From c8ca58ac1243420674798f20926925e1e634bf63 Mon Sep 17 00:00:00 2001 From: Dan Fiedler Date: Fri, 28 Aug 2026 22:24:29 -0400 Subject: [PATCH] Pin GitHub Actions to full-length commit SHAs --- .github/dependabot.yml | 11 ++ .github/workflows/Deploy-Documentation.yml | 12 +- .github/workflows/Deploy-Standalone.yml | 10 +- .github/workflows/ISSUE_MANAGEMENT.yml | 4 +- .github/workflows/check-ai-docs.yml | 2 +- .github/workflows/codeql-analysis.yml | 8 +- .github/workflows/compile-loc.yml | 8 +- .github/workflows/copilot-cleanup.yml | 6 +- .github/workflows/copilot-design-pass.yml | 2 +- .github/workflows/copilot-flake-review.yml | 16 +- .github/workflows/copilot-investigate.yml | 4 +- .../workflows/copilot-resolve-conflicts.yml | 2 +- .github/workflows/loc-auto-merge.yml | 2 +- .github/workflows/playwright.yml | 36 ++-- .github/workflows/pr-ai-validation.yml | 12 +- .github/workflows/pr-coverage.yml | 12 +- .github/workflows/private-vsix-build.yml | 16 +- .github/workflows/production-build.yml | 26 +-- .github/workflows/real-e2e.yml | 22 +-- .github/workflows/test.yml | 8 +- .github/workflows/update-changelog.yml | 6 +- .github/workflows/update-knowledge-graphs.yml | 4 +- .github/workflows/upload-templates.yml | 8 +- .github/workflows/version-release.yml | 16 +- .github/workflows/vscode-e2e.yml | 164 +++++++++--------- 25 files changed, 214 insertions(+), 203 deletions(-) create mode 100644 .github/dependabot.yml diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000000..2c48305b7eb --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,11 @@ +version: 2 +updates: + - package-ecosystem: "github-actions" + directory: "/" + groups: + github-actions: + patterns: ["*"] + schedule: + interval: "weekly" + cooldown: + default-days: 7 diff --git a/.github/workflows/Deploy-Documentation.yml b/.github/workflows/Deploy-Documentation.yml index d863b9690d0..092da4e102f 100644 --- a/.github/workflows/Deploy-Documentation.yml +++ b/.github/workflows/Deploy-Documentation.yml @@ -26,12 +26,12 @@ jobs: runs-on: ubuntu-latest name: Build and Deploy Job steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: submodules: true - name: Cache turbo build setup - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: .turbo key: ${{ runner.os }}-turbo-docs-${{ github.sha }} @@ -39,12 +39,12 @@ jobs: ${{ runner.os }}-turbo-docs- - name: Set up Node.js version 24.x - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -54,7 +54,7 @@ jobs: - name: Build And Deploy id: builddeploy - uses: Azure/static-web-apps-deploy@v1 + uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 with: azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN }} repo_token: ${{ secrets.GITHUB_TOKEN }} # Used for Github integrations (i.e. PR comments) @@ -71,7 +71,7 @@ jobs: steps: - name: Close Pull Request id: closepullrequest - uses: Azure/static-web-apps-deploy@v1 + uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 with: app_location: 'apps/docs/build' azure_static_web_apps_api_token: ${{ secrets.AZURE_STATIC_WEB_APPS_API_TOKEN }} diff --git a/.github/workflows/Deploy-Standalone.yml b/.github/workflows/Deploy-Standalone.yml index a16b2dff37c..d8285a56c82 100644 --- a/.github/workflows/Deploy-Standalone.yml +++ b/.github/workflows/Deploy-Standalone.yml @@ -10,12 +10,12 @@ jobs: runs-on: ubuntu-latest name: Build and Deploy Job steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: submodules: true - name: Cache turbo build setup - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: .turbo key: ${{ runner.os }}-turbo-docs-${{ github.sha }} @@ -23,12 +23,12 @@ jobs: ${{ runner.os }}-turbo-docs- - name: Set up Node.js version 24.x - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -38,7 +38,7 @@ jobs: - name: Build And Deploy id: builddeploy - uses: Azure/static-web-apps-deploy@v1 + uses: Azure/static-web-apps-deploy@4d27395796ac319302594769cfe812bd207490b1 # v1 with: azure_static_web_apps_api_token: ${{ secrets.STANDALONE_STATIC_WEB_APP }} repo_token: ${{ secrets.GITHUB_TOKEN }} # Used for Github integrations (i.e. PR comments) diff --git a/.github/workflows/ISSUE_MANAGEMENT.yml b/.github/workflows/ISSUE_MANAGEMENT.yml index 0dfb5b00a51..7ffd8aec64e 100644 --- a/.github/workflows/ISSUE_MANAGEMENT.yml +++ b/.github/workflows/ISSUE_MANAGEMENT.yml @@ -11,7 +11,7 @@ jobs: issues: write pull-requests: write