diff --git a/.github/workflows/avail-light-bootstrap.yml b/.github/workflows/avail-light-bootstrap.yml index 16016b1cc..fae1ed62b 100644 --- a/.github/workflows/avail-light-bootstrap.yml +++ b/.github/workflows/avail-light-bootstrap.yml @@ -21,7 +21,7 @@ jobs: rustup target add x86_64-unknown-linux-gnu steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install cargo and setup shell: bash run: | @@ -38,7 +38,7 @@ jobs: pushd target/${{ matrix.rust_target }}/maxperf/ tar czf ${{ matrix.output_name }}.tar.gz ${{ matrix.output_name }} - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.output_name }} path: target/${{ matrix.rust_target }}/maxperf/${{ matrix.output_name }}.tar.gz @@ -47,14 +47,14 @@ jobs: needs: [build] runs-on: ubuntu-22.04 steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: binaries pattern: avail-light-bootstrap-* merge-multiple: true - name: publish binaries - uses: svenstaro/upload-release-action@v2 + uses: svenstaro/upload-release-action@29e53e917877a24fad85510ded594ab3c9ca12de # 2.11.5 with: repo_token: ${{ secrets.PAT_TOKEN }} file: /home/runner/work/avail-light/avail-light/binaries/avail-light-bootstrap-* diff --git a/.github/workflows/avail-light-client.yml b/.github/workflows/avail-light-client.yml index 887172736..9d6b443f4 100644 --- a/.github/workflows/avail-light-client.yml +++ b/.github/workflows/avail-light-client.yml @@ -45,7 +45,7 @@ jobs: rustup target add x86_64-pc-windows-msvc steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install cargo and setup if: runner.os != 'Windows' shell: bash @@ -75,7 +75,7 @@ jobs: Compress-Archive -Path "${{ matrix.output_name }}" -DestinationPath "${{ matrix.output_name }}.zip" # Upload any archive which exists - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.output_name }} path: | @@ -86,14 +86,14 @@ jobs: needs: [build] runs-on: ubuntu-22.04 steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: binaries pattern: avail-light* merge-multiple: true - name: publish binaries - uses: svenstaro/upload-release-action@v2 + uses: svenstaro/upload-release-action@29e53e917877a24fad85510ded594ab3c9ca12de # 2.11.5 with: repo_token: ${{ secrets.PAT_TOKEN }} file: /home/runner/work/avail-light/avail-light/binaries/avail-light* @@ -122,23 +122,23 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Set up QEMU - uses: docker/setup-qemu-action@v2 + uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4.4.0 - name: Set up Docker Buildx id: buildx - uses: docker/setup-buildx-action@v2 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4.4.1 - name: Login to DockerHub - uses: docker/login-action@v2 + uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} - name: Build and push images - uses: docker/build-push-action@v3 + uses: docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc # v7.4.0 with: builder: ${{ steps.buildx.outputs.name }} context: . diff --git a/.github/workflows/avail-light-crawler.yml b/.github/workflows/avail-light-crawler.yml index 2abca4170..0da826446 100644 --- a/.github/workflows/avail-light-crawler.yml +++ b/.github/workflows/avail-light-crawler.yml @@ -46,7 +46,7 @@ jobs: rustup target add x86_64-pc-windows-msvc steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install cargo and setup if: runner.os != 'Windows' shell: bash @@ -75,7 +75,7 @@ jobs: Push-Location -Path "target\${{ matrix.rust_target }}\maxperf\" Compress-Archive -Path "${{ matrix.output_name }}" -DestinationPath "${{ matrix.output_name }}.tar.gz" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.output_name }} path: target/${{ matrix.rust_target }}/maxperf/${{ matrix.output_name }}.tar.gz @@ -84,14 +84,14 @@ jobs: needs: [build] runs-on: ubuntu-22.04 steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: binaries pattern: avail-light* merge-multiple: true - name: publish binaries - uses: svenstaro/upload-release-action@v2 + uses: svenstaro/upload-release-action@29e53e917877a24fad85510ded594ab3c9ca12de # 2.11.5 with: repo_token: ${{ secrets.PAT_TOKEN }} file: /home/runner/work/avail-light/avail-light/binaries/avail-light* diff --git a/.github/workflows/avail-light-fatclient.yml b/.github/workflows/avail-light-fatclient.yml index 7c2613545..81a5326f3 100644 --- a/.github/workflows/avail-light-fatclient.yml +++ b/.github/workflows/avail-light-fatclient.yml @@ -45,7 +45,7 @@ jobs: rustup target add x86_64-pc-windows-msvc steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Install cargo and setup if: runner.os != 'Windows' shell: bash @@ -74,7 +74,7 @@ jobs: Push-Location -Path "target\${{ matrix.rust_target }}\maxperf\" Compress-Archive -Path "${{ matrix.output_name }}" -DestinationPath "${{ matrix.output_name }}.tar.gz" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: ${{ matrix.output_name }} path: target/${{ matrix.rust_target }}/maxperf/${{ matrix.output_name }}.tar.gz @@ -83,14 +83,14 @@ jobs: needs: [build] runs-on: ubuntu-22.04 steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: binaries pattern: avail-light* merge-multiple: true - name: publish binaries - uses: svenstaro/upload-release-action@v2 + uses: svenstaro/upload-release-action@29e53e917877a24fad85510ded594ab3c9ca12de # 2.11.5 with: repo_token: ${{ secrets.PAT_TOKEN }} file: /home/runner/work/avail-light/avail-light/binaries/avail-light* diff --git a/.github/workflows/custom-release.yml b/.github/workflows/custom-release.yml index 58167de4e..5ff20e54b 100644 --- a/.github/workflows/custom-release.yml +++ b/.github/workflows/custom-release.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.inputs.branch }} fetch-depth: 0 @@ -130,7 +130,7 @@ jobs: fi - name: Upload artifacts - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: avail-light-binaries path: binaries/*.tar.gz @@ -140,7 +140,7 @@ jobs: runs-on: ubuntu-22.04 steps: - name: Checkout code - uses: actions/checkout@v4 + uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: ref: ${{ github.event.inputs.branch }} fetch-depth: 0 @@ -188,7 +188,7 @@ jobs: fi - name: Download artifacts - uses: actions/download-artifact@v4 + uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: path: binaries pattern: avail-light-binaries @@ -200,7 +200,7 @@ jobs: find binaries -name "*.tar.gz" | sort - name: Publish binaries - uses: svenstaro/upload-release-action@v2 + uses: svenstaro/upload-release-action@29e53e917877a24fad85510ded594ab3c9ca12de # 2.11.5 with: repo_token: ${{ secrets.PAT_TOKEN }} file: binaries/avail-light*.tar.gz diff --git a/.github/workflows/default.yml b/.github/workflows/default.yml index 94bcf4573..fb11d6152 100644 --- a/.github/workflows/default.yml +++ b/.github/workflows/default.yml @@ -16,21 +16,21 @@ jobs: name: cargo fmt runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions-rust-lang/setup-rust-toolchain@v1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0 with: components: rustfmt - name: Check Rust formatting - uses: actions-rust-lang/rustfmt@v1 + uses: actions-rust-lang/rustfmt@4066006ec54a31931b9b1fddfd38f2fdf2d27143 # v1.1.2 - name: Check TOML, JSON, and MarkDown formatting - uses: dprint/check@v2.1 + uses: dprint/check@b8a69d368d232496f6e82dac8fb12044fe3147d6 # v2.1 clippy: name: cargo clippy runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions-rust-lang/setup-rust-toolchain@v1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0 with: components: clippy - run: cargo clippy --workspace -- -D warnings @@ -39,16 +39,16 @@ jobs: name: cargo test runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: arduino/setup-protoc@v2 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: arduino/setup-protoc@a8b67ba40b37d35169e222f3bb352603327985b6 # v2 2026-10-23 with: repo-token: ${{ secrets.PAT_TOKEN }} - - uses: actions-rust-lang/setup-rust-toolchain@v1 + - uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0 - run: cargo test --workspace --benches --tests --no-default-features env: RUSTFLAGS: "-C instrument-coverage" LLVM_PROFILE_FILE: "profile-%p-%m.profraw" - - uses: SierraSoftworks/setup-grcov@v1 + - uses: SierraSoftworks/setup-grcov@d79b6c506e90adb4a7ee68b676568777f11ae2a1 # v1.1.1 name: Install grcov with: github-token: ${{ secrets.PAT_TOKEN || secrets.GITHUB_TOKEN }} @@ -56,7 +56,7 @@ jobs: - name: Generate test code coverage report run: grcov . -s . --binary-path ./target/debug/ -t lcov --branch --ignore-not-existing -o lcov.info - name: Upload test code coverage report to codecov.io - uses: codecov/codecov-action@v2 + uses: codecov/codecov-action@303a32d7a59b442fa8d48b6a1cc6825c09c847a5 # v7.1.1 with: files: lcov.info - name: Cleanup @@ -66,8 +66,8 @@ jobs: name: web runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions-rust-lang/setup-rust-toolchain@v1 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + - uses: actions-rust-lang/setup-rust-toolchain@ecabd13d1c56bd1345c230e542e9144811ad706f # v2.0.0 with: target: wasm32-unknown-unknown - run: curl https://rustwasm.github.io/wasm-pack/installer/init.sh -sSf | sh