From a6f9acdf99455edffaa6236a321b01b83d807229 Mon Sep 17 00:00:00 2001 From: Adam Setch Date: Thu, 22 Oct 2026 07:10:58 -0400 Subject: [PATCH] chore(ci): add GitHub Actions lockfile --- .github/workflows/actions.lock | 32 +++++++++++++++++++++++++++++++ .github/workflows/astro-check.yml | 4 ++-- .github/workflows/lint.yml | 4 ++-- .github/workflows/sonarqube.yml | 4 ++-- 4 files changed, 38 insertions(+), 6 deletions(-) create mode 100644 .github/workflows/actions.lock diff --git a/.github/workflows/actions.lock b/.github/workflows/actions.lock new file mode 100644 index 0000000..f78b703 --- /dev/null +++ b/.github/workflows/actions.lock @@ -0,0 +1,32 @@ +# This file is machine-generated by `gh actions-lock`. +# Do not edit by hand; run `gh actions-lock` to update. +# Docs: https://gh.io/actions-lockfile +version: 'v0.0.3' +workflows: + '.github/workflows/astro-check.yml': + - 'actions/checkout@v7.0.1' + - 'pnpm/setup@v3.1.1' + '.github/workflows/lint.yml': + - 'actions/checkout@v7.0.1' + - 'pnpm/setup@v3.1.1' + '.github/workflows/renovate.yml': [] + '.github/workflows/sonarqube.yml': + - 'actions/checkout@v7.0.1' + - 'sonarsource/sonarqube-scan-action@v8.3.0' + '.github/workflows/website.yml': [] +dependencies: + 'actions/checkout@v7.0.1': + ref: 'v7.0.1' + commit: 'sha1-3d3c42e5aac5ba805825da76410c181273ba90b1' + owner_id: 44036562 + repo_id: 197814629 + 'pnpm/setup@v3.1.1': + ref: 'v3.1.1' + commit: 'sha1-a0881977cd8ea73b1ed212236c99ca10dcc80cf4' + owner_id: 21320719 + repo_id: 1235693694 + 'sonarsource/sonarqube-scan-action@v8.3.0': + ref: 'v8.3.0' + commit: 'sha1-d209202bc7d53ff1cc128f7f907dac145c9d6ae9' + owner_id: 545988 + repo_id: 366408409 diff --git a/.github/workflows/astro-check.yml b/.github/workflows/astro-check.yml index d042438..55cf805 100644 --- a/.github/workflows/astro-check.yml +++ b/.github/workflows/astro-check.yml @@ -16,10 +16,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 - name: Setup pnpm and Node - uses: pnpm/setup@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 # v3.1.1 + uses: pnpm/setup@v3.1.1 with: node-version-file: '.nvmrc' cache: true diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 021f864..141c4fa 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,10 +16,10 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 - name: Setup pnpm and Node - uses: pnpm/setup@a0881977cd8ea73b1ed212236c99ca10dcc80cf4 # v3.1.1 + uses: pnpm/setup@v3.1.1 with: node-version-file: '.nvmrc' cache: true diff --git a/.github/workflows/sonarqube.yml b/.github/workflows/sonarqube.yml index 3ccfe75..16ccdb6 100644 --- a/.github/workflows/sonarqube.yml +++ b/.github/workflows/sonarqube.yml @@ -16,12 +16,12 @@ jobs: steps: - name: Checkout - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 + uses: actions/checkout@v7.0.1 with: # Disabling shallow clones is recommended for improving the relevancy of reporting fetch-depth: 0 - name: SonarQube Scan - uses: SonarSource/sonarqube-scan-action@d209202bc7d53ff1cc128f7f907dac145c9d6ae9 # v8.3.0 + uses: SonarSource/sonarqube-scan-action@v8.3.0 env: SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} \ No newline at end of file