steps: - - uses: actions/stale@v10 + - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0 with: only-labels: 'Needs More Info' days-before-issue-stale: 3 @@ -21,7 +21,7 @@ jobs: close-issue-message: "This issue has been closed because the information requested wasn't provided within 7 days." operations-per-run: 200 repo-token: ${{ secrets.GITHUB_TOKEN }} - - uses: actions/stale@v10 + - uses: actions/stale@1e223db275d687790206a7acac4d1a11bd6fe629 # v10.4.0 with: only-labels: 'daily-status' days-before-issue-stale: 1 diff --git a/.github/workflows/check-ai-docs.yml b/.github/workflows/check-ai-docs.yml index f89dfbb6b8f..650946777b9 100644 --- a/.github/workflows/check-ai-docs.yml +++ b/.github/workflows/check-ai-docs.yml @@ -19,7 +19,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Regenerate AI docs run: ./scripts/generate-ai-docs.sh diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index 5d45ec67fdc..2835ddb7182 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -39,11 +39,11 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@v4 + uses: github/codeql-action/init@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -54,7 +54,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@v4 + uses: github/codeql-action/autobuild@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 # ℹī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -68,4 +68,4 @@ jobs: # make release - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@v4 + uses: github/codeql-action/analyze@cdf488f595d80d6e07e03d4674febd5ab45fa938 # v4.37.9 diff --git a/.github/workflows/compile-loc.yml b/.github/workflows/compile-loc.yml index 1ee87e473e8..ec1ccbcbb30 100644 --- a/.github/workflows/compile-loc.yml +++ b/.github/workflows/compile-loc.yml @@ -11,17 +11,17 @@ jobs: steps: - name: Checkout repo - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: token: ${{ secrets.AUTOMATION_PAT }} - name: Set up Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -31,7 +31,7 @@ jobs: run: npm run compile:loc - name: Commit changes - uses: EndBug/add-and-commit@v10 + uses: EndBug/add-and-commit@290ea2c423ad77ca9c62ae0f5b224379612c0321 # v10.0.0 with: author_name: Loc Bot author_email: travisharris@microsoft.com diff --git a/.github/workflows/copilot-cleanup.yml b/.github/workflows/copilot-cleanup.yml index 2162b5a7a5f..f037bf69f74 100644 --- a/.github/workflows/copilot-cleanup.yml +++ b/.github/workflows/copilot-cleanup.yml @@ -18,13 +18,13 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: '20' cache: 'pnpm' diff --git a/.github/workflows/copilot-design-pass.yml b/.github/workflows/copilot-design-pass.yml index 9c9c175c530..6d6d0294b2a 100644 --- a/.github/workflows/copilot-design-pass.yml +++ b/.github/workflows/copilot-design-pass.yml @@ -26,7 +26,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Check invoker permissions id: check-perms diff --git a/.github/workflows/copilot-flake-review.yml b/.github/workflows/copilot-flake-review.yml index 629e0e38605..29349ead97d 100644 --- a/.github/workflows/copilot-flake-review.yml +++ b/.github/workflows/copilot-flake-review.yml @@ -26,11 +26,11 @@ jobs: outputs: has_flakes: ${{ steps.analyze.outputs.has_flakes }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: '20' cache: 'pnpm' @@ -91,7 +91,7 @@ jobs: - name: Upload flake report if: steps.analyze.outputs.has_flakes == 'true' - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: flake-report path: /tmp/flake-results/flakes.json @@ -103,11 +103,11 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 20 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 - - uses: actions/setup-node@v5 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: '20' cache: 'pnpm' @@ -119,7 +119,7 @@ jobs: run: npm install -g @github/copilot@latest - name: Download flake report - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: flake-report path: /tmp/flake-results/ diff --git a/.github/workflows/copilot-investigate.yml b/.github/workflows/copilot-investigate.yml index 5d7935d40d7..c93e636e1ed 100644 --- a/.github/workflows/copilot-investigate.yml +++ b/.github/workflows/copilot-investigate.yml @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 50 @@ -76,7 +76,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 15 steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 50 diff --git