This is an automated email from the ASF dual-hosted git repository.

sebbASF pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/whimsy.git


The following commit(s) were added to refs/heads/master by this push:
     new bc5a2652 [CI] Pin remaining actions to sha (#309)
bc5a2652 is described below

commit bc5a265266f32d2eaac3a8a5bfcbe3f6a1f3108d
Author: John Bampton <[email protected]>
AuthorDate: Tue Jun 9 02:41:48 2026 +1000

    [CI] Pin remaining actions to sha (#309)
---
 .github/workflows/npmtest.yml     | 2 +-
 .github/workflows/unittestlib.yml | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/npmtest.yml b/.github/workflows/npmtest.yml
index de88d79a..08909ad6 100644
--- a/.github/workflows/npmtest.yml
+++ b/.github/workflows/npmtest.yml
@@ -25,7 +25,7 @@ jobs:
         which -a node || true
         which -a npm || true
         echo "==================="
-    - uses: actions/setup-node@v4
+    - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # 
v6.4.0
       with:
         node-version: '18.16.0'
     - name: Check Path 2
diff --git a/.github/workflows/unittestlib.yml 
b/.github/workflows/unittestlib.yml
index 44efae30..a31e4e2a 100644
--- a/.github/workflows/unittestlib.yml
+++ b/.github/workflows/unittestlib.yml
@@ -31,7 +31,7 @@ jobs:
       if: ${{ runner.os == 'macOS' }}
       run: |
         brew install subversion
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
       with:
         persist-credentials: false
     - name: Fix LDAP version and install SVN if necessary
@@ -45,7 +45,7 @@ jobs:
             sudo apt-get update && sudo apt-get install -y subversion
         fi
     - name: ruby
-      uses: ruby/setup-ruby@v1
+      uses: ruby/setup-ruby@afeafc3d1ab54a631816aba4c914a0081c12ff2f # v1.310.0
       with:
         ruby-version: ${{ matrix.ruby }}
         bundler-cache: true

Reply via email to