2525 docs : ${{ steps.filter.outputs.docs }}
2626 helm : ${{ steps.filter.outputs.helm }}
2727 steps :
28- - uses : actions/checkout@v6
29- - uses : dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3
28+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
29+ - uses : dorny/paths-filter@fbd0ab8f3e69293af611ebaee6363fc25e6d187d # v4.0.1
3030 id : filter
3131 with :
3232 filters : |
5555 name : Run prettier check
5656 runs-on : ubuntu-22.04
5757 steps :
58- - uses : actions/checkout@v6
59- - uses : actions/setup-node@v6
58+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
59+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
6060 with :
6161 node-version-file : .node-version
6262 cache : npm
7272 needs : changes
7373 if : needs.changes.outputs.docs == 'true'
7474 steps :
75- - uses : actions/checkout@v6
76- - uses : actions/setup-node@v6
75+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
76+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
7777 with :
7878 node-version-file : .node-version
7979 cache : npm
8989 needs : changes
9090 if : needs.changes.outputs.helm == 'true'
9191 steps :
92- - uses : actions/checkout@v6
93- - uses : azure/setup-helm@dda3372f752e03dde6b3237bc9431cdc2f7a02a2 # v5.0.0
92+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
93+ - uses : azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1
9494 with :
9595 token : ${{ secrets.GITHUB_TOKEN }}
9696 version : " v3.19.2"
@@ -103,8 +103,8 @@ jobs:
103103 needs : changes
104104 if : needs.changes.outputs.code == 'true'
105105 steps :
106- - uses : actions/checkout@v6
107- - uses : actions/setup-node@v6
106+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
107+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
108108 with :
109109 node-version-file : .node-version
110110 cache : npm
@@ -121,7 +121,7 @@ jobs:
121121 if : needs.changes.outputs.ci == 'true'
122122 steps :
123123 - name : Checkout repo
124- uses : actions/checkout@v6
124+ uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
125125 - name : Check workflow files
126126 run : |
127127 bash <(curl https://raw.githubusercontent.com/rhysd/actionlint/main/scripts/download-actionlint.bash) 1.7.9
@@ -134,8 +134,8 @@ jobs:
134134 needs : changes
135135 if : needs.changes.outputs.code == 'true'
136136 steps :
137- - uses : actions/checkout@v6
138- - uses : actions/setup-node@v6
137+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
138+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
139139 with :
140140 node-version-file : .node-version
141141 cache : npm
@@ -144,7 +144,7 @@ jobs:
144144 test/package-lock.json
145145 - run : SKIP_SUBMODULE_DEPS=1 npm ci
146146 - run : npm run test:unit
147- - uses : codecov/codecov-action@57e3a136b779b570ffcdbf80b3bdc90e7fab3de2 # v5
147+ - uses : codecov/codecov-action@fb8b3582c8e4def4969c97caa2f19720cb33a72f # v7.0.0
148148 if : success()
149149 with :
150150 token : ${{ secrets.CODECOV_TOKEN }}
@@ -163,16 +163,16 @@ jobs:
163163
164164 steps :
165165 - run : sudo apt update && sudo apt install -y libkrb5-dev
166- - uses : awalsh128/cache-apt-pkgs-action@acb598e5ddbc6f68a970c5da0688d2f3a9f04d05 # latest
166+ - uses : awalsh128/cache-apt-pkgs-action@553a35bb8ebd9fcabcb1c9451aa4c98e1b4ca8a9 # latest
167167 with :
168168 packages : quilt
169169 version : 1.0
170170
171- - uses : actions/checkout@v6
171+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
172172 with :
173173 submodules : true
174174 - run : quilt push -a
175- - uses : actions/setup-node@v6
175+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
176176 with :
177177 node-version-file : .node-version
178178 cache : npm
@@ -191,7 +191,7 @@ jobs:
191191 # embedded into the code). Use VSCODE_CACHE_VERSION to force a rebuild.
192192 - name : Fetch prebuilt linux-x64 Code package from cache
193193 id : cache-vscode
194- uses : actions/cache@v4
194+ uses : actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
195195 with :
196196 path : lib/vscode-reh-web-linux-x64
197197 key : vscode-linux-x64-package-${{ secrets.VSCODE_CACHE_VERSION }}-${{ steps.vscode-rev.outputs.rev }}-${{ hashFiles('patches/*.diff', 'ci/build/build-vscode.sh') }}
@@ -205,20 +205,22 @@ jobs:
205205 # Push up an artifact containing the linux-x64 release.
206206 - run : KEEP_MODULES=1 npm run release
207207 - run : tar -czf package.tar.gz release
208- - uses : actions/upload-artifact@v7
208+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
209209 with :
210210 name : linux-x64-package
211211 path : ./package.tar.gz
212212
213213 test-e2e :
214214 name : Run e2e tests
215215 runs-on : ubuntu-22.04
216+ env :
217+ LOG_LEVEL : debug
216218 needs : [changes, build]
217219 if : needs.changes.outputs.code == 'true' || needs.changes.outputs.deps == 'true' || needs.changes.outputs.ci == 'true'
218220
219221 steps :
220- - uses : actions/checkout@v6
221- - uses : actions/setup-node@v6
222+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
223+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
222224 with :
223225 node-version-file : .node-version
224226 cache : npm
@@ -231,13 +233,13 @@ jobs:
231233 ./test/node_modules/.bin/playwright install-deps
232234 ./test/node_modules/.bin/playwright install
233235
234- - uses : actions/download-artifact@v8
236+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
235237 with :
236238 name : linux-x64-package
237239 - run : tar -xzf package.tar.gz
238240
239241 - run : CODE_SERVER_TEST_ENTRY=./release npm run test:e2e
240- - uses : actions/upload-artifact@v7
242+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
241243 if : always()
242244 with :
243245 name : failed-test-videos
@@ -248,12 +250,13 @@ jobs:
248250 runs-on : ubuntu-22.04
249251 env :
250252 GH_TOKEN : ${{ secrets.GITHUB_TOKEN }}
253+ LOG_LEVEL : debug
251254 needs : [changes, build]
252255 if : needs.changes.outputs.code == 'true' || needs.changes.outputs.deps == 'true' || needs.changes.outputs.ci == 'true'
253256
254257 steps :
255258 - name : Cache Caddy
256- uses : actions/cache@v4
259+ uses : actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
257260 id : caddy-cache
258261 with :
259262 path : |
@@ -266,8 +269,8 @@ jobs:
266269 mkdir -p ~/.cache/caddy
267270 tar -xzf caddy_2.5.2_linux_amd64.tar.gz --directory ~/.cache/caddy
268271
269- - uses : actions/checkout@v6
270- - uses : actions/setup-node@v6
272+ - uses : actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6
273+ - uses : actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6
271274 with :
272275 node-version-file : .node-version
273276 cache : npm
@@ -280,7 +283,7 @@ jobs:
280283 ./test/node_modules/.bin/playwright install-deps
281284 ./test/node_modules/.bin/playwright install
282285
283- - uses : actions/download-artifact@v8
286+ - uses : actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8
284287 with :
285288 name : linux-x64-package
286289 - run : tar -xzf package.tar.gz
@@ -289,7 +292,7 @@ jobs:
289292 - run : CODE_SERVER_TEST_ENTRY=./release npm run test:e2e:proxy
290293 - run : ~/.cache/caddy/caddy stop --config ./ci/Caddyfile
291294 if : always()
292- - uses : actions/upload-artifact@v7
295+ - uses : actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
293296 if : always()
294297 with :
295298 name : failed-test-videos-proxy
0 commit comments