a/.github/workflows/copilot-resolve-conflicts.yml b/.github/workflows/copilot-resolve-conflicts.yml index f7daca26528..aaa1a691e6e 100644 --- a/.github/workflows/copilot-resolve-conflicts.yml +++ b/.github/workflows/copilot-resolve-conflicts.yml @@ -51,7 +51,7 @@ jobs: matrix: pr: ${{ fromJSON(needs.find-conflicting-prs.outputs.conflicting-prs) }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 diff --git a/.github/workflows/loc-auto-merge.yml b/.github/workflows/loc-auto-merge.yml index d4ccb71faa7..144ce215448 100644 --- a/.github/workflows/loc-auto-merge.yml +++ b/.github/workflows/loc-auto-merge.yml @@ -19,7 +19,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: # We must fetch at least the immediate parents so that if this is # a pull request then we can checkout the head. diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index 64f45976f76..4e8748acb3e 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -15,12 +15,12 @@ jobs: shardIndex: [1, 2, 3] shardTotal: [3] steps: - - uses: actions/checkout@v5 - - uses: actions/setup-node@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -33,7 +33,7 @@ jobs: # that stale tree onto the new exact key. - name: Cache Playwright browsers id: playwright-cache - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.cache/ms-playwright key: playwright-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }} @@ -53,7 +53,7 @@ jobs: run: pnpm run test:e2e:designer --grep @mock --shard=${{ matrix.shardIndex }}/${{ matrix.shardTotal }} env: TEST_SHARDED: true - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: designer-playwright-report-${{ matrix.shardIndex }} @@ -65,14 +65,14 @@ jobs: needs: [designer-e2e-shards] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 - - uses: actions/setup-node@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - name: Download blob reports from GitHub Actions Artifacts - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: path: all-blob-reports pattern: designer-playwright-report-* @@ -82,7 +82,7 @@ jobs: run: npx playwright merge-reports --reporter html ./all-blob-reports - name: Upload HTML report - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: designer-playwright-report path: playwright-report @@ -98,12 +98,12 @@ jobs: shardIndex: [1, 2, 3] shardTotal: [3] steps: - - uses: actions/checkout@v5 - - uses: actions/setup-node@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -111,7 +111,7 @@ jobs: - name: Cache Playwright browsers id: playwright-cache - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.cache/ms-playwright key: playwright-${{ runner.os }}-${{ hashFiles('pnpm-lock.yaml') }} @@ -128,7 +128,7 @@ jobs: run: pnpm run test:e2e:chatClient --grep @mock --shard=${{ matrix.shardIndex }}/${{ matrix.shardTotal }} env: TEST_SHARDED: true - - uses: actions/upload-artifact@v6 + - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: chat-client-playwright-report-${{ matrix.shardIndex }} @@ -140,14 +140,14 @@ jobs: needs: [chat-client-tests] runs-on: ubuntu-latest steps: - - uses: actions/checkout@v5 - - uses: actions/setup-node@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - name: Download blob reports from GitHub Actions Artifacts - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: path: all-blob-reports pattern: chat-client-playwright-report-* @@ -157,7 +157,7 @@ jobs: run: npx playwright merge-reports --reporter html ./all-blob-reports - name: Upload HTML report - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: chat-client-playwright-report path: playwright-report diff --git a/.github/workflows/pr-ai-validation.yml b/.github/workflows/pr-ai-validation.yml index 13c207fbb46..eabfd323655 100644 --- a/.github/workflows/pr-ai-validation.yml +++ b/.github/workflows/pr-ai-validation.yml @@ -25,7 +25,7 @@ jobs: COPILOT_CLI_VERSION: 1.0.72-0 steps: - name: Check if contributor is trusted - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: script: | if (!context.payload.pull_request) { @@ -61,12 +61,12 @@ jobs: core.setFailed('External contributor - requires manual approval'); - name: Checkout for prompt access - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: sparse-checkout: prompts/copilot-pr-desc-check.md - name: Cache Copilot CLI download - uses: actions/cache@v4 + uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0 with: path: ~/.npm key: copilot-cli-${{ runner.os }}-${{ env.COPILOT_CLI_VERSION }} @@ -97,7 +97,7 @@ jobs: - name: Gather PR data id: gather - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: script: | const fs = require('fs'); @@ -206,7 +206,7 @@ jobs: - name: Fallback to Logic App if: steps.validate.outputs.cli_success != 'true' id: fallback - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 env: LOGIC_APP_URL: ${{ vars.PR_VALIDATION_LOGIC_APP_URL }} with: @@ -240,7 +240,7 @@ jobs: - name: Post result and manage labels if: always() - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 env: CLI_SUCCESS: ${{ steps.validate.outputs.cli_success }} with: diff --git a/.github/workflows/pr-coverage.yml b/.github/workflows/pr-coverage.yml index 33e401f0050..7184866ac43 100644 --- a/.github/workflows/pr-coverage.yml +++ b/.github/workflows/pr-coverage.yml @@ -13,12 +13,12 @@ jobs: steps: - name: Checkout PR branch - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Cache turbo build setup - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: .turbo key: ${{ runner.os }}-turbo-${{ github.sha }} @@ -26,13 +26,13 @@ jobs: ${{ runner.os }}-turbo- - name: Set up Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - name: Install pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -58,7 +58,7 @@ jobs: - name: Get changed files id: changed-files - uses: tj-actions/changed-files@v47 + uses: tj-actions/changed-files@24d32ffd492484c1d75e0c0b894501ddb9d30d62 # v47.0.0 with: files: | **/*.ts @@ -343,7 +343,7 @@ jobs: - name: Post coverage comment on PR if: always() - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: script: | const fs = require('fs'); diff --git a/.github/workflows/private-vsix-build.yml b/.github/workflows/private-vsix-build.yml index 09dc875eced..c296da75676 100644 --- a/.github/workflows/private-vsix-build.yml +++ b/.github/workflows/private-vsix-build.yml @@ -17,12 +17,12 @@ jobs: steps: # checkout the repo - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Cache turbo build setup - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: .turbo key: ${{ runner.os }}-turbo-${{ github.sha }} @@ -30,12 +30,12 @@ jobs: ${{ runner.os }}-turbo- - name: Set up Node.js version ${{ matrix.node-version }} - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: ${{ matrix.node-version }} package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -54,17 +54,17 @@ jobs: steps: # checkout the repo - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Set up Node.js version 24 - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -88,7 +88,7 @@ jobs: run: pnpm run vscode:designer:pack - name: Archive VSIX - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: path: | apps/vs-code-designer/dist/*.vsix diff --git a/.github/workflows/production-build.yml b/.github/workflows/production-build.yml index 6e22ca924d7..8d28b9bfb43 100644 --- a/.github/workflows/production-build.yml +++ b/.github/workflows/production-build.yml @@ -46,18 +46,18 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: token: ${{ secrets.AUTOMATION_PAT }} fetch-depth: 0 - name: Set up Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -79,17 +79,17 @@ jobs: steps: # checkout the repo - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Set up Node.js version 24 - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -109,17 +109,17 @@ jobs: - name: 'Get Previous tag' id: previoustag - uses: 'WyriHaximus/github-action-get-previous-tag@v2' + uses: 'WyriHaximus/github-action-get-previous-tag@61819f33034117e6c686e6a31dba995a85afc9de' # v2.0.0 with: fallback: 0.0.0 - name: Archive VSIX - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: path: | apps/vs-code-designer/dist/*.vsix - - uses: ncipollo/release-action@v1 + - uses: ncipollo/release-action@339a81892b84b4eeb0f6e744e4574d79d0d9b8dd # v1.21.0 with: artifacts: 'LICENSE.md,apps/vs-code-designer/dist/*.vsix' generateReleaseNotes: true @@ -134,24 +134,24 @@ jobs: id-token: write steps: - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: token: ${{ secrets.AUTOMATION_PAT }} - name: Azure login - uses: azure/login@v3 + uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2 with: client-id: ${{ secrets.AZURE_TESTING_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TESTING_TENANT_ID }} subscription-id: ${{ secrets.AZURE_TESTING_SUBSCRIPTION_ID }} - name: Set up Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true diff --git a/.github/workflows/real-e2e.yml b/.github/workflows/real-e2e.yml index b14a67df667..e4bafdd3e3d 100644 --- a/.github/workflows/real-e2e.yml +++ b/.github/workflows/real-e2e.yml @@ -21,10 +21,10 @@ jobs: env: RGName : rg${{ github.run_id }}${{ github.run_attempt }}${{ matrix.shardIndex }} steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Azure login - uses: azure/login@v3 + uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2 with: client-id: ${{ secrets.AZURE_TESTING_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TESTING_TENANT_ID }} @@ -38,7 +38,7 @@ jobs: --subscription ${{ secrets.AZURE_TESTING_SUBSCRIPTION_ID }} \ --template-file ./e2e/testSetup/BlankLogicApp/logicAppStandard.bicep - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -48,7 +48,7 @@ jobs: run: pnpm run e2e:setup - name: Azure login - uses: azure/login@v3 + uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2 with: client-id: ${{ secrets.AZURE_TESTING_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TESTING_TENANT_ID }} @@ -73,7 +73,7 @@ jobs: run: pnpm run scrub-secrets:e2e - name: Azure login - uses: azure/login@v3 + uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2 if: always() with: client-id: ${{ secrets.AZURE_TESTING_CLIENT_ID }} @@ -88,7 +88,7 @@ jobs: - name: Upload blob report to GitHub Actions Artifacts if: ${{ !cancelled() }} - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: blob-report-${{ matrix.shardIndex }} path: blob-report @@ -103,14 +103,14 @@ jobs: permissions: id-token: write steps: - - uses: actions/checkout@v5 - - uses: actions/setup-node@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 + - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false - name: Download blob reports from GitHub Actions Artifacts - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: path: all-blob-reports pattern: blob-report-* @@ -120,7 +120,7 @@ jobs: run: npx playwright merge-reports --reporter html ./all-blob-reports - name: Azure login - uses: azure/login@v3 + uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2 if: always() with: client-id: ${{ secrets.AZURE_TESTING_CLIENT_ID }} @@ -136,7 +136,7 @@ jobs: echo "::notice title=HTML report url::https://lauxtestreport.z13.web.core.windows.net/$REPORT_DIR/index.html" - name: Upload HTML report - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: html-report--attempt-${{ github.run_attempt }} path: playwright-report diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index fd7e930c515..f0665ac1939 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -16,12 +16,12 @@ jobs: steps: # checkout the repo - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Cache turbo build setup - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: .turbo key: ${{ runner.os }}-turbo-${{ github.sha }} @@ -29,12 +29,12 @@ jobs: ${{ runner.os }}-turbo- - name: Set up Node.js version ${{ matrix.node-version }} - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: ${{ matrix.node-version }} package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true diff --git a/.github/workflows/update-changelog.yml b/.github/workflows/update-changelog.yml index fadc840788d..810b8494b24 100644 --- a/.github/workflows/update-changelog.yml +++ b/.github/workflows/update-changelog.yml @@ -23,13 +23,13 @@ jobs: runs-on: ubuntu-latest steps: - name: 'Checkout Repository' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: token: ${{ secrets.GITHUB_TOKEN }} fetch-depth: 0 - name: 'Set up Node.js' - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false @@ -94,7 +94,7 @@ jobs: - name: 'Generate Release Notes' id: generate-notes - uses: actions/github-script@v8 + uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 with: script: | const newTag = '${{ steps.determine-version.outputs.NEW_TAG }}'; diff --git a/.github/workflows/update-knowledge-graphs.yml b/.github/workflows/update-knowledge-graphs.yml index 24188a7b252..d3c224c0fa8 100644 --- a/.github/workflows/update-knowledge-graphs.yml +++ b/.github/workflows/update-knowledge-graphs.yml @@ -18,13 +18,13 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 1 token: ${{ secrets.GITHUB_TOKEN }} - name: Setup Python - uses: actions/setup-python@v6 + uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0 with: python-version: '3.13' diff --git a/.github/workflows/upload-templates.yml b/.github/workflows/upload-templates.yml index cfde28c1bcf..15066d48a0b 100644 --- a/.github/workflows/upload-templates.yml +++ b/.github/workflows/upload-templates.yml @@ -14,15 +14,15 @@ jobs: contents: read steps: - - uses: actions/checkout@v5 + - uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -32,7 +32,7 @@ jobs: run: pnpm run templates --download-images --subdirectory logicapps - name: Azure login - uses: azure/login@v3 + uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2 with: client-id: ${{ secrets.AZURE_TEMPLATES_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TEMPLATES_TENANT_ID }} diff --git a/.github/workflows/version-release.yml b/.github/workflows/version-release.yml index 2aba9f523df..cbba453a849 100644 --- a/.github/workflows/version-release.yml +++ b/.github/workflows/version-release.yml @@ -57,18 +57,18 @@ jobs: permissions: write-all steps: - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: token: ${{ secrets.GITHUB_TOKEN }} fetch-depth: 0 - name: Set up Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -167,18 +167,18 @@ jobs: id-token: write # for Azure login steps: - name: 'Checkout Github Action' - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: ref: ${{ needs.create-release.outputs.tag_name }} fetch-depth: 0 - name: 'Set up Node.js' - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24 package-manager-cache: false - - uses: pnpm/action-setup@v5 + - uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -199,7 +199,7 @@ jobs: run: pnpm run vscode:designer:pack - name: 'Archive VSIX' - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: vscode-extension path: | @@ -233,7 +233,7 @@ jobs: # NPM Publishing - name: 'Azure login' - uses: azure/login@v3 + uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3.0.2 with: client-id: ${{ secrets.AZURE_TESTING_CLIENT_ID }} tenant-id: ${{ secrets.AZURE_TESTING_TENANT_ID }} diff --git a/.github/workflows/vscode-e2e.yml b/.github/workflows/vscode-e2e.yml index 09078d19028..89b864cce92 100644 --- a/.github/workflows/vscode-e2e.yml +++ b/.github/workflows/vscode-e2e.yml @@ -75,12 +75,12 @@ jobs: build-artifact: extension-build-${{ github.sha }} steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Cache turbo build setup - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: .turbo # Content-based key: hits across pushes that don't change source. @@ -90,7 +90,7 @@ jobs: ${{ runner.os }}-turbo- - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 24.x package-manager-cache: false @@ -111,7 +111,7 @@ jobs: done - name: Setup .NET SDK - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 with: dotnet-version: '8.0.x' @@ -121,7 +121,7 @@ jobs: # and pnpm reuses store entries while falling back to the network for # anything missing (no --offline strictness). - name: Cache pnpm store - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.local/share/pnpm/store key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }} @@ -129,7 +129,7 @@ jobs: ${{ runner.os }}-pnpm-store- - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true @@ -152,7 +152,7 @@ jobs: $(find apps/vs-code-designer/node_modules/.cache -maxdepth 0 -type d 2>/dev/null) - name: Upload extension build artifact - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: extension-build-${{ github.sha }} path: extension-build.tar.gz @@ -172,12 +172,12 @@ jobs: timeout-minutes: 30 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -194,7 +194,7 @@ jobs: done - name: Cache pnpm store - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.local/share/pnpm/store key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }} @@ -202,14 +202,14 @@ jobs: ${{ runner.os }}-pnpm-store- - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -223,7 +223,7 @@ jobs: sudo apt-get install -y xvfb libgbm-dev libgtk-3-0 libnss3 libasound2t64 libxss1 libatk-bridge2.0-0 libatk1.0-0 - name: Cache Logic Apps runtime dependencies - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -304,7 +304,7 @@ jobs: Microsoft.Azure.Functions.ExtensionBundle.Workflows - name: Upload workspace fixtures artifact - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: workspace-fixtures-${{ github.sha }} path: workspace-fixtures.tar.gz @@ -312,7 +312,7 @@ jobs: if-no-files-found: error - name: Upload