}.zip if: ${{ github.event_name == 'push' }} - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0 with: subject-path: out/ASF-${{ matrix.variant }}.zip - name: Upload ASF-${{ matrix.variant }} - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: if-no-files-found: error name: ${{ matrix.os }}_ASF-${{ matrix.variant }} @@ -408,13 +408,13 @@ jobs: - name: Generate artifact attestation for ArchiSteamFarm.OfficialPlugins.Monitoring if: ${{ github.event_name == 'push' && matrix.os == 'ubuntu-latest' && matrix.variant == 'generic' }} - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0 with: subject-path: out/ArchiSteamFarm.OfficialPlugins.Monitoring.zip - name: Upload ArchiSteamFarm.OfficialPlugins.Monitoring if: ${{ matrix.os == 'ubuntu-latest' && matrix.variant == 'generic' }} - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: if-no-files-found: error name: ArchiSteamFarm.OfficialPlugins.Monitoring @@ -433,66 +433,66 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false - name: Download ASF-generic artifact from ubuntu-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: ubuntu-latest_ASF-generic path: out - name: Download ASF-linux-arm artifact from ubuntu-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: ubuntu-latest_ASF-linux-arm path: out - name: Download ASF-linux-arm64 artifact from ubuntu-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: ubuntu-latest_ASF-linux-arm64 path: out - name: Download ASF-linux-x64 artifact from ubuntu-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: ubuntu-latest_ASF-linux-x64 path: out - name: Download ASF-osx-arm64 artifact from macos-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: macos-latest_ASF-osx-arm64 path: out - name: Download ASF-osx-x64 artifact from macos-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: macos-latest_ASF-osx-x64 path: out - name: Download ASF-win-arm64 artifact from windows-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: windows-latest_ASF-win-arm64 path: out - name: Download ASF-win-x64 artifact from windows-latest - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: windows-latest_ASF-win-x64 path: out - name: Download ArchiSteamFarm.OfficialPlugins.Monitoring artifact - uses: actions/download-artifact@v4.3.0 + uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0 with: name: ArchiSteamFarm.OfficialPlugins.Monitoring path: out - name: Import GPG key for signing - uses: crazy-max/ghaction-import-gpg@v6.3.0 + uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0 with: gpg_private_key: ${{ secrets.ARCHIBOT_GPG_PRIVATE_KEY }} @@ -506,31 +506,31 @@ jobs: gpg -a -b -o SHA512SUMS.sign SHA512SUMS - name: Generate artifact attestation for SHA512SUMS - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0 with: subject-path: out/SHA512SUMS - name: Upload SHA512SUMS - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: if-no-files-found: error name: SHA512SUMS path: out/SHA512SUMS - name: Generate artifact attestation for SHA512SUMS.sign - uses: actions/attest-build-provenance@v2.4.0 + uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0 with: subject-path: out/SHA512SUMS.sign - name: Upload SHA512SUMS.sign - uses: actions/upload-artifact@v4.6.2 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2 with: if-no-files-found: error name: SHA512SUMS.sign path: out/SHA512SUMS.sign - name: Create ArchiSteamFarm GitHub release - uses: ncipollo/release-action@v1.16.0 + uses: ncipollo/release-action@440c8c1cb0ed28b9f43e4d1d670870f059653174 # v1.16.0 with: allowUpdates: true artifactErrorsFailBuild: true diff --git a/.github/workflows/translations.yml b/.github/workflows/translations.yml index b01b31b15..cc296f94a 100644 --- a/.github/workflows/translations.yml +++ b/.github/workflows/translations.yml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout code - uses: actions/checkout@v4.2.2 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: show-progress: false submodules: recursive @@ -31,7 +31,7 @@ jobs: git reset --hard origin/master - name: Download latest translations from Crowdin - uses: crowdin/github-action@v2.7.1 + uses: crowdin/github-action@f214c8723025f41fc55b2ad26e67b60b80b1885d # v2.7.1 with: upload_sources: false download_translations: true @@ -43,7 +43,7 @@ jobs: token: ${{ secrets.ASF_CROWDIN_API_TOKEN }} - name: Import GPG key for signing - uses: crazy-max/ghaction-import-gpg@v6.3.0 + uses: crazy-max/ghaction-import-gpg@e89d40939c28e39f97cf32126055eeae86ba74ec # v6.3.0 with: gpg_private_key: ${{ secrets.ARCHIBOT_GPG_PRIVATE_KEY }} git_config_global: true