This is an automated email from the ASF dual-hosted git repository. erisu pushed a commit to branch chore/update-workflows in repository https://gitbox.apache.org/repos/asf/cordova-paramedic.git
commit caba9bffaa3e2fadc00e519af97c15a4c4e5120a Author: Erisu <[email protected]> AuthorDate: Fri Jul 10 18:51:08 2026 +0900 chore(workflow): various updates * Pinned all GH Actions to hash * Update all GH Actions to latest release * Renamed '.ratignore' to '.rat-excludes' * Set 'persist-credentials' to false for checkout --- .github/workflows/android.yml | 16 ++++++++++------ .github/workflows/chrome.yml | 8 ++++++-- .github/workflows/ci.yml | 12 ++++++++---- .github/workflows/ios.yml | 8 ++++++-- .github/workflows/lint.yml | 8 ++++++-- .github/workflows/release-audit.yml | 15 +++++++++------ .ratignore => .rat-excludes | 0 7 files changed, 45 insertions(+), 22 deletions(-) diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml index 5da46d2..ea2d169 100644 --- a/.github/workflows/android.yml +++ b/.github/workflows/android.yml @@ -81,11 +81,16 @@ jobs: timeout-minutes: 60 steps: - - uses: actions/checkout@v6 - - uses: actions/setup-node@v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + fetch-depth: 1 + + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ env.node-version }} - - uses: actions/setup-java@v5 + + - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a # v5.5.0 env: java-version: ${{ matrix.versions.java-version == '' && env.default_java-version || matrix.versions.java-version }} java-distro: ${{ matrix.versions.java-distro == '' && env.default_java-distro || matrix.versions.java-distro }} @@ -116,8 +121,7 @@ jobs: if: ${{ endswith(env.repo, '/cordova-paramedic') != true }} run: npm i -g github:apache/cordova-paramedic - # reactivecircus/android-emulator-runner v2.37.0 - - uses: reactivecircus/android-emulator-runner@e89f39f1abbbd05b1113a29cf4db69e7540cae5a + - uses: reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d # v2.38.0 env: system-image-arch: ${{ matrix.versions.system-image-arch == '' && env.default_system-image-arch || matrix.versions.system-image-arch }} system-image-target: ${{ matrix.versions.system-image-target == '' && env.default_system-image-target || matrix.versions.system-image-target }} @@ -131,7 +135,7 @@ jobs: script: echo "Pregenerate the AVD before running Paramedic" - name: Run paramedic tests - uses: reactivecircus/android-emulator-runner@e89f39f1abbbd05b1113a29cf4db69e7540cae5a + uses: reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d # v2.38.0 env: system-image-arch: ${{ matrix.versions.system-image-arch == '' && env.default_system-image-arch || matrix.versions.system-image-arch }} system-image-target: ${{ matrix.versions.system-image-target == '' && env.default_system-image-target || matrix.versions.system-image-target }} diff --git a/.github/workflows/chrome.yml b/.github/workflows/chrome.yml index f6680a3..3b05b99 100644 --- a/.github/workflows/chrome.yml +++ b/.github/workflows/chrome.yml @@ -45,8 +45,12 @@ jobs: node-version: 24 steps: - - uses: actions/checkout@v6 - - uses: actions/setup-node@v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + fetch-depth: 1 + + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ env.node-version }} diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2aae7e3..890e50f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,12 +35,16 @@ jobs: security-events: write steps: - - uses: actions/checkout@v6 - - uses: actions/setup-node@v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + fetch-depth: 1 + + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: 24.x - - uses: github/codeql-action/init@v4 + - uses: github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 with: tools: linked languages: javascript, actions @@ -54,4 +58,4 @@ jobs: env: CI: true - - uses: github/codeql-action/analyze@v4 + - uses: github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0 diff --git a/.github/workflows/ios.yml b/.github/workflows/ios.yml index 599bf31..a06960b 100644 --- a/.github/workflows/ios.yml +++ b/.github/workflows/ios.yml @@ -67,8 +67,12 @@ jobs: xcode-version: 26.x steps: - - uses: actions/checkout@v6 - - uses: actions/setup-node@v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + fetch-depth: 1 + + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ env.node-version }} diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index fe55389..6b9a594 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -40,8 +40,12 @@ jobs: node-version: 24 steps: - - uses: actions/checkout@v6 - - uses: actions/setup-node@v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + fetch-depth: 1 + + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: ${{ env.node-version }} diff --git a/.github/workflows/release-audit.yml b/.github/workflows/release-audit.yml index 52798d4..3156baa 100644 --- a/.github/workflows/release-audit.yml +++ b/.github/workflows/release-audit.yml @@ -34,13 +34,16 @@ jobs: runs-on: ubuntu-latest steps: # Checkout project - - uses: actions/checkout@v6 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + with: + persist-credentials: false + fetch-depth: 1 - # Check license headers (v2.0.0) - - uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c + # Check license headers + - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd # v3.0.0 # Setup environment with node - - uses: actions/setup-node@v6 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: 24 @@ -48,8 +51,8 @@ jobs: - name: npm install packages run: npm ci - # Check node package licenses (v2.0.1) - - uses: erisu/license-checker-action@99cffa11264fe545fd0baa6c13bca5a00ae608f2 + # Check node package licenses + - uses: erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0 with: license-config: 'licence_checker.yml' include-asf-category-a: true diff --git a/.ratignore b/.rat-excludes similarity index 100% rename from .ratignore rename to .rat-excludes --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
