From a5af7b39bd68cd6f5e7edbd885f9679f1a0df156 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 13 Apr 2026 05:22:53 +0000 Subject: [PATCH] chore(deps): pin dependencies --- .forgejo/actions/create-docker-manifest/action.yml | 6 +++--- .forgejo/actions/prepare-docker-build/action.yml | 8 ++++---- .forgejo/actions/rust-toolchain/action.yml | 2 +- .forgejo/actions/setup-llvm-with-apt/action.yml | 4 ++-- .forgejo/actions/setup-rust/action.yml | 4 ++-- .forgejo/actions/timelord/action.yml | 10 +++++----- .forgejo/workflows/build-debian.yml | 4 ++-- .forgejo/workflows/build-fedora.yml | 8 ++++---- .forgejo/workflows/check-changelog.yml | 2 +- .forgejo/workflows/documentation.yml | 10 +++++----- .forgejo/workflows/element.yml | 4 ++-- .forgejo/workflows/mirror-images.yml | 4 ++-- .forgejo/workflows/prek-checks.yml | 4 ++-- .forgejo/workflows/release-image.yml | 12 ++++++------ .forgejo/workflows/renovate.yml | 12 ++++++------ .forgejo/workflows/update-flake-hashes.yml | 2 +- 16 files changed, 48 insertions(+), 48 deletions(-) diff --git a/.forgejo/actions/create-docker-manifest/action.yml b/.forgejo/actions/create-docker-manifest/action.yml index 09b672764..4fbdcc3c4 100644 --- a/.forgejo/actions/create-docker-manifest/action.yml +++ b/.forgejo/actions/create-docker-manifest/action.yml @@ -44,7 +44,7 @@ runs: - name: Login to builtin registry if: ${{ env.BUILTIN_REGISTRY_ENABLED == 'true' }} - uses: docker/login-action@v4 + uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 with: registry: ${{ env.BUILTIN_REGISTRY }} username: ${{ inputs.registry_user }} @@ -52,7 +52,7 @@ runs: - name: Set up Docker Buildx if: ${{ env.BUILTIN_REGISTRY_ENABLED == 'true' }} - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4 with: # Use persistent BuildKit if BUILDKIT_ENDPOINT is set (e.g. tcp://buildkit:8125) driver: ${{ env.BUILDKIT_ENDPOINT != '' && 'remote' || 'docker-container' }} @@ -61,7 +61,7 @@ runs: - name: Extract metadata (tags) for Docker if: ${{ env.BUILTIN_REGISTRY_ENABLED == 'true' }} id: meta - uses: docker/metadata-action@v6 + uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6 with: flavor: | latest=auto diff --git a/.forgejo/actions/prepare-docker-build/action.yml b/.forgejo/actions/prepare-docker-build/action.yml index 1d8ab1549..a7f82461d 100644 --- a/.forgejo/actions/prepare-docker-build/action.yml +++ b/.forgejo/actions/prepare-docker-build/action.yml @@ -67,7 +67,7 @@ runs: uses: ./.forgejo/actions/rust-toolchain - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 + uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4 with: # Use persistent BuildKit if BUILDKIT_ENDPOINT is set (e.g. tcp://buildkit:8125) driver: ${{ env.BUILDKIT_ENDPOINT != '' && 'remote' || 'docker-container' }} @@ -75,11 +75,11 @@ runs: - name: Set up QEMU if: ${{ env.BUILDKIT_ENDPOINT == '' }} - uses: docker/setup-qemu-action@v4 + uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4 - name: Login to builtin registry if: ${{ env.BUILTIN_REGISTRY_ENABLED == 'true' }} - uses: docker/login-action@v4 + uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4 with: registry: ${{ env.BUILTIN_REGISTRY }} username: ${{ inputs.registry_user }} @@ -87,7 +87,7 @@ runs: - name: Extract metadata (labels, annotations) for Docker id: meta - uses: docker/metadata-action@v6 + uses: docker/metadata-action@030e881283bb7a6894de51c315a6bfe6a94e05cf # v6 with: images: ${{ inputs.images }} # default labels & annotations: https://github.com/docker/metadata-action/blob/master/src/meta.ts#L509 diff --git a/.forgejo/actions/rust-toolchain/action.yml b/.forgejo/actions/rust-toolchain/action.yml index 12f2f5811..af81664c6 100644 --- a/.forgejo/actions/rust-toolchain/action.yml +++ b/.forgejo/actions/rust-toolchain/action.yml @@ -33,7 +33,7 @@ runs: echo "version=$(rustup --version)" >> $GITHUB_OUTPUT - name: Cache rustup toolchains if: steps.rustup-version.outputs.version == '' - uses: actions/cache@v3 + uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3 with: path: | ~/.rustup diff --git a/.forgejo/actions/setup-llvm-with-apt/action.yml b/.forgejo/actions/setup-llvm-with-apt/action.yml index ff82cada9..c6adfe62d 100644 --- a/.forgejo/actions/setup-llvm-with-apt/action.yml +++ b/.forgejo/actions/setup-llvm-with-apt/action.yml @@ -57,7 +57,7 @@ runs: - name: Check for LLVM cache id: cache - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /usr/bin/clang-* @@ -120,7 +120,7 @@ runs: - name: Install additional packages if: inputs.extra-packages != '' - uses: https://github.com/awalsh128/cache-apt-pkgs-action@latest + uses: https://github.com/awalsh128/cache-apt-pkgs-action@2c09a5e66da6c8016428a2172bd76e5e4f14bb17 # latest with: packages: ${{ inputs.extra-packages }} version: 1.0 diff --git a/.forgejo/actions/setup-rust/action.yml b/.forgejo/actions/setup-rust/action.yml index 2d20119cf..d59df2639 100644 --- a/.forgejo/actions/setup-rust/action.yml +++ b/.forgejo/actions/setup-rust/action.yml @@ -65,7 +65,7 @@ runs: - name: Cache toolchain binaries id: toolchain-cache - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | .cargo/bin @@ -76,7 +76,7 @@ runs: - name: Cache Cargo registry and git id: registry-cache - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | .cargo/registry/index diff --git a/.forgejo/actions/timelord/action.yml b/.forgejo/actions/timelord/action.yml index 590d025f0..0f441e6de 100644 --- a/.forgejo/actions/timelord/action.yml +++ b/.forgejo/actions/timelord/action.yml @@ -31,7 +31,7 @@ runs: - name: Restore binary cache id: binary-cache - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /usr/share/rust/.cargo/bin @@ -71,13 +71,13 @@ runs: - name: Install timelord-cli and git-warp-time if: steps.check-binaries.outputs.need-install == 'true' - uses: https://github.com/taiki-e/install-action@v2 + uses: https://github.com/taiki-e/install-action@0abfcd587b70a713fdaa7fb502c885e2112acb15 # v2 with: tool: git-warp-time,timelord-cli@3.0.1 - name: Save binary cache if: steps.check-binaries.outputs.need-install == 'true' - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /usr/share/rust/.cargo/bin @@ -87,7 +87,7 @@ runs: - name: Restore timelord cache with fallbacks id: timelord-restore - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ${{ env.TIMELORD_CACHE_PATH }} key: ${{ env.TIMELORD_KEY }} @@ -114,7 +114,7 @@ runs: timelord sync --source-dir ${{ env.TIMELORD_PATH }} --cache-dir ${{ env.TIMELORD_CACHE_PATH }} - name: Save updated timelord cache immediately - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: ${{ env.TIMELORD_CACHE_PATH }} key: ${{ env.TIMELORD_KEY }} diff --git a/.forgejo/workflows/build-debian.yml b/.forgejo/workflows/build-debian.yml index 3742b548c..b4ef6225f 100644 --- a/.forgejo/workflows/build-debian.yml +++ b/.forgejo/workflows/build-debian.yml @@ -54,13 +54,13 @@ jobs: fi - name: Checkout repository with full history - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: fetch-depth: 0 ref: ${{ github.ref_name }} - name: Cache Cargo registry - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | ~/.cargo/registry diff --git a/.forgejo/workflows/build-fedora.yml b/.forgejo/workflows/build-fedora.yml index 2b8e1add9..bd1346e29 100644 --- a/.forgejo/workflows/build-fedora.yml +++ b/.forgejo/workflows/build-fedora.yml @@ -30,14 +30,14 @@ jobs: echo "Fedora version: $VERSION" - name: Checkout repository with full history - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: fetch-depth: 0 ref: ${{ github.ref_name }} - name: Cache DNF packages - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /var/cache/dnf @@ -47,7 +47,7 @@ jobs: dnf-fedora${{ steps.fedora.outputs.version }}- - name: Cache Cargo registry - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | ~/.cargo/registry @@ -57,7 +57,7 @@ jobs: cargo-fedora${{ steps.fedora.outputs.version }}- - name: Cache Rust build dependencies - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | ~/rpmbuild/BUILD/*/target/release/deps diff --git a/.forgejo/workflows/check-changelog.yml b/.forgejo/workflows/check-changelog.yml index 748cd5c07..2fc8b15b0 100644 --- a/.forgejo/workflows/check-changelog.yml +++ b/.forgejo/workflows/check-changelog.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: ref: ${{ github.event.pull_request.head.sha }} fetch-depth: 0 diff --git a/.forgejo/workflows/documentation.yml b/.forgejo/workflows/documentation.yml index 3041bcb62..48a5321a1 100644 --- a/.forgejo/workflows/documentation.yml +++ b/.forgejo/workflows/documentation.yml @@ -21,7 +21,7 @@ jobs: steps: - name: Sync repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false fetch-depth: 0 @@ -32,12 +32,12 @@ jobs: - name: Setup Node.js if: steps.runner-env.outputs.node_major == '' || steps.runner-env.outputs.node_major < '20' - uses: https://github.com/actions/setup-node@v6 + uses: https://github.com/actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 with: node-version: 22 - name: Cache npm dependencies - uses: actions/cache@v3 + uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3 with: path: ~/.npm key: continuwuity-rspress-${{ steps.runner-env.outputs.slug }}-${{ steps.runner-env.outputs.arch }}-node-${{ steps.runner-env.outputs.node_version }}-${{ hashFiles('package-lock.json') }} @@ -56,7 +56,7 @@ jobs: - name: Deploy to Cloudflare Pages (Production) if: github.ref == 'refs/heads/main' && vars.CLOUDFLARE_PROJECT_NAME != '' - uses: https://github.com/cloudflare/wrangler-action@v3 + uses: https://github.com/cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3 with: accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} @@ -64,7 +64,7 @@ jobs: - name: Deploy to Cloudflare Pages (Preview) if: github.ref != 'refs/heads/main' && vars.CLOUDFLARE_PROJECT_NAME != '' - uses: https://github.com/cloudflare/wrangler-action@v3 + uses: https://github.com/cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3 with: accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} diff --git a/.forgejo/workflows/element.yml b/.forgejo/workflows/element.yml index 871917151..53bd267d3 100644 --- a/.forgejo/workflows/element.yml +++ b/.forgejo/workflows/element.yml @@ -24,7 +24,7 @@ jobs: steps: - name: 📦 Setup Node.js - uses: https://github.com/actions/setup-node@v6 + uses: https://github.com/actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6 with: node-version: "22" @@ -121,7 +121,7 @@ jobs: - name: 🚀 Deploy to Cloudflare Pages if: vars.CLOUDFLARE_PROJECT_NAME != '' id: deploy - uses: https://github.com/cloudflare/wrangler-action@v3 + uses: https://github.com/cloudflare/wrangler-action@da0e0dfe58b7a431659754fdf3f186c529afbe65 # v3 with: accountId: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }} apiToken: ${{ secrets.CLOUDFLARE_API_TOKEN }} diff --git a/.forgejo/workflows/mirror-images.yml b/.forgejo/workflows/mirror-images.yml index 74993c152..6b9a56a09 100644 --- a/.forgejo/workflows/mirror-images.yml +++ b/.forgejo/workflows/mirror-images.yml @@ -38,7 +38,7 @@ jobs: DOCKER_MIRROR_TOKEN: ${{ secrets.DOCKER_MIRROR_TOKEN }} steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false @@ -52,7 +52,7 @@ jobs: # repositories: continuwuity - name: Install regsync - uses: https://github.com/regclient/actions/regsync-installer@main + uses: https://github.com/regclient/actions/regsync-installer@f07124ffba4b0cbf96b2a666d481ed9d44b5e7e4 # main - name: Check what images need mirroring run: | diff --git a/.forgejo/workflows/prek-checks.yml b/.forgejo/workflows/prek-checks.yml index 75abc1226..ae8e880d3 100644 --- a/.forgejo/workflows/prek-checks.yml +++ b/.forgejo/workflows/prek-checks.yml @@ -16,7 +16,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false @@ -47,7 +47,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false diff --git a/.forgejo/workflows/release-image.yml b/.forgejo/workflows/release-image.yml index a8a4c5182..108e0388e 100644 --- a/.forgejo/workflows/release-image.yml +++ b/.forgejo/workflows/release-image.yml @@ -43,7 +43,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false - name: Prepare Docker build environment @@ -59,7 +59,7 @@ jobs: registry_password: ${{ secrets.BUILTIN_REGISTRY_PASSWORD || secrets.GITHUB_TOKEN }} - name: Build and push Docker image by digest id: build - uses: docker/build-push-action@v7 + uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 with: context: . file: "docker/Dockerfile" @@ -97,7 +97,7 @@ jobs: needs: build-release steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false - name: Create multi-platform manifest @@ -130,7 +130,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false - name: Prepare max-perf Docker build environment @@ -146,7 +146,7 @@ jobs: registry_password: ${{ secrets.BUILTIN_REGISTRY_PASSWORD || secrets.GITHUB_TOKEN }} - name: Build and push max-perf Docker image by digest id: build - uses: docker/build-push-action@v7 + uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7 with: context: . file: "docker/Dockerfile" @@ -184,7 +184,7 @@ jobs: needs: build-maxperf steps: - name: Checkout repository - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: false - name: Create max-perf manifest diff --git a/.forgejo/workflows/renovate.yml b/.forgejo/workflows/renovate.yml index 91fd50f15..1f853fd61 100644 --- a/.forgejo/workflows/renovate.yml +++ b/.forgejo/workflows/renovate.yml @@ -47,7 +47,7 @@ jobs: options: --tmpfs /tmp:exec steps: - name: Checkout - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: show-progress: false @@ -55,7 +55,7 @@ jobs: run: /usr/local/renovate/node -e 'console.log(`node heap limit = ${require("v8").getHeapStatistics().heap_size_limit / (1024 * 1024)} Mb`)' - name: Restore renovate repo cache - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /tmp/renovate/cache/renovate/repository @@ -64,7 +64,7 @@ jobs: renovate-repo-cache- - name: Restore renovate package cache - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /tmp/renovate/cache/renovate/renovate-cache-sqlite @@ -73,7 +73,7 @@ jobs: renovate-package-cache- - name: Restore renovate OSV cache - uses: actions/cache/restore@v4 + uses: actions/cache/restore@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /tmp/osv @@ -117,7 +117,7 @@ jobs: - name: Save renovate package cache if: always() - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /tmp/renovate/cache/renovate/renovate-cache-sqlite @@ -125,7 +125,7 @@ jobs: - name: Save renovate OSV cache if: always() - uses: actions/cache/save@v4 + uses: actions/cache/save@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 with: path: | /tmp/osv diff --git a/.forgejo/workflows/update-flake-hashes.yml b/.forgejo/workflows/update-flake-hashes.yml index 426c4e4e7..df90d1567 100644 --- a/.forgejo/workflows/update-flake-hashes.yml +++ b/.forgejo/workflows/update-flake-hashes.yml @@ -14,7 +14,7 @@ jobs: update-flake-hashes: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 with: persist-credentials: true token: ${{ secrets.FORGEJO_TOKEN }}