diff --git a/.github/workflows/benchmarks.yml b/.github/workflows/benchmarks.yml index 9c5431c..a8f6d7e 100644 --- a/.github/workflows/benchmarks.yml +++ b/.github/workflows/benchmarks.yml @@ -29,7 +29,7 @@ jobs: if: contains(github.event.pull_request.labels.*.name, 'benchmark') runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Install uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index b1b8468..e1dd26c 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -87,7 +87,7 @@ jobs: name: Dependency advisory audit (pip-audit) runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.12" @@ -119,7 +119,7 @@ jobs: name: LangChain-installed __getattr__ contract test runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: "3.13" diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 86ae06e..b293a8f 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -31,7 +31,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: submodules: recursive diff --git a/.github/workflows/docs-backfill.yaml b/.github/workflows/docs-backfill.yaml index 5d0103f..f2959ca 100644 --- a/.github/workflows/docs-backfill.yaml +++ b/.github/workflows/docs-backfill.yaml @@ -64,7 +64,7 @@ jobs: echo "Backfilling docs for release tag: ${RELEASE_TAG}" - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 ref: master diff --git a/.github/workflows/documentation.yaml b/.github/workflows/documentation.yaml index de7215b..865a584 100644 --- a/.github/workflows/documentation.yaml +++ b/.github/workflows/documentation.yaml @@ -88,7 +88,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 @@ -125,7 +125,7 @@ jobs: pages: write steps: - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 @@ -177,7 +177,7 @@ jobs: pages: write steps: - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 ref: master @@ -273,7 +273,7 @@ jobs: echo "Manual republish: target=${TARGET}, release_tag=${RELEASE_TAG_INPUT:-(n/a)}" - name: Checkout (full history for mike + git-revision-date plugins) - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: fetch-depth: 0 ref: master diff --git a/.github/workflows/framework-resolution-check.yml b/.github/workflows/framework-resolution-check.yml index a74e5be..c5dda08 100644 --- a/.github/workflows/framework-resolution-check.yml +++ b/.github/workflows/framework-resolution-check.yml @@ -32,7 +32,7 @@ jobs: name: Dependency floors co-resolve with supported frameworks runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v7 - name: Resolve agent-assembly floors against the framework matrix run: python scripts/ci/check_framework_resolution.py --python-version 3.12 diff --git a/.github/workflows/native-core-build.yml b/.github/workflows/native-core-build.yml index c1d5edc..e141a0e 100644 --- a/.github/workflows/native-core-build.yml +++ b/.github/workflows/native-core-build.yml @@ -24,7 +24,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Setup Python uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 diff --git a/.github/workflows/native-pin-consistency.yml b/.github/workflows/native-pin-consistency.yml index f9fe02f..842c858 100644 --- a/.github/workflows/native-pin-consistency.yml +++ b/.github/workflows/native-pin-consistency.yml @@ -20,7 +20,7 @@ jobs: name: aa-* crates share one git rev runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Assert all agent-assembly git deps share one rev run: | manifest="native/aa-ffi-python/Cargo.toml" diff --git a/.github/workflows/quickstart-tabs-check.yml b/.github/workflows/quickstart-tabs-check.yml index 8ba44bb..72376bf 100644 --- a/.github/workflows/quickstart-tabs-check.yml +++ b/.github/workflows/quickstart-tabs-check.yml @@ -29,7 +29,7 @@ jobs: name: quick-start tabs drift runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: diff --git a/.github/workflows/readme-version-check.yml b/.github/workflows/readme-version-check.yml index c7d3f37..ad3c34b 100644 --- a/.github/workflows/readme-version-check.yml +++ b/.github/workflows/readme-version-check.yml @@ -28,7 +28,7 @@ jobs: name: README version drift runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: diff --git a/.github/workflows/release-python-conversion-test.yml b/.github/workflows/release-python-conversion-test.yml index b301fca..6b9b5d3 100644 --- a/.github/workflows/release-python-conversion-test.yml +++ b/.github/workflows/release-python-conversion-test.yml @@ -42,7 +42,7 @@ jobs: name: Run tag → PEP 440 fixture suite runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Lint conversion + test scripts run: | shellcheck .github/scripts/tag-to-pep440.sh diff --git a/.github/workflows/release-python.yml b/.github/workflows/release-python.yml index 42f15ad..633aff0 100644 --- a/.github/workflows/release-python.yml +++ b/.github/workflows/release-python.yml @@ -76,7 +76,7 @@ jobs: # and its inverse (.github/scripts/pep440-to-tag.sh). Those scripts # are the single source of truth for the conversion, shared with the # AAASM-2863 / AAASM-2956 unit tests. - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - id: r env: EVENT_NAME: ${{ github.event_name }} @@ -168,7 +168,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -194,7 +194,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -227,7 +227,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -328,7 +328,7 @@ jobs: needs: resolve runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7.0.0 with: python-version: ${{ env.PYTHON_VERSION }} @@ -415,7 +415,7 @@ jobs: needs: resolve runs-on: macos-14 # Apple silicon runner steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Expand interpreter list for setup-python id: pythons # macOS runners have no manylinux image bundling every CPython, so each @@ -502,7 +502,7 @@ jobs: needs: resolve runs-on: macos-15-intel # Intel runner (macos-13 sunset 2025-09-19) steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Expand interpreter list for setup-python id: pythons # macOS runners have no manylinux image bundling every CPython, so each @@ -642,7 +642,7 @@ jobs: permissions: contents: write # create the git tag + GitHub Release steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Download CycloneDX SBOM # AAASM-3615: pull the SBOM built by the `sbom` job so it can be # attached to the Release below. diff --git a/.github/workflows/rw_run_all_test_and_record.yaml b/.github/workflows/rw_run_all_test_and_record.yaml index 0dddfdc..c2ae3a7 100644 --- a/.github/workflows/rw_run_all_test_and_record.yaml +++ b/.github/workflows/rw_run_all_test_and_record.yaml @@ -166,7 +166,7 @@ jobs: needs: build-and-test runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 with: # Required by SonarCloud to correctly compute PR/new-code deltas. fetch-depth: 0 diff --git a/.github/workflows/type-check.yml b/.github/workflows/type-check.yml index 2c2cada..3b54d03 100644 --- a/.github/workflows/type-check.yml +++ b/.github/workflows/type-check.yml @@ -49,7 +49,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Install uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 @@ -133,7 +133,7 @@ jobs: steps: - name: Checkout repository - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Install uv uses: astral-sh/setup-uv@11f9893b081a58869d3b5fccaea48c9e9e46f990 # v8.3.2 diff --git a/.github/workflows/wheel-python-matrix.yml b/.github/workflows/wheel-python-matrix.yml index 6b69ede..bec6910 100644 --- a/.github/workflows/wheel-python-matrix.yml +++ b/.github/workflows/wheel-python-matrix.yml @@ -44,7 +44,7 @@ jobs: name: Check wheel matrix matches declared Python support runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Lint guard + test scripts run: | shellcheck .github/scripts/check-wheel-python-matrix.sh