Logic Apps extension bundle artifact - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: name: logic-apps-extension-bundle-${{ github.sha }} path: logic-apps-extension-bundle.tar.gz @@ -320,7 +320,7 @@ jobs: if-no-files-found: error - name: Upload fixture screenshots on failure - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: failure() with: name: vscode-e2e-screenshots-setup-fixtures @@ -412,12 +412,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -440,7 +440,7 @@ jobs: env -i /usr/bin/node --version - name: Cache pnpm store - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.local/share/pnpm/store key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }} @@ -448,14 +448,14 @@ jobs: ${{ runner.os }}-pnpm-store- - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -466,7 +466,7 @@ jobs: # Scenarios that self-create their workspaces set use_workspace_fixtures=false. - name: Download workspace fixtures artifact if: matrix.use_workspace_fixtures == true - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: workspace-fixtures-${{ github.sha }} path: . @@ -485,7 +485,7 @@ jobs: - name: Download Logic Apps extension bundle artifact if: matrix.use_bundle_artifact == true - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: logic-apps-extension-bundle-${{ github.sha }} path: . @@ -503,7 +503,7 @@ jobs: sudo apt-get install -y xvfb libgbm-dev libgtk-3-0 libnss3 libasound2t64 libxss1 libatk-bridge2.0-0 libatk1.0-0 - name: Cache Logic Apps runtime dependencies - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -546,7 +546,7 @@ jobs: TMPDIR: ${{ runner.temp }} - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-${{ matrix.shard }} @@ -594,12 +594,12 @@ jobs: scenario: p40-nonlogicapp steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -611,14 +611,14 @@ jobs: echo "npx: $(command -v npx)" - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -641,7 +641,7 @@ jobs: # la-runtime-deps steps — actions/cache derives the cache entry *version* from # the path set, so editing it silently invalidates the existing entries. - name: Restore Logic Apps runtime dependencies - uses: actions/cache/restore@v5 + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: # %USERPROFILE%\.azurelogicapps on Windows; ~ resolves correctly under # the job's bash shell. @@ -668,7 +668,7 @@ jobs: TMPDIR: ${{ runner.temp }} - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-windows-${{ matrix.shard }} @@ -748,12 +748,12 @@ jobs: shell: bash steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -770,19 +770,19 @@ jobs: done - name: Setup .NET SDK - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 with: dotnet-version: '8.0.x' - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -797,7 +797,7 @@ jobs: - name: Restore Logic Apps runtime dependencies id: la-deps-cache - uses: actions/cache/restore@v5 + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -857,13 +857,13 @@ jobs: - name: Save Logic Apps runtime dependencies if: always() && steps.la-deps-cache.outputs.cache-hit != 'true' && steps.deps-check.outputs.ok == 'true' - uses: actions/cache/save@v5 + uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-codeful-ubuntu-latest @@ -920,12 +920,12 @@ jobs: shell: bash steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -942,19 +942,19 @@ jobs: done - name: Setup .NET SDK - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 with: dotnet-version: '8.0.x' - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -983,7 +983,7 @@ jobs: - name: Restore Logic Apps runtime dependencies id: la-deps-cache - uses: actions/cache/restore@v5 + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -1009,7 +1009,7 @@ jobs: TMPDIR: ${{ runner.temp }} - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-azurite-${{ matrix.kind }} @@ -1074,30 +1074,30 @@ jobs: shell: bash steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false - name: Setup .NET SDK - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 with: dotnet-version: '8.0.x' - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -1110,7 +1110,7 @@ jobs: # the cache empty forever. `if: always()` persists whatever was downloaded. - name: Restore Logic Apps runtime dependencies id: la-deps-cache - uses: actions/cache/restore@v5 + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -1179,13 +1179,13 @@ jobs: - name: Save