From: Marcelo Trylesinski <marcelotryle@gmail.com>
Date: Sat, 13 Sep 2025 07:17:00 +0000 (+0200)
Subject: ci: pin github actions' versions (#3009)
X-Git-Tag: 0.48.0~6
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=da0f1ce5c91007fa24a5d1028871dff5716d817f;p=thirdparty%2Fstarlette.git

ci: pin github actions' versions (#3009)
---

diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 5ae6fa36..781a2421 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -17,10 +17,10 @@ jobs:
         python-version: ["3.9", "3.10", "3.11", "3.12", "3.13", "3.14"]
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
         with:
           python-version: ${{ matrix.python-version }}
           enable-cache: true
@@ -48,6 +48,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Decide whether the needed jobs succeeded or failed
-        uses: re-actors/alls-green@release/v1
+        uses: re-actors/alls-green@05ac9388f0aebcb5727afa17fcccfecd6f8ec5fe # v1.2.2
         with:
           jobs: ${{ toJSON(needs) }}
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index e61e170c..49ba9f3b 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -14,10 +14,10 @@ jobs:
       name: deploy
 
     steps:
-      - uses: actions/checkout@v5
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v6
+        uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6.6.1
         with:
           python-version: "3.11"
           enable-cache: true