From 332286e5b0c3bb9ef6926146099692c5d68fb99f Mon Sep 17 00:00:00 2001 From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com> Date: Thu, 2 Apr 2026 11:54:15 +0200 Subject: [PATCH 1/6] =?UTF-8?q?=F0=9F=94=92=20pin=20build-push-unity.yml?= =?UTF-8?q?=20actions=20to=20commit=20SHAs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/build-push-unity.yml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/build-push-unity.yml b/.github/workflows/build-push-unity.yml index d2755a7c..4b45db30 100644 --- a/.github/workflows/build-push-unity.yml +++ b/.github/workflows/build-push-unity.yml @@ -28,13 +28,13 @@ jobs: - StandaloneLinux64 # Build a Linux 64-bit standalone. # - WebGL # WebGL. steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: fetch-depth: 0 lfs: true - name: Caching Unity Library - uses: actions/cache@v2 + uses: actions/cache@8492260343ad570701412c2f464a5877dc76bace # v2 with: path: integrations/Unity/simulate-unity/Library key: Library-Simulate @@ -43,7 +43,7 @@ jobs: Library- - name: Build Unity Simulate - uses: game-ci/unity-builder@v2 + uses: game-ci/unity-builder@9f79830454d37cd9e70c4c3b73d26c06bcce2b2a # v2 env: UNITY_LICENSE: ${{ secrets.UNITY_LICENSE }} with: @@ -57,7 +57,7 @@ jobs: cd ${{ github.workspace }}/integrations/Unity/builds/ tar -cvzf ${{ github.workspace }}/compressed_builds/${{ matrix.targetPlatform }}.tar.gz ./${{ matrix.targetPlatform }} - - uses: actions/upload-artifact@v2 + - uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2 # v2 with: name: Build-${{ matrix.targetPlatform }} path: ${{ github.workspace }}/compressed_builds/${{ matrix.targetPlatform }}.tar.gz @@ -66,7 +66,7 @@ jobs: # name: Simple build and push # runs-on: ubuntu-latest # steps: - # - uses: actions/checkout@v2 + # - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 # with: # fetch-depth: 0 # lfs: true @@ -78,7 +78,7 @@ jobs: # tar -cvzf ${{ github.workspace }}/builds/Standalone.tar.gz ./simulate_godot - # - uses: actions/upload-artifact@v2 + # - uses: actions/upload-artifact@82c141cc518b40d92cc801eee768e7aafc9c2fa2 # v2 # with: # name: Build-Standalone # path: ./builds/Standalone.tar.gz @@ -90,11 +90,11 @@ jobs: # if: github.event_name == 'release' && github.event.action == 'published' steps: - - uses: actions/setup-python@v4 + - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4 with: python-version: "3.x" - - uses: actions/download-artifact@v3 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3 with: # name: artifact path: builds From 1c023f3db5618f96fb4dad8d15ca21b6427a93e5 Mon Sep 17 00:00:00 2001 From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com> Date: Thu, 2 Apr 2026 11:54:16 +0200 Subject: [PATCH 2/6] =?UTF-8?q?=F0=9F=94=92=20pin=20tests-no-deps.yml=20ac?= =?UTF-8?q?tions=20to=20commit=20SHAs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/tests-no-deps.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/tests-no-deps.yml b/.github/workflows/tests-no-deps.yml index 9f860727..24b3a743 100644 --- a/.github/workflows/tests-no-deps.yml +++ b/.github/workflows/tests-no-deps.yml @@ -17,14 +17,14 @@ jobs: vtk-version: '9.0.3' steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Set up Python ${{ matrix.python-version }} - uses: actions/setup-python@v4 + uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4 with: python-version: ${{ matrix.python-version }} - - uses: actions/cache@v3 + - uses: actions/cache@6f8efc29b200d32929f49075959781ed54ec270c # v3 with: path: ~/.cache/pip key: Python-${{ runner.os }}-${{ matrix.python-version }}-${{ matrix.vtk-version }}-${{ hashFiles('setup.py') }}-${{ hashFiles('requirements_test.txt') }} From cf01424904a3fa49c402ef1c315da3e14d02b55d Mon Sep 17 00:00:00 2001 From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com> Date: Thu, 2 Apr 2026 11:54:17 +0200 Subject: [PATCH 3/6] =?UTF-8?q?=F0=9F=94=92=20pin=20wheels.yml=20actions?= =?UTF-8?q?