Logic Apps runtime dependencies if: always() && steps.la-deps-cache.outputs.cache-hit != 'true' && steps.deps-check.outputs.ok == 'true' - uses: actions/cache/save@v5 + uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 - name: Upload bootstrap screenshots on failure - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: failure() with: name: vscode-e2e-screenshots-setup-runtime-deps-windows @@ -1226,12 +1226,12 @@ jobs: shell: bash steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -1242,19 +1242,19 @@ jobs: echo "npm: $(command -v npm) $(npm --version)" - name: Setup .NET SDK - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 with: dotnet-version: '8.0.x' - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -1264,7 +1264,7 @@ jobs: - name: Restore Logic Apps runtime dependencies id: la-deps-cache - uses: actions/cache/restore@v5 + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -1324,13 +1324,13 @@ jobs: - name: Save Logic Apps runtime dependencies if: always() && steps.la-deps-cache.outputs.cache-hit != 'true' && steps.deps-check.outputs.ok == 'true' - uses: actions/cache/save@v5 + uses: actions/cache/save@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-codeful-windows-latest @@ -1381,12 +1381,12 @@ jobs: shell: bash steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -1397,19 +1397,19 @@ jobs: echo "npm: $(command -v npm) $(npm --version)" - name: Setup .NET SDK - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 with: dotnet-version: '8.0.x' - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -1435,7 +1435,7 @@ jobs: - name: Restore Logic Apps runtime dependencies id: la-deps-cache - uses: actions/cache/restore@v5 + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -1469,7 +1469,7 @@ jobs: TMPDIR: ${{ runner.temp }} - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-azurite-windows-${{ matrix.kind }} @@ -1555,12 +1555,12 @@ jobs: shell: bash steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: 20.x package-manager-cache: false @@ -1574,19 +1574,19 @@ jobs: # which run dotnet. setup-runtime-deps-windows installs the SDK for the same # reason before running the same scenario. - name: Setup .NET SDK - uses: actions/setup-dotnet@v5 + uses: actions/setup-dotnet@26b0ec14cb23fa6904739307f278c14f94c95bf1 # v5.4.0 with: dotnet-version: '8.0.x' - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -1611,7 +1611,7 @@ jobs: # the path set, so editing it silently invalidates the existing entries. - name: Restore Logic Apps runtime dependencies id: la-deps-cache - uses: actions/cache/restore@v5 + uses: actions/cache/restore@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.azurelogicapps/dependencies key: la-runtime-deps-${{ runner.os }}-v1 @@ -1730,7 +1730,7 @@ jobs: # /test-resources/screenshots/funcRepair-explicit/, which is inside the # first path below because TEMP is pinned to runner.temp above. - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-funcselfheal-windows @@ -1771,12 +1771,12 @@ jobs: vscode-version: 1.123.0 steps: - name: Checkout - uses: actions/checkout@v5 + uses: actions/checkout@fbc6f3992d24b796d5a048ff273f7fcc4a7b6c09 # v5.1.0 with: fetch-depth: 0 - name: Setup Node.js - uses: actions/setup-node@v5 + uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0 with: node-version: ${{ matrix.node-version }} package-manager-cache: false @@ -1795,7 +1795,7 @@ jobs: env -i /usr/bin/node --version - name: Cache pnpm store - uses: actions/cache@v5 + uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5.1.0 with: path: ~/.local/share/pnpm/store key: ${{ runner.os }}-pnpm-store-${{ hashFiles('pnpm-lock.yaml') }} @@ -1803,14 +1803,14 @@ jobs: ${{ runner.os }}-pnpm-store- - name: Setup pnpm - uses: pnpm/action-setup@v5 + uses: pnpm/action-setup@fc06bc1257f339d1d5d8b3a19a8cae5388b55320 # v5.0.0 with: run_install: | - recursive: true args: [--frozen-lockfile, --strict-peer-dependencies] - name: Download extension build artifact - uses: actions/download-artifact@v7 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: name: extension-build-${{ github.sha }} path: . @@ -1841,7 +1841,7 @@ jobs: TMPDIR: ${{ runner.temp }} - name: Upload test screenshots (always) - uses: actions/upload-artifact@v6 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 if: always() with: name: vscode-e2e-screenshots-compat-${{ matrix.label }}