ci: don't pin official GH actions via commit, just tag

There's no real value in doing it via commit for official GH actions. We
can keep using pinned commits for unofficial actions. It's hassle for no
gain.

Maybe going forward we can limit this further by only being paranoid
for the jobs with any access to tokens.

(cherry picked from commit 35f8649f08)
This commit is contained in:
Sam James 2024-06-03 06:16:23 +01:00 committed by Lasse Collin
parent 9a5fee7022
commit 42754176bd
No known key found for this signature in database
GPG Key ID: 38EE757D69184620
6 changed files with 8 additions and 8 deletions

View File

@ -26,7 +26,7 @@ jobs:
build_system: [autotools, cmake] build_system: [autotools, cmake]
runs-on: ${{ matrix.os }} runs-on: ${{ matrix.os }}
steps: steps:
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f #v4.1.3 - uses: actions/checkout@v4.1.6
######################## ########################
# Install Dependencies # # Install Dependencies #
@ -156,7 +156,7 @@ jobs:
run: ./build-aux/ci_build.bash -b ${{ matrix.build_system }} -d small -p test -n small run: ./build-aux/ci_build.bash -b ${{ matrix.build_system }} -d small -p test -n small
# Attempt to upload the test logs as artifacts if any step has failed # Attempt to upload the test logs as artifacts if any step has failed
- uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 #v4.3.3 - uses: actions/upload-artifact@v4.3.3
if: ${{ failure() }} if: ${{ failure() }}
with: with:
name: ${{ matrix.os }} ${{ matrix.build_system }} Test Logs name: ${{ matrix.os }} ${{ matrix.build_system }} Test Logs

View File

@ -14,7 +14,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
name: Test xz on FreeBSD name: Test xz on FreeBSD
steps: steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 #v4 - uses: actions/checkout@v4.1.6
- name: Test in FreeBSD - name: Test in FreeBSD
id: test id: test
uses: vmactions/FreeBSD-vm@f8be330398166d1eb0601f01353839d4052367b2 #v1.0.7 uses: vmactions/FreeBSD-vm@f8be330398166d1eb0601f01353839d4052367b2 #v1.0.7

View File

@ -14,7 +14,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
name: Test xz on NetBSD name: Test xz on NetBSD
steps: steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 #v4 - uses: actions/checkout@v4.1.6
- name: Test in NetBSD - name: Test in NetBSD
id: test id: test
uses: vmactions/NetBSD-vm@da9ed4d7cd0fb64f330e2342ac5c77ba529b6a11 #v1.0.7 uses: vmactions/NetBSD-vm@da9ed4d7cd0fb64f330e2342ac5c77ba529b6a11 #v1.0.7

View File

@ -14,7 +14,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
name: Test xz on OpenBSD name: Test xz on OpenBSD
steps: steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 #v4 - uses: actions/checkout@v4.1.6
- name: Test in OpenBSD - name: Test in OpenBSD
id: test id: test
uses: vmactions/OpenBSD-vm@eaa3d3f695a5a52971c23958f6dd4cd3397f959d #v1.0.8 uses: vmactions/OpenBSD-vm@eaa3d3f695a5a52971c23958f6dd4cd3397f959d #v1.0.8

View File

@ -14,7 +14,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
name: Test xz on Solaris name: Test xz on Solaris
steps: steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 #v4 - uses: actions/checkout@v4.1.6
- name: Test in Solaris - name: Test in Solaris
id: test id: test
uses: vmactions/solaris-vm@548f790d1bc2b9342a76cbb47ddbb85875605559 #v1.0.2 uses: vmactions/solaris-vm@548f790d1bc2b9342a76cbb47ddbb85875605559 #v1.0.2

View File

@ -55,7 +55,7 @@ jobs:
# text file and will not match the output from xzgrep. # text file and will not match the output from xzgrep.
run: git config --global core.autocrlf false run: git config --global core.autocrlf false
- uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f #v4.1.3 - uses: actions/checkout@v4.1.6
######################## ########################
@ -117,7 +117,7 @@ jobs:
############### ###############
# Upload the test logs as artifacts if any step has failed. # Upload the test logs as artifacts if any step has failed.
- uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 #v4.3.3 - uses: actions/upload-artifact@v4.3.3
if: ${{ failure() }} if: ${{ failure() }}
with: with:
name: ${{ matrix.msys2_env }} ${{ matrix.build_system }} Test Logs name: ${{ matrix.msys2_env }} ${{ matrix.build_system }} Test Logs