=20to=20commit=20SHAs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/wheels.yml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/wheels.yml b/.github/workflows/wheels.yml index 6e7b34d2..a12aa879 100644 --- a/.github/workflows/wheels.yml +++ b/.github/workflows/wheels.yml @@ -19,7 +19,7 @@ jobs: name: Build SDist runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Build SDist run: pipx run build --sdist @@ -27,7 +27,7 @@ jobs: - name: Check metadata run: pipx run twine check dist/* - - uses: actions/upload-artifact@v3 + - uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3 with: path: dist/*.tar.gz @@ -41,7 +41,7 @@ jobs: os: [ubuntu-20.04, windows-2019, macos-11] steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - uses: pypa/cibuildwheel@v2.10.1 env: @@ -54,7 +54,7 @@ jobs: shell: bash - name: Upload wheels - uses: actions/upload-artifact@v3 + uses: actions/upload-artifact@ff15f0306b3f739f7b6fd43fb5d26cd321bd4de5 # v3 with: path: wheelhouse/*.whl @@ -66,11 +66,11 @@ jobs: if: github.event_name == 'release' && github.event.action == 'published' steps: - - uses: actions/setup-python@v4 + - uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4 with: python-version: "3.x" - - uses: actions/download-artifact@v3 + - uses: actions/download-artifact@9bc31d5ccc31df68ecc42ccf4149144866c47d8a # v3 with: name: artifact path: dist From 1e31e7f513a2ba189618b2dc52e249c326877726 Mon Sep 17 00:00:00 2001 From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com> Date: Thu, 2 Apr 2026 11:54:18 +0200 Subject: [PATCH 4/6] =?UTF-8?q?=F0=9F=94=92=20pin=20build=5Fdocumentation.?= =?UTF-8?q?yml=20actions=20to=20commit=20SHAs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/build_documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build_documentation.yml b/.github/workflows/build_documentation.yml index 829d183f..2ed0efbb 100644 --- a/.github/workflows/build_documentation.yml +++ b/.github/workflows/build_documentation.yml @@ -9,7 +9,7 @@ on: jobs: build: - uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@main + uses: huggingface/doc-builder/.github/workflows/build_main_documentation.yml@90b4ee2c10b81b5c1a6367c4e6fc9e2fb510a7e3 # main with: commit_sha: ${{ github.sha }} package: simulate From 435e72903a00870e42e6e656cd1c61ec9712f80a Mon Sep 17 00:00:00 2001 From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com> Date: Thu, 2 Apr 2026 11:54:19 +0200 Subject: [PATCH 5/6] =?UTF-8?q?=F0=9F=94=92=20pin=20build=5Fpr=5Fdocumenta?= =?UTF-8?q?tion.yml=20actions=20to=20commit=20SHAs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/build_pr_documentation.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/build_pr_documentation.yml b/.github/workflows/build_pr_documentation.yml index c7816a79..373ed48a 100644 --- a/.github/workflows/build_pr_documentation.yml +++ b/.github/workflows/build_pr_documentation.yml @@ -9,7 +9,7 @@ concurrency: jobs: build: - uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@main + uses: huggingface/doc-builder/.github/workflows/build_pr_documentation.yml@90b4ee2c10b81b5c1a6367c4e6fc9e2fb510a7e3 # main with: commit_sha: ${{ github.event.pull_request.head.sha }} pr_number: ${{ github.event.number }} From 15c00a9a8dd04f52f9e2c017303ff581a89f91d7 Mon Sep 17 00:00:00 2001 From: Pauline Bailly-Masson <155966238+paulinebm@users.noreply.github.com> Date: Thu, 2 Apr 2026 11:54:20 +0200 Subject: [PATCH 6/6] =?UTF-8?q?=F0=9F=94=92=20pin=20delete=5Fdoc=5Fcomment?= =?UTF-8?q?.yml=20actions=20to=20commit=20SHAs?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- .github/workflows/delete_doc_comment.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/delete_doc_comment.yml b/.github/workflows/delete_doc_comment.yml index af2bc4c0..e0ba6487 100644 --- a/.github/workflows/delete_doc_comment.yml +++ b/.github/workflows/delete_doc_comment.yml @@ -7,7 +7,7 @@ on: jobs: delete: - uses: huggingface/doc-builder/.github/workflows/delete_doc_comment.yml@main + uses: huggingface/doc-builder/.github/workflows/delete_doc_comment.yml@90b4ee2c10b81b5c1a6367c4e6fc9e2fb510a7e3 # main with: pr_number: ${{ github.event.number }} package: simulate \ No newline at end of file