This is an automated email from the ASF dual-hosted git repository.
erisu pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/cordova-paramedic.git
The following commit(s) were added to refs/heads/master by this push:
new cd5580d chore(workflow): various updates (#310)
cd5580d is described below
commit cd5580da6e8df7131db46c68a32f95e06f17ad5b
Author: エリス <[email protected]>
AuthorDate: Tue Jul 14 14:25:45 2026 +0900
chore(workflow): various updates (#310)
* Pinned all GH Actions to hash
* Update all GH Actions to latest release
* Renamed '.ratignore' to '.rat-excludes'
* Set 'persist-credentials' to false for checkout
---
.github/workflows/android.yml | 16 ++++++++++------
.github/workflows/chrome.yml | 8 ++++++--
.github/workflows/ci.yml | 12 ++++++++----
.github/workflows/ios.yml | 8 ++++++--
.github/workflows/lint.yml | 8 ++++++--
.github/workflows/release-audit.yml | 15 +++++++++------
.ratignore => .rat-excludes | 0
7 files changed, 45 insertions(+), 22 deletions(-)
diff --git a/.github/workflows/android.yml b/.github/workflows/android.yml
index 5da46d2..ea2d169 100644
--- a/.github/workflows/android.yml
+++ b/.github/workflows/android.yml
@@ -81,11 +81,16 @@ jobs:
timeout-minutes: 60
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: ${{ env.node-version }}
- - uses: actions/setup-java@v5
+
+ - uses: actions/setup-java@0f481fcb613427c0f801b606911222b5b6f3083a #
v5.5.0
env:
java-version: ${{ matrix.versions.java-version == '' &&
env.default_java-version || matrix.versions.java-version }}
java-distro: ${{ matrix.versions.java-distro == '' &&
env.default_java-distro || matrix.versions.java-distro }}
@@ -116,8 +121,7 @@ jobs:
if: ${{ endswith(env.repo, '/cordova-paramedic') != true }}
run: npm i -g github:apache/cordova-paramedic
- # reactivecircus/android-emulator-runner v2.37.0
- - uses:
reactivecircus/android-emulator-runner@e89f39f1abbbd05b1113a29cf4db69e7540cae5a
+ - uses:
reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d
# v2.38.0
env:
system-image-arch: ${{ matrix.versions.system-image-arch == '' &&
env.default_system-image-arch || matrix.versions.system-image-arch }}
system-image-target: ${{ matrix.versions.system-image-target == ''
&& env.default_system-image-target || matrix.versions.system-image-target }}
@@ -131,7 +135,7 @@ jobs:
script: echo "Pregenerate the AVD before running Paramedic"
- name: Run paramedic tests
- uses:
reactivecircus/android-emulator-runner@e89f39f1abbbd05b1113a29cf4db69e7540cae5a
+ uses:
reactivecircus/android-emulator-runner@a421e43855164a8197daf9d8d40fe71c6996bb0d
# v2.38.0
env:
system-image-arch: ${{ matrix.versions.system-image-arch == '' &&
env.default_system-image-arch || matrix.versions.system-image-arch }}
system-image-target: ${{ matrix.versions.system-image-target == ''
&& env.default_system-image-target || matrix.versions.system-image-target }}
diff --git a/.github/workflows/chrome.yml b/.github/workflows/chrome.yml
index f6680a3..3b05b99 100644
--- a/.github/workflows/chrome.yml
+++ b/.github/workflows/chrome.yml
@@ -45,8 +45,12 @@ jobs:
node-version: 24
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: ${{ env.node-version }}
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 2aae7e3..890e50f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,12 +35,16 @@ jobs:
security-events: write
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: 24.x
- - uses: github/codeql-action/init@v4
+ - uses:
github/codeql-action/init@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
with:
tools: linked
languages: javascript, actions
@@ -54,4 +58,4 @@ jobs:
env:
CI: true
- - uses: github/codeql-action/analyze@v4
+ - uses:
github/codeql-action/analyze@99df26d4f13ea111d4ec1a7dddef6063f76b97e9 # v4.37.0
diff --git a/.github/workflows/ios.yml b/.github/workflows/ios.yml
index 599bf31..a06960b 100644
--- a/.github/workflows/ios.yml
+++ b/.github/workflows/ios.yml
@@ -67,8 +67,12 @@ jobs:
xcode-version: 26.x
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: ${{ env.node-version }}
diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index fe55389..6b9a594 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -40,8 +40,12 @@ jobs:
node-version: 24
steps:
- - uses: actions/checkout@v6
- - uses: actions/setup-node@v6
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
+
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: ${{ env.node-version }}
diff --git a/.github/workflows/release-audit.yml
b/.github/workflows/release-audit.yml
index 52798d4..3156baa 100644
--- a/.github/workflows/release-audit.yml
+++ b/.github/workflows/release-audit.yml
@@ -34,13 +34,16 @@ jobs:
runs-on: ubuntu-latest
steps:
# Checkout project
- - uses: actions/checkout@v6
+ - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 #
v7.0.0
+ with:
+ persist-credentials: false
+ fetch-depth: 1
- # Check license headers (v2.0.0)
- - uses: erisu/apache-rat-action@46fb01ce7d8f76bdcd7ab10e7af46e1ea95ca01c
+ # Check license headers
+ - uses: erisu/apache-rat-action@30c94d10ed21e6f6fd5590dc5c158f58cae7a0dd
# v3.0.0
# Setup environment with node
- - uses: actions/setup-node@v6
+ - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e #
v6.4.0
with:
node-version: 24
@@ -48,8 +51,8 @@ jobs:
- name: npm install packages
run: npm ci
- # Check node package licenses (v2.0.1)
- - uses:
erisu/license-checker-action@99cffa11264fe545fd0baa6c13bca5a00ae608f2
+ # Check node package licenses
+ - uses:
erisu/license-checker-action@04511f4c052b5773f11e1c65b42cda88235c62ae # v2.1.0
with:
license-config: 'licence_checker.yml'
include-asf-category-a: true
diff --git a/.ratignore b/.rat-excludes
similarity index 100%
rename from .ratignore
rename to .rat-excludes
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
