Skip to content

Pin Github actions dependencies #18

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
joshua-laughner merged 2 commits into from
Mar 27, 2026
Merged

Pin Github actions dependencies #18

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
faadfbd
Pinned actions in publish-to-pypi.yml to specific (updated) commits
joshua-laughner Mar 27, 2026
dd71f35
Update run-pytest.yml
joshua-laughner Mar 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 8 additions & 4 deletions .github/workflows/publish-to-pypi.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,8 @@ jobs:
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v4
# Took the hash for v6.0.2 on 26 Mar 2026
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
with:
persist-credentials: false
- name: Set up Python
Expand Down Expand Up @@ -43,8 +44,9 @@ jobs:
permissions:
id-token: write # IMPORTANT: mandatory for trusted publishing
steps:
# Took the commit for v8.0.1 on 26 Mar 2026
- name: Download all the dists
uses: actions/download-artifact@v4
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
with:
name: python-package-distributions
path: dist/
Expand All @@ -65,12 +67,14 @@ jobs:
id-token: write # IMPORTANT: mandatory for trusted publishing

steps:
# Took the commit for v8.0.1 on 26 Mar 2026
- name: Download all the dists
uses: actions/download-artifact@v4
uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c
with:
name: python-package-distributions
path: dist/
- name: Publish distribution to TestPyPI
uses: pypa/gh-action-pypi-publish@release/v1
# Pinned commit for v1.13.0 on 26 Mar 2026
uses: pypa/gh-action-pypi-publish@ed0c53931b1dc9bd32cbe73a98c7f6766f8a527e
with:
repository-url: https://test.pypi.org/legacy/
6 changes: 4 additions & 2 deletions .github/workflows/run-pytest.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,9 +20,11 @@ jobs:
runs-on: ${{ matrix.os }}

steps:
- uses: actions/checkout@v4
# Pinned to v6.0.2 commit on 26 Mar 2026
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
- name: Set up Python 3.10
uses: actions/setup-python@v3
# Pinned to v6.2.0 commit on 26 Mar 2026
uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405
with:
python-version: "3.10"
- name: Install dependencies
Expand Down