@@ -39,14 +39,14 @@ jobs:
39
39
if : needs.check_repo.outputs.should_run_workflow == 'true'
40
40
runs-on : ubuntu-latest
41
41
steps :
42
- - uses : actions/checkout@v4
42
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
43
43
- name : Install Rust
44
- uses : dtolnay/rust-toolchain@stable
45
- - uses : Swatinem/rust-cache@v2
44
+ uses : dtolnay/rust-toolchain@fcf085fcb4b4b8f63f96906cd713eb52181b5ea4 # stable (rust 1.85.1)
45
+ - uses : Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
46
46
47
47
# The dev dependencies aren't exposed in the wheel metadata (at least with current
48
48
# poetry-core versions), so we install with poetry.
49
- - uses : matrix-org/setup-python-poetry@v1
49
+ - uses : matrix-org/setup-python-poetry@4421c92b6223f03ae55560e29aa8ebd39cf6314a # v1.2.4
50
50
with :
51
51
python-version : " 3.x"
52
52
poetry-version : " 1.3.2"
@@ -72,11 +72,11 @@ jobs:
72
72
postgres-version : " 14"
73
73
74
74
steps :
75
- - uses : actions/checkout@v4
75
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
76
76
77
77
- name : Install Rust
78
- uses : dtolnay/rust-toolchain@stable
79
- - uses : Swatinem/rust-cache@v2
78
+ uses : dtolnay/rust-toolchain@fcf085fcb4b4b8f63f96906cd713eb52181b5ea4 # stable (rust 1.85.1)
79
+ - uses : Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
80
80
81
81
- run : sudo apt-get -qq install xmlsec1
82
82
- name : Set up PostgreSQL ${{ matrix.postgres-version }}
86
86
-e POSTGRES_PASSWORD=postgres \
87
87
-e POSTGRES_INITDB_ARGS="--lc-collate C --lc-ctype C --encoding UTF8" \
88
88
postgres:${{ matrix.postgres-version }}
89
- - uses : actions/setup-python@v5
89
+ - uses : actions/setup-python@42375524e23c412d93fb67b49958b491fce71c38 # v5.4.0
90
90
with :
91
91
python-version : " 3.x"
92
92
- run : pip install .[all,test]
@@ -145,11 +145,11 @@ jobs:
145
145
BLACKLIST : ${{ matrix.workers && 'synapse-blacklist-with-workers' }}
146
146
147
147
steps :
148
- - uses : actions/checkout@v4
148
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
149
149
150
150
- name : Install Rust
151
- uses : dtolnay/rust-toolchain@stable
152
- - uses : Swatinem/rust-cache@v2
151
+ uses : dtolnay/rust-toolchain@fcf085fcb4b4b8f63f96906cd713eb52181b5ea4 # stable (rust 1.85.1)
152
+ - uses : Swatinem/rust-cache@9d47c6ad4b02e050fd481d890b2ea34778fd09d6 # v2.7.8
153
153
154
154
- name : Ensure sytest runs `pip install`
155
155
# Delete the lockfile so sytest will `pip install` rather than `poetry install`
@@ -164,7 +164,7 @@ jobs:
164
164
if : ${{ always() }}
165
165
run : /sytest/scripts/tap_to_gha.pl /logs/results.tap
166
166
- name : Upload SyTest logs
167
- uses : actions/upload-artifact@v4
167
+ uses : actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
168
168
if : ${{ always() }}
169
169
with :
170
170
name : Sytest Logs - ${{ job.status }} - (${{ join(matrix.*, ', ') }})
@@ -192,15 +192,15 @@ jobs:
192
192
database : Postgres
193
193
194
194
steps :
195
- - name : Run actions/checkout@v4 for synapse
196
- uses : actions/checkout@v4
195
+ - name : Check out synapse codebase
196
+ uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
197
197
with :
198
198
path : synapse
199
199
200
200
- name : Prepare Complement's Prerequisites
201
201
run : synapse/.ci/scripts/setup_complement_prerequisites.sh
202
202
203
- - uses : actions/setup-go@v5
203
+ - uses : actions/setup-go@0aaccfd150d50ccaeb58ebd88d36e91967a5f35b # v5.4.0
204
204
with :
205
205
cache-dependency-path : complement/go.sum
206
206
go-version-file : complement/go.mod
@@ -225,7 +225,7 @@ jobs:
225
225
runs-on : ubuntu-latest
226
226
227
227
steps :
228
- - uses : actions/checkout@v4
228
+ - uses : actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
229
229
- uses : JasonEtco/create-an-issue@1b14a70e4d8dc185e5cc76d3bec9eab20257b2c5 # v2.9.2
230
230
env :
231
231
GITHUB_TOKEN : ${{ secrets.GITHUB_TOKEN }}
0 commit comments