From a43b9c306297c96c97e3a9eddf3b340cf24c143f Mon Sep 17 00:00:00 2001 From: Peter Tripp Date: Fri, 26 Jun 2026 13:44:20 -0400 Subject: [PATCH 1/2] ci: Bump and pin GitHub Actions layers --- .github/workflows/ci.yml | 4 ++-- .github/workflows/licence-check.yml | 4 ++-- .github/workflows/playwright.yml | 7 ++++--- 3 files changed, 8 insertions(+), 7 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1c02fc6..bfcf438 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -9,8 +9,8 @@ jobs: ci: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 - - uses: actions/setup-node@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: '22' cache: 'npm' diff --git a/.github/workflows/licence-check.yml b/.github/workflows/licence-check.yml index 7e43614..ca401bf 100644 --- a/.github/workflows/licence-check.yml +++ b/.github/workflows/licence-check.yml @@ -13,6 +13,6 @@ jobs: license: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Check License Header - uses: apache/skywalking-eyes/header@5dfa68f93380a5e57259faaf95088b7f133b5778 + uses: apache/skywalking-eyes/header@61275cc80d0798a405cb070f7d3a8aaf7cf2c2c1 # v0.8.0 diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index d2fe4eb..8b9652c 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -7,6 +7,7 @@ name: Playwright Tests on: deployment_status: +# schema: https://json.schemastore.org/github-workflow.json jobs: playwright: if: @@ -15,10 +16,10 @@ jobs: timeout-minutes: 60 runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 with: fetch-depth: 0 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 with: node-version: '22' cache: 'npm' @@ -30,7 +31,7 @@ jobs: run: npx playwright test env: BASE_URL: ${{ github.event.deployment_status.target_url }} - - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: test-results From f5026c4c776b4e95ac16c8c7b02d64d565cd9ac1 Mon Sep 17 00:00:00 2001 From: Peter Tripp Date: Fri, 26 Jun 2026 13:49:44 -0400 Subject: [PATCH 2/2] minus! --- .github/workflows/playwright.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/playwright.yml b/.github/workflows/playwright.yml index 8b9652c..99569e3 100644 --- a/.github/workflows/playwright.yml +++ b/.github/workflows/playwright.yml @@ -1,3 +1,4 @@ +# schema: https://json.schemastore.org/github-workflow.json name: Playwright Tests # This is an unusual job because it's triggered by deploy events rather than @@ -7,7 +8,6 @@ name: Playwright Tests on: deployment_status: -# schema: https://json.schemastore.org/github-workflow.json jobs: playwright: if: @@ -31,7 +31,7 @@ jobs: run: npx playwright test env: BASE_URL: ${{ github.event.deployment_status.target_url }} - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 if: always() with: name: test-results