[READ-ONLY] Mirror of https://github.com/vitest-dev/vitest. Next generation testing framework powered by Vite. vitest.dev
test testing-tools vite
12

Configure Feed

Select the types of activity you want to include in your feed.

ci: pin third party actions to commit shas (#7687)

authored by

Ari Perkkiö and committed by
GitHub
(Mar 17, 2025, 1:48 PM +0200) 10bbbe96 3fdee3da

+17 -12
+5
.github/renovate.json5
··· 11 11 { 12 12 "depTypeList": ["peerDependencies"], 13 13 "enabled": false 14 + }, 15 + { 16 + "matchDepTypes": ["action"], 17 + "excludePackagePrefixes": ["actions/", "github/"], 18 + "pinDigests": true 14 19 } 15 20 ], 16 21 "ignoreDeps": [
+3 -3
.github/workflows/ci.yml
··· 97 97 with: 98 98 node-version: ${{ matrix.node_version }} 99 99 100 - - uses: browser-actions/setup-chrome@v1 100 + - uses: browser-actions/setup-chrome@c785b87e244131f27c9f19c1a33e2ead956ab7ce # v1.7.3 101 101 102 102 - name: Install 103 103 run: pnpm i ··· 139 139 with: 140 140 node-version: 20 141 141 142 - - uses: browser-actions/setup-chrome@v1 143 - - uses: browser-actions/setup-firefox@v1 142 + - uses: browser-actions/setup-chrome@c785b87e244131f27c9f19c1a33e2ead956ab7ce # v1.7.3 143 + - uses: browser-actions/setup-firefox@634a60ccd6599686158cf5a570481b4cd30455a2 # v1.5.4 144 144 145 145 - name: Install 146 146 run: pnpm i
+1 -1
.github/workflows/cr.yml
··· 24 24 fetch-depth: 0 25 25 26 26 - name: Install pnpm 27 - uses: pnpm/action-setup@v4 27 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 28 28 29 29 - name: Set node version to 20 30 30 uses: actions/setup-node@v4
+1 -1
.github/workflows/ecosystem-ci-trigger.yml
··· 61 61 repo: pr.head.repo.full_name 62 62 } 63 63 - id: generate-token 64 - uses: tibdex/github-app-token@v2 64 + uses: tibdex/github-app-token@3beb63f4bd073e61482598c45c71c1019b59b73a # v2.1.0 65 65 with: 66 66 app_id: ${{ secrets.ECOSYSTEM_CI_GITHUB_APP_ID }} 67 67 installation_retrieval_payload: '${{ github.repository_owner }}/vitest-ecosystem-ci'
+1 -1
.github/workflows/issue-close-require.yml
··· 9 9 runs-on: ubuntu-latest 10 10 steps: 11 11 - name: needs reproduction 12 - uses: actions-cool/issues-helper@v3 12 + uses: actions-cool/issues-helper@a610082f8ac0cf03e357eb8dd0d5e2ba075e017e # v3.6.0 13 13 with: 14 14 actions: close-issues 15 15 token: ${{ secrets.GITHUB_TOKEN }}
+1 -1
.github/workflows/issue-labeled.yml
··· 10 10 steps: 11 11 - name: needs reproduction 12 12 if: github.event.label.name == 'needs reproduction' 13 - uses: actions-cool/issues-helper@v3 13 + uses: actions-cool/issues-helper@a610082f8ac0cf03e357eb8dd0d5e2ba075e017e # v3.6.0 14 14 with: 15 15 actions: create-comment 16 16 token: ${{ secrets.GITHUB_TOKEN }}
+1 -1
.github/workflows/lock-closed-issues.yml
··· 12 12 if: github.repository == 'vitest-dev/vitest' 13 13 runs-on: ubuntu-latest 14 14 steps: 15 - - uses: dessant/lock-threads@v5 15 + - uses: dessant/lock-threads@1bf7ec25051fe7c00bdd17e6a7cf3d7bfb7dc771 # v5.0.1 16 16 with: 17 17 github-token: ${{ secrets.GITHUB_TOKEN }} 18 18 issue-inactive-days: '14'
+1 -1
.github/workflows/publish.yml
··· 20 20 fetch-depth: 0 21 21 22 22 - name: Install pnpm 23 - uses: pnpm/action-setup@v4 23 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 24 24 25 25 - name: Set node version to 20 26 26 uses: actions/setup-node@v4
+2 -2
docs/guide/improving-performance.md
··· 115 115 node-version: 20 116 116 117 117 - name: Install pnpm 118 - uses: pnpm/action-setup@v4 118 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 119 119 120 120 - name: Install dependencies 121 121 run: pnpm i ··· 144 144 node-version: 20 145 145 146 146 - name: Install pnpm 147 - uses: pnpm/action-setup@v4 147 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 148 148 149 149 - name: Install dependencies 150 150 run: pnpm i
+1 -1
.github/actions/setup-and-cache/action.yml
··· 11 11 12 12 steps: 13 13 - name: Install pnpm 14 - uses: pnpm/action-setup@v4 14 + uses: pnpm/action-setup@a7487c7e89a18df4991f7f222e4898a00d66ddda # v4.1.0 15 15 16 16 - name: Set node version to ${{ inputs.node-version }} 17 17 uses: actions/setup